【破文标题】AutoRun Design Specialty 9.1.1.21算法分析(变形MD5)
【破文作者】tianxj
【作者邮箱】tianxj_2007@126.com
【作者主页】WwW.ChiNaPYG.CoM
【破解工具】PEiD,OD
【破解平台】Windows XP
【软件名称】AutoRun Design Specialty 9.1.1.21
【软件类别】国外软件/光碟工具
【软件授权】共享版
【软件语言】英文
【运行环境】Win9x/Me/NT/2000/XP/2003
【软件大小】6.98MB
【原版下载】http://www.alleysoft.com/autorundesignspecialty/ARDSSetup90.exe
【保护方式】注册码
【软件简介】一款专业的所见即所得的光盘自启动程序制作工具。软件支持多种启动屏幕画面，可插入图片、声音、HTML和RTF文档。内建了媒体播放器和RTF阅读器，可在程序启动时播放AVI视频和RTF文档。软件内置了许多模板，可根据需要调用和修改。
【破解声明】我是一只小菜鸟，偶得一点心得，愿与大家分享：）
--------------------------------------------------------------
【破解内容】
--------------------------------------------------------------
**************************************************************
一、运行程序，进行注册，输入错误的注册信息进行检测，有提示信息
"Please input Name,Serial,Code again."
**************************************************************
二、用PEiD对AutoRunDS.exe查壳，为 UPX 0.89.6 - 1.02 / 1.05 - 1.24 -> Markus & Laszlo
**************************************************************
三、带壳调试，运行OD，打开AutoRunDS.exe，下bp MessageBoxA，来到关键之处
==============================================================
00571BA0 55 PUSH EBP
00571BA1 8BEC MOV EBP,ESP
00571BA3 B9 06000000 MOV ECX,6
00571BA8 6A 00 PUSH 0
00571BAA 6A 00 PUSH 0
00571BAC 49 DEC ECX
00571BAD ^ 75 F9 JNZ SHORT AutoRunD.00571BA8
00571BAF 53 PUSH EBX
00571BB0 56 PUSH ESI
00571BB1 57 PUSH EDI
00571BB2 8BD8 MOV EBX,EAX
00571BB4 33C0 XOR EAX,EAX
00571BB6 55 PUSH EBP
00571BB7 68 7B1D5700 PUSH AutoRunD.00571D7B
00571BBC 64:FF30 PUSH DWORD PTR FS:[EAX]
00571BBF 64:8920 MOV DWORD PTR FS:[EAX],ESP
00571BC2 8D55 FC LEA EDX,DWORD PTR SS:[EBP-4]
00571BC5 8B83 1C030000 MOV EAX,DWORD PTR DS:[EBX+31C]
00571BCB E8 C8D9F0FF CALL AutoRunD.0047F598
00571BD0 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
00571BD3 8B83 20030000 MOV EAX,DWORD PTR DS:[EBX+320]
00571BD9 E8 BAD9F0FF CALL AutoRunD.0047F598
00571BDE 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
00571BE1 8B83 18030000 MOV EAX,DWORD PTR DS:[EBX+318]
00571BE7 E8 ACD9F0FF CALL AutoRunD.0047F598
00571BEC 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
00571BEF 50 PUSH EAX
00571BF0 B9 03000000 MOV ECX,3
00571BF5 BA 01000000 MOV EDX,1
00571BFA 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8] ; //Serial
00571BFD E8 4E01EDFF CALL AutoRunD.00441D50
00571C02 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10]
00571C05 BA 941D5700 MOV EDX,AutoRunD.00571D94 ; ASCII "002"
00571C0A E8 6130E9FF CALL AutoRunD.00404C70
00571C0F 0F85 26010000 JNZ AutoRunD.00571D3B ; //Serial的1-3位不是"002"则挂
00571C15 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
00571C18 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4] ; //Name
00571C1B 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8] ; //Serial
00571C1E E8 4D2FE9FF CALL AutoRunD.00404B70 ; //Serial和Name相连
00571C23 8B45 D4 MOV EAX,DWORD PTR SS:[EBP-2C] ; //相连字符串
00571C26 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
00571C29 E8 0AF4FFFF CALL AutoRunD.00571038 ; //作变形MD5运算
00571C2E 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
00571C31 8D55 E8 LEA EDX,DWORD PTR SS:[EBP-18]
00571C34 E8 67F2FFFF CALL AutoRunD.00570EA0
00571C39 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] ; //变形MD5小写
00571C3C 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14]
00571C3F E8 2071E9FF CALL AutoRunD.00408D64 ; //小写转大写
00571C44 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] ; //变形MD5大写,即真码
00571C47 8B55 F4 MOV EDX,DWORD PTR SS:[EBP-C] ; //假码
00571C4A E8 2130E9FF CALL AutoRunD.00404C70 ; //比较CALL
00571C4F 74 1D JE SHORT AutoRunD.00571C6E
00571C51 6A 40 PUSH 40
00571C53 B9 981D5700 MOV ECX,AutoRunD.00571D98 ; ASCII "Information"
00571C58 BA A41D5700 MOV EDX,AutoRunD.00571DA4 ; ASCII "Please input Name,Serial,Code again."
