Koan WMA 批量制作编辑器 1.0寻码记
【破文标题】Koan WMA 批量制作编辑器 1.0寻码记【破文作者】lzq1973
【作者邮箱】[email protected]
【作者主页】http://my.winzheng.com/?455397
【破解工具】OD、PEiD
【破解平台】WinXP
【软件名称】Koan WMA 批量制作编辑器 1.0
【软件大小】1145KB
【原版下载】http://www.newhua.com/soft/55617.htm
【保护方式】壳、注册码
【软件简介】《Koan WMA 批量制作编辑器》是慧晓多媒体系列软件之一，主要功能是制作WMA音乐文件以及编辑WMA标签。软件采用了Windows Audio 9编码引擎，能高速制作WMA，高质量的网络音乐大批量处理，支持VBR编码，更支持无损WMA编码，完美音质轻松实现。
软件除了支持将WAV和MP3文件转换为WMA外，还支持将不同码率的WMA重新编码为一致码率的WMA，支持ID3v1和ID3v2标签写入,具有克隆源目录结构和格式化重命名等特色功能，大批量压缩管理不用愁。
同时，该软件是绿色软件，无需安装，直接使用，操作界面实而不华，精致简洁，是广大音乐爱好者必不可少的WMA制作工具，同时也适合中小型音乐网站使用。
【破解声明】俺是只小小鸟，纯为学习，愿与大家分享！
------------------------------------------------------------------------
PEID查之为ASPack 2.12 -> Alexey Solodovnikov，脱后无法运行（估计有自校验），懒的去找了（其实无从下手）。OD载入，于是带壳分析来到这里，
004428F0 55 push ebp
004428F1 8BEC mov ebp, esp
004428F3 83EC 0C sub esp, 0C
004428F6 68 B6324000 push 004032B6 ; jmp 到 msvbvm60.__vbaExceptHandler
004428FB 64:A1 00000000mov eax, fs:
00442901 50 push eax
00442902 64:8925 0000000>mov fs:, esp
00442909 81EC C8000000 sub esp, 0C8
0044290F 53 push ebx
00442910 56 push esi
00442911 57 push edi
00442912 8965 F4 mov , esp
00442915 C745 F8 6032400>mov dword ptr , 00403260
0044291C 8B7D 08 mov edi,
0044291F 8BC7 mov eax, edi
00442921 83E0 01 and eax, 1
00442924 8945 FC mov , eax
00442927 83E7 FE and edi, FFFFFFFE
0044292A 57 push edi
0044292B 897D 08 mov , edi
0044292E 8B0F mov ecx,
00442930 FF51 04 call
00442933 8B17 mov edx,
00442935 33F6 xor esi, esi
00442937 57 push edi
00442938 8975 E8 mov , esi
0044293B 8975 E4 mov , esi
0044293E 8975 E0 mov , esi
00442941 8975 DC mov , esi
00442944 8975 D8 mov , esi
00442947 8975 D4 mov , esi
0044294A 8975 D0 mov , esi
0044294D 8975 CC mov , esi
00442950 8975 C8 mov , esi
00442953 8975 B8 mov , esi
00442956 8975 A8 mov , esi
00442959 8975 98 mov , esi
0044295C 8975 88 mov , esi
0044295F 89B5 78FFFFFF mov , esi
00442965 89B5 68FFFFFF mov , esi
0044296B FF92 0C030000 call
00442971 50 push eax
00442972 8D45 C8 lea eax,
00442975 50 push eax
00442976 FF15 AC104000 call ; msvbvm60.__vbaObjSet
0044297C 8BD8 mov ebx, eax
0044297E 8D55 E4 lea edx,
00442981 52 push edx
00442982 53 push ebx
00442983 8B0B mov ecx,
00442985 FF91 A0000000 call
0044298B 3BC6 cmp eax, esi
0044298D DBE2 fclex
0044298F 7D 12 jge short 004429A3
00442991 68 A0000000 push 0A0
00442996 68 F0924000 push 004092F0
0044299B 53 push ebx
0044299C 50 push eax
0044299D FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
004429A3 8D45 B8 lea eax,
004429A6 6A 0D push 0D
004429A8 50 push eax
004429A9 FF15 C0114000 call ; msvbvm60.rtcVarBstrFromAnsi
004429AF 56 push esi
004429B0 6A FF push -1
004429B2 6A 01 push 1
004429B4 8D4D B8 lea ecx,
004429B7 68 40974000 push 00409740
004429BC 8D55 E0 lea edx,
004429BF 51 push ecx
004429C0 52 push edx
004429C1 FF15 DC114000 call ; msvbvm60.__vbaStrVarVal
004429C7 8B1D 98114000 mov ebx, ; msvbvm60.rtcReplace
004429CD 50 push eax
004429CE 8B45 E4 mov eax,
004429D1 50 push eax
004429D2 FFD3 call ebx
004429D4 8B35 9C124000 mov esi, ; msvbvm60.__vbaStrMove
004429DA 8BD0 mov edx, eax
004429DC 8D4D D0 lea ecx,
004429DF FFD6 call esi
004429E1 8B55 D0 mov edx,
004429E4 6A 00 push 0
004429E6 6A FF push -1
004429E8 6A 01 push 1
004429EA 68 40974000 push 00409740
004429EF 68 5C964000 push 0040965C
004429F4 8D4D DC lea ecx,
004429F7 C745 D0 0000000>mov dword ptr , 0
004429FE FFD6 call esi
00442A00 50 push eax
00442A01 FFD3 call ebx
00442A03 8BD0 mov edx, eax
00442A05 8D4D CC lea ecx,
00442A08 FFD6 call esi
00442A0A 8D4D A8 lea ecx,
00442A0D 6A 00 push 0
00442A0F 51 push ecx
00442A10 FF15 C0114000 call ; msvbvm60.rtcVarBstrFromAnsi
00442A16 8B55 CC mov edx,
00442A19 6A 00 push 0
00442A1B 6A FF push -1
00442A1D 6A 01 push 1
00442A1F 8D45 A8 lea eax,
00442A22 68 40974000 push 00409740
00442A27 8D4D D4 lea ecx,
00442A2A 50 push eax
00442A2B 51 push ecx
00442A2C 8995 2CFFFFFF mov , edx
00442A32 C745 CC 0000000>mov dword ptr , 0
00442A39 FF15 DC114000 call ; msvbvm60.__vbaStrVarVal
00442A3F 8B95 2CFFFFFF mov edx,
00442A45 50 push eax
00442A46 8D4D D8 lea ecx,
00442A49 FFD6 call esi
00442A4B 50 push eax
00442A4C FFD3 call ebx
00442A4E 8BD0 mov edx, eax
00442A50 8D4D E8 lea ecx,
