【破文标题】千变万化 V3.01注册算法分析
【破文作者】HBQJXHW[PYG]
【破解工具】OD、PEID、W32ASM
【破解平台】WIN2000-SP4
【软件名称】千变万化 V3.01
【软件大小】9477 KB
【原版下载】http://www3.skycn.com/soft/21470.html
【保护方式】壳＋SN
【软件简介】<千变万化>是一个专业的电子相册制作软件，它可以制作出与众不同的介面，使您的相册不再枯燥无味。软件本身内置几个漂亮的介面供用户选择，在不到一分钟的时间就可以制作出出色的相册程序。同时本软件内置图片浏览器，图片转换效果达150种，您可以慢慢细心观赏相片而无需安装其它看图软件。
当您制作好相册后，可以刻录成光盘，在任何一台装有windows的电脑上运行，并可制作成数据光盘，在VCD、DVD机（有图片浏览功能）上播放图片；也可以做成礼物送给您心爱的她（他）哟。
【破解过程】
------------------------------------------------------------------------
脱壳：
软件查壳为ASPack 2.1 -> Alexey Solodovnikov
用OD载入Protean.exe选不继续分析
00B32001 > 60 PUSHAD 此时停在这里，F8一下看堆栈变化。
00B32002 E8 03000000 CALL Protean.00B3200A
00B32007 - E9 EB045D45 JMP 461024F7
00B3200C 55 PUSH EBP
00B3200D C3 RETN
00B3200E E8 01000000 CALL Protean.00B32014
--------------------------------------------------------
EAX 00000000
ECX 00000101
EDX FFFFFFFF
EBX 7FFDF000
ESP 0012FFA4-------------------------》在命令窗口下HR 0012FFA4断点，F9一下。
EBP 0012FFF0
ESI 00000000
------------------------------
00B323B0 /75 08 JNZ SHORT Protean.00B323BA----》此时停在这里，F8几下。
00B323B2 |B8 01000000 MOV EAX,1
00B323B7 |C2 0C00 RETN 0C
00B323BA \68 1C4B7E00 PUSH Protean.007E4B1C
00B323BF C3 RETN-------------------------》飞向光明。
由此来到这里
007E4B1C 55 PUSH EBP
007E4B1D 8BEC MOV EBP,ESP
007E4B1F 83C4 F0 ADD ESP,-10
007E4B22 53 PUSH EBX
007E4B23 B8 54467E00 MOV EAX,Protean.007E4654
007E4B28 E8 8721C2FF CALL Protean.00406CB4
007E4B2D 8B1D 347A7E00 MOV EBX,DWORD PTR DS:[7E7A34] ; Protean.007E8C3C
007E4B33 8B03 MOV EAX,DWORD PTR DS:[EBX]
007E4B35 E8 7EACC8FF CALL Protean.0046F7B8
用OD脱壳后，然后用ImportREC修复，运行OK。
OEP：003E4B1C
RAV：003EA1DC 大小：000008CC
到此脱壳告一段落。
-----------------------------------------------------------------
算法分析：
用W32ASM载入程序，并查找字符串“注册”，找到一地址0056F1F4。
再向上查找发现此段由0056F1F4中的CALL进入，再向上查，最后在OD中CTRL+G输入0056E7E3，F2下断。
经过试验下断正确。
0056E7E3 |. 51 PUSH ECX
0056E7E4 |. 53 PUSH EBX
0056E7E5 |. 56 PUSH ESI
0056E7E6 |. 57 PUSH EDI
0056E7E7 |. 8BD8 MOV EBX,EAX
0056E7E9 |. 33C0 XOR EAX,EAX
0056E7EB |. 55 PUSH EBP
0056E7EC |. 68 82F25600 PUSH Proteank.0056F282
0056E7F1 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0056E7F4 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0056E7F7 |. A1 887B7E00 MOV EAX,DWORD PTR DS:[7E7B88]
0056E7FC |. 33D2 XOR EDX,EDX
0056E7FE |. 8910 MOV DWORD PTR DS:[EAX],EDX
0056E800 |. 33D2 XOR EDX,EDX
0056E802 |. 8B83 58030000 MOV EAX,DWORD PTR DS:[EBX+358]
0056E808 |. E8 53FFEDFF CALL Proteank.0044E760
0056E80D |. 8D55 CC LEA EDX,DWORD PTR SS:[EBP-34]
0056E810 |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E816 |. E8 2500EEFF CALL Proteank.0044E840
0056E81B |. 8B45 CC MOV EAX,DWORD PTR SS:[EBP-34]
0056E81E |. BA 98F25600 MOV EDX,Proteank.0056F298 ; 0
0056E823 |. E8 F863E9FF CALL Proteank.00404C20
0056E828 |. 75 0D JNZ SHORT Proteank.0056E837
0056E82A |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E82D |. BA A4F25600 MOV EDX,Proteank.0056F2A4 ; e
0056E832 |. E8 8560E9FF CALL Proteank.004048BC
0056E837 |> 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0056E83A |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E840 |. E8 FBFFEDFF CALL Proteank.0044E840
0056E845 |. 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
0056E848 |. BA B0F25600 MOV EDX,Proteank.0056F2B0 ; 1
0056E84D |. E8 CE63E9FF CALL Proteank.00404C20
0056E852 |. 75 0D JNZ SHORT Proteank.0056E861
0056E854 |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E857 |. BA BCF25600 MOV EDX,Proteank.0056F2BC ; f
0056E85C |. E8 5B60E9FF CALL Proteank.004048BC
0056E861 |> 8D55 C4 LEA EDX,DWORD PTR SS:[EBP-3C]
0056E864 |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E86A |. E8 D1FFEDFF CALL Proteank.0044E840
0056E86F |. 8B45 C4 MOV EAX,DWORD PTR SS:[EBP-3C]
0056E872 |. BA C8F25600 MOV EDX,Proteank.0056F2C8 ; 2
0056E877 |. E8 A463E9FF CALL Proteank.00404C20
0056E87C |. 75 0D JNZ SHORT Proteank.0056E88B
0056E87E |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E881 |. BA D4F25600 MOV EDX,Proteank.0056F2D4 ; g
0056E886 |. E8 3160E9FF CALL Proteank.004048BC
0056E88B |> 8D55 C0 LEA EDX,DWORD PTR SS:[EBP-40]
0056E88E |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E894 |. E8 A7FFEDFF CALL Proteank.0044E840
0056E899 |. 8B45 C0 MOV EAX,DWORD PTR SS:[EBP-40]
0056E89C |. BA E0F25600 MOV EDX,Proteank.0056F2E0 ; 3
0056E8A1 |. E8 7A63E9FF CALL Proteank.00404C20
0056E8A6 |. 75 0D JNZ SHORT Proteank.0056E8B5
