千变万化 V3.01注册算法分析
【破文标题】千变万化 V3.01注册算法分析【破文作者】HBQJXHW
【破解工具】OD、PEID、W32ASM
【破解平台】WIN2000-SP4
【软件名称】千变万化 V3.01
【软件大小】9477 KB
【原版下载】http://www3.skycn.com/soft/21470.html
【保护方式】壳＋SN
【软件简介】<千变万化>是一个专业的电子相册制作软件，它可以制作出与众不同的介面，使您的相册不再枯燥无味。软件本身内置几个漂亮的介面供用户选择，在不到一分钟的时间就可以制作出出色的相册程序。同时本软件内置图片浏览器，图片转换效果达150种，您可以慢慢细心观赏相片而无需安装其它看图软件。
当您制作好相册后，可以刻录成光盘，在任何一台装有windows的电脑上运行，并可制作成数据光盘，在VCD、DVD机（有图片浏览功能）上播放图片；也可以做成礼物送给您心爱的她（他）哟。
【破解过程】
------------------------------------------------------------------------
脱壳：
软件查壳为ASPack 2.1 -> Alexey Solodovnikov
用OD载入Protean.exe选不继续分析
00B32001 >60 PUSHAD 此时停在这里，F8一下看堆栈变化。
00B32002 E8 03000000 CALL Protean.00B3200A
00B32007- E9 EB045D45 JMP 461024F7
00B3200C 55 PUSH EBP
00B3200D C3 RETN
00B3200E E8 01000000 CALL Protean.00B32014
--------------------------------------------------------
EAX 00000000
ECX 00000101
EDX FFFFFFFF
EBX 7FFDF000
ESP 0012FFA4-------------------------》在命令窗口下HR 0012FFA4断点，F9一下。
EBP 0012FFF0
ESI 00000000
------------------------------
00B323B0 /75 08 JNZ SHORT Protean.00B323BA----》此时停在这里，F8几下。
00B323B2 |B8 01000000 MOV EAX,1
00B323B7 |C2 0C00 RETN 0C
00B323BA \68 1C4B7E00 PUSH Protean.007E4B1C
00B323BF C3 RETN-------------------------》飞向光明。
由此来到这里
007E4B1C 55 PUSH EBP
007E4B1D 8BEC MOV EBP,ESP
007E4B1F 83C4 F0 ADD ESP,-10
007E4B22 53 PUSH EBX
007E4B23 B8 54467E00 MOV EAX,Protean.007E4654
007E4B28 E8 8721C2FF CALL Protean.00406CB4
007E4B2D 8B1D 347A7E00 MOV EBX,DWORD PTR DS: ; Protean.007E8C3C
007E4B33 8B03 MOV EAX,DWORD PTR DS:
007E4B35 E8 7EACC8FF CALL Protean.0046F7B8
用OD脱壳后，然后用ImportREC修复，运行OK。
OEP：003E4B1C
RAV：003EA1DC大小：000008CC
到此脱壳告一段落。
-----------------------------------------------------------------
算法分析：
用W32ASM载入程序，并查找字符串“注册”，找到一地址0056F1F4。
再向上查找发现此段由0056F1F4中的CALL进入，再向上查，最后在OD中CTRL+G输入0056E7E3，F2下断。
经过试验下断正确。
0056E7E3|.51 PUSH ECX
0056E7E4|.53 PUSH EBX
0056E7E5|.56 PUSH ESI
0056E7E6|.57 PUSH EDI
0056E7E7|.8BD8 MOV EBX,EAX
0056E7E9|.33C0 XOR EAX,EAX
0056E7EB|.55 PUSH EBP
0056E7EC|.68 82F25600 PUSH Proteank.0056F282
0056E7F1|.64:FF30 PUSH DWORD PTR FS:
0056E7F4|.64:8920 MOV DWORD PTR FS:,ESP
0056E7F7|.A1 887B7E00 MOV EAX,DWORD PTR DS:
0056E7FC|.33D2 XOR EDX,EDX
0056E7FE|.8910 MOV DWORD PTR DS:,EDX
0056E800|.33D2 XOR EDX,EDX
0056E802|.8B83 58030000 MOV EAX,DWORD PTR DS:
0056E808|.E8 53FFEDFF CALL Proteank.0044E760
0056E80D|.8D55 CC LEA EDX,DWORD PTR SS:
0056E810|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E816|.E8 2500EEFF CALL Proteank.0044E840
0056E81B|.8B45 CC MOV EAX,DWORD PTR SS:
0056E81E|.BA 98F25600 MOV EDX,Proteank.0056F298 ;0
0056E823|.E8 F863E9FF CALL Proteank.00404C20
0056E828|.75 0D JNZ SHORT Proteank.0056E837
0056E82A|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E82D|.BA A4F25600 MOV EDX,Proteank.0056F2A4 ;e
0056E832|.E8 8560E9FF CALL Proteank.004048BC
0056E837|>8D55 C8 LEA EDX,DWORD PTR SS:
0056E83A|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E840|.E8 FBFFEDFF CALL Proteank.0044E840
0056E845|.8B45 C8 MOV EAX,DWORD PTR SS:
0056E848|.BA B0F25600 MOV EDX,Proteank.0056F2B0 ;1
0056E84D|.E8 CE63E9FF CALL Proteank.00404C20
0056E852|.75 0D JNZ SHORT Proteank.0056E861
0056E854|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E857|.BA BCF25600 MOV EDX,Proteank.0056F2BC ;f
0056E85C|.E8 5B60E9FF CALL Proteank.004048BC
0056E861|>8D55 C4 LEA EDX,DWORD PTR SS:
0056E864|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E86A|.E8 D1FFEDFF CALL Proteank.0044E840