00571C5D A1 90495F00 MOV EAX,DWORD PTR DS:[5F4990]
00571C62 8B00 MOV EAX,DWORD PTR DS:[EAX]
00571C64 E8 D7EFF2FF CALL AutoRunD.004A0C40
00571C69 E9 E5000000 JMP AutoRunD.00571D53
00571C6E 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
00571C71 E8 C65B0600 CALL AutoRunD.005D783C
00571C76 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
00571C79 BA D41D5700 MOV EDX,AutoRunD.00571DD4 ; ASCII "\AutoRunDS.ini"
00571C7E E8 A92EE9FF CALL AutoRunD.00404B2C
00571C83 8B4D D0 MOV ECX,DWORD PTR SS:[EBP-30]
00571C86 B2 01 MOV DL,1
00571C88 A1 B0674400 MOV EAX,DWORD PTR DS:[4467B0]
00571C8D E8 CE4BEDFF CALL AutoRunD.00446860
00571C92 8BF0 MOV ESI,EAX
00571C94 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00571C97 50 PUSH EAX
00571C98 B9 EC1D5700 MOV ECX,AutoRunD.00571DEC ; ASCII "Name"
00571C9D BA FC1D5700 MOV EDX,AutoRunD.00571DFC ; ASCII "REGISTRATION"
00571CA2 8BC6 MOV EAX,ESI
00571CA4 8B38 MOV EDI,DWORD PTR DS:[EAX]
00571CA6 FF57 04 CALL DWORD PTR DS:[EDI+4]
00571CA9 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00571CAC 50 PUSH EAX
00571CAD B9 141E5700 MOV ECX,AutoRunD.00571E14 ; ASCII "Serial"
00571CB2 BA FC1D5700 MOV EDX,AutoRunD.00571DFC ; ASCII "REGISTRATION"
00571CB7 8BC6 MOV EAX,ESI
00571CB9 8B38 MOV EDI,DWORD PTR DS:[EAX]
00571CBB FF57 04 CALL DWORD PTR DS:[EDI+4]
00571CBE 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]
00571CC1 50 PUSH EAX
00571CC2 B9 241E5700 MOV ECX,AutoRunD.00571E24 ; ASCII "Code"
00571CC7 BA FC1D5700 MOV EDX,AutoRunD.00571DFC ; ASCII "REGISTRATION"
00571CCC 8BC6 MOV EAX,ESI
00571CCE 8B30 MOV ESI,DWORD PTR DS:[EAX]
00571CD0 FF56 04 CALL DWORD PTR DS:[ESI+4]
00571CD3 A1 6C495F00 MOV EAX,DWORD PTR DS:[5F496C]
00571CD8 C600 01 MOV BYTE PTR DS:[EAX],1
00571CDB A1 444C5F00 MOV EAX,DWORD PTR DS:[5F4C44]
00571CE0 8B00 MOV EAX,DWORD PTR DS:[EAX]
00571CE2 8B80 2C030000 MOV EAX,DWORD PTR DS:[EAX+32C]
00571CE8 8B40 68 MOV EAX,DWORD PTR DS:[EAX+68]
00571CEB BA 080000FF MOV EDX,FF000008
00571CF0 E8 739CEBFF CALL AutoRunD.0042B968
00571CF5 A1 444C5F00 MOV EAX,DWORD PTR DS:[5F4C44]
00571CFA 8B00 MOV EAX,DWORD PTR DS:[EAX]
00571CFC 8B80 2C030000 MOV EAX,DWORD PTR DS:[EAX+32C]
00571D02 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
00571D05 E8 BED8F0FF CALL AutoRunD.0047F5C8
00571D0A A1 54465F00 MOV EAX,DWORD PTR DS:[5F4654]
00571D0F 8B00 MOV EAX,DWORD PTR DS:[EAX]
00571D11 8B80 B0060000 MOV EAX,DWORD PTR DS:[EAX+6B0]
00571D17 33D2 XOR EDX,EDX
00571D19 E8 B203F2FF CALL AutoRunD.004920D0
00571D1E A1 54465F00 MOV EAX,DWORD PTR DS:[5F4654]
00571D23 8B00 MOV EAX,DWORD PTR DS:[EAX]
00571D25 8B80 B4060000 MOV EAX,DWORD PTR DS:[EAX+6B4]
00571D2B 33D2 XOR EDX,EDX
00571D2D E8 9E03F2FF CALL AutoRunD.004920D0
00571D32 8BC3 MOV EAX,EBX
00571D34 E8 E7B3F2FF CALL AutoRunD.0049D120
00571D39 EB 18 JMP SHORT AutoRunD.00571D53
00571D3B 6A 40 PUSH 40
00571D3D B9 981D5700 MOV ECX,AutoRunD.00571D98 ; ASCII "Information"
00571D42 BA A41D5700 MOV EDX,AutoRunD.00571DA4 ; ASCII "Please input Name,Serial,Code again."
00571D47 A1 90495F00 MOV EAX,DWORD PTR DS:[5F4990]
00571D4C 8B00 MOV EAX,DWORD PTR DS:[EAX]
00571D4E E8 EDEEF2FF CALL AutoRunD.004A0C40
00571D53 33C0 XOR EAX,EAX
00571D55 5A POP EDX
00571D56 59 POP ECX
00571D57 59 POP ECX
00571D58 64:8910 MOV DWORD PTR FS:[EAX],EDX
00571D5B 68 821D5700 PUSH AutoRunD.00571D82
00571D60 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
00571D63 BA 02000000 MOV EDX,2
00571D68 E8 1B2BE9FF CALL AutoRunD.00404888
00571D6D 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18]
00571D70 BA 06000000 MOV EDX,6
00571D75 E8 0E2BE9FF CALL AutoRunD.00404888
00571D7A C3 RETN
00571D7B ^ E9 6424E9FF JMP AutoRunD.004041E4
00571D80 ^ EB DE JMP SHORT AutoRunD.00571D60
00571D82 5F POP EDI
00571D83 5E POP ESI
00571D84 5B POP EBX
00571D85 8BE5 MOV ESP,EBP
00571D87 5D POP EBP
00571D88 C3 RETN
==============================================================
跟进变形MD5运算CALL
==============================================================
00571038 55 PUSH EBP
00571039 8BEC MOV EBP,ESP
0057103B 83C4 A4 ADD ESP,-5C
0057103E 53 PUSH EBX
0057103F 8BDA MOV EBX,EDX
00571041 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
00571044 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00571047 E8 C83CE9FF CALL AutoRunD.00404D14
0057104C 33C0 XOR EAX,EAX
0057104E 55 PUSH EBP
0057104F 68 9E105700 PUSH AutoRunD.0057109E
00571054 64:FF30 PUSH DWORD PTR FS:[EAX]
00571057 64:8920 MOV DWORD PTR FS:[EAX],ESP
0057105A 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
0057105D E8 4A000000 CALL AutoRunD.005710AC ; //变形1
00571062 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00571065 E8 BA3AE9FF CALL AutoRunD.00404B24
0057106A 50 PUSH EAX
0057106B 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0057106E E8 B13CE9FF CALL AutoRunD.00404D24
00571073 8BD0 MOV EDX,EAX
00571075 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