0056E8A8 |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E8AB |. BA ECF25600 MOV EDX,Proteank.0056F2EC ; h
0056E8B0 |. E8 0760E9FF CALL Proteank.004048BC
0056E8B5 |> 8D55 BC LEA EDX,DWORD PTR SS:[EBP-44]
0056E8B8 |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E8BE |. E8 7DFFEDFF CALL Proteank.0044E840
0056E8C3 |. 8B45 BC MOV EAX,DWORD PTR SS:[EBP-44]
0056E8C6 |. BA F8F25600 MOV EDX,Proteank.0056F2F8 ; 4
0056E8CB |. E8 5063E9FF CALL Proteank.00404C20
0056E8D0 |. 75 0D JNZ SHORT Proteank.0056E8DF
0056E8D2 |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E8D5 |. BA 04F35600 MOV EDX,Proteank.0056F304 ; i
0056E8DA |. E8 DD5FE9FF CALL Proteank.004048BC
0056E8DF |> 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0056E8E2 |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E8E8 |. E8 53FFEDFF CALL Proteank.0044E840
0056E8ED |. 8B45 B8 MOV EAX,DWORD PTR SS:[EBP-48]
0056E8F0 |. BA 10F35600 MOV EDX,Proteank.0056F310 ; 5
0056E8F5 |. E8 2663E9FF CALL Proteank.00404C20
0056E8FA |. 75 0D JNZ SHORT Proteank.0056E909
0056E8FC |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E8FF |. BA 1CF35600 MOV EDX,Proteank.0056F31C ; j
0056E904 |. E8 B35FE9FF CALL Proteank.004048BC
0056E909 |> 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C]
0056E90C |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E912 |. E8 29FFEDFF CALL Proteank.0044E840
0056E917 |. 8B45 B4 MOV EAX,DWORD PTR SS:[EBP-4C]
0056E91A |. BA 28F35600 MOV EDX,Proteank.0056F328 ; 6
0056E91F |. E8 FC62E9FF CALL Proteank.00404C20
0056E924 |. 75 0D JNZ SHORT Proteank.0056E933
0056E926 |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E929 |. BA 34F35600 MOV EDX,Proteank.0056F334
0056E92E |. E8 895FE9FF CALL Proteank.004048BC
0056E933 |> 8D55 B0 LEA EDX,DWORD PTR SS:[EBP-50]
0056E936 |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E93C |. E8 FFFEEDFF CALL Proteank.0044E840
0056E941 |. 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50]
0056E944 |. BA 40F35600 MOV EDX,Proteank.0056F340
0056E949 |. E8 D262E9FF CALL Proteank.00404C20
0056E94E |. 75 0D JNZ SHORT Proteank.0056E95D
0056E950 |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E953 |. BA 4CF35600 MOV EDX,Proteank.0056F34C
0056E958 |. E8 5F5FE9FF CALL Proteank.004048BC
0056E95D |> 8D55 AC LEA EDX,DWORD PTR SS:[EBP-54]
0056E960 |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E966 |. E8 D5FEEDFF CALL Proteank.0044E840
0056E96B |. 8B45 AC MOV EAX,DWORD PTR SS:[EBP-54]
0056E96E |. BA 58F35600 MOV EDX,Proteank.0056F358
0056E973 |. E8 A862E9FF CALL Proteank.00404C20
0056E978 |. 75 0D JNZ SHORT Proteank.0056E987
0056E97A |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E97D |. BA 64F35600 MOV EDX,Proteank.0056F364
0056E982 |. E8 355FE9FF CALL Proteank.004048BC
0056E987 |> 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0056E98A |. 8B83 08030000 MOV EAX,DWORD PTR DS:[EBX+308]
0056E990 |. E8 ABFEEDFF CALL Proteank.0044E840
0056E995 |. 8B45 A8 MOV EAX,DWORD PTR SS:[EBP-58]
0056E998 |. BA 70F35600 MOV EDX,Proteank.0056F370
0056E99D |. E8 7E62E9FF CALL Proteank.00404C20
0056E9A2 |. 75 0D JNZ SHORT Proteank.0056E9B1
0056E9A4 |. 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0056E9A7 |. BA 7CF35600 MOV EDX,Proteank.0056F37C
0056E9AC |. E8 0B5FE9FF CALL Proteank.004048BC
0056E9B1 |> 8D55 A4 LEA EDX,DWORD PTR SS:[EBP-5C]
0056E9B4 |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056E9BA |. E8 81FEEDFF CALL Proteank.0044E840
0056E9BF |. 8B45 A4 MOV EAX,DWORD PTR SS:[EBP-5C]
0056E9C2 |. BA 98F25600 MOV EDX,Proteank.0056F298
0056E9C7 |. E8 5462E9FF CALL Proteank.00404C20
0056E9CC |. 75 0D JNZ SHORT Proteank.0056E9DB
0056E9CE |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056E9D1 |. BA A4F25600 MOV EDX,Proteank.0056F2A4
0056E9D6 |. E8 E15EE9FF CALL Proteank.004048BC
0056E9DB |> 8D55 A0 LEA EDX,DWORD PTR SS:[EBP-60]
0056E9DE |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056E9E4 |. E8 57FEEDFF CALL Proteank.0044E840
0056E9E9 |. 8B45 A0 MOV EAX,DWORD PTR SS:[EBP-60]
0056E9EC |. BA B0F25600 MOV EDX,Proteank.0056F2B0 ; 1
0056E9F1 |. E8 2A62E9FF CALL Proteank.00404C20
0056E9F6 |. 75 0D JNZ SHORT Proteank.0056EA05
0056E9F8 |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056E9FB |. BA BCF25600 MOV EDX,Proteank.0056F2BC ; f
0056EA00 |. E8 B75EE9FF CALL Proteank.004048BC
0056EA05 |> 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64]