0056E86F|.8B45 C4 MOV EAX,DWORD PTR SS:
0056E872|.BA C8F25600 MOV EDX,Proteank.0056F2C8 ;2
0056E877|.E8 A463E9FF CALL Proteank.00404C20
0056E87C|.75 0D JNZ SHORT Proteank.0056E88B
0056E87E|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E881|.BA D4F25600 MOV EDX,Proteank.0056F2D4 ;g
0056E886|.E8 3160E9FF CALL Proteank.004048BC
0056E88B|>8D55 C0 LEA EDX,DWORD PTR SS:
0056E88E|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E894|.E8 A7FFEDFF CALL Proteank.0044E840
0056E899|.8B45 C0 MOV EAX,DWORD PTR SS:
0056E89C|.BA E0F25600 MOV EDX,Proteank.0056F2E0 ;3
0056E8A1|.E8 7A63E9FF CALL Proteank.00404C20
0056E8A6|.75 0D JNZ SHORT Proteank.0056E8B5
0056E8A8|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E8AB|.BA ECF25600 MOV EDX,Proteank.0056F2EC ;h
0056E8B0|.E8 0760E9FF CALL Proteank.004048BC
0056E8B5|>8D55 BC LEA EDX,DWORD PTR SS:
0056E8B8|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E8BE|.E8 7DFFEDFF CALL Proteank.0044E840
0056E8C3|.8B45 BC MOV EAX,DWORD PTR SS:
0056E8C6|.BA F8F25600 MOV EDX,Proteank.0056F2F8 ;4
0056E8CB|.E8 5063E9FF CALL Proteank.00404C20
0056E8D0|.75 0D JNZ SHORT Proteank.0056E8DF
0056E8D2|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E8D5|.BA 04F35600 MOV EDX,Proteank.0056F304 ;i
0056E8DA|.E8 DD5FE9FF CALL Proteank.004048BC
0056E8DF|>8D55 B8 LEA EDX,DWORD PTR SS:
0056E8E2|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E8E8|.E8 53FFEDFF CALL Proteank.0044E840
0056E8ED|.8B45 B8 MOV EAX,DWORD PTR SS:
0056E8F0|.BA 10F35600 MOV EDX,Proteank.0056F310 ;5
0056E8F5|.E8 2663E9FF CALL Proteank.00404C20
0056E8FA|.75 0D JNZ SHORT Proteank.0056E909
0056E8FC|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E8FF|.BA 1CF35600 MOV EDX,Proteank.0056F31C ;j
0056E904|.E8 B35FE9FF CALL Proteank.004048BC
0056E909|>8D55 B4 LEA EDX,DWORD PTR SS:
0056E90C|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E912|.E8 29FFEDFF CALL Proteank.0044E840
0056E917|.8B45 B4 MOV EAX,DWORD PTR SS:
0056E91A|.BA 28F35600 MOV EDX,Proteank.0056F328 ;6
0056E91F|.E8 FC62E9FF CALL Proteank.00404C20
0056E924|.75 0D JNZ SHORT Proteank.0056E933
0056E926|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E929|.BA 34F35600 MOV EDX,Proteank.0056F334
0056E92E|.E8 895FE9FF CALL Proteank.004048BC
0056E933|>8D55 B0 LEA EDX,DWORD PTR SS:
0056E936|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E93C|.E8 FFFEEDFF CALL Proteank.0044E840
0056E941|.8B45 B0 MOV EAX,DWORD PTR SS:
0056E944|.BA 40F35600 MOV EDX,Proteank.0056F340
0056E949|.E8 D262E9FF CALL Proteank.00404C20
0056E94E|.75 0D JNZ SHORT Proteank.0056E95D
0056E950|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E953|.BA 4CF35600 MOV EDX,Proteank.0056F34C
0056E958|.E8 5F5FE9FF CALL Proteank.004048BC
0056E95D|>8D55 AC LEA EDX,DWORD PTR SS:
0056E960|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E966|.E8 D5FEEDFF CALL Proteank.0044E840
0056E96B|.8B45 AC MOV EAX,DWORD PTR SS:
0056E96E|.BA 58F35600 MOV EDX,Proteank.0056F358
0056E973|.E8 A862E9FF CALL Proteank.00404C20
0056E978|.75 0D JNZ SHORT Proteank.0056E987
0056E97A|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E97D|.BA 64F35600 MOV EDX,Proteank.0056F364
0056E982|.E8 355FE9FF CALL Proteank.004048BC
0056E987|>8D55 A8 LEA EDX,DWORD PTR SS:
0056E98A|.8B83 08030000 MOV EAX,DWORD PTR DS:
0056E990|.E8 ABFEEDFF CALL Proteank.0044E840