00442A53 FFD6 call esi
00442A55 8D55 CC lea edx,
00442A58 8D45 D0 lea eax,
00442A5B 52 push edx
00442A5C 8D4D D4 lea ecx,
00442A5F 50 push eax
00442A60 8D55 D8 lea edx,
00442A63 51 push ecx
00442A64 8D45 DC lea eax,
00442A67 52 push edx
00442A68 8D4D E0 lea ecx,
00442A6B 50 push eax
00442A6C 8D55 E4 lea edx,
00442A6F 51 push ecx
00442A70 52 push edx
00442A71 6A 07 push 7
00442A73 FF15 24124000 call ; msvbvm60.__vbaFreeStrList
00442A79 83C4 20 add esp, 20
00442A7C 8D4D C8 lea ecx,
00442A7F FF15 EC124000 call ; msvbvm60.__vbaFreeObj
00442A85 8D45 A8 lea eax,
00442A88 8D4D B8 lea ecx,
00442A8B 50 push eax
00442A8C 51 push ecx
00442A8D 6A 02 push 2
00442A8F FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00442A95 8B17 mov edx,
00442A97 83C4 0C add esp, 0C
00442A9A 57 push edi
00442A9B FF92 00030000 call
00442AA1 50 push eax
00442AA2 8D45 C8 lea eax,
00442AA5 50 push eax
00442AA6 FF15 AC104000 call ; msvbvm60.__vbaObjSet
00442AAC 8BD8 mov ebx, eax
00442AAE 8D55 E4 lea edx,
00442AB1 52 push edx
00442AB2 53 push ebx
00442AB3 8B0B mov ecx,
00442AB5 FF91 A0000000 call
00442ABB 85C0 test eax, eax
00442ABD DBE2 fclex
00442ABF 7D 12 jge short 00442AD3
00442AC1 68 A0000000 push 0A0
00442AC6 68 F0924000 push 004092F0
00442ACB 53 push ebx
00442ACC 50 push eax
00442ACD FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
00442AD3 8B55 E4 mov edx,
00442AD6 8D4D E0 lea ecx,
00442AD9 C745 E4 0000000>mov dword ptr , 0
00442AE0 FFD6 call esi
00442AE2 8B45 E8 mov eax,
00442AE5 8D4D E0 lea ecx,
00442AE8 50 push eax
00442AE9 51 push ecx
00442AEA E8 B14CFFFF call 004377A0 ; 注册算法，关键处
00442AEF 8BD0 mov edx, eax ; 明码比较(UNICODE "C202A-EF995-5A58E-1B6EE-0D9D1-880BC")
00442AF1 8D4D DC lea ecx,
00442AF4 FFD6 call esi
00442AF6 50 push eax
00442AF7 FF15 1C114000 call ; msvbvm60.__vbaStrCmp
00442AFD 8BD8 mov ebx, eax
00442AFF 8D55 DC lea edx,
00442B02 F7DB neg ebx
00442B04 1BDB sbb ebx, ebx
00442B06 8D45 E0 lea eax,
00442B09 52 push edx
00442B0A 50 push eax
00442B0B F7DB neg ebx
00442B0D 6A 02 push 2
00442B0F F7DB neg ebx
00442B11 FF15 24124000 call ; msvbvm60.__vbaFreeStrList
00442B17 83C4 0C add esp, 0C
00442B1A 8D4D C8 lea ecx,
00442B1D FF15 EC124000 call ; msvbvm60.__vbaFreeObj
00442B23 66:85DB test bx, bx
00442B26 0F84 8C000000 je 00442BB8
00442B2C 8B35 68124000 mov esi, ; msvbvm60.__vbaVarDup
00442B32 B9 04000280 mov ecx, 80020004
00442B37 894D 90 mov , ecx
00442B3A B8 0A000000 mov eax, 0A
00442B3F 894D A0 mov , ecx
00442B42 BF 08000000 mov edi, 8
00442B47 8D95 68FFFFFF lea edx,
00442B4D 8D4D A8 lea ecx,
00442B50 8945 88 mov , eax
00442B53 8945 98 mov , eax
00442B56 C785 70FFFFFF 6>mov dword ptr , 0040C260
00442B60 89BD 68FFFFFF mov , edi
00442B66 FFD6 call esi
00442B68 8D95 78FFFFFF lea edx,
00442B6E 8D4D B8 lea ecx,
00442B71 C745 80 1CC2400>mov dword ptr , 0040C21C
00442B78 89BD 78FFFFFF mov , edi
00442B7E FFD6 call esi
00442B80 8D4D 88 lea ecx,
00442B83 8D55 98 lea edx,
00442B86 51 push ecx
00442B87 8D45 A8 lea eax,
00442B8A 52 push edx
00442B8B 50 push eax
00442B8C 8D4D B8 lea ecx,
00442B8F 6A 40 push 40
00442B91 51 push ecx
00442B92 FF15 9C104000 call ; msvbvm60.rtcMsgBox
00442B98 8D55 88 lea edx,
00442B9B 8D45 98 lea eax,
00442B9E 52 push edx
00442B9F 8D4D A8 lea ecx,
00442BA2 50 push eax
00442BA3 8D55 B8 lea edx,
00442BA6 51 push ecx
00442BA7 52 push edx
00442BA8 6A 04 push 4
00442BAA FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00442BB0 83C4 14 add esp, 14
00442BB3 E9 F2000000 jmp 00442CAA
00442BB8 8B07 mov eax,
00442BBA 57 push edi
00442BBB FF90 0C030000 call
00442BC1 8D4D C8 lea ecx,
00442BC4 50 push eax
00442BC5 51 push ecx
00442BC6 FF15 AC104000 call ; msvbvm60.__vbaObjSet
00442BCC 8BF8 mov edi, eax
00442BCE 8D45 E4 lea eax,
00442BD1 50 push eax
00442BD2 57 push edi
00442BD3 8B17 mov edx,
00442BD5 FF92 A0000000 call
00442BDB 85C0 test eax, eax
00442BDD DBE2 fclex
00442BDF 7D 12 jge short 00442BF3
00442BE1 68 A0000000 push 0A0
00442BE6 68 F0924000 push 004092F0
00442BEB 57 push edi
00442BEC 50 push eax
00442BED FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
00442BF3 8B55 E4 mov edx,
00442BF6 8D4D E0 lea ecx,
00442BF9 C745 E4 0000000>mov dword ptr , 0