0056EA08 |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EA0E |. E8 2DFEEDFF CALL Proteank.0044E840
0056EA13 |. 8B45 9C MOV EAX,DWORD PTR SS:[EBP-64]
0056EA16 |. BA C8F25600 MOV EDX,Proteank.0056F2C8 ; 2
0056EA1B |. E8 0062E9FF CALL Proteank.00404C20
0056EA20 |. 75 0D JNZ SHORT Proteank.0056EA2F
0056EA22 |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EA25 |. BA D4F25600 MOV EDX,Proteank.0056F2D4 ; g
0056EA2A |. E8 8D5EE9FF CALL Proteank.004048BC
0056EA2F |> 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
0056EA32 |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EA38 |. E8 03FEEDFF CALL Proteank.0044E840
0056EA3D |. 8B45 98 MOV EAX,DWORD PTR SS:[EBP-68]
0056EA40 |. BA E0F25600 MOV EDX,Proteank.0056F2E0 ; 3
0056EA45 |. E8 D661E9FF CALL Proteank.00404C20
0056EA4A |. 75 0D JNZ SHORT Proteank.0056EA59
0056EA4C |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EA4F |. BA ECF25600 MOV EDX,Proteank.0056F2EC ; h
0056EA54 |. E8 635EE9FF CALL Proteank.004048BC
0056EA59 |> 8D55 94 LEA EDX,DWORD PTR SS:[EBP-6C]
0056EA5C |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EA62 |. E8 D9FDEDFF CALL Proteank.0044E840
0056EA67 |. 8B45 94 MOV EAX,DWORD PTR SS:[EBP-6C]
0056EA6A |. BA F8F25600 MOV EDX,Proteank.0056F2F8 ; 4
0056EA6F |. E8 AC61E9FF CALL Proteank.00404C20
0056EA74 |. 75 0D JNZ SHORT Proteank.0056EA83
0056EA76 |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EA79 |. BA 04F35600 MOV EDX,Proteank.0056F304 ; i
0056EA7E |. E8 395EE9FF CALL Proteank.004048BC
0056EA83 |> 8D55 90 LEA EDX,DWORD PTR SS:[EBP-70]
0056EA86 |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EA8C |. E8 AFFDEDFF CALL Proteank.0044E840
0056EA91 |. 8B45 90 MOV EAX,DWORD PTR SS:[EBP-70]
0056EA94 |. BA 10F35600 MOV EDX,Proteank.0056F310 ; 5
0056EA99 |. E8 8261E9FF CALL Proteank.00404C20
0056EA9E |. 75 0D JNZ SHORT Proteank.0056EAAD
0056EAA0 |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EAA3 |. BA 1CF35600 MOV EDX,Proteank.0056F31C ; j
0056EAA8 |. E8 0F5EE9FF CALL Proteank.004048BC
0056EAAD |> 8D55 8C LEA EDX,DWORD PTR SS:[EBP-74]
0056EAB0 |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EAB6 |. E8 85FDEDFF CALL Proteank.0044E840
0056EABB |. 8B45 8C MOV EAX,DWORD PTR SS:[EBP-74]
0056EABE |. BA 28F35600 MOV EDX,Proteank.0056F328 ; 6
0056EAC3 |. E8 5861E9FF CALL Proteank.00404C20
0056EAC8 |. 75 0D JNZ SHORT Proteank.0056EAD7
0056EACA |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EACD |. BA 34F35600 MOV EDX,Proteank.0056F334 ; k
0056EAD2 |. E8 E55DE9FF CALL Proteank.004048BC
0056EAD7 |> 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
0056EADA |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EAE0 |. E8 5BFDEDFF CALL Proteank.0044E840
0056EAE5 |. 8B45 88 MOV EAX,DWORD PTR SS:[EBP-78]
0056EAE8 |. BA 40F35600 MOV EDX,Proteank.0056F340 ; 7
0056EAED |. E8 2E61E9FF CALL Proteank.00404C20
0056EAF2 |. 75 0D JNZ SHORT Proteank.0056EB01
0056EAF4 |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EAF7 |. BA 4CF35600 MOV EDX,Proteank.0056F34C ; l
0056EAFC |. E8 BB5DE9FF CALL Proteank.004048BC
0056EB01 |> 8D55 84 LEA EDX,DWORD PTR SS:[EBP-7C]
0056EB04 |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EB0A |. E8 31FDEDFF CALL Proteank.0044E840
0056EB0F |. 8B45 84 MOV EAX,DWORD PTR SS:[EBP-7C]
0056EB12 |. BA 58F35600 MOV EDX,Proteank.0056F358 ; 8
0056EB17 |. E8 0461E9FF CALL Proteank.00404C20
0056EB1C |. 75 0D JNZ SHORT Proteank.0056EB2B
0056EB1E |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EB21 |. BA 64F35600 MOV EDX,Proteank.0056F364 ; m
0056EB26 |. E8 915DE9FF CALL Proteank.004048BC
0056EB2B |> 8D55 80 LEA EDX,DWORD PTR SS:[EBP-80]
0056EB2E |. 8B83 28030000 MOV EAX,DWORD PTR DS:[EBX+328]
0056EB34 |. E8 07FDEDFF CALL Proteank.0044E840
0056EB39 |. 8B45 80 MOV EAX,DWORD PTR SS:[EBP-80]
0056EB3C |. BA 70F35600 MOV EDX,Proteank.0056F370 ; 9
0056EB41 |. E8 DA60E9FF CALL Proteank.00404C20
0056EB46 |. 75 0D JNZ SHORT Proteank.0056EB55
0056EB48 |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0056EB4B |. BA 7CF35600 MOV EDX,Proteank.0056F37C ; n
0056EB50 |. E8 675DE9FF CALL Proteank.004048BC
0056EB55 |> 8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84]
0056EB5B |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056EB61 |. E8 DAFCEDFF CALL Proteank.0044E840
0056EB66 |. 8B85 7CFFFFFF MOV EAX,DWORD PTR SS:[EBP-84]
0056EB6C |. BA 98F25600 MOV EDX,Proteank.0056F298 ; 0