0056E995|.8B45 A8 MOV EAX,DWORD PTR SS:
0056E998|.BA 70F35600 MOV EDX,Proteank.0056F370
0056E99D|.E8 7E62E9FF CALL Proteank.00404C20
0056E9A2|.75 0D JNZ SHORT Proteank.0056E9B1
0056E9A4|.8D45 D8 LEA EAX,DWORD PTR SS:
0056E9A7|.BA 7CF35600 MOV EDX,Proteank.0056F37C
0056E9AC|.E8 0B5FE9FF CALL Proteank.004048BC
0056E9B1|>8D55 A4 LEA EDX,DWORD PTR SS:
0056E9B4|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056E9BA|.E8 81FEEDFF CALL Proteank.0044E840
0056E9BF|.8B45 A4 MOV EAX,DWORD PTR SS:
0056E9C2|.BA 98F25600 MOV EDX,Proteank.0056F298
0056E9C7|.E8 5462E9FF CALL Proteank.00404C20
0056E9CC|.75 0D JNZ SHORT Proteank.0056E9DB
0056E9CE|.8D45 D4 LEA EAX,DWORD PTR SS:
0056E9D1|.BA A4F25600 MOV EDX,Proteank.0056F2A4
0056E9D6|.E8 E15EE9FF CALL Proteank.004048BC
0056E9DB|>8D55 A0 LEA EDX,DWORD PTR SS:
0056E9DE|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056E9E4|.E8 57FEEDFF CALL Proteank.0044E840
0056E9E9|.8B45 A0 MOV EAX,DWORD PTR SS:
0056E9EC|.BA B0F25600 MOV EDX,Proteank.0056F2B0 ;1
0056E9F1|.E8 2A62E9FF CALL Proteank.00404C20
0056E9F6|.75 0D JNZ SHORT Proteank.0056EA05
0056E9F8|.8D45 D4 LEA EAX,DWORD PTR SS:
0056E9FB|.BA BCF25600 MOV EDX,Proteank.0056F2BC ;f
0056EA00|.E8 B75EE9FF CALL Proteank.004048BC
0056EA05|>8D55 9C LEA EDX,DWORD PTR SS:
0056EA08|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EA0E|.E8 2DFEEDFF CALL Proteank.0044E840
0056EA13|.8B45 9C MOV EAX,DWORD PTR SS:
0056EA16|.BA C8F25600 MOV EDX,Proteank.0056F2C8 ;2
0056EA1B|.E8 0062E9FF CALL Proteank.00404C20
0056EA20|.75 0D JNZ SHORT Proteank.0056EA2F
0056EA22|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EA25|.BA D4F25600 MOV EDX,Proteank.0056F2D4 ;g
0056EA2A|.E8 8D5EE9FF CALL Proteank.004048BC
0056EA2F|>8D55 98 LEA EDX,DWORD PTR SS:
0056EA32|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EA38|.E8 03FEEDFF CALL Proteank.0044E840
0056EA3D|.8B45 98 MOV EAX,DWORD PTR SS:
0056EA40|.BA E0F25600 MOV EDX,Proteank.0056F2E0 ;3
0056EA45|.E8 D661E9FF CALL Proteank.00404C20
0056EA4A|.75 0D JNZ SHORT Proteank.0056EA59
0056EA4C|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EA4F|.BA ECF25600 MOV EDX,Proteank.0056F2EC ;h
0056EA54|.E8 635EE9FF CALL Proteank.004048BC
0056EA59|>8D55 94 LEA EDX,DWORD PTR SS:
0056EA5C|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EA62|.E8 D9FDEDFF CALL Proteank.0044E840
0056EA67|.8B45 94 MOV EAX,DWORD PTR SS:
0056EA6A|.BA F8F25600 MOV EDX,Proteank.0056F2F8 ;4
0056EA6F|.E8 AC61E9FF CALL Proteank.00404C20
0056EA74|.75 0D JNZ SHORT Proteank.0056EA83
0056EA76|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EA79|.BA 04F35600 MOV EDX,Proteank.0056F304 ;i
0056EA7E|.E8 395EE9FF CALL Proteank.004048BC
0056EA83|>8D55 90 LEA EDX,DWORD PTR SS:
0056EA86|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EA8C|.E8 AFFDEDFF CALL Proteank.0044E840
0056EA91|.8B45 90 MOV EAX,DWORD PTR SS:
0056EA94|.BA 10F35600 MOV EDX,Proteank.0056F310 ;5
0056EA99|.E8 8261E9FF CALL Proteank.00404C20
0056EA9E|.75 0D JNZ SHORT Proteank.0056EAAD
0056EAA0|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EAA3|.BA 1CF35600 MOV EDX,Proteank.0056F31C ;j
0056EAA8|.E8 0F5EE9FF CALL Proteank.004048BC
0056EAAD|>8D55 8C LEA EDX,DWORD PTR SS:
0056EAB0|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EAB6|.E8 85FDEDFF CALL Proteank.0044E840
0056EABB|.8B45 8C MOV EAX,DWORD PTR SS:
0056EABE|.BA 28F35600 MOV EDX,Proteank.0056F328 ;6