00442C00 FFD6 call esi
00442C02 8D4D E0 lea ecx,
00442C05 51 push ecx
00442C06 E8 E53DFFFF call 004369F0
00442C0B 8D4D E0 lea ecx,
00442C0E FF15 F0124000 call ; msvbvm60.__vbaFreeStr
00442C14 8D4D C8 lea ecx,
00442C17 FF15 EC124000 call ; msvbvm60.__vbaFreeObj
00442C1D 8B35 68124000 mov esi, ; msvbvm60.__vbaVarDup
00442C23 B9 04000280 mov ecx, 80020004
00442C28 894D 90 mov , ecx
00442C2B B8 0A000000 mov eax, 0A
00442C30 894D A0 mov , ecx
00442C33 BF 08000000 mov edi, 8
00442C38 8D95 68FFFFFF lea edx,
00442C3E 8D4D A8 lea ecx,
00442C41 8945 88 mov , eax
00442C44 8945 98 mov , eax
00442C47 C785 70FFFFFF B>mov dword ptr , 0040C2B4
00442C51 89BD 68FFFFFF mov , edi
00442C57 FFD6 call esi
00442C59 8D95 78FFFFFF lea edx,
00442C5F 8D4D B8 lea ecx,
00442C62 C745 80 78C2400>mov dword ptr , 0040C278
00442C69 89BD 78FFFFFF mov , edi
00442C6F FFD6 call esi
00442C71 8D55 88 lea edx,
00442C74 8D45 98 lea eax,
00442C77 52 push edx
00442C78 8D4D A8 lea ecx,
00442C7B 50 push eax
00442C7C 51 push ecx
00442C7D 8D55 B8 lea edx,
00442C80 6A 40 push 40
00442C82 52 push edx
00442C83 FF15 9C104000 call ; msvbvm60.rtcMsgBox
00442C89 8D45 88 lea eax,
00442C8C 8D4D 98 lea ecx,
00442C8F 50 push eax
00442C90 8D55 A8 lea edx,
00442C93 51 push ecx
00442C94 8D45 B8 lea eax,
00442C97 52 push edx
00442C98 50 push eax
00442C99 6A 04 push 4
00442C9B FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00442CA1 83C4 14 add esp, 14
00442CA4 FF15 3C104000 call ; msvbvm60.__vbaEnd
00442CAA C745 FC 0000000>mov dword ptr , 0
00442CB1 68 0E2D4400 push 00442D0E
00442CB6 EB 4C jmp short 00442D04
00442CB8 8D4D CC lea ecx,
00442CBB 8D55 D0 lea edx,
00442CBE 51 push ecx
00442CBF 8D45 D4 lea eax,
00442CC2 52 push edx
00442CC3 8D4D D8 lea ecx,
00442CC6 50 push eax
00442CC7 8D55 DC lea edx,
00442CCA 51 push ecx
00442CCB 8D45 E0 lea eax,
00442CCE 52 push edx
00442CCF 8D4D E4 lea ecx,
00442CD2 50 push eax
00442CD3 51 push ecx
00442CD4 6A 07 push 7
00442CD6 FF15 24124000 call ; msvbvm60.__vbaFreeStrList
00442CDC 83C4 20 add esp, 20
00442CDF 8D4D C8 lea ecx,
00442CE2 FF15 EC124000 call ; msvbvm60.__vbaFreeObj
00442CE8 8D55 88 lea edx,
00442CEB 8D45 98 lea eax,
00442CEE 52 push edx
00442CEF 8D4D A8 lea ecx,
00442CF2 50 push eax
00442CF3 8D55 B8 lea edx,
00442CF6 51 push ecx
00442CF7 52 push edx
00442CF8 6A 04 push 4
00442CFA FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00442D00 83C4 14 add esp, 14
00442D03 C3 retn
00442D04 8D4D E8 lea ecx,
00442D07 FF15 F0124000 call ; msvbvm60.__vbaFreeStr
00442D0D C3 retn
00442D0E 8B45 08 mov eax,
00442D11 50 push eax
00442D12 8B08 mov ecx,
00442D14 FF51 08 call
00442D17 8B45 FC mov eax,
00442D1A 8B4D EC mov ecx,
00442D1D 5F pop edi
00442D1E 5E pop esi
00442D1F 64:890D 0000000>mov fs:, ecx
00442D26 5B pop ebx
00442D27 8BE5 mov esp, ebp
00442D29 5D pop ebp
00442D2A C2 0400 retn 4
----------------------- 00442AEA E8 B14CFFFF call 004377A0 -----------------
004377A0 55 push ebp
004377A1 8BEC mov ebp, esp
004377A3 83EC 0C sub esp, 0C
004377A6 68 B6324000 push 004032B6 ; jmp 到 msvbvm60.__vbaExceptHandler
004377AB 64:A1 00000000mov eax, fs:
004377B1 50 push eax
004377B2 64:8925 0000000>mov fs:, esp
004377B9 81EC C4000000 sub esp, 0C4
004377BF 53 push ebx
004377C0 56 push esi
004377C1 57 push edi
004377C2 8965 F4 mov , esp
004377C5 C745 F8 282B400>mov dword ptr , 00402B28
004377CC 6A 08 push 8
004377CE 8D45 CC lea eax,
004377D1 33DB xor ebx, ebx
004377D3 68 5CB14000 push 0040B15C
004377D8 50 push eax
004377D9 895D E8 mov , ebx
004377DC 895D E4 mov , ebx
004377DF 895D C4 mov , ebx
004377E2 895D C0 mov , ebx
004377E5 895D BC mov , ebx
004377E8 895D B8 mov , ebx
004377EB 895D B4 mov , ebx
004377EE 895D B0 mov , ebx
004377F1 895D AC mov , ebx
004377F4 895D A8 mov , ebx
004377F7 895D A4 mov , ebx
004377FA 895D A0 mov , ebx
004377FD 895D 90 mov , ebx
00437800 895D 80 mov , ebx
00437803 899D 70FFFFFF mov , ebx
00437809 899D 6CFFFFFF mov , ebx
0043780F FF15 2C114000 call ; msvbvm60.__vbaAryConstruct2
00437815 68 103D4000 push 00403D10
0043781A FF15 74114000 call ; msvbvm60.__vbaNew
00437820 8D4D C4 lea ecx,
00437823 50 push eax
00437824 51 push ecx
00437825 FF15 AC104000 call ; msvbvm60.__vbaObjSet