00571078 59 POP ECX
00571079 E8 7A080000 CALL AutoRunD.005718F8 ; //变形2
0057107E 8BD3 MOV EDX,EBX
00571080 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
00571083 E8 CC000000 CALL AutoRunD.00571154
00571088 33C0 XOR EAX,EAX
0057108A 5A POP EDX
0057108B 59 POP ECX
0057108C 59 POP ECX
0057108D 64:8910 MOV DWORD PTR FS:[EAX],EDX
00571090 68 A5105700 PUSH AutoRunD.005710A5
00571095 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
00571098 E8 C737E9FF CALL AutoRunD.00404864
0057109D C3 RETN
0057109E ^ E9 4131E9FF JMP AutoRunD.004041E4
005710A3 ^ EB F0 JMP SHORT AutoRunD.00571095
005710A5 5B POP EBX
005710A6 8BE5 MOV ESP,EBP
005710A8 5D POP EBP
005710A9 C3 RETN
==============================================================
跟进变形1
005710AA 8BC0 MOV EAX,EAX
005710AC C700 E1FADFDD MOV DWORD PTR DS:[EAX],DDDFFAE1 ; //标准MD5为67452301
005710B2 C740 04 32ADDEA>MOV DWORD PTR DS:[EAX+4],ABDEAD32 ; //标准MD5为EFCDAB89
005710B9 C740 08 F3DCBA9>MOV DWORD PTR DS:[EAX+8],98BADCF3 ; //标准MD5为98BADCFE
005710C0 C740 0C 3007321>MOV DWORD PTR DS:[EAX+C],10320730 ; //标准MD5为10325476
005710C7 33D2 XOR EDX,EDX
005710C9 8950 10 MOV DWORD PTR DS:[EAX+10],EDX
005710CC 33D2 XOR EDX,EDX
005710CE 8950 14 MOV DWORD PTR DS:[EAX+14],EDX
005710D1 83C0 18 ADD EAX,18
005710D4 BA 40000000 MOV EDX,40
005710D9 E8 3669E9FF CALL AutoRunD.00407A14
005710DE C3 RETN
==============================================================
跟进变形2，再跟进下面这个CALL
00571940 E8 83F8FFFF CALL AutoRunD.005711C8
==============================================================
005711C8 53 PUSH EBX
005711C9 56 PUSH ESI
005711CA 57 PUSH EDI
005711CB 55 PUSH EBP
005711CC 83C4 A8 ADD ESP,-58
005711CF 895424 04 MOV DWORD PTR SS:[ESP+4],EDX
005711D3 890424 MOV DWORD PTR SS:[ESP],EAX
005711D6 8D5C24 08 LEA EBX,DWORD PTR SS:[ESP+8]
005711DA 8D7424 0C LEA ESI,DWORD PTR SS:[ESP+C]
005711DE 8D7C24 10 LEA EDI,DWORD PTR SS:[ESP+10]
005711E2 8D6C24 14 LEA EBP,DWORD PTR SS:[ESP+14]
005711E6 8D5424 18 LEA EDX,DWORD PTR SS:[ESP+18]
005711EA B9 40000000 MOV ECX,40
005711EF 8B0424 MOV EAX,DWORD PTR SS:[ESP]
005711F2 E8 E9FEFFFF CALL AutoRunD.005710E0
005711F7 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
005711FB 8B00 MOV EAX,DWORD PTR DS:[EAX]
005711FD 8903 MOV DWORD PTR DS:[EBX],EAX
005711FF 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
00571203 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
00571206 8906 MOV DWORD PTR DS:[ESI],EAX
00571208 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
0057120C 8B40 08 MOV EAX,DWORD PTR DS:[EAX+8]
0057120F 8907 MOV DWORD PTR DS:[EDI],EAX
00571211 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
00571215 8B40 0C MOV EAX,DWORD PTR DS:[EAX+C]
00571218 8945 00 MOV DWORD PTR SS:[EBP],EAX
0057121B 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
0057121E 50 PUSH EAX
0057121F 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C]
00571223 50 PUSH EAX
00571224 6A 01 PUSH 1 ; //标准MD5为7
00571226 68 AD3B1232 PUSH 32123BAD ; //标准MD5为D76AA478
0057122B 8BC3 MOV EAX,EBX
0057122D 8B0F MOV ECX,DWORD PTR DS:[EDI]
0057122F 8B16 MOV EDX,DWORD PTR DS:[ESI]
00571231 E8 32FDFFFF CALL AutoRunD.00570F68
00571236 8B07 MOV EAX,DWORD PTR DS:[EDI]
00571238 50 PUSH EAX
00571239 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20]
0057123D 50 PUSH EAX
0057123E 6A 0A PUSH 0A ; //标准MD5为0C
00571240 68 CBDE4A43 PUSH 434ADECB ; //标准MD5为E8C7B756
00571245 8BC5 MOV EAX,EBP
00571247 8B0E MOV ECX,DWORD PTR DS:[ESI]
00571249 8B13 MOV EDX,DWORD PTR DS:[EBX]
0057124B E8 18FDFFFF CALL AutoRunD.00570F68
00571250 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571252 50 PUSH EAX
00571253 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
00571257 50 PUSH EAX
00571258 6A 15 PUSH 15 ; //标准MD5为11
0057125A 68 DB702024 PUSH 242070DB
0057125F 8BC7 MOV EAX,EDI
00571261 8B0B MOV ECX,DWORD PTR DS:[EBX]
00571263 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
00571266 E8 FDFCFFFF CALL AutoRunD.00570F68
0057126B 8B03 MOV EAX,DWORD PTR DS:[EBX]
0057126D 50 PUSH EAX
0057126E 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28]
00571272 50 PUSH EAX
00571273 6A 16 PUSH 16
00571275 68 CDCA1312 PUSH 1213CACD ; //标准MD5为C1BDCEEE
0057127A 8BC6 MOV EAX,ESI
0057127C 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
0057127F 8B17 MOV EDX,DWORD PTR DS:[EDI]
00571281 E8 E2FCFFFF CALL AutoRunD.00570F68
00571286 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00571289 50 PUSH EAX
0057128A 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C]
0057128E 50 PUSH EAX
0057128F 6A 01 PUSH 1 ; //标准MD5为7
00571291 68 AF0F7CF5 PUSH F57C0FAF
00571296 8BC3 MOV EAX,EBX
00571298 8B0F MOV ECX,DWORD PTR DS:[EDI]
0057129A 8B16 MOV EDX,DWORD PTR DS:[ESI]
0057129C E8 C7FCFFFF CALL AutoRunD.00570F68
005712A1 8B07 MOV EAX,DWORD PTR DS:[EDI]
005712A3 50 PUSH EAX
005712A4 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30]