0056EAC3|.E8 5861E9FF CALL Proteank.00404C20
0056EAC8|.75 0D JNZ SHORT Proteank.0056EAD7
0056EACA|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EACD|.BA 34F35600 MOV EDX,Proteank.0056F334 ;k
0056EAD2|.E8 E55DE9FF CALL Proteank.004048BC
0056EAD7|>8D55 88 LEA EDX,DWORD PTR SS:
0056EADA|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EAE0|.E8 5BFDEDFF CALL Proteank.0044E840
0056EAE5|.8B45 88 MOV EAX,DWORD PTR SS:
0056EAE8|.BA 40F35600 MOV EDX,Proteank.0056F340 ;7
0056EAED|.E8 2E61E9FF CALL Proteank.00404C20
0056EAF2|.75 0D JNZ SHORT Proteank.0056EB01
0056EAF4|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EAF7|.BA 4CF35600 MOV EDX,Proteank.0056F34C ;l
0056EAFC|.E8 BB5DE9FF CALL Proteank.004048BC
0056EB01|>8D55 84 LEA EDX,DWORD PTR SS:
0056EB04|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EB0A|.E8 31FDEDFF CALL Proteank.0044E840
0056EB0F|.8B45 84 MOV EAX,DWORD PTR SS:
0056EB12|.BA 58F35600 MOV EDX,Proteank.0056F358 ;8
0056EB17|.E8 0461E9FF CALL Proteank.00404C20
0056EB1C|.75 0D JNZ SHORT Proteank.0056EB2B
0056EB1E|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EB21|.BA 64F35600 MOV EDX,Proteank.0056F364 ;m
0056EB26|.E8 915DE9FF CALL Proteank.004048BC
0056EB2B|>8D55 80 LEA EDX,DWORD PTR SS:
0056EB2E|.8B83 28030000 MOV EAX,DWORD PTR DS:
0056EB34|.E8 07FDEDFF CALL Proteank.0044E840
0056EB39|.8B45 80 MOV EAX,DWORD PTR SS:
0056EB3C|.BA 70F35600 MOV EDX,Proteank.0056F370 ;9
0056EB41|.E8 DA60E9FF CALL Proteank.00404C20
0056EB46|.75 0D JNZ SHORT Proteank.0056EB55
0056EB48|.8D45 D4 LEA EAX,DWORD PTR SS:
0056EB4B|.BA 7CF35600 MOV EDX,Proteank.0056F37C ;n
0056EB50|.E8 675DE9FF CALL Proteank.004048BC
0056EB55|>8D95 7CFFFFFF LEA EDX,DWORD PTR SS:
0056EB5B|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056EB61|.E8 DAFCEDFF CALL Proteank.0044E840
0056EB66|.8B85 7CFFFFFF MOV EAX,DWORD PTR SS:
0056EB6C|.BA 98F25600 MOV EDX,Proteank.0056F298 ;0
0056EB71|.E8 AA60E9FF CALL Proteank.00404C20
0056EB76|.75 0D JNZ SHORT Proteank.0056EB85
0056EB78|.8D45 D0 LEA EAX,DWORD PTR SS:
0056EB7B|.BA A4F25600 MOV EDX,Proteank.0056F2A4 ;e
0056EB80|.E8 375DE9FF CALL Proteank.004048BC
0056EB85|>8D95 78FFFFFF LEA EDX,DWORD PTR SS:
0056EB8B|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056EB91|.E8 AAFCEDFF CALL Proteank.0044E840
0056EB96|.8B85 78FFFFFF MOV EAX,DWORD PTR SS:
0056EB9C|.BA B0F25600 MOV EDX,Proteank.0056F2B0 ;1
0056EBA1|.E8 7A60E9FF CALL Proteank.00404C20
0056EBA6|.75 0D JNZ SHORT Proteank.0056EBB5
0056EBA8|.8D45 D0 LEA EAX,DWORD PTR SS:
0056EBAB|.BA BCF25600 MOV EDX,Proteank.0056F2BC ;f
0056EBB0|.E8 075DE9FF CALL Proteank.004048BC
0056EBB5|>8D95 74FFFFFF LEA EDX,DWORD PTR SS:
0056EBBB|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056EBC1|.E8 7AFCEDFF CALL Proteank.0044E840
0056EBC6|.8B85 74FFFFFF MOV EAX,DWORD PTR SS:
0056EBCC|.BA C8F25600 MOV EDX,Proteank.0056F2C8 ;2
0056EBD1|.E8 4A60E9FF CALL Proteank.00404C20
0056EBD6|.75 0D JNZ SHORT Proteank.0056EBE5
0056EBD8|.8D45 D0 LEA EAX,DWORD PTR SS:
0056EBDB|.BA D4F25600 MOV EDX,Proteank.0056F2D4 ;g
0056EBE0|.E8 D75CE9FF CALL Proteank.004048BC
0056EBE5|>8D95 70FFFFFF LEA EDX,DWORD PTR SS:
0056EBEB|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056EBF1|.E8 4AFCEDFF CALL Proteank.0044E840
0056EBF6|.8B85 70FFFFFF MOV EAX,DWORD PTR SS:
0056EBFC|.BA E0F25600 MOV EDX,Proteank.0056F2E0 ;3