0043782B E8 B0F0FFFF call 004368E0
00437830 8B35 9C124000 mov esi, ; msvbvm60.__vbaStrMove
00437836 8BD0 mov edx, eax
00437838 8D4D C0 lea ecx,
0043783B FFD6 call esi
0043783D 8D55 C0 lea edx,
00437840 52 push edx
00437841 E8 1AF8FFFF call 00437060
00437846 8BD0 mov edx, eax ; 机器码(UNICODE "51B92-B6EAF-30FE1-8CE6D-1E2C6-B401B")
00437848 8D4D E8 lea ecx,
0043784B FFD6 call esi
0043784D 8D4D C0 lea ecx,
00437850 FF15 F0124000 call ; msvbvm60.__vbaFreeStr
00437856 8B45 E8 mov eax,
00437859 8B3D 64104000 mov edi, ; msvbvm60.__vbaStrCat
0043785F 50 push eax
00437860 68 FCB04000 push 0040B0FC ; kwma
00437865 FFD7 call edi
00437867 8BD0 mov edx, eax
00437869 8D4D C0 lea ecx,
0043786C FFD6 call esi
0043786E 8B4D 08 mov ecx,
00437871 50 push eax
00437872 8B11 mov edx,
00437874 52 push edx
00437875 FFD7 call edi
00437877 8BD0 mov edx, eax ; (UNICODE "[email protected]")
00437879 8D4D BC lea ecx,
0043787C FFD6 call esi
0043787E 8B45 C4 mov eax,
00437881 8D55 B8 lea edx,
00437884 52 push edx
00437885 8D55 BC lea edx,
00437888 8B08 mov ecx,
0043788A 52 push edx
0043788B 50 push eax
0043788C FF51 1C call
0043788F 3BC3 cmp eax, ebx
00437891 DBE2 fclex ; SHA256加密
00437893 7D 12 jge short 004378A7
00437895 8B4D C4 mov ecx,
00437898 6A 1C push 1C
0043789A 68 50B04000 push 0040B050
0043789F 51 push ecx
004378A0 50 push eax
004378A1 FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
004378A7 8B45 B8 mov eax, ; (UNICODE "c202abd287a544dd1a7ea6ab1b8d255561d55663619ad1870fd84aed6f7c3508")
004378AA 8D55 90 lea edx,
004378AD 8945 98 mov , eax
004378B0 8D45 80 lea eax,
004378B3 52 push edx
004378B4 50 push eax
004378B5 895D B8 mov , ebx
004378B8 C745 90 0800000>mov dword ptr , 8
004378BF FF15 14114000 call ; msvbvm60.rtcUpperCaseVar
004378C5 8D4D 80 lea ecx,
004378C8 6A 05 push 5
004378CA 8D95 70FFFFFF lea edx,
004378D0 51 push ecx
004378D1 52 push edx
004378D2 FF15 90124000 call ; msvbvm60.rtcLeftCharVar
004378D8 8D85 70FFFFFF lea eax,
004378DE 50 push eax
004378DF FF15 30104000 call ; msvbvm60.__vbaStrVarMove
004378E5 8BD0 mov edx, eax ; 取前5位 (UNICODE "C202A")
004378E7 8D4D B4 lea ecx,
004378EA FFD6 call esi
004378EC 8B4D D8 mov ecx,
004378EF 8BD0 mov edx, eax
004378F1 FF15 18124000 call ; msvbvm60.__vbaStrCopy
004378F7 8D4D B4 lea ecx,
004378FA 8D55 BC lea edx,
004378FD 51 push ecx
004378FE 8D45 C0 lea eax,
00437901 52 push edx
00437902 50 push eax
00437903 6A 03 push 3
00437905 FF15 24124000 call ; msvbvm60.__vbaFreeStrList
0043790B 8D8D 70FFFFFF lea ecx,
00437911 8D55 80 lea edx,
00437914 51 push ecx
00437915 8D45 90 lea eax,
00437918 52 push edx
00437919 50 push eax
0043791A 6A 03 push 3
0043791C FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00437922 8B4D E8 mov ecx,
00437925 83C4 20 add esp, 20
00437928 51 push ecx
00437929 68 0CB14000 push 0040B10C ; amwk
0043792E FFD7 call edi
00437930 8BD0 mov edx, eax
00437932 8D4D C0 lea ecx,
00437935 FFD6 call esi
00437937 8B55 08 mov edx,
0043793A 50 push eax ; (UNICODE "51B92-B6EAF-30FE1-8CE6D-1E2C6-B401Bamwk")
0043793B 8B02 mov eax,
0043793D 50 push eax
0043793E FFD7 call edi
00437940 8BD0 mov edx, eax ; (UNICODE "[email protected]")
00437942 8D4D BC lea ecx,
00437945 FFD6 call esi
00437947 8B45 C4 mov eax,
0043794A 8D55 B8 lea edx,
0043794D 52 push edx
0043794E 8D55 BC lea edx,
00437951 8B08 mov ecx,
00437953 52 push edx
00437954 50 push eax
00437955 FF51 1C call
00437958 3BC3 cmp eax, ebx
0043795A DBE2 fclex ; SHA256加密
0043795C 7D 12 jge short 00437970
0043795E 8B4D C4 mov ecx,
00437961 6A 1C push 1C
00437963 68 50B04000 push 0040B050
00437968 51 push ecx
00437969 50 push eax
0043796A FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
00437970 8B45 B8 mov eax, ; (UNICODE "8b471208a3acbbc40d78fde9a03f8c2761d2b1836040395f4e4cc5af226ef995")
00437973 8D55 90 lea edx,
00437976 8945 98 mov , eax
00437979 8D45 80 lea eax,
0043797C 52 push edx
0043797D 50 push eax
0043797E 895D B8 mov , ebx
00437981 C745 90 0800000>mov dword ptr , 8
00437988 FF15 14114000 call ; msvbvm60.rtcUpperCaseVar
0043798E 8D4D 80 lea ecx,
00437991 6A 05 push 5
00437993 8D95 70FFFFFF lea edx,
00437999 51 push ecx
0043799A 52 push edx
0043799B FF15 A8124000 call ; msvbvm60.rtcRightCharVar