0056EB71 |. E8 AA60E9FF CALL Proteank.00404C20
0056EB76 |. 75 0D JNZ SHORT Proteank.0056EB85
0056EB78 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056EB7B |. BA A4F25600 MOV EDX,Proteank.0056F2A4 ; e
0056EB80 |. E8 375DE9FF CALL Proteank.004048BC
0056EB85 |> 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
0056EB8B |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056EB91 |. E8 AAFCEDFF CALL Proteank.0044E840
0056EB96 |. 8B85 78FFFFFF MOV EAX,DWORD PTR SS:[EBP-88]
0056EB9C |. BA B0F25600 MOV EDX,Proteank.0056F2B0 ; 1
0056EBA1 |. E8 7A60E9FF CALL Proteank.00404C20
0056EBA6 |. 75 0D JNZ SHORT Proteank.0056EBB5
0056EBA8 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056EBAB |. BA BCF25600 MOV EDX,Proteank.0056F2BC ; f
0056EBB0 |. E8 075DE9FF CALL Proteank.004048BC
0056EBB5 |> 8D95 74FFFFFF LEA EDX,DWORD PTR SS:[EBP-8C]
0056EBBB |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056EBC1 |. E8 7AFCEDFF CALL Proteank.0044E840
0056EBC6 |. 8B85 74FFFFFF MOV EAX,DWORD PTR SS:[EBP-8C]
0056EBCC |. BA C8F25600 MOV EDX,Proteank.0056F2C8 ; 2
0056EBD1 |. E8 4A60E9FF CALL Proteank.00404C20
0056EBD6 |. 75 0D JNZ SHORT Proteank.0056EBE5
0056EBD8 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056EBDB |. BA D4F25600 MOV EDX,Proteank.0056F2D4 ; g
0056EBE0 |. E8 D75CE9FF CALL Proteank.004048BC
0056EBE5 |> 8D95 70FFFFFF LEA EDX,DWORD PTR SS:[EBP-90]
0056EBEB |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056EBF1 |. E8 4AFCEDFF CALL Proteank.0044E840
0056EBF6 |. 8B85 70FFFFFF MOV EAX,DWORD PTR SS:[EBP-90]
0056EBFC |. BA E0F25600 MOV EDX,Proteank.0056F2E0 ; 3
0056EC01 |. E8 1A60E9FF CALL Proteank.00404C20
0056EC06 |. 75 0D JNZ SHORT Proteank.0056EC15
0056EC08 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056EC0B |. BA ECF25600 MOV EDX,Proteank.0056F2EC ; h
0056EC10 |. E8 A75CE9FF CALL Proteank.004048BC
0056EC15 |> 8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94]
0056EC1B |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056EC21 |. E8 1AFCEDFF CALL Proteank.0044E840
0056EC26 |. 8B85 6CFFFFFF MOV EAX,DWORD PTR SS:[EBP-94]
0056EC2C |. BA F8F25600 MOV EDX,Proteank.0056F2F8 ; 4
0056EC31 |. E8 EA5FE9FF CALL Proteank.00404C20
0056EC36 |. 75 0D JNZ SHORT Proteank.0056EC45
0056EC38 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056EC3B |. BA 04F35600 MOV EDX,Proteank.0056F304 ; i
0056EC40 |. E8 775CE9FF CALL Proteank.004048BC
0056EC45 |> 8D95 68FFFFFF LEA EDX,DWORD PTR SS:[EBP-98]
0056EC4B |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056EC51 |. E8 EAFBEDFF CALL Proteank.0044E840
0056EC56 |. 8B85 68FFFFFF MOV EAX,DWORD PTR SS:[EBP-98]
0056EC5C |. BA 10F35600 MOV EDX,Proteank.0056F310 ; 5
0056EC61 |. E8 BA5FE9FF CALL Proteank.00404C20
0056EC66 |. 75 0D JNZ SHORT Proteank.0056EC75
0056EC68 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056EC6B |. BA 1CF35600 MOV EDX,Proteank.0056F31C ; j
0056EC70 |. E8 475CE9FF CALL Proteank.004048BC
0056EC75 |> 8D95 64FFFFFF LEA EDX,DWORD PTR SS:[EBP-9C]
0056EC7B |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056EC81 |. E8 BAFBEDFF CALL Proteank.0044E840
0056EC86 |. 8B85 64FFFFFF MOV EAX,DWORD PTR SS:[EBP-9C]
0056EC8C |. BA 28F35600 MOV EDX,Proteank.0056F328 ; 6
0056EC91 |. E8 8A5FE9FF CALL Proteank.00404C20
0056EC96 |. 75 0D JNZ SHORT Proteank.0056ECA5
0056EC98 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056EC9B |. BA 34F35600 MOV EDX,Proteank.0056F334 ; k
0056ECA0 |. E8 175CE9FF CALL Proteank.004048BC
0056ECA5 |> 8D95 60FFFFFF LEA EDX,DWORD PTR SS:[EBP-A0]
0056ECAB |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056ECB1 |. E8 8AFBEDFF CALL Proteank.0044E840
0056ECB6 |. 8B85 60FFFFFF MOV EAX,DWORD PTR SS:[EBP-A0]
0056ECBC |. BA 40F35600 MOV EDX,Proteank.0056F340 ; 7
0056ECC1 |. E8 5A5FE9FF CALL Proteank.00404C20
0056ECC6 |. 75 0D JNZ SHORT Proteank.0056ECD5
0056ECC8 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056ECCB |. BA 4CF35600 MOV EDX,Proteank.0056F34C ; l
0056ECD0 |. E8 E75BE9FF CALL Proteank.004048BC
0056ECD5 |> 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
0056ECDB |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056ECE1 |. E8 5AFBEDFF CALL Proteank.0044E840
0056ECE6 |. 8B85 5CFFFFFF MOV EAX,DWORD PTR SS:[EBP-A4]
0056ECEC |. BA 58F35600 MOV EDX,Proteank.0056F358 ; 8
0056ECF1 |. E8 2A5FE9FF CALL Proteank.00404C20