0056EC01|.E8 1A60E9FF CALL Proteank.00404C20
0056EC06|.75 0D JNZ SHORT Proteank.0056EC15
0056EC08|.8D45 D0 LEA EAX,DWORD PTR SS:
0056EC0B|.BA ECF25600 MOV EDX,Proteank.0056F2EC ;h
0056EC10|.E8 A75CE9FF CALL Proteank.004048BC
0056EC15|>8D95 6CFFFFFF LEA EDX,DWORD PTR SS:
0056EC1B|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056EC21|.E8 1AFCEDFF CALL Proteank.0044E840
0056EC26|.8B85 6CFFFFFF MOV EAX,DWORD PTR SS:
0056EC2C|.BA F8F25600 MOV EDX,Proteank.0056F2F8 ;4
0056EC31|.E8 EA5FE9FF CALL Proteank.00404C20
0056EC36|.75 0D JNZ SHORT Proteank.0056EC45
0056EC38|.8D45 D0 LEA EAX,DWORD PTR SS:
0056EC3B|.BA 04F35600 MOV EDX,Proteank.0056F304 ;i
0056EC40|.E8 775CE9FF CALL Proteank.004048BC
0056EC45|>8D95 68FFFFFF LEA EDX,DWORD PTR SS:
0056EC4B|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056EC51|.E8 EAFBEDFF CALL Proteank.0044E840
0056EC56|.8B85 68FFFFFF MOV EAX,DWORD PTR SS:
0056EC5C|.BA 10F35600 MOV EDX,Proteank.0056F310 ;5
0056EC61|.E8 BA5FE9FF CALL Proteank.00404C20
0056EC66|.75 0D JNZ SHORT Proteank.0056EC75
0056EC68|.8D45 D0 LEA EAX,DWORD PTR SS:
0056EC6B|.BA 1CF35600 MOV EDX,Proteank.0056F31C ;j
0056EC70|.E8 475CE9FF CALL Proteank.004048BC
0056EC75|>8D95 64FFFFFF LEA EDX,DWORD PTR SS:
0056EC7B|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056EC81|.E8 BAFBEDFF CALL Proteank.0044E840
0056EC86|.8B85 64FFFFFF MOV EAX,DWORD PTR SS:
0056EC8C|.BA 28F35600 MOV EDX,Proteank.0056F328 ;6
0056EC91|.E8 8A5FE9FF CALL Proteank.00404C20
0056EC96|.75 0D JNZ SHORT Proteank.0056ECA5
0056EC98|.8D45 D0 LEA EAX,DWORD PTR SS:
0056EC9B|.BA 34F35600 MOV EDX,Proteank.0056F334 ;k
0056ECA0|.E8 175CE9FF CALL Proteank.004048BC
0056ECA5|>8D95 60FFFFFF LEA EDX,DWORD PTR SS:
0056ECAB|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056ECB1|.E8 8AFBEDFF CALL Proteank.0044E840
0056ECB6|.8B85 60FFFFFF MOV EAX,DWORD PTR SS:
0056ECBC|.BA 40F35600 MOV EDX,Proteank.0056F340 ;7
0056ECC1|.E8 5A5FE9FF CALL Proteank.00404C20
0056ECC6|.75 0D JNZ SHORT Proteank.0056ECD5
0056ECC8|.8D45 D0 LEA EAX,DWORD PTR SS:
0056ECCB|.BA 4CF35600 MOV EDX,Proteank.0056F34C ;l
0056ECD0|.E8 E75BE9FF CALL Proteank.004048BC
0056ECD5|>8D95 5CFFFFFF LEA EDX,DWORD PTR SS:
0056ECDB|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056ECE1|.E8 5AFBEDFF CALL Proteank.0044E840
0056ECE6|.8B85 5CFFFFFF MOV EAX,DWORD PTR SS:
0056ECEC|.BA 58F35600 MOV EDX,Proteank.0056F358 ;8
0056ECF1|.E8 2A5FE9FF CALL Proteank.00404C20
0056ECF6|.75 0D JNZ SHORT Proteank.0056ED05
0056ECF8|.8D45 D0 LEA EAX,DWORD PTR SS:
0056ECFB|.BA 64F35600 MOV EDX,Proteank.0056F364 ;m
0056ED00|.E8 B75BE9FF CALL Proteank.004048BC
0056ED05|>8D95 58FFFFFF LEA EDX,DWORD PTR SS:
0056ED0B|.8B83 3C030000 MOV EAX,DWORD PTR DS:
0056ED11|.E8 2AFBEDFF CALL Proteank.0044E840
0056ED16|.8B85 58FFFFFF MOV EAX,DWORD PTR SS:
0056ED1C|.BA 70F35600 MOV EDX,Proteank.0056F370 ;9
0056ED21|.E8 FA5EE9FF CALL Proteank.00404C20
0056ED26|.75 0D JNZ SHORT Proteank.0056ED35
0056ED28|.8D45 D0 LEA EAX,DWORD PTR SS:
0056ED2B|.BA 7CF35600 MOV EDX,Proteank.0056F37C ;n
0056ED30|.E8 875BE9FF CALL Proteank.004048BC
0056ED35|>8D95 50FFFFFF LEA EDX,DWORD PTR SS:
0056ED3B|.8B83 FC020000 MOV EAX,DWORD PTR DS:
0056ED41|.E8 FAFAEDFF CALL Proteank.0044E840
0056ED46|.FFB5 50FFFFFF PUSH DWORD PTR SS:
0056ED4C|.8D95 4CFFFFFF LEA EDX,DWORD PTR SS:
0056ED52|.8B83 00030000 MOV EAX,DWORD PTR DS:
0056ED58|.E8 E3FAEDFF CALL Proteank.0044E840