004379A1 8D85 70FFFFFF lea eax,
004379A7 50 push eax
004379A8 FF15 30104000 call ; msvbvm60.__vbaStrVarMove
004379AE 8BD0 mov edx, eax ; 取后5位 (UNICODE "EF995")
004379B0 8D4D B4 lea ecx,
004379B3 FFD6 call esi
004379B5 8B4D D8 mov ecx,
004379B8 8BD0 mov edx, eax
004379BA 83C1 04 add ecx, 4
004379BD FF15 18124000 call ; msvbvm60.__vbaStrCopy
004379C3 8D55 B4 lea edx,
004379C6 8D45 BC lea eax,
004379C9 52 push edx
004379CA 8D4D C0 lea ecx,
004379CD 50 push eax
004379CE 51 push ecx
004379CF 6A 03 push 3
004379D1 FF15 24124000 call ; msvbvm60.__vbaFreeStrList
004379D7 8D95 70FFFFFF lea edx,
004379DD 8D45 80 lea eax,
004379E0 52 push edx
004379E1 8D4D 90 lea ecx,
004379E4 50 push eax
004379E5 51 push ecx
004379E6 6A 03 push 3
004379E8 FF15 40104000 call ; msvbvm60.__vbaFreeVarList
004379EE 8B55 E8 mov edx, ; UNICODE "51B92-B6EAF-30FE1-8CE6D-1E2C6-B401B")
004379F1 83C4 20 add esp, 20
004379F4 52 push edx
004379F5 68 1CB14000 push 0040B11C ; amw
004379FA FFD7 call edi
004379FC 8BD0 mov edx, eax ; (UNICODE "51B92-B6EAF-30FE1-8CE6D-1E2C6-B401Bamw")
004379FE 8D4D C0 lea ecx,
00437A01 FFD6 call esi
00437A03 50 push eax
00437A04 8B45 08 mov eax,
00437A07 8B08 mov ecx,
00437A09 51 push ecx
00437A0A FFD7 call edi
00437A0C 8BD0 mov edx, eax ; (UNICODE "[email protected]")
00437A0E 8D4D BC lea ecx,
00437A11 FFD6 call esi
00437A13 8B45 C4 mov eax,
00437A16 8D4D B8 lea ecx,
00437A19 51 push ecx
00437A1A 8D4D BC lea ecx,
00437A1D 8B10 mov edx,
00437A1F 51 push ecx
00437A20 50 push eax
00437A21 FF52 1C call ; SHA256加密
00437A24 3BC3 cmp eax, ebx
00437A26 DBE2 fclex
00437A28 7D 12 jge short 00437A3C
00437A2A 8B55 C4 mov edx,
00437A2D 6A 1C push 1C
00437A2F 68 50B04000 push 0040B050
00437A34 52 push edx
00437A35 50 push eax
00437A36 FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
00437A3C 8B45 B8 mov eax, ; (UNICODE "5a58e952417c941c2e91a4d79920ad8583b7eb8eff0c8573882fbe6e2bec36dc")
00437A3F 8D4D 80 lea ecx,
00437A42 8945 98 mov , eax
00437A45 8D45 90 lea eax,
00437A48 50 push eax
00437A49 51 push ecx
00437A4A 895D B8 mov , ebx
00437A4D C745 90 0800000>mov dword ptr , 8
00437A54 FF15 14114000 call ; msvbvm60.rtcUpperCaseVar
00437A5A 8D55 80 lea edx,
00437A5D 6A 05 push 5
00437A5F 8D85 70FFFFFF lea eax,
00437A65 52 push edx
00437A66 50 push eax
00437A67 FF15 90124000 call ; msvbvm60.rtcLeftCharVar
00437A6D 8D8D 70FFFFFF lea ecx,
00437A73 51 push ecx
00437A74 FF15 30104000 call ; msvbvm60.__vbaStrVarMove
00437A7A 8BD0 mov edx, eax ; 取前5位 (UNICODE "5A58E")
00437A7C 8D4D B4 lea ecx,
00437A7F FFD6 call esi
00437A81 8BD0 mov edx, eax
00437A83 8B45 D8 mov eax,
00437A86 8D48 08 lea ecx,
00437A89 FF15 18124000 call ; msvbvm60.__vbaStrCopy
00437A8F 8D4D B4 lea ecx,
00437A92 8D55 BC lea edx,
00437A95 51 push ecx
00437A96 8D45 C0 lea eax,
00437A99 52 push edx
00437A9A 50 push eax
00437A9B 6A 03 push 3
00437A9D FF15 24124000 call ; msvbvm60.__vbaFreeStrList
00437AA3 8D8D 70FFFFFF lea ecx,
00437AA9 8D55 80 lea edx,
00437AAC 51 push ecx
00437AAD 8D45 90 lea eax,
00437AB0 52 push edx
00437AB1 50 push eax
00437AB2 6A 03 push 3
00437AB4 FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00437ABA 8B4D E8 mov ecx,
00437ABD 83C4 20 add esp, 20
00437AC0 51 push ecx ; UNICODE "51B92-B6EAF-30FE1-8CE6D-1E2C6-B401B")
00437AC1 FF15 A4114000 call ; msvbvm60.rtcStrReverse
00437AC7 8BD0 mov edx, eax
00437AC9 8D4D AC lea ecx,
00437ACC FFD6 call esi
00437ACE 8B55 AC mov edx,
00437AD1 8D4D C0 lea ecx,
00437AD4 895D AC mov , ebx
00437AD7 FFD6 call esi
00437AD9 50 push eax
00437ADA 68 28B14000 push 0040B128 ; yiwana
00437ADF FFD7 call edi
00437AE1 8BD0 mov edx, eax ; (UNICODE "B104B-6C2E1-D6EC8-1EF03-FAE6B-29B15yiwana")
00437AE3 8D4D BC lea ecx,
00437AE6 FFD6 call esi
00437AE8 8B55 08 mov edx,
00437AEB 50 push eax
00437AEC 8B02 mov eax,
00437AEE 50 push eax ; (UNICODE "[email protected]")
00437AEF FFD7 call edi
00437AF1 8BD0 mov edx, eax ; (UNICODE "[email protected]")
00437AF3 8D4D B8 lea ecx,
00437AF6 FFD6 call esi
00437AF8 8B45 C4 mov eax,
00437AFB 8D55 B4 lea edx,
00437AFE 52 push edx
00437AFF 8D55 B8 lea edx,
00437B02 8B08 mov ecx,
00437B04 52 push edx
00437B05 50 push eax