0056ECF6 |. 75 0D JNZ SHORT Proteank.0056ED05
0056ECF8 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056ECFB |. BA 64F35600 MOV EDX,Proteank.0056F364 ; m
0056ED00 |. E8 B75BE9FF CALL Proteank.004048BC
0056ED05 |> 8D95 58FFFFFF LEA EDX,DWORD PTR SS:[EBP-A8]
0056ED0B |. 8B83 3C030000 MOV EAX,DWORD PTR DS:[EBX+33C]
0056ED11 |. E8 2AFBEDFF CALL Proteank.0044E840
0056ED16 |. 8B85 58FFFFFF MOV EAX,DWORD PTR SS:[EBP-A8]
0056ED1C |. BA 70F35600 MOV EDX,Proteank.0056F370 ; 9
0056ED21 |. E8 FA5EE9FF CALL Proteank.00404C20
0056ED26 |. 75 0D JNZ SHORT Proteank.0056ED35
0056ED28 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056ED2B |. BA 7CF35600 MOV EDX,Proteank.0056F37C ; n
0056ED30 |. E8 875BE9FF CALL Proteank.004048BC
0056ED35 |> 8D95 50FFFFFF LEA EDX,DWORD PTR SS:[EBP-B0]
0056ED3B |. 8B83 FC020000 MOV EAX,DWORD PTR DS:[EBX+2FC]
0056ED41 |. E8 FAFAEDFF CALL Proteank.0044E840
0056ED46 |. FFB5 50FFFFFF PUSH DWORD PTR SS:[EBP-B0]
0056ED4C |. 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
0056ED52 |. 8B83 00030000 MOV EAX,DWORD PTR DS:[EBX+300]
0056ED58 |. E8 E3FAEDFF CALL Proteank.0044E840
0056ED5D |. FFB5 4CFFFFFF PUSH DWORD PTR SS:[EBP-B4]
0056ED63 |. 8D95 48FFFFFF LEA EDX,DWORD PTR SS:[EBP-B8]
0056ED69 |. 8B83 04030000 MOV EAX,DWORD PTR DS:[EBX+304]
0056ED6F |. E8 CCFAEDFF CALL Proteank.0044E840
0056ED74 |. FFB5 48FFFFFF PUSH DWORD PTR SS:[EBP-B8]
0056ED7A |. 8D85 54FFFFFF LEA EAX,DWORD PTR SS:[EBP-AC]
0056ED80 |. BA 03000000 MOV EDX,3
0056ED85 |. E8 125EE9FF CALL Proteank.00404B9C
0056ED8A |. 8B85 54FFFFFF MOV EAX,DWORD PTR SS:[EBP-AC]
0056ED90 |. E8 BBA5E9FF CALL Proteank.00409350
0056ED95 |. 8BF0 MOV ESI,EAX
0056ED97 |. 8D95 44FFFFFF LEA EDX,DWORD PTR SS:[EBP-BC]
0056ED9D |. 8B83 0C030000 MOV EAX,DWORD PTR DS:[EBX+30C]
0056EDA3 |. E8 98FAEDFF CALL Proteank.0044E840
0056EDA8 |. 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
0056EDAE |. E8 9DA5E9FF CALL Proteank.00409350
0056EDB3 |. 8BF8 MOV EDI,EAX
0056EDB5 |. 8D95 40FFFFFF LEA EDX,DWORD PTR SS:[EBP-C0]
0056EDBB |. 8B83 10030000 MOV EAX,DWORD PTR DS:[EBX+310]
0056EDC1 |. E8 7AFAEDFF CALL Proteank.0044E840
0056EDC6 |. 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
0056EDCC |. E8 7FA5E9FF CALL Proteank.00409350
0056EDD1 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0056EDD4 |. 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
0056EDDA |. 8B83 14030000 MOV EAX,DWORD PTR DS:[EBX+314]
0056EDE0 |. E8 5BFAEDFF CALL Proteank.0044E840
0056EDE5 |. 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
0056EDEB |. E8 60A5E9FF CALL Proteank.00409350
0056EDF0 |. 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX
0056EDF3 |. 8D95 38FFFFFF LEA EDX,DWORD PTR SS:[EBP-C8]
0056EDF9 |. 8B83 1C030000 MOV EAX,DWORD PTR DS:[EBX+31C]
0056EDFF |. E8 3CFAEDFF CALL Proteank.0044E840
0056EE04 |. 8D85 38FFFFFF LEA EAX,DWORD PTR SS:[EBP-C8]
0056EE0A |. 50 PUSH EAX
0056EE0B |. 8D95 34FFFFFF LEA EDX,DWORD PTR SS:[EBP-CC]
0056EE11 |. 8B83 18030000 MOV EAX,DWORD PTR DS:[EBX+318]
0056EE17 |. E8 24FAEDFF CALL Proteank.0044E840
0056EE1C |. 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
0056EE22 |. 58 POP EAX
0056EE23 |. E8 BC5CE9FF CALL Proteank.00404AE4
0056EE28 |. 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
0056EE2E |. E8 1DA5E9FF CALL Proteank.00409350
0056EE33 |. 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX
0056EE36 |. 8D95 30FFFFFF LEA EDX,DWORD PTR SS:[EBP-D0]
0056EE3C |. 8B83 24030000 MOV EAX,DWORD PTR DS:[EBX+324]
0056EE42 |. E8 F9F9EDFF CALL Proteank.0044E840
0056EE47 |. 8D85 30FFFFFF LEA EAX,DWORD PTR SS:[EBP-D0]
0056EE4D |. 50 PUSH EAX
0056EE4E |. 8D95 2CFFFFFF LEA EDX,DWORD PTR SS:[EBP-D4]
0056EE54 |. 8B83 20030000 MOV EAX,DWORD PTR DS:[EBX+320]
0056EE5A |. E8 E1F9EDFF CALL Proteank.0044E840
0056EE5F |. 8B95 2CFFFFFF MOV EDX,DWORD PTR SS:[EBP-D4]
0056EE65 |. 58 POP EAX
0056EE66 |. E8 795CE9FF CALL Proteank.00404AE4
0056EE6B |. 8B85 30FFFFFF MOV EAX,DWORD PTR SS:[EBP-D0]
0056EE71 |. E8 DAA4E9FF CALL Proteank.00409350
0056EE76 |. 8945 F0 MOV DWORD PTR SS:[EBP-10],EAX
0056EE79 |. 8D95 28FFFFFF LEA EDX,DWORD PTR SS:[EBP-D8]
0056EE7F |. 8B83 2C030000 MOV EAX,DWORD PTR DS:[EBX+32C]
0056EE85 |. E8 B6F9EDFF CALL Proteank.0044E840
0056EE8A |. 8B85 28FFFFFF MOV EAX,DWORD PTR SS:[EBP-D8]
0056EE90 |. E8 BBA4E9FF CALL Proteank.00409350
0056EE95 |. 8945 EC MOV DWORD PTR SS:[EBP-14],EAX
0056EE98 |. 8D95 24FFFFFF LEA EDX,DWORD PTR SS:[EBP-DC]