0056ED5D|.FFB5 4CFFFFFF PUSH DWORD PTR SS:
0056ED63|.8D95 48FFFFFF LEA EDX,DWORD PTR SS:
0056ED69|.8B83 04030000 MOV EAX,DWORD PTR DS:
0056ED6F|.E8 CCFAEDFF CALL Proteank.0044E840
0056ED74|.FFB5 48FFFFFF PUSH DWORD PTR SS:
0056ED7A|.8D85 54FFFFFF LEA EAX,DWORD PTR SS:
0056ED80|.BA 03000000 MOV EDX,3
0056ED85|.E8 125EE9FF CALL Proteank.00404B9C
0056ED8A|.8B85 54FFFFFF MOV EAX,DWORD PTR SS:
0056ED90|.E8 BBA5E9FF CALL Proteank.00409350
0056ED95|.8BF0 MOV ESI,EAX
0056ED97|.8D95 44FFFFFF LEA EDX,DWORD PTR SS:
0056ED9D|.8B83 0C030000 MOV EAX,DWORD PTR DS:
0056EDA3|.E8 98FAEDFF CALL Proteank.0044E840
0056EDA8|.8B85 44FFFFFF MOV EAX,DWORD PTR SS:
0056EDAE|.E8 9DA5E9FF CALL Proteank.00409350
0056EDB3|.8BF8 MOV EDI,EAX
0056EDB5|.8D95 40FFFFFF LEA EDX,DWORD PTR SS:
0056EDBB|.8B83 10030000 MOV EAX,DWORD PTR DS:
0056EDC1|.E8 7AFAEDFF CALL Proteank.0044E840
0056EDC6|.8B85 40FFFFFF MOV EAX,DWORD PTR SS:
0056EDCC|.E8 7FA5E9FF CALL Proteank.00409350
0056EDD1|.8945 FC MOV DWORD PTR SS:,EAX
0056EDD4|.8D95 3CFFFFFF LEA EDX,DWORD PTR SS:
0056EDDA|.8B83 14030000 MOV EAX,DWORD PTR DS:
0056EDE0|.E8 5BFAEDFF CALL Proteank.0044E840
0056EDE5|.8B85 3CFFFFFF MOV EAX,DWORD PTR SS:
0056EDEB|.E8 60A5E9FF CALL Proteank.00409350
0056EDF0|.8945 F8 MOV DWORD PTR SS:,EAX
0056EDF3|.8D95 38FFFFFF LEA EDX,DWORD PTR SS:
0056EDF9|.8B83 1C030000 MOV EAX,DWORD PTR DS:
0056EDFF|.E8 3CFAEDFF CALL Proteank.0044E840
0056EE04|.8D85 38FFFFFF LEA EAX,DWORD PTR SS:
0056EE0A|.50 PUSH EAX
0056EE0B|.8D95 34FFFFFF LEA EDX,DWORD PTR SS:
0056EE11|.8B83 18030000 MOV EAX,DWORD PTR DS:
0056EE17|.E8 24FAEDFF CALL Proteank.0044E840
0056EE1C|.8B95 34FFFFFF MOV EDX,DWORD PTR SS:
0056EE22|.58 POP EAX
0056EE23|.E8 BC5CE9FF CALL Proteank.00404AE4
0056EE28|.8B85 38FFFFFF MOV EAX,DWORD PTR SS:
0056EE2E|.E8 1DA5E9FF CALL Proteank.00409350
0056EE33|.8945 F4 MOV DWORD PTR SS:,EAX
0056EE36|.8D95 30FFFFFF LEA EDX,DWORD PTR SS:
0056EE3C|.8B83 24030000 MOV EAX,DWORD PTR DS:
0056EE42|.E8 F9F9EDFF CALL Proteank.0044E840
0056EE47|.8D85 30FFFFFF LEA EAX,DWORD PTR SS:
0056EE4D|.50 PUSH EAX
0056EE4E|.8D95 2CFFFFFF LEA EDX,DWORD PTR SS:
0056EE54|.8B83 20030000 MOV EAX,DWORD PTR DS:
0056EE5A|.E8 E1F9EDFF CALL Proteank.0044E840
0056EE5F|.8B95 2CFFFFFF MOV EDX,DWORD PTR SS:
0056EE65|.58 POP EAX
0056EE66|.E8 795CE9FF CALL Proteank.00404AE4
0056EE6B|.8B85 30FFFFFF MOV EAX,DWORD PTR SS:
0056EE71|.E8 DAA4E9FF CALL Proteank.00409350
0056EE76|.8945 F0 MOV DWORD PTR SS:,EAX
0056EE79|.8D95 28FFFFFF LEA EDX,DWORD PTR SS:
0056EE7F|.8B83 2C030000 MOV EAX,DWORD PTR DS:
0056EE85|.E8 B6F9EDFF CALL Proteank.0044E840
0056EE8A|.8B85 28FFFFFF MOV EAX,DWORD PTR SS:
0056EE90|.E8 BBA4E9FF CALL Proteank.00409350
0056EE95|.8945 EC MOV DWORD PTR SS:,EAX
0056EE98|.8D95 24FFFFFF LEA EDX,DWORD PTR SS:
0056EE9E|.8B83 30030000 MOV EAX,DWORD PTR DS:
0056EEA4|.E8 97F9EDFF CALL Proteank.0044E840
0056EEA9|.8B85 24FFFFFF MOV EAX,DWORD PTR SS:
0056EEAF|.E8 9CA4E9FF CALL Proteank.00409350
0056EEB4|.8945 E8 MOV DWORD PTR SS:,EAX
0056EEB7|.8D95 20FFFFFF LEA EDX,DWORD PTR SS:
0056EEBD|.8B83 34030000 MOV EAX,DWORD PTR DS:
0056EEC3|.E8 78F9EDFF CALL Proteank.0044E840
0056EEC8|.8B85 20FFFFFF MOV EAX,DWORD PTR SS:
0056EECE|.E8 7DA4E9FF CALL Proteank.00409350
0056EED3|.8945 E4 MOV DWORD PTR SS:,EAX
0056EED6|.8D95 1CFFFFFF LEA EDX,DWORD PTR SS:
0056EEDC|.8B83 38030000 MOV EAX,DWORD PTR DS:
0056EEE2|.E8 59F9EDFF CALL Proteank.0044E840