00437B06 FF51 1C call ; SHA256加密
00437B09 3BC3 cmp eax, ebx
00437B0B DBE2 fclex
00437B0D 7D 12 jge short 00437B21
00437B0F 8B4D C4 mov ecx,
00437B12 6A 1C push 1C
00437B14 68 50B04000 push 0040B050
00437B19 51 push ecx
00437B1A 50 push eax
00437B1B FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
00437B21 8B45 B4 mov eax, ; (UNICODE "44236782851691891815e84d5632d2dd96d5e7e5751378f520d901a9d971b6ee")
00437B24 8D55 90 lea edx,
00437B27 8945 98 mov , eax
00437B2A 8D45 80 lea eax,
00437B2D 52 push edx
00437B2E 50 push eax
00437B2F 895D B4 mov , ebx
00437B32 C745 90 0800000>mov dword ptr , 8
00437B39 FF15 14114000 call ; msvbvm60.rtcUpperCaseVar
00437B3F 8D4D 80 lea ecx,
00437B42 6A 05 push 5
00437B44 8D95 70FFFFFF lea edx,
00437B4A 51 push ecx
00437B4B 52 push edx
00437B4C FF15 A8124000 call ; msvbvm60.rtcRightCharVar
00437B52 8D85 70FFFFFF lea eax,
00437B58 50 push eax
00437B59 FF15 30104000 call ; msvbvm60.__vbaStrVarMove
00437B5F 8BD0 mov edx, eax ; 取后5位 (UNICODE "1B6EE")
00437B61 8D4D B0 lea ecx,
00437B64 FFD6 call esi
00437B66 8B4D D8 mov ecx,
00437B69 8BD0 mov edx, eax
00437B6B 83C1 0C add ecx, 0C
00437B6E FF15 18124000 call ; msvbvm60.__vbaStrCopy
00437B74 8D55 AC lea edx,
00437B77 8D45 B0 lea eax,
00437B7A 52 push edx
00437B7B 8D4D B8 lea ecx,
00437B7E 50 push eax
00437B7F 8D55 BC lea edx,
00437B82 51 push ecx
00437B83 8D45 C0 lea eax,
00437B86 52 push edx
00437B87 50 push eax
00437B88 6A 05 push 5
00437B8A FF15 24124000 call ; msvbvm60.__vbaFreeStrList
00437B90 8D8D 70FFFFFF lea ecx,
00437B96 8D55 80 lea edx,
00437B99 51 push ecx
00437B9A 8D45 90 lea eax,
00437B9D 52 push edx
00437B9E 50 push eax
00437B9F 6A 03 push 3
00437BA1 FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00437BA7 8B4D E8 mov ecx, ; (UNICODE "51B92-B6EAF-30FE1-8CE6D-1E2C6-B401B")
00437BAA 83C4 28 add esp, 28
00437BAD 51 push ecx
00437BAE FF15 A4114000 call ; msvbvm60.rtcStrReverse
00437BB4 8BD0 mov edx, eax ; (UNICODE "B104B-6C2E1-D6EC8-1EF03-FAE6B-29B15")
00437BB6 8D4D AC lea ecx,
00437BB9 FFD6 call esi
00437BBB 8B55 AC mov edx,
00437BBE 8D4D C0 lea ecx,
00437BC1 895D AC mov , ebx
00437BC4 FFD6 call esi
00437BC6 50 push eax
00437BC7 68 3CB14000 push 0040B13C ; anawiy
00437BCC FFD7 call edi
00437BCE 8BD0 mov edx, eax ; (UNICODE "B104B-6C2E1-D6EC8-1EF03-FAE6B-29B15anawiy")
00437BD0 8D4D BC lea ecx,
00437BD3 FFD6 call esi
00437BD5 8B55 08 mov edx,
00437BD8 50 push eax
00437BD9 8B02 mov eax,
00437BDB 50 push eax
00437BDC FFD7 call edi
00437BDE 8BD0 mov edx, eax ; (UNICODE "[email protected]")
00437BE0 8D4D B8 lea ecx,
00437BE3 FFD6 call esi
00437BE5 8B45 C4 mov eax,
00437BE8 8D55 B4 lea edx,
00437BEB 52 push edx
00437BEC 8D55 B8 lea edx,
00437BEF 8B08 mov ecx,
00437BF1 52 push edx
00437BF2 50 push eax
00437BF3 FF51 1C call ; SHA256加密
00437BF6 3BC3 cmp eax, ebx
00437BF8 DBE2 fclex
00437BFA 7D 12 jge short 00437C0E
00437BFC 8B4D C4 mov ecx,
00437BFF 6A 1C push 1C
00437C01 68 50B04000 push 0040B050
00437C06 51 push ecx
00437C07 50 push eax
00437C08 FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
00437C0E 8B45 B4 mov eax, ; (UNICODE "0d9d1a837cb964b3a8b6affbd7ee02469c5751664aefe7dccab6994143ce0861")
00437C11 8D55 90 lea edx,
00437C14 8945 98 mov , eax
00437C17 8D45 80 lea eax,
00437C1A 52 push edx
00437C1B 50 push eax
00437C1C 895D B4 mov , ebx
00437C1F C745 90 0800000>mov dword ptr , 8
00437C26 FF15 14114000 call ; msvbvm60.rtcUpperCaseVar
00437C2C 8D4D 80 lea ecx,
00437C2F 6A 05 push 5
00437C31 8D95 70FFFFFF lea edx,
00437C37 51 push ecx
00437C38 52 push edx
00437C39 FF15 90124000 call ; msvbvm60.rtcLeftCharVar
00437C3F 8D85 70FFFFFF lea eax,
00437C45 50 push eax
00437C46 FF15 30104000 call ; msvbvm60.__vbaStrVarMove
00437C4C 8BD0 mov edx, eax ; 前5位(UNICODE "0D9D1")
00437C4E 8D4D B0 lea ecx,
00437C51 FFD6 call esi
00437C53 8B4D D8 mov ecx,
00437C56 8BD0 mov edx, eax
00437C58 83C1 10 add ecx, 10
00437C5B FF15 18124000 call ; msvbvm60.__vbaStrCopy
00437C61 8D55 AC lea edx,
00437C64 8D45 B0 lea eax,
00437C67 52 push edx
00437C68 8D4D B8 lea ecx,
00437C6B 50 push eax
00437C6C 8D55 BC lea edx,
00437C6F 51 push ecx
00437C70 8D45 C0 lea eax,
00437C73 52 push edx
00437C74 50 push eax
00437C75 6A 05 push 5