005712A8 50 PUSH EAX
005712A9 6A 0B PUSH 0B ; //标准MD5为0C
005712AB 68 2AC68747 PUSH 4787C62A
005712B0 8BC5 MOV EAX,EBP
005712B2 8B0E MOV ECX,DWORD PTR DS:[ESI]
005712B4 8B13 MOV EDX,DWORD PTR DS:[EBX]
005712B6 E8 ADFCFFFF CALL AutoRunD.00570F68
005712BB 8B06 MOV EAX,DWORD PTR DS:[ESI]
005712BD 50 PUSH EAX
005712BE 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34]
005712C2 50 PUSH EAX
005712C3 6A 15 PUSH 15 ; //标准MD5为11
005712C5 68 134630A8 PUSH A8304613
005712CA 8BC7 MOV EAX,EDI
005712CC 8B0B MOV ECX,DWORD PTR DS:[EBX]
005712CE 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005712D1 E8 92FCFFFF CALL AutoRunD.00570F68
005712D6 8B03 MOV EAX,DWORD PTR DS:[EBX]
005712D8 50 PUSH EAX
005712D9 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38]
005712DD 50 PUSH EAX
005712DE 6A 16 PUSH 16
005712E0 68 019546FD PUSH FD469501
005712E5 8BC6 MOV EAX,ESI
005712E7 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
005712EA 8B17 MOV EDX,DWORD PTR DS:[EDI]
005712EC E8 77FCFFFF CALL AutoRunD.00570F68
005712F1 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
005712F4 50 PUSH EAX
005712F5 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C]
005712F9 50 PUSH EAX
005712FA 6A 01 PUSH 1 ; //标准MD5为7
005712FC 68 D8988069 PUSH 698098D8
00571301 8BC3 MOV EAX,EBX
00571303 8B0F MOV ECX,DWORD PTR DS:[EDI]
00571305 8B16 MOV EDX,DWORD PTR DS:[ESI]
00571307 E8 5CFCFFFF CALL AutoRunD.00570F68
0057130C 8B07 MOV EAX,DWORD PTR DS:[EDI]
0057130E 50 PUSH EAX
0057130F 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40]
00571313 50 PUSH EAX
00571314 6A 0B PUSH 0B ; //标准MD5为0C
00571316 68 AFF7448B PUSH 8B44F7AF
0057131B 8BC5 MOV EAX,EBP
0057131D 8B0E MOV ECX,DWORD PTR DS:[ESI]
0057131F 8B13 MOV EDX,DWORD PTR DS:[EBX]
00571321 E8 42FCFFFF CALL AutoRunD.00570F68
00571326 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571328 50 PUSH EAX
00571329 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44]
0057132D 50 PUSH EAX
0057132E 6A 15 PUSH 15 ; //标准MD5为11
00571330 68 B15BFFFF PUSH FFFF5BB1
00571335 8BC7 MOV EAX,EDI
00571337 8B0B MOV ECX,DWORD PTR DS:[EBX]
00571339 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
0057133C E8 27FCFFFF CALL AutoRunD.00570F68
00571341 8B03 MOV EAX,DWORD PTR DS:[EBX]
00571343 50 PUSH EAX
00571344 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48]
00571348 50 PUSH EAX
00571349 6A 16 PUSH 16
0057134B 68 4AC5DAEA PUSH EADAC54A ; //标准MD5为895CD7BE
00571350 8BC6 MOV EAX,ESI
00571352 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
00571355 8B17 MOV EDX,DWORD PTR DS:[EDI]
00571357 E8 0CFCFFFF CALL AutoRunD.00570F68
0057135C 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
0057135F 50 PUSH EAX
00571360 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C]
00571364 50 PUSH EAX
00571365 6A 01 PUSH 1 ; //标准MD5为7
00571367 68 2211906B PUSH 6B901122
0057136C 8BC3 MOV EAX,EBX
0057136E 8B0F MOV ECX,DWORD PTR DS:[EDI]
00571370 8B16 MOV EDX,DWORD PTR DS:[ESI]
00571372 E8 F1FBFFFF CALL AutoRunD.00570F68
00571377 8B07 MOV EAX,DWORD PTR DS:[EDI]
00571379 50 PUSH EAX
0057137A 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50]
0057137E 50 PUSH EAX
0057137F 6A 0B PUSH 0B ; //标准MD5为0C
00571381 68 937198FD PUSH FD987193
00571386 8BC5 MOV EAX,EBP
00571388 8B0E MOV ECX,DWORD PTR DS:[ESI]
0057138A 8B13 MOV EDX,DWORD PTR DS:[EBX]
0057138C E8 D7FBFFFF CALL AutoRunD.00570F68
00571391 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571393 50 PUSH EAX
00571394 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54]
00571398 50 PUSH EAX
00571399 6A 15 PUSH 15 ; //标准MD5为11
0057139B 68 8E4379A6 PUSH A679438E
005713A0 8BC7 MOV EAX,EDI
005713A2 8B0B MOV ECX,DWORD PTR DS:[EBX]
005713A4 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005713A7 E8 BCFBFFFF CALL AutoRunD.00570F68
005713AC 8B03 MOV EAX,DWORD PTR DS:[EBX]
005713AE 50 PUSH EAX
005713AF 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58]
005713B3 50 PUSH EAX
005713B4 6A 16 PUSH 16
005713B6 68 2108B449 PUSH 49B40821
005713BB 8BC6 MOV EAX,ESI
005713BD 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
005713C0 8B17 MOV EDX,DWORD PTR DS:[EDI]
005713C2 E8 A1FBFFFF CALL AutoRunD.00570F68
005713C7 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
005713CA 50 PUSH EAX
005713CB 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20]
005713CF 50 PUSH EAX
005713D0 6A 06 PUSH 6 ; //标准MD5为5
005713D2 68 62251EF6 PUSH F61E2562
005713D7 8BC3 MOV EAX,EBX
005713D9 8B0F MOV ECX,DWORD PTR DS:[EDI]
005713DB 8B16 MOV EDX,DWORD PTR DS:[ESI]
005713DD E8 BAFBFFFF CALL AutoRunD.00570F9C
005713E2 8B07 MOV EAX,DWORD PTR DS:[EDI]
005713E4 50 PUSH EAX
005713E5 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34]
005713E9 50 PUSH EAX
005713EA 6A 09 PUSH 9
005713EC 68 40B340C0 PUSH C040B340
005713F1 8BC5 MOV EAX,EBP
005713F3 8B0E MOV ECX,DWORD PTR DS:[ESI]