0056EE9E |. 8B83 30030000 MOV EAX,DWORD PTR DS:[EBX+330]
0056EEA4 |. E8 97F9EDFF CALL Proteank.0044E840
0056EEA9 |. 8B85 24FFFFFF MOV EAX,DWORD PTR SS:[EBP-DC]
0056EEAF |. E8 9CA4E9FF CALL Proteank.00409350
0056EEB4 |. 8945 E8 MOV DWORD PTR SS:[EBP-18],EAX
0056EEB7 |. 8D95 20FFFFFF LEA EDX,DWORD PTR SS:[EBP-E0]
0056EEBD |. 8B83 34030000 MOV EAX,DWORD PTR DS:[EBX+334]
0056EEC3 |. E8 78F9EDFF CALL Proteank.0044E840
0056EEC8 |. 8B85 20FFFFFF MOV EAX,DWORD PTR SS:[EBP-E0]
0056EECE |. E8 7DA4E9FF CALL Proteank.00409350
0056EED3 |. 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
0056EED6 |. 8D95 1CFFFFFF LEA EDX,DWORD PTR SS:[EBP-E4]
0056EEDC |. 8B83 38030000 MOV EAX,DWORD PTR DS:[EBX+338]
0056EEE2 |. E8 59F9EDFF CALL Proteank.0044E840
0056EEE7 |. 8B85 1CFFFFFF MOV EAX,DWORD PTR SS:[EBP-E4]
0056EEED |. E8 5EA4E9FF CALL Proteank.00409350
0056EEF2 |. 8945 E0 MOV DWORD PTR SS:[EBP-20],EAX
0056EEF5 |. 8D95 18FFFFFF LEA EDX,DWORD PTR SS:[EBP-E8]
0056EEFB |. 8B83 40030000 MOV EAX,DWORD PTR DS:[EBX+340]
0056EF01 |. E8 3AF9EDFF CALL Proteank.0044E840
0056EF06 |. 8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8]
0056EF0C |. E8 3FA4E9FF CALL Proteank.00409350
0056EF11 |. 8945 DC MOV DWORD PTR SS:[EBP-24],EAX
0056EF14 |. FF75 D8 PUSH DWORD PTR SS:[EBP-28]
0056EF17 |. 8BC6 MOV EAX,ESI ; 取注册代码1中的前三位给EAX
0056EF19 |. 2BC7 SUB EAX,EDI ; 减去注册代码1中的第五位给EAX
0056EF1B |. 99 CDQ
0056EF1C |. 33C2 XOR EAX,EDX
0056EF1E |. 2BC2 SUB EAX,EDX
0056EF20 |. 0345 FC ADD EAX,DWORD PTR SS:[EBP-4] ; 加注册代码1中的第六位给EAX
0056EF23 |. 8D95 10FFFFFF LEA EDX,DWORD PTR SS:[EBP-F0]
0056EF29 |. E8 BEA3E9FF CALL Proteank.004092EC
0056EF2E |. FFB5 10FFFFFF PUSH DWORD PTR SS:[EBP-F0]
0056EF34 |. FF75 D4 PUSH DWORD PTR SS:[EBP-2C]
0056EF37 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; 取注册代码2中的第二、三位对调之后数给EAX
0056EF3A |. 0345 F8 ADD EAX,DWORD PTR SS:[EBP-8] ; 加注册代码2中的第一位给EAX
0056EF3D |. 0345 F0 ADD EAX,DWORD PTR SS:[EBP-10] ; 加注册代码2中的第四、五位对调之后数给EAX
0056EF40 |. 99 CDQ
0056EF41 |. 33C2 XOR EAX,EDX
0056EF43 |. 2BC2 SUB EAX,EDX
0056EF45 |. 8D95 0CFFFFFF LEA EDX,DWORD PTR SS:[EBP-F4]
0056EF4B |. E8 9CA3E9FF CALL Proteank.004092EC
0056EF50 |. FFB5 0CFFFFFF PUSH DWORD PTR SS:[EBP-F4]
0056EF56 |. FF75 D0 PUSH DWORD PTR SS:[EBP-30]
0056EF59 |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; 取注册代码3中的第四位给EAX
0056EF5C |. F76D E4 IMUL DWORD PTR SS:[EBP-1C] ; 乘以注册代码3中的第三位给EAX
0056EF5F |. F76D E8 IMUL DWORD PTR SS:[EBP-18] ; 乘以注册代码3中的第二位给EAX
0056EF62 |. 0345 EC ADD EAX,DWORD PTR SS:[EBP-14] ; 加注册代码3中的第一位给EAX
0056EF65 |. 0345 DC ADD EAX,DWORD PTR SS:[EBP-24] ; 加注册代码3中的第六位给EAX
0056EF68 |. 99 CDQ
0056EF69 |. 33C2 XOR EAX,EDX
0056EF6B |. 2BC2 SUB EAX,EDX
0056EF6D |. 8D95 08FFFFFF LEA EDX,DWORD PTR SS:[EBP-F8]
0056EF73 |. E8 74A3E9FF CALL Proteank.004092EC
0056EF78 |. FFB5 08FFFFFF PUSH DWORD PTR SS:[EBP-F8]
0056EF7E |. 8D95 04FFFFFF LEA EDX,DWORD PTR SS:[EBP-FC]
0056EF84 |. 8B83 0C030000 MOV EAX,DWORD PTR DS:[EBX+30C]
0056EF8A |. E8 B1F8EDFF CALL Proteank.0044E840
0056EF8F |. FFB5 04FFFFFF PUSH DWORD PTR SS:[EBP-FC]
0056EF95 |. 8D95 00FFFFFF LEA EDX,DWORD PTR SS:[EBP-100]
0056EF9B |. 8B83 1C030000 MOV EAX,DWORD PTR DS:[EBX+31C]
0056EFA1 |. E8 9AF8EDFF CALL Proteank.0044E840
0056EFA6 |. FFB5 00FFFFFF PUSH DWORD PTR SS:[EBP-100]
0056EFAC |. 8D95 FCFEFFFF LEA EDX,DWORD PTR SS:[EBP-104]
0056EFB2 |. 8B83 34030000 MOV EAX,DWORD PTR DS:[EBX+334]
0056EFB8 |. E8 83F8EDFF CALL Proteank.0044E840
0056EFBD |. FFB5 FCFEFFFF PUSH DWORD PTR SS:[EBP-104]
0056EFC3 |. 8D85 14FFFFFF LEA EAX,DWORD PTR SS:[EBP-EC]
0056EFC9 |. BA 09000000 MOV EDX,9
0056EFCE |. E8 C95BE9FF CALL Proteank.00404B9C
0056EFD3 |. 8B95 14FFFFFF MOV EDX,DWORD PTR SS:[EBP-EC]
0056EFD9 |. 8B83 58030000 MOV EAX,DWORD PTR DS:[EBX+358]
0056EFDF |. E8 8CF8EDFF CALL Proteank.0044E870
0056EFE4 |. 8D95 F8FEFFFF LEA EDX,DWORD PTR SS:[EBP-108]
0056EFEA |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0056EFF0 |. E8 4BF8EDFF CALL Proteank.0044E840
0056EFF5 |. 8B85 F8FEFFFF MOV EAX,DWORD PTR SS:[EBP-108]
0056EFFB |. BA 88F35600 MOV EDX,Proteank.0056F388 ; liwenkang
0056F000 |. E8 1B5CE9FF CALL Proteank.00404C20
0056F005 |. 75 68 JNZ SHORT Proteank.0056F06F
0056F007 |. 8D95 F4FEFFFF LEA EDX,DWORD PTR SS:[EBP-10C]
0056F00D |. 8B83 50030000 MOV EAX,DWORD PTR DS:[EBX+350]
0056F013 |. E8 28F8EDFF CALL Proteank.0044E840
0056F018 |. 8B85 F4FEFFFF MOV EAX,DWORD PTR SS:[EBP-10C]