00437C77 FF15 24124000 call ; msvbvm60.__vbaFreeStrList
00437C7D 8D8D 70FFFFFF lea ecx,
00437C83 8D55 80 lea edx,
00437C86 51 push ecx
00437C87 8D45 90 lea eax,
00437C8A 52 push edx
00437C8B 50 push eax
00437C8C 6A 03 push 3
00437C8E FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00437C94 8B4D E8 mov ecx, ; UNICODE "51B92-B6EAF-30FE1-8CE6D-1E2C6-B401B")
00437C97 83C4 28 add esp, 28
00437C9A 51 push ecx
00437C9B FF15 A4114000 call ; msvbvm60.rtcStrReverse
00437CA1 8BD0 mov edx, eax ; (UNICODE "B104B-6C2E1-D6EC8-1EF03-FAE6B-29B15")
00437CA3 8D4D AC lea ecx,
00437CA6 FFD6 call esi
00437CA8 8B55 AC mov edx,
00437CAB 8D4D C0 lea ecx,
00437CAE 895D AC mov , ebx
00437CB1 FFD6 call esi
00437CB3 50 push eax
00437CB4 68 50B14000 push 0040B150 ; wiy
00437CB9 FFD7 call edi
00437CBB 8BD0 mov edx, eax ; (UNICODE "B104B-6C2E1-D6EC8-1EF03-FAE6B-29B15wiy")
00437CBD 8D4D BC lea ecx,
00437CC0 FFD6 call esi
00437CC2 8B55 08 mov edx,
00437CC5 50 push eax
00437CC6 8B02 mov eax,
00437CC8 50 push eax
00437CC9 FFD7 call edi
00437CCB 8BD0 mov edx, eax ; (UNICODE "[email protected]")
00437CCD 8D4D B8 lea ecx,
00437CD0 FFD6 call esi
00437CD2 8B45 C4 mov eax,
00437CD5 8D55 B4 lea edx,
00437CD8 52 push edx
00437CD9 8D55 B8 lea edx,
00437CDC 8B08 mov ecx,
00437CDE 52 push edx
00437CDF 50 push eax
00437CE0 FF51 1C call ; 下面的SHA256加密
00437CE3 3BC3 cmp eax, ebx
00437CE5 DBE2 fclex
00437CE7 7D 12 jge short 00437CFB
00437CE9 8B4D C4 mov ecx,
00437CEC 6A 1C push 1C
00437CEE 68 50B04000 push 0040B050
00437CF3 51 push ecx
00437CF4 50 push eax
00437CF5 FF15 7C104000 call ; msvbvm60.__vbaHresultCheckObj
00437CFB 8B45 B4 mov eax, ; (UNICODE "40ff65a7c677da88f5bca0ecec69a7a68299aa1c154471ac5a6a86ee67c880bc")
00437CFE 8D55 90 lea edx,
00437D01 8945 98 mov , eax
00437D04 8D45 80 lea eax,
00437D07 52 push edx
00437D08 50 push eax
00437D09 895D B4 mov , ebx
00437D0C C745 90 0800000>mov dword ptr , 8
00437D13 FF15 14114000 call ; msvbvm60.rtcUpperCaseVar
00437D19 8D4D 80 lea ecx,
00437D1C 6A 05 push 5
00437D1E 8D95 70FFFFFF lea edx,
00437D24 51 push ecx
00437D25 52 push edx
00437D26 FF15 A8124000 call ; msvbvm60.rtcRightCharVar
00437D2C 8D85 70FFFFFF lea eax,
00437D32 50 push eax
00437D33 FF15 30104000 call ; msvbvm60.__vbaStrVarMove
00437D39 8BD0 mov edx, eax ; 取后5位(UNICODE "880BC")
00437D3B 8D4D B0 lea ecx,
00437D3E FFD6 call esi
00437D40 8B4D D8 mov ecx,
00437D43 8BD0 mov edx, eax
00437D45 83C1 14 add ecx, 14
00437D48 FF15 18124000 call ; msvbvm60.__vbaStrCopy
00437D4E 8B1D 24124000 mov ebx, ; msvbvm60.__vbaFreeStrList
00437D54 8D55 AC lea edx,
00437D57 8D45 B0 lea eax,
00437D5A 52 push edx
00437D5B 8D4D B8 lea ecx,
00437D5E 50 push eax
00437D5F 8D55 BC lea edx,
00437D62 51 push ecx
00437D63 8D45 C0 lea eax,
00437D66 52 push edx
00437D67 50 push eax
00437D68 6A 05 push 5
00437D6A FFD3 call ebx
00437D6C 8D8D 70FFFFFF lea ecx,
00437D72 8D55 80 lea edx,
00437D75 51 push ecx
00437D76 8D45 90 lea eax,
00437D79 52 push edx
00437D7A 50 push eax
00437D7B 6A 03 push 3
00437D7D FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00437D83 8B4D D8 mov ecx,
00437D86 83C4 28 add esp, 28
00437D89 8B11 mov edx,
00437D8B 52 push edx ; (UNICODE "C202A")
00437D8C 68 80AA4000 push 0040AA80 ; -
00437D91 FFD7 call edi
00437D93 8BD0 mov edx, eax ; (UNICODE "C202A-")
00437D95 8D4D C0 lea ecx,
00437D98 FFD6 call esi
00437D9A 50 push eax
00437D9B 8B45 D8 mov eax,
00437D9E 8B48 04 mov ecx,
00437DA1 51 push ecx ; (UNICODE "EF995")
00437DA2 FFD7 call edi
00437DA4 8BD0 mov edx, eax ; (UNICODE "C202A-EF995")
00437DA6 8D4D BC lea ecx,
00437DA9 FFD6 call esi
00437DAB 50 push eax
00437DAC 68 80AA4000 push 0040AA80 ; -
00437DB1 FFD7 call edi
00437DB3 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-")
00437DB5 8D4D B8 lea ecx,
00437DB8 FFD6 call esi
00437DBA 8B55 D8 mov edx,
00437DBD 50 push eax
00437DBE 8B42 08 mov eax, ; (UNICODE "5A58E")
00437DC1 50 push eax
00437DC2 FFD7 call edi
00437DC4 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-5A58E")
00437DC6 8D4D B4 lea ecx,
00437DC9 FFD6 call esi
00437DCB 50 push eax
00437DCC 68 80AA4000 push 0040AA80 ; -
00437DD1 FFD7 call edi
00437DD3 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-5A58E-")