005713F5 8B13 MOV EDX,DWORD PTR DS:[EBX]
005713F7 E8 A0FBFFFF CALL AutoRunD.00570F9C
005713FC 8B06 MOV EAX,DWORD PTR DS:[ESI]
005713FE 50 PUSH EAX
005713FF 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48]
00571403 50 PUSH EAX
00571404 6A 0A PUSH 0A ; //标准MD5为0E
00571406 68 515A5E26 PUSH 265E5A51
0057140B 8BC7 MOV EAX,EDI
0057140D 8B0B MOV ECX,DWORD PTR DS:[EBX]
0057140F 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
00571412 E8 85FBFFFF CALL AutoRunD.00570F9C
00571417 8B03 MOV EAX,DWORD PTR DS:[EBX]
00571419 50 PUSH EAX
0057141A 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C]
0057141E 50 PUSH EAX
0057141F 6A 14 PUSH 14
00571421 68 AAC7B6E9 PUSH E9B6C7AA
00571426 8BC6 MOV EAX,ESI
00571428 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
0057142B 8B17 MOV EDX,DWORD PTR DS:[EDI]
0057142D E8 6AFBFFFF CALL AutoRunD.00570F9C
00571432 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00571435 50 PUSH EAX
00571436 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30]
0057143A 50 PUSH EAX
0057143B 6A 06 PUSH 6 ; //标准MD5为5
0057143D 68 335522AA PUSH AA225533 ; //标准MD5为D62F105D
00571442 8BC3 MOV EAX,EBX
00571444 8B0F MOV ECX,DWORD PTR DS:[EDI]
00571446 8B16 MOV EDX,DWORD PTR DS:[ESI]
00571448 E8 4FFBFFFF CALL AutoRunD.00570F9C
0057144D 8B07 MOV EAX,DWORD PTR DS:[EDI]
0057144F 50 PUSH EAX
00571450 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44]
00571454 50 PUSH EAX
00571455 6A 09 PUSH 9
00571457 68 53144402 PUSH 2441453
0057145C 8BC5 MOV EAX,EBP
0057145E 8B0E MOV ECX,DWORD PTR DS:[ESI]
00571460 8B13 MOV EDX,DWORD PTR DS:[EBX]
00571462 E8 35FBFFFF CALL AutoRunD.00570F9C
00571467 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571469 50 PUSH EAX
0057146A 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58]
0057146E 50 PUSH EAX
0057146F 6A 08 PUSH 8 ; //标准MD5为0E
00571471 68 22AA66BB PUSH BB66AA22 ; //标准MD5为D8A1E681
00571476 8BC7 MOV EAX,EDI
00571478 8B0B MOV ECX,DWORD PTR DS:[EBX]
0057147A 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
0057147D E8 1AFBFFFF CALL AutoRunD.00570F9C
00571482 8B03 MOV EAX,DWORD PTR DS:[EBX]
00571484 50 PUSH EAX
00571485 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C]
00571489 50 PUSH EAX
0057148A 6A 14 PUSH 14
0057148C 68 BAAC3434 PUSH 3434ACBA ; //标准MD5为E7D3FBC8
00571491 8BC6 MOV EAX,ESI
00571493 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
00571496 8B17 MOV EDX,DWORD PTR DS:[EDI]
00571498 E8 FFFAFFFF CALL AutoRunD.00570F9C
0057149D 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
005714A0 50 PUSH EAX
005714A1 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40]
005714A5 50 PUSH EAX
005714A6 6A 06 PUSH 6 ; //标准MD5为5
005714A8 68 E6CDE121 PUSH 21E1CDE6
005714AD 8BC3 MOV EAX,EBX
005714AF 8B0F MOV ECX,DWORD PTR DS:[EDI]
005714B1 8B16 MOV EDX,DWORD PTR DS:[ESI]
005714B3 E8 E4FAFFFF CALL AutoRunD.00570F9C
005714B8 8B07 MOV EAX,DWORD PTR DS:[EDI]
005714BA 50 PUSH EAX
005714BB 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54]
005714BF 50 PUSH EAX
005714C0 6A 09 PUSH 9
005714C2 68 D60737C3 PUSH C33707D6
005714C7 8BC5 MOV EAX,EBP
005714C9 8B0E MOV ECX,DWORD PTR DS:[ESI]
005714CB 8B13 MOV EDX,DWORD PTR DS:[EBX]
005714CD E8 CAFAFFFF CALL AutoRunD.00570F9C
005714D2 8B06 MOV EAX,DWORD PTR DS:[ESI]
005714D4 50 PUSH EAX
005714D5 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28]
005714D9 50 PUSH EAX
005714DA 6A 0A PUSH 0A ; //标准MD5为0E
005714DC 68 870DD5F4 PUSH F4D50D87
005714E1 8BC7 MOV EAX,EDI
005714E3 8B0B MOV ECX,DWORD PTR DS:[EBX]
005714E5 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005714E8 E8 AFFAFFFF CALL AutoRunD.00570F9C
005714ED 8B03 MOV EAX,DWORD PTR DS:[EBX]
005714EF 50 PUSH EAX
005714F0 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C]
005714F4 50 PUSH EAX
005714F5 6A 14 PUSH 14
005714F7 68 ED145A45 PUSH 455A14ED
005714FC 8BC6 MOV EAX,ESI
005714FE 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
00571501 8B17 MOV EDX,DWORD PTR DS:[EDI]
00571503 E8 94FAFFFF CALL AutoRunD.00570F9C
00571508 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
0057150B 50 PUSH EAX
0057150C 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50]
00571510 50 PUSH EAX
00571511 6A 06 PUSH 6 ; //标准MD5为5
00571513 68 05E9E3A9 PUSH A9E3E905
00571518 8BC3 MOV EAX,EBX
0057151A 8B0F MOV ECX,DWORD PTR DS:[EDI]
0057151C 8B16 MOV EDX,DWORD PTR DS:[ESI]
0057151E E8 79FAFFFF CALL AutoRunD.00570F9C
00571523 8B07 MOV EAX,DWORD PTR DS:[EDI]
00571525 50 PUSH EAX
00571526 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
0057152A 50 PUSH EAX
0057152B 6A 09 PUSH 9
0057152D 68 F8A3EFFC PUSH FCEFA3F8
00571532 8BC5 MOV EAX,EBP
00571534 8B0E MOV ECX,DWORD PTR DS:[ESI]
00571536 8B13 MOV EDX,DWORD PTR DS:[EBX]
00571538 E8 5FFAFFFF CALL AutoRunD.00570F9C
0057153D 8B06 MOV EAX,DWORD PTR DS:[ESI]
0057153F 50 PUSH EAX
00571540 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38]