0056F01E |. BA 9CF35600 MOV EDX,Proteank.0056F39C ; svs
0056F023 |. E8 F85BE9FF CALL Proteank.00404C20
0056F028 |. 75 45 JNZ SHORT Proteank.0056F06F
0056F02A |. 8D95 F0FEFFFF LEA EDX,DWORD PTR SS:[EBP-110]
0056F030 |. 8B83 54030000 MOV EAX,DWORD PTR DS:[EBX+354]
0056F036 |. E8 05F8EDFF CALL Proteank.0044E840
0056F03B |. 8B85 F0FEFFFF MOV EAX,DWORD PTR SS:[EBP-110]
0056F041 |. BA A8F35600 MOV EDX,Proteank.0056F3A8 ; 3262900
0056F046 |. E8 D55BE9FF CALL Proteank.00404C20
0056F04B |. 75 22 JNZ SHORT Proteank.0056F06F
0056F04D |. 8D95 ECFEFFFF LEA EDX,DWORD PTR SS:[EBP-114]
0056F053 |. 8B83 58030000 MOV EAX,DWORD PTR DS:[EBX+358]
0056F059 |. E8 E2F7EDFF CALL Proteank.0044E840
0056F05E |. 8B95 ECFEFFFF MOV EDX,DWORD PTR SS:[EBP-114]
0056F064 |. 8B83 54030000 MOV EAX,DWORD PTR DS:[EBX+354]
0056F06A |. E8 01F8EDFF CALL Proteank.0044E870
0056F06F |> 8D95 E8FEFFFF LEA EDX,DWORD PTR SS:[EBP-118]
0056F075 |. 8B83 54030000 MOV EAX,DWORD PTR DS:[EBX+354]
0056F07B |. E8 C0F7EDFF CALL Proteank.0044E840
0056F080 |. 8B85 E8FEFFFF MOV EAX,DWORD PTR SS:[EBP-118]
0056F086 |. 50 PUSH EAX
0056F087 |. 8D95 E4FEFFFF LEA EDX,DWORD PTR SS:[EBP-11C]
0056F08D |. 8B83 58030000 MOV EAX,DWORD PTR DS:[EBX+358]
0056F093 |. E8 A8F7EDFF CALL Proteank.0044E840
0056F098 |. 8B95 E4FEFFFF MOV EDX,DWORD PTR SS:[EBP-11C]
0056F09E |. 58 POP EAX
0056F09F |. E8 7C5BE9FF CALL Proteank.00404C20 ;注册码比较CALL
0056F0A4 |. 0F85 60010000 JNZ Proteank.0056F20A
0056F0AA |. B2 01 MOV DL,1
0056F0AC |. A1 50214900 MOV EAX,DWORD PTR DS:[492150]
0056F0B1 |. E8 0632F2FF CALL Proteank.004922BC
0056F0B6 |. 8B15 B4777E00 MOV EDX,DWORD PTR DS:[7E77B4] ; Proteank.007E9404
0056F0BC |. 8902 MOV DWORD PTR DS:[EDX],EAX
0056F0BE |. A1 B4777E00 MOV EAX,DWORD PTR DS:[7E77B4]
0056F0C3 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F0C5 |. BA 01000080 MOV EDX,80000001
0056F0CA |. E8 C932F2FF CALL Proteank.00492398
0056F0CF |. A1 B4777E00 MOV EAX,DWORD PTR DS:[7E77B4]
0056F0D4 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F0D6 |. B1 01 MOV CL,1
0056F0D8 |. BA B8F35600 MOV EDX,Proteank.0056F3B8 ; control panel\desktop\change
0056F0DD |. E8 1E33F2FF CALL Proteank.00492400
0056F0E2 |. 84C0 TEST AL,AL
0056F0E4 |. 0F84 92000000 JE Proteank.0056F17C
0056F0EA |. 8D95 E0FEFFFF LEA EDX,DWORD PTR SS:[EBP-120]
0056F0F0 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0056F0F6 |. E8 45F7EDFF CALL Proteank.0044E840
0056F0FB |. 8B8D E0FEFFFF MOV ECX,DWORD PTR SS:[EBP-120]
0056F101 |. A1 B4777E00 MOV EAX,DWORD PTR DS:[7E77B4]
0056F106 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F108 |. BA E0F35600 MOV EDX,Proteank.0056F3E0 ; name
0056F10D |. E8 8A34F2FF CALL Proteank.0049259C
0056F112 |. 8D95 DCFEFFFF LEA EDX,DWORD PTR SS:[EBP-124]
0056F118 |. 8B83 50030000 MOV EAX,DWORD PTR DS:[EBX+350]
0056F11E |. E8 1DF7EDFF CALL Proteank.0044E840
0056F123 |. 8B8D DCFEFFFF MOV ECX,DWORD PTR SS:[EBP-124]
0056F129 |. A1 B4777E00 MOV EAX,DWORD PTR DS:[7E77B4]
0056F12E |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F130 |. BA F0F35600 MOV EDX,Proteank.0056F3F0 ; office
0056F135 |. E8 6234F2FF CALL Proteank.0049259C
0056F13A |. 8D95 D8FEFFFF LEA EDX,DWORD PTR SS:[EBP-128]
0056F140 |. 8B83 54030000 MOV EAX,DWORD PTR DS:[EBX+354]
0056F146 |. E8 F5F6EDFF CALL Proteank.0044E840
0056F14B |. 8B8D D8FEFFFF MOV ECX,DWORD PTR SS:[EBP-128]
0056F151 |. A1 B4777E00 MOV EAX,DWORD PTR DS:[7E77B4]
0056F156 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F158 |. BA 00F45600 MOV EDX,Proteank.0056F400 ; id
0056F15D |. E8 3A34F2FF CALL Proteank.0049259C
0056F162 |. A1 B4777E00 MOV EAX,DWORD PTR DS:[7E77B4]
0056F167 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F169 |. E8 FA31F2FF CALL Proteank.00492368
0056F16E |. A1 B4777E00 MOV EAX,DWORD PTR DS:[7E77B4]
0056F173 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F175 |. B2 01 MOV DL,1
0056F177 |. 8B08 MOV ECX,DWORD PTR DS:[EAX]
0056F179 |. FF51 FC CALL DWORD PTR DS:[ECX-4]
0056F17C |> A1 387A7E00 MOV EAX,DWORD PTR DS:[7E7A38]
0056F181 |. C700 20000000 MOV DWORD PTR DS:[EAX],20
0056F187 |. A1 387A7E00 MOV EAX,DWORD PTR DS:[7E7A38]
0056F18C |. 50 PUSH EAX ; /pMemStat => Proteank.007E9510
0056F18D |. E8 027FE9FF CALL Proteank.00407094 ; \GlobalMemoryStatus
0056F192 |. A1 387A7E00 MOV EAX,DWORD PTR DS:[7E7A38]
0056F197 |. 8B40 08 MOV EAX,DWORD PTR DS:[EAX+8]
0056F19A |. 50 PUSH EAX