00437DD5 8D4D B0 lea ecx,
00437DD8 FFD6 call esi
00437DDA 8B4D D8 mov ecx,
00437DDD 50 push eax
00437DDE 8B51 0C mov edx, ; (UNICODE "1B6EE")
00437DE1 52 push edx
00437DE2 FFD7 call edi
00437DE4 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-5A58E-1B6EE")
00437DE6 8D4D AC lea ecx,
00437DE9 FFD6 call esi
00437DEB 50 push eax
00437DEC 68 80AA4000 push 0040AA80 ; -
00437DF1 FFD7 call edi
00437DF3 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-5A58E-1B6EE-")
00437DF5 8D4D A8 lea ecx,
00437DF8 FFD6 call esi
00437DFA 50 push eax
00437DFB 8B45 D8 mov eax,
00437DFE 8B48 10 mov ecx, ; (UNICODE "0D9D1")
00437E01 51 push ecx
00437E02 FFD7 call edi
00437E04 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-5A58E-1B6EE-0D9D1")
00437E06 8D4D A4 lea ecx,
00437E09 FFD6 call esi
00437E0B 50 push eax
00437E0C 68 80AA4000 push 0040AA80 ; -
00437E11 FFD7 call edi
00437E13 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-5A58E-1B6EE-0D9D1-")
00437E15 8D4D A0 lea ecx,
00437E18 FFD6 call esi
00437E1A 8B55 D8 mov edx,
00437E1D 50 push eax
00437E1E 8B42 14 mov eax, ; (UNICODE "880BC")
00437E21 50 push eax
00437E22 FFD7 call edi
00437E24 8BD0 mov edx, eax ; (UNICODE "C202A-EF995-5A58E-1B6EE-0D9D1-880BC")
00437E26 8D4D E4 lea ecx,
00437E29 FFD6 call esi
00437E2B 8D4D A0 lea ecx,
00437E2E 8D55 A4 lea edx,
00437E31 51 push ecx
00437E32 8D45 A8 lea eax,
00437E35 52 push edx
00437E36 8D4D AC lea ecx,
00437E39 50 push eax
00437E3A 8D55 B0 lea edx,
00437E3D 51 push ecx
00437E3E 8D45 B4 lea eax,
00437E41 52 push edx
00437E42 8D4D B8 lea ecx,
00437E45 50 push eax
00437E46 8D55 BC lea edx,
00437E49 51 push ecx
00437E4A 8D45 C0 lea eax,
00437E4D 52 push edx
00437E4E 50 push eax
00437E4F 6A 09 push 9
00437E51 FFD3 call ebx ; msvbvm60.__vbaFreeStrList
00437E53 83C4 28 add esp, 28
00437E56 68 DE7E4300 push 00437EDE
00437E5B EB 56 jmp short 00437EB3
00437E5D F645 FC 04 test byte ptr , 4
00437E61 74 09 je short 00437E6C
00437E63 8D4D E4 lea ecx,
00437E66 FF15 F0124000 call ; msvbvm60.__vbaFreeStr
00437E6C 8D4D A0 lea ecx,
00437E6F 8D55 A4 lea edx,
00437E72 51 push ecx
00437E73 8D45 A8 lea eax,
00437E76 52 push edx
00437E77 8D4D AC lea ecx,
00437E7A 50 push eax
00437E7B 8D55 B0 lea edx,
00437E7E 51 push ecx
00437E7F 8D45 B4 lea eax,
00437E82 52 push edx
00437E83 8D4D B8 lea ecx,
00437E86 50 push eax
00437E87 8D55 BC lea edx,
00437E8A 51 push ecx
00437E8B 8D45 C0 lea eax,
00437E8E 52 push edx
00437E8F 50 push eax
00437E90 6A 09 push 9
00437E92 FF15 24124000 call ; msvbvm60.__vbaFreeStrList
00437E98 8D8D 70FFFFFF lea ecx,
00437E9E 8D55 80 lea edx,
00437EA1 51 push ecx
00437EA2 8D45 90 lea eax,
00437EA5 52 push edx
00437EA6 50 push eax
00437EA7 6A 03 push 3
00437EA9 FF15 40104000 call ; msvbvm60.__vbaFreeVarList
00437EAF 83C4 38 add esp, 38
00437EB2 C3 retn
00437EB3 8D4D E8 lea ecx,
00437EB6 FF15 F0124000 call ; msvbvm60.__vbaFreeStr
00437EBC 8D95 6CFFFFFF lea edx,
00437EC2 8D4D CC lea ecx,
00437EC5 52 push edx
00437EC6 6A 00 push 0
00437EC8 898D 6CFFFFFF mov , ecx
00437ECE FF15 90104000 call ; msvbvm60.__vbaAryDestruct
00437ED4 8D4D C4 lea ecx,
00437ED7 FF15 EC124000 call ; msvbvm60.__vbaFreeObj
00437EDD C3 retn
00437EDE 8B4D EC mov ecx,
00437EE1 8B45 E4 mov eax,
00437EE4 5F pop edi
00437EE5 5E pop esi
00437EE6 64:890D 0000000>mov fs:, ecx
00437EED 5B pop ebx
00437EEE 8BE5 mov esp, ebp
00437EF0 5D pop ebp
00437EF1 C2 0400 retn 4
------------------------------------------------------------------------
【破解总结】
注册码虽找到了，但还是要总结下的：
1、机器码与EMAIL有关；
2、注册码由6部分组成，每部分长度5，中间用“—”连接，且都为大写；
算法分析：
一、假设机器码为A，其倒序后为B，如A为51B92-B6EAF-30FE1-8CE6D-1E2C6-B401B，则B为B104B-6C2E1-D6EC8-1EF03-FAE6B-29B15；
二、设其常量kwma、amwk、amw、yiwana、anawiy、wiy分别为D、E、F、G、H、I，EMAIL为C；
则注册码的各部分如下，
1、第一部分K1为SHA256（A＋D＋C）的前5个字符；
2、第二部分K2为SHA256（A＋E＋C）的后5个字符；
3、第三部分K3为SHA256（A＋F＋C）的前5个字符；
4、第四部分K4为SHA256（B＋G＋C）的前5个字符；
5、第五部分K5为SHA256（B＋H＋C）的后5个字符；
6、第六部分K6为SHA256（B＋I＋C）的前5个字符；
呵，呵，注册码K＝K1＋K2＋K3＋K4＋K5＋K6
注：这里的“＋”为连接符，字母均为大写。
------------------------------------------------------------------------
【版权声明】本文纯属技术交流, 转载请注明作者信息并保持文章的完整, 谢谢! 这么好的文章，怎么没人来顶一下。我先来一下。 我来顶一下！！！:P 不错... 强!!!!我是初学这!!!!!/:good 所以很多看不懂!!!!
页:
[1]