00571544 50 PUSH EAX
00571545 6A 0A PUSH 0A ; //标准MD5为0E
00571547 68 D9026F67 PUSH 676F02D9
0057154C 8BC7 MOV EAX,EDI
0057154E 8B0B MOV ECX,DWORD PTR DS:[EBX]
00571550 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
00571553 E8 44FAFFFF CALL AutoRunD.00570F9C
00571558 8B03 MOV EAX,DWORD PTR DS:[EBX]
0057155A 50 PUSH EAX
0057155B 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C]
0057155F 50 PUSH EAX
00571560 6A 14 PUSH 14
00571562 68 8A4C2A8D PUSH 8D2A4C8A
00571567 8BC6 MOV EAX,ESI
00571569 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
0057156C 8B17 MOV EDX,DWORD PTR DS:[EDI]
0057156E E8 29FAFFFF CALL AutoRunD.00570F9C
00571573 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00571576 50 PUSH EAX
00571577 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30]
0057157B 50 PUSH EAX
0057157C 6A 04 PUSH 4
0057157E 68 4239FAFF PUSH FFFA3942
00571583 8BC3 MOV EAX,EBX
00571585 8B0F MOV ECX,DWORD PTR DS:[EDI]
00571587 8B16 MOV EDX,DWORD PTR DS:[ESI]
00571589 E8 42FAFFFF CALL AutoRunD.00570FD0
0057158E 8B07 MOV EAX,DWORD PTR DS:[EDI]
00571590 50 PUSH EAX
00571591 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C]
00571595 50 PUSH EAX
00571596 6A 0B PUSH 0B
00571598 68 81F67187 PUSH 8771F681
0057159D 8BC5 MOV EAX,EBP
0057159F 8B0E MOV ECX,DWORD PTR DS:[ESI]
005715A1 8B13 MOV EDX,DWORD PTR DS:[EBX]
005715A3 E8 28FAFFFF CALL AutoRunD.00570FD0
005715A8 8B06 MOV EAX,DWORD PTR DS:[ESI]
005715AA 50 PUSH EAX
005715AB 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48]
005715AF 50 PUSH EAX
005715B0 6A 45 PUSH 45 ; //标准MD5为10
005715B2 68 22619D6D PUSH 6D9D6122
005715B7 8BC7 MOV EAX,EDI
005715B9 8B0B MOV ECX,DWORD PTR DS:[EBX]
005715BB 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005715BE E8 0DFAFFFF CALL AutoRunD.00570FD0
005715C3 8B03 MOV EAX,DWORD PTR DS:[EBX]
005715C5 50 PUSH EAX
005715C6 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54]
005715CA 50 PUSH EAX
005715CB 6A 17 PUSH 17
005715CD 68 0C38E5FD PUSH FDE5380C
005715D2 8BC6 MOV EAX,ESI
005715D4 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
005715D7 8B17 MOV EDX,DWORD PTR DS:[EDI]
005715D9 E8 F2F9FFFF CALL AutoRunD.00570FD0
005715DE 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
005715E1 50 PUSH EAX
005715E2 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20]
005715E6 50 PUSH EAX
005715E7 6A 04 PUSH 4
005715E9 68 44EABEA4 PUSH A4BEEA44
005715EE 8BC3 MOV EAX,EBX
005715F0 8B0F MOV ECX,DWORD PTR DS:[EDI]
005715F2 8B16 MOV EDX,DWORD PTR DS:[ESI]
005715F4 E8 D7F9FFFF CALL AutoRunD.00570FD0
005715F9 8B07 MOV EAX,DWORD PTR DS:[EDI]
005715FB 50 PUSH EAX
005715FC 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C]
00571600 50 PUSH EAX
00571601 6A 0B PUSH 0B
00571603 68 A9CFDE4B PUSH 4BDECFA9
00571608 8BC5 MOV EAX,EBP
0057160A 8B0E MOV ECX,DWORD PTR DS:[ESI]
0057160C 8B13 MOV EDX,DWORD PTR DS:[EBX]
0057160E E8 BDF9FFFF CALL AutoRunD.00570FD0
00571613 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571615 50 PUSH EAX
00571616 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38]
0057161A 50 PUSH EAX
0057161B 6A 13 PUSH 13 ; //标准MD5为10
0057161D 68 604BBBF6 PUSH F6BB4B60
00571622 8BC7 MOV EAX,EDI
00571624 8B0B MOV ECX,DWORD PTR DS:[EBX]
00571626 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
00571629 E8 A2F9FFFF CALL AutoRunD.00570FD0
0057162E 8B03 MOV EAX,DWORD PTR DS:[EBX]
00571630 50 PUSH EAX
00571631 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44]
00571635 50 PUSH EAX
00571636 6A 17 PUSH 17
00571638 68 70BCBFBE PUSH BEBFBC70
0057163D 8BC6 MOV EAX,ESI
0057163F 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
00571642 8B17 MOV EDX,DWORD PTR DS:[EDI]
00571644 E8 87F9FFFF CALL AutoRunD.00570FD0
00571649 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
0057164C 50 PUSH EAX
0057164D 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50]
00571651 50 PUSH EAX
00571652 6A 03 PUSH 3 ; //标准MD5为4
00571654 68 C67E9B28 PUSH 289B7EC6
00571659 8BC3 MOV EAX,EBX
0057165B 8B0F MOV ECX,DWORD PTR DS:[EDI]
0057165D 8B16 MOV EDX,DWORD PTR DS:[ESI]
0057165F E8 6CF9FFFF CALL AutoRunD.00570FD0
00571664 8B07 MOV EAX,DWORD PTR DS:[EDI]
00571666 50 PUSH EAX
00571667 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C]
0057166B 50 PUSH EAX
0057166C 6A 0B PUSH 0B
0057166E 68 FA27A1EA PUSH EAA127FA
00571673 8BC5 MOV EAX,EBP
00571675 8B0E MOV ECX,DWORD PTR DS:[ESI]
00571677 8B13 MOV EDX,DWORD PTR DS:[EBX]
00571679 E8 52F9FFFF CALL AutoRunD.00570FD0
0057167E 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571680 50 PUSH EAX
00571681 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28]
00571685 50 PUSH EAX
00571686 6A 13 PUSH 13 ; //标准MD5为10
00571688 68 8530EFD4 PUSH D4EF3085
0057168D 8BC7 MOV EAX,EDI
0057168F 8B0B MOV ECX,DWORD PTR DS:[EBX]
00571691 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