0056F19B |. A1 647A7E00 MOV EAX,DWORD PTR DS:[7E7A64]
0056F1A0 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F1A2 |. B9 0CF45600 MOV ECX,Proteank.0056F40C ; memo
0056F1A7 |. BA 1CF45600 MOV EDX,Proteank.0056F41C ; winner
0056F1AC |. 8B30 MOV ESI,DWORD PTR DS:[EAX]
0056F1AE |. FF56 0C CALL DWORD PTR DS:[ESI+C]
0056F1B1 |. 8D95 D4FEFFFF LEA EDX,DWORD PTR SS:[EBP-12C]
0056F1B7 |. 8B83 54030000 MOV EAX,DWORD PTR DS:[EBX+354]
0056F1BD |. E8 7EF6EDFF CALL Proteank.0044E840
0056F1C2 |. 8B85 D4FEFFFF MOV EAX,DWORD PTR SS:[EBP-12C]
0056F1C8 |. 50 PUSH EAX
0056F1C9 |. A1 647A7E00 MOV EAX,DWORD PTR DS:[7E7A64]
0056F1CE |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F1D0 |. B9 00F45600 MOV ECX,Proteank.0056F400 ; id
0056F1D5 |. BA 1CF45600 MOV EDX,Proteank.0056F41C ; winner
0056F1DA |. 8B30 MOV ESI,DWORD PTR DS:[EAX]
0056F1DC |. FF56 04 CALL DWORD PTR DS:[ESI+4]
0056F1DF |. BA 1CF45600 MOV EDX,Proteank.0056F41C ; winner
0056F1E4 |. 8B83 5C030000 MOV EAX,DWORD PTR DS:[EBX+35C]
0056F1EA |. E8 81F6EDFF CALL Proteank.0044E870
0056F1EF |. E8 80E1E9FF CALL Proteank.0040D374
0056F1F4 |. B8 2CF45600 MOV EAX,Proteank.0056F42C ; 注册完成！\n\n谢谢您使用守护者软件！
0056F1F9 |. E8 5E84EDFF CALL Proteank.0044765C
0056F1FE |. A1 54907E00 MOV EAX,DWORD PTR DS:[7E9054]
0056F203 |. E8 0CCFEFFF CALL Proteank.0046C114
0056F208 |. EB 2D JMP SHORT Proteank.0056F237
0056F20A |> A1 3C797E00 MOV EAX,DWORD PTR DS:[7E793C]
0056F20F |. 8300 12 ADD DWORD PTR DS:[EAX],12
0056F212 |. A1 3C797E00 MOV EAX,DWORD PTR DS:[7E793C]
0056F217 |. 8338 58 CMP DWORD PTR DS:[EAX],58
0056F21A |. 7E 1B JLE SHORT Proteank.0056F237
0056F21C |. E8 53E1E9FF CALL Proteank.0040D374
0056F221 |. B8 58F45600 MOV EAX,Proteank.0056F458 ; 您的注册错误次数太多，软件即将关闭！
0056F226 |. E8 3184EDFF CALL Proteank.0044765C
0056F22B |. A1 507C7E00 MOV EAX,DWORD PTR DS:[7E7C50]
0056F230 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
0056F232 |. E8 DDCEEFFF CALL Proteank.0046C114
0056F237 |> 33C0 XOR EAX,EAX
0056F239 |. 5A POP EDX
0056F23A |. 59 POP ECX
0056F23B |. 59 POP ECX
0056F23C |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0056F23F |. 68 89F25600 PUSH Proteank.0056F289
0056F244 |> 8D85 D4FEFFFF LEA EAX,DWORD PTR SS:[EBP-12C]
0056F24A |. BA 0D000000 MOV EDX,0D
0056F24F |. E8 F455E9FF CALL Proteank.00404848
0056F254 |. 8D85 08FFFFFF LEA EAX,DWORD PTR SS:[EBP-F8]
0056F25A |. BA 04000000 MOV EDX,4
0056F25F |. E8 E455E9FF CALL Proteank.00404848
0056F264 |. 8D85 18FFFFFF LEA EAX,DWORD PTR SS:[EBP-E8]
0056F26A |. BA 2E000000 MOV EDX,2E
0056F26F |. E8 D455E9FF CALL Proteank.00404848
0056F274 |. 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0056F277 |. BA 03000000 MOV EDX,3
0056F27C |. E8 C755E9FF CALL Proteank.00404848
0056F281 \. C3 RETN
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
提供几个注册码：
123456-345678-789012
123-5+6=124
54+3+76=133
0*9*8+7+2=9
I124M133F9559----->注册码
123456-345678-244024
123-5+6=124
54+3+76=133
0*4*4+2+4=6
I124M133G6554----->注册码
987654-321098-765432
987-5+4=986
12+3+90=105
4*5*6+7+2=129
K986M105H 5
K986M105H129515----->注册码
987644-322098-765422
987-4+4=987
22+3+90=115
4*5*6+7+2=129
K987M115G129425----->注册码
1234567890
FGHIJKLMNE
SN1、注册代码1中的第四位作索引取字符串“FGHIJKLMNE”中的字母。
SN2、取注册代码1中的前三位数减去注册代码1中的第五位数再加注册代码1中的第六位数。
SN3、注册代码2中的第六位作索引取字符串“FGHIJKLMNE”中的字母。
SN4、取注册代码2中的第二、三位对调之后的数加注册代码2中的第一位数再加注册代码2中的第四、五位对调之后的数。
SN5、注册代码3中的第五位作索引取字符串“FGHIJKLMNE”中的字母。
SN6、取注册代码3中的第四位数乘以注册代码3中的第三位数再乘以注册代码3中的第二位数接着加注册代码3中的第一位数再加注册代码3中的第六位数。
SN7、取注册代码1中的第五位数。
SN8、取注册代码2中的第三位数。
SN9、取注册代码3中的第三位数。
注册码为：SN1+SN2+SN3+SN4+SN5+SN6+SN7+SN8+SN9
注册代码1保存在[HKEY_CLASSES_ROOT\cbwf\l\i]中
注册代码2保存在[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\w\e\n]中
注册代码3保存在[HKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\k\a\n\g]中
注册信息保存在：（如果注册后再试，可修改REG键值）
[HKEY_CURRENT_USER\Control Panel\Desktop\Change]
"reg"=dword:00000001
"form6.top"=dword:00000032
"form6.left"=dword:000000bc
"name"="hbqjxhw[pyg]"
"office"="hao"
"ID"="K987M115G129425"
"Skins"=dword:00000009
"part.width"=dword:00000400
"part.height"=dword:00000300
"picshow1"=dword:00000000
提供注册机，注册程序就不写了（偷懒）。
----------------------------------------------------------------------------------------------
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享:)
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!
----------------------------------------------------------------------------------------------
文章写于2006-03-03 23:30:20