0056EEE7|.8B85 1CFFFFFF MOV EAX,DWORD PTR SS:
0056EEED|.E8 5EA4E9FF CALL Proteank.00409350
0056EEF2|.8945 E0 MOV DWORD PTR SS:,EAX
0056EEF5|.8D95 18FFFFFF LEA EDX,DWORD PTR SS:
0056EEFB|.8B83 40030000 MOV EAX,DWORD PTR DS:
0056EF01|.E8 3AF9EDFF CALL Proteank.0044E840
0056EF06|.8B85 18FFFFFF MOV EAX,DWORD PTR SS:
0056EF0C|.E8 3FA4E9FF CALL Proteank.00409350
0056EF11|.8945 DC MOV DWORD PTR SS:,EAX
0056EF14|.FF75 D8 PUSH DWORD PTR SS:
0056EF17|.8BC6 MOV EAX,ESI ;取注册代码1中的前三位给EAX
0056EF19|.2BC7 SUB EAX,EDI ;减去注册代码1中的第五位给EAX
0056EF1B|.99 CDQ
0056EF1C|.33C2 XOR EAX,EDX
0056EF1E|.2BC2 SUB EAX,EDX
0056EF20|.0345 FC ADD EAX,DWORD PTR SS: ;加注册代码1中的第六位给EAX
0056EF23|.8D95 10FFFFFF LEA EDX,DWORD PTR SS:
0056EF29|.E8 BEA3E9FF CALL Proteank.004092EC
0056EF2E|.FFB5 10FFFFFF PUSH DWORD PTR SS:
0056EF34|.FF75 D4 PUSH DWORD PTR SS:
0056EF37|.8B45 F4 MOV EAX,DWORD PTR SS: ;取注册代码2中的第二、三位对调之后数给EAX
0056EF3A|.0345 F8 ADD EAX,DWORD PTR SS: ;加注册代码2中的第一位给EAX
0056EF3D|.0345 F0 ADD EAX,DWORD PTR SS: ;加注册代码2中的第四、五位对调之后数给EAX
0056EF40|.99 CDQ
0056EF41|.33C2 XOR EAX,EDX
0056EF43|.2BC2 SUB EAX,EDX
0056EF45|.8D95 0CFFFFFF LEA EDX,DWORD PTR SS:
0056EF4B|.E8 9CA3E9FF CALL Proteank.004092EC
0056EF50|.FFB5 0CFFFFFF PUSH DWORD PTR SS:
0056EF56|.FF75 D0 PUSH DWORD PTR SS:
0056EF59|.8B45 E0 MOV EAX,DWORD PTR SS: ;取注册代码3中的第四位给EAX
0056EF5C|.F76D E4 IMUL DWORD PTR SS: ;乘以注册代码3中的第三位给EAX
0056EF5F|.F76D E8 IMUL DWORD PTR SS: ;乘以注册代码3中的第二位给EAX
0056EF62|.0345 EC ADD EAX,DWORD PTR SS: ;加注册代码3中的第一位给EAX
0056EF65|.0345 DC ADD EAX,DWORD PTR SS: ;加注册代码3中的第六位给EAX
0056EF68|.99 CDQ
0056EF69|.33C2 XOR EAX,EDX
0056EF6B|.2BC2 SUB EAX,EDX
0056EF6D|.8D95 08FFFFFF LEA EDX,DWORD PTR SS:
0056EF73|.E8 74A3E9FF CALL Proteank.004092EC
0056EF78|.FFB5 08FFFFFF PUSH DWORD PTR SS:
0056EF7E|.8D95 04FFFFFF LEA EDX,DWORD PTR SS:
0056EF84|.8B83 0C030000 MOV EAX,DWORD PTR DS:
0056EF8A|.E8 B1F8EDFF CALL Proteank.0044E840
0056EF8F|.FFB5 04FFFFFF PUSH DWORD PTR SS:
0056EF95|.8D95 00FFFFFF LEA EDX,DWORD PTR SS:
0056EF9B|.8B83 1C030000 MOV EAX,DWORD PTR DS:
0056EFA1|.E8 9AF8EDFF CALL Proteank.0044E840
0056EFA6|.FFB5 00FFFFFF PUSH DWORD PTR SS:
0056EFAC|.8D95 FCFEFFFF LEA EDX,DWORD PTR SS:
0056EFB2|.8B83 34030000 MOV EAX,DWORD PTR DS:
0056EFB8|.E8 83F8EDFF CALL Proteank.0044E840
0056EFBD|.FFB5 FCFEFFFF PUSH DWORD PTR SS:
0056EFC3|.8D85 14FFFFFF LEA EAX,DWORD PTR SS:
0056EFC9|.BA 09000000 MOV EDX,9
0056EFCE|.E8 C95BE9FF CALL Proteank.00404B9C
0056EFD3|.8B95 14FFFFFF MOV EDX,DWORD PTR SS:
0056EFD9|.8B83 58030000 MOV EAX,DWORD PTR DS:
0056EFDF|.E8 8CF8EDFF CALL Proteank.0044E870
0056EFE4|.8D95 F8FEFFFF LEA EDX,DWORD PTR SS:
0056EFEA|.8B83 4C030000 MOV EAX,DWORD PTR DS:
0056EFF0|.E8 4BF8EDFF CALL Proteank.0044E840
0056EFF5|.8B85 F8FEFFFF MOV EAX,DWORD PTR SS:
0056EFFB|.BA 88F35600 MOV EDX,Proteank.0056F388 ;liwenkang
0056F000|.E8 1B5CE9FF CALL Proteank.00404C20
0056F005|.75 68 JNZ SHORT Proteank.0056F06F
0056F007|.8D95 F4FEFFFF LEA EDX,DWORD PTR SS:
0056F00D|.8B83 50030000 MOV EAX,DWORD PTR DS:
0056F013|.E8 28F8EDFF CALL Proteank.0044E840
0056F018|.8B85 F4FEFFFF MOV EAX,DWORD PTR SS:
0056F01E|.BA 9CF35600 MOV EDX,Proteank.0056F39C ;svs
0056F023|.E8 F85BE9FF CALL Proteank.00404C20
0056F028|.75 45 JNZ SHORT Proteank.0056F06F
0056F02A|.8D95 F0FEFFFF LEA EDX,DWORD PTR SS:
0056F030|.8B83 54030000 MOV EAX,DWORD PTR DS:
0056F036|.E8 05F8EDFF CALL Proteank.0044E840