00571694 E8 37F9FFFF CALL AutoRunD.00570FD0
00571699 8B03 MOV EAX,DWORD PTR DS:[EBX]
0057169B 50 PUSH EAX
0057169C 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34]
005716A0 50 PUSH EAX
005716A1 6A 17 PUSH 17
005716A3 68 051D8804 PUSH 4881D05
005716A8 8BC6 MOV EAX,ESI
005716AA 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
005716AD 8B17 MOV EDX,DWORD PTR DS:[EDI]
005716AF E8 1CF9FFFF CALL AutoRunD.00570FD0
005716B4 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
005716B7 50 PUSH EAX
005716B8 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40]
005716BC 50 PUSH EAX
005716BD 6A 0D PUSH 0D ; //标准MD5为4
005716BF 68 39D0D4D9 PUSH D9D4D039
005716C4 8BC3 MOV EAX,EBX
005716C6 8B0F MOV ECX,DWORD PTR DS:[EDI]
005716C8 8B16 MOV EDX,DWORD PTR DS:[ESI]
005716CA E8 01F9FFFF CALL AutoRunD.00570FD0
005716CF 8B07 MOV EAX,DWORD PTR DS:[EDI]
005716D1 50 PUSH EAX
005716D2 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C]
005716D6 50 PUSH EAX
005716D7 6A 0B PUSH 0B
005716D9 68 E599DBE6 PUSH E6DB99E5
005716DE 8BC5 MOV EAX,EBP
005716E0 8B0E MOV ECX,DWORD PTR DS:[ESI]
005716E2 8B13 MOV EDX,DWORD PTR DS:[EBX]
005716E4 E8 E7F8FFFF CALL AutoRunD.00570FD0
005716E9 8B06 MOV EAX,DWORD PTR DS:[ESI]
005716EB 50 PUSH EAX
005716EC 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58]
005716F0 50 PUSH EAX
005716F1 6A 13 PUSH 13 ; //标准MD5为10
005716F3 68 F87CA21F PUSH 1FA27CF8
005716F8 8BC7 MOV EAX,EDI
005716FA 8B0B MOV ECX,DWORD PTR DS:[EBX]
005716FC 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005716FF E8 CCF8FFFF CALL AutoRunD.00570FD0
00571704 8B03 MOV EAX,DWORD PTR DS:[EBX]
00571706 50 PUSH EAX
00571707 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
0057170B 50 PUSH EAX
0057170C 6A 17 PUSH 17
0057170E 68 6556ACC4 PUSH C4AC5665
00571713 8BC6 MOV EAX,ESI
00571715 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
00571718 8B17 MOV EDX,DWORD PTR DS:[EDI]
0057171A E8 B1F8FFFF CALL AutoRunD.00570FD0
0057171F 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00571722 50 PUSH EAX
00571723 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C]
00571727 50 PUSH EAX
00571728 6A 06 PUSH 6
0057172A 68 442229F4 PUSH F4292244
0057172F 8BC3 MOV EAX,EBX
00571731 8B0F MOV ECX,DWORD PTR DS:[EDI]
00571733 8B16 MOV EDX,DWORD PTR DS:[ESI]
00571735 E8 CAF8FFFF CALL AutoRunD.00571004
0057173A 8B07 MOV EAX,DWORD PTR DS:[EDI]
0057173C 50 PUSH EAX
0057173D 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38]
00571741 50 PUSH EAX
00571742 6A 0A PUSH 0A
00571744 68 97FF2A43 PUSH 432AFF97
00571749 8BC5 MOV EAX,EBP
0057174B 8B0E MOV ECX,DWORD PTR DS:[ESI]
0057174D 8B13 MOV EDX,DWORD PTR DS:[EBX]
0057174F E8 B0F8FFFF CALL AutoRunD.00571004
00571754 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571756 50 PUSH EAX
00571757 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54]
0057175B 50 PUSH EAX
0057175C 6A 0F PUSH 0F
0057175E 68 A72394AB PUSH AB9423A7
00571763 8BC7 MOV EAX,EDI
00571765 8B0B MOV ECX,DWORD PTR DS:[EBX]
00571767 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
0057176A E8 95F8FFFF CALL AutoRunD.00571004
0057176F 8B03 MOV EAX,DWORD PTR DS:[EBX]
00571771 50 PUSH EAX
00571772 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30]
00571776 50 PUSH EAX
00571777 6A 1D PUSH 1D ; //标准MD5为15
00571779 68 39A093FC PUSH FC93A039
0057177E 8BC6 MOV EAX,ESI
00571780 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
00571783 8B17 MOV EDX,DWORD PTR DS:[EDI]
00571785 E8 7AF8FFFF CALL AutoRunD.00571004
0057178A 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
0057178D 50 PUSH EAX
0057178E 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C]
00571792 50 PUSH EAX
00571793 6A 06 PUSH 6
00571795 68 C3595B65 PUSH 655B59C3
0057179A 8BC3 MOV EAX,EBX
0057179C 8B0F MOV ECX,DWORD PTR DS:[EDI]
0057179E 8B16 MOV EDX,DWORD PTR DS:[ESI]
005717A0 E8 5FF8FFFF CALL AutoRunD.00571004
005717A5 8B07 MOV EAX,DWORD PTR DS:[EDI]
005717A7 50 PUSH EAX
005717A8 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28]
005717AC 50 PUSH EAX
005717AD 6A 0A PUSH 0A
005717AF 68 92CC0C8F PUSH 8F0CCC92
005717B4 8BC5 MOV EAX,EBP
005717B6 8B0E MOV ECX,DWORD PTR DS:[ESI]
005717B8 8B13 MOV EDX,DWORD PTR DS:[EBX]
005717BA E8 45F8FFFF CALL AutoRunD.00571004
005717BF 8B06 MOV EAX,DWORD PTR DS:[ESI]
005717C1 50 PUSH EAX
005717C2 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44]
005717C6 50 PUSH EAX
005717C7 6A 0F PUSH 0F
005717C9 68 7DF4EFFF PUSH FFEFF47D
005717CE 8BC7 MOV EAX,EDI
005717D0 8B0B MOV ECX,DWORD PTR DS:[EBX]
005717D2 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005717D5 E8 2AF8FFFF CALL AutoRunD.00571004
005717DA 8B03 MOV EAX,DWORD PTR DS:[EBX]
005717DC 50 PUSH EAX
005717DD 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20]
005717E1 50 PUSH EAX
005717E2 6A 1D PUSH 1D ; //标准MD5为15
005717E4 68 D15D8485 PUSH 85845DD1
005717E9 8BC6 MOV EAX,ESI
005717EB 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
005717EE 8B17 MOV EDX,DWORD PTR DS:[EDI]
005717F0 E8 0FF8FFFF CALL AutoRunD.00571004
005717F5 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
005717F8 50 PUSH EAX
005717F9 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C]
005717FD 50 PUSH EAX
005717FE 6A 06 PUSH 6
00571800 68 4F7EA86F PUSH 6FA87E4F
00571805 8BC3 MOV EAX,EBX
00571807 8B0F MOV ECX,DWORD PTR DS:[EDI]
00571809 8B16 MOV EDX,DWORD PTR DS:[ESI]
0057180B E8 F4F7FFFF CALL AutoRunD.00571004
00571810 8B07 MOV EAX,DWORD PTR DS:[EDI]
00571812 50 PUSH EAX
00571813 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58]
00571817 50 PUSH EAX
00571818 6A 0A PUSH 0A
0057181A 68 E0E62CFE PUSH FE2CE6E0
0057181F 8BC5 MOV EAX,EBP
00571821 8B0E MOV ECX,DWORD PTR DS:[ESI]
00571823 8B13 MOV EDX,DWORD PTR DS:[EBX]
00571825 E8 DAF7FFFF CALL AutoRunD.00571004
0057182A 8B06 MOV EAX,DWORD PTR DS:[ESI]
0057182C 50 PUSH EAX
0057182D 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34]
00571831 50 PUSH EAX
00571832 6A 12 PUSH 12 ; //标准MD5为0F
00571834 68 144301A3 PUSH A3014314
00571839 8BC7 MOV EAX,EDI
0057183B 8B0B MOV ECX,DWORD PTR DS:[EBX]
0057183D 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
00571840 E8 BFF7FFFF CALL AutoRunD.00571004
00571845 8B03 MOV EAX,DWORD PTR DS:[EBX]
00571847 50 PUSH EAX
00571848 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50]
0057184C 50 PUSH EAX
0057184D 6A 1D PUSH 1D ; //标准MD5为15
0057184F 68 A111084E PUSH 4E0811A1
00571854 8BC6 MOV EAX,ESI
00571856 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
00571859 8B17 MOV EDX,DWORD PTR DS:[EDI]
0057185B E8 A4F7FFFF CALL AutoRunD.00571004
00571860 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00571863 50 PUSH EAX
00571864 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C]
00571868 50 PUSH EAX
00571869 6A 06 PUSH 6
0057186B 68 827E53F7 PUSH F7537E82
00571870 8BC3 MOV EAX,EBX
00571872 8B0F MOV ECX,DWORD PTR DS:[EDI]
00571874 8B16 MOV EDX,DWORD PTR DS:[ESI]
00571876 E8 89F7FFFF CALL AutoRunD.00571004
0057187B 8B07 MOV EAX,DWORD PTR DS:[EDI]
0057187D 50 PUSH EAX
0057187E 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48]
00571882 50 PUSH EAX
00571883 6A 0A PUSH 0A
00571885 68 35F23ABD PUSH BD3AF235
0057188A 8BC5 MOV EAX,EBP
0057188C 8B0E MOV ECX,DWORD PTR DS:[ESI]
0057188E 8B13 MOV EDX,DWORD PTR DS:[EBX]
00571890 E8 6FF7FFFF CALL AutoRunD.00571004
00571895 8B06 MOV EAX,DWORD PTR DS:[ESI]
00571897 50 PUSH EAX
00571898 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
0057189C 50 PUSH EAX
0057189D 6A 19 PUSH 19 ; //标准MD5为0F
0057189F 68 BBD2D72A PUSH 2AD7D2BB
005718A4 8BC7 MOV EAX,EDI
005718A6 8B0B MOV ECX,DWORD PTR DS:[EBX]
005718A8 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005718AB E8 54F7FFFF CALL AutoRunD.00571004
005718B0 8B03 MOV EAX,DWORD PTR DS:[EBX]
005718B2 50 PUSH EAX
005718B3 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40]
005718B7 50 PUSH EAX
005718B8 6A 1D PUSH 1D ; //标准MD5为15
005718BA 68 91D386EB PUSH EB86D391
005718BF 8BC6 MOV EAX,ESI
005718C1 8B4D 00 MOV ECX,DWORD PTR SS:[EBP]
005718C4 8B17 MOV EDX,DWORD PTR DS:[EDI]
005718C6 E8 39F7FFFF CALL AutoRunD.00571004
005718CB 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
005718CF 8B13 MOV EDX,DWORD PTR DS:[EBX]
005718D1 0110 ADD DWORD PTR DS:[EAX],EDX
005718D3 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
005718D7 8B16 MOV EDX,DWORD PTR DS:[ESI]
005718D9 0150 04 ADD DWORD PTR DS:[EAX+4],EDX
005718DC 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
005718E0 8B17 MOV EDX,DWORD PTR DS:[EDI]
005718E2 0150 08 ADD DWORD PTR DS:[EAX+8],EDX
005718E5 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
005718E9 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
005718EC 0150 0C ADD DWORD PTR DS:[EAX+C],EDX
005718EF 83C4 58 ADD ESP,58
005718F2 5D POP EBP
005718F3 5F POP EDI
005718F4 5E POP ESI
005718F5 5B POP EBX
005718F6 C3 RETN
**************************************************************
【破解总结】
--------------------------------------------------------------
【算法总结】
1.Serial的1-3位必须是"002"
2.Code=到大写(变形MD5(Serial+Name))
--------------------------------------------------------------
【算法注册机】
注册机源代码就不贴了，太长了，有兴趣的朋友，可以到http://bbs.pediy.com/showthread.php?t=73152
按上面变形MD5与标准MD5的区别改一下就可以了
--------------------------------------------------------------
【注册信息】
Name:tianxj
Serial:002
Code:CEBBC095B64DD03330BB1DC23A5EE735
保存在AutoRunDS.ini
--------------------------------------------------------------
感谢飘云老大、野猫III老大、Nisy老大以及很多前辈们的学习教程以及所有帮助过我的论坛兄弟姐妹们！谢谢
--------------------------------------------------------------
【版权声明】破文是学习的手记，兴趣是成功的源泉；本破文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!
- 标 题：AutoRun Design Specialty 9.1.1.21算法分析(变形MD5)
- 作 者：PYGtianxj
- 时 间：2009-02-11 00:28
- 链 接：http://bbs.pediy.com/showthread.php?t=81783