0056F03B|.8B85 F0FEFFFF MOV EAX,DWORD PTR SS:
0056F041|.BA A8F35600 MOV EDX,Proteank.0056F3A8 ;3262900
0056F046|.E8 D55BE9FF CALL Proteank.00404C20
0056F04B|.75 22 JNZ SHORT Proteank.0056F06F
0056F04D|.8D95 ECFEFFFF LEA EDX,DWORD PTR SS:
0056F053|.8B83 58030000 MOV EAX,DWORD PTR DS:
0056F059|.E8 E2F7EDFF CALL Proteank.0044E840
0056F05E|.8B95 ECFEFFFF MOV EDX,DWORD PTR SS:
0056F064|.8B83 54030000 MOV EAX,DWORD PTR DS:
0056F06A|.E8 01F8EDFF CALL Proteank.0044E870
0056F06F|>8D95 E8FEFFFF LEA EDX,DWORD PTR SS:
0056F075|.8B83 54030000 MOV EAX,DWORD PTR DS:
0056F07B|.E8 C0F7EDFF CALL Proteank.0044E840
0056F080|.8B85 E8FEFFFF MOV EAX,DWORD PTR SS:
0056F086|.50 PUSH EAX
0056F087|.8D95 E4FEFFFF LEA EDX,DWORD PTR SS:
0056F08D|.8B83 58030000 MOV EAX,DWORD PTR DS:
0056F093|.E8 A8F7EDFF CALL Proteank.0044E840
0056F098|.8B95 E4FEFFFF MOV EDX,DWORD PTR SS:
0056F09E|.58 POP EAX
0056F09F|.E8 7C5BE9FF CALL Proteank.00404C20 ;注册码比较CALL
0056F0A4|.0F85 60010000 JNZ Proteank.0056F20A
0056F0AA|.B2 01 MOV DL,1
0056F0AC|.A1 50214900 MOV EAX,DWORD PTR DS:
0056F0B1|.E8 0632F2FF CALL Proteank.004922BC
0056F0B6|.8B15 B4777E00 MOV EDX,DWORD PTR DS: ;Proteank.007E9404
0056F0BC|.8902 MOV DWORD PTR DS:,EAX
0056F0BE|.A1 B4777E00 MOV EAX,DWORD PTR DS:
0056F0C3|.8B00 MOV EAX,DWORD PTR DS:
0056F0C5|.BA 01000080 MOV EDX,80000001
0056F0CA|.E8 C932F2FF CALL Proteank.00492398
0056F0CF|.A1 B4777E00 MOV EAX,DWORD PTR DS:
0056F0D4|.8B00 MOV EAX,DWORD PTR DS:
0056F0D6|.B1 01 MOV CL,1
0056F0D8|.BA B8F35600 MOV EDX,Proteank.0056F3B8 ;control panel\desktop\change
0056F0DD|.E8 1E33F2FF CALL Proteank.00492400
0056F0E2|.84C0 TEST AL,AL
0056F0E4|.0F84 92000000 JE Proteank.0056F17C
0056F0EA|.8D95 E0FEFFFF LEA EDX,DWORD PTR SS:
0056F0F0|.8B83 4C030000 MOV EAX,DWORD PTR DS:
0056F0F6|.E8 45F7EDFF CALL Proteank.0044E840
0056F0FB|.8B8D E0FEFFFF MOV ECX,DWORD PTR SS:
0056F101|.A1 B4777E00 MOV EAX,DWORD PTR DS:
0056F106|.8B00 MOV EAX,DWORD PTR DS:
0056F108|.BA E0F35600 MOV EDX,Proteank.0056F3E0 ;name
0056F10D|.E8 8A34F2FF CALL Proteank.0049259C
0056F112|.8D95 DCFEFFFF LEA EDX,DWORD PTR SS:
0056F118|.8B83 50030000 MOV EAX,DWORD PTR DS:
0056F11E|.E8 1DF7EDFF CALL Proteank.0044E840
0056F123|.8B8D DCFEFFFF MOV ECX,DWORD PTR SS:
0056F129|.A1 B4777E00 MOV EAX,DWORD PTR DS:
0056F12E|.8B00 MOV EAX,DWORD PTR DS:
0056F130|.BA F0F35600 MOV EDX,Proteank.0056F3F0 ;office
0056F135|.E8 6234F2FF CALL Proteank.0049259C
0056F13A|.8D95 D8FEFFFF LEA EDX,DWORD PTR SS:
0056F140|.8B83 54030000 MOV EAX,DWORD PTR DS:
0056F146|.E8 F5F6EDFF CALL Proteank.0044E840
0056F14B|.8B8D D8FEFFFF MOV ECX,DWORD PTR SS:
0056F151|.A1 B4777E00 MOV EAX,DWORD PTR DS:
0056F156|.8B00 MOV EAX,DWORD PTR DS:
0056F158|.BA 00F45600 MOV EDX,Proteank.0056F400 ;id
0056F15D|.E8 3A34F2FF CALL Proteank.0049259C
0056F162|.A1 B4777E00 MOV EAX,DWORD PTR DS:
0056F167|.8B00 MOV EAX,DWORD PTR DS:
0056F169|.E8 FA31F2FF CALL Proteank.00492368
0056F16E|.A1 B4777E00 MOV EAX,DWORD PTR DS:
0056F173|.8B00 MOV EAX,DWORD PTR DS:
0056F175|.B2 01 MOV DL,1
0056F177|.8B08 MOV ECX,DWORD PTR DS:
0056F179|.FF51 FC CALL DWORD PTR DS:
0056F17C|>A1 387A7E00 MOV EAX,DWORD PTR DS:
0056F181|.C700 20000000 MOV DWORD PTR DS:,20
0056F187|.A1 387A7E00 MOV EAX,DWORD PTR DS:
0056F18C|.50 PUSH EAX ; /pMemStat => Proteank.007E9510
0056F18D|.E8 027FE9FF CALL Proteank.00407094 ; \GlobalMemoryStatus
0056F192|.A1 387A7E00 MOV EAX,DWORD PTR DS:
0056F197|.8B40 08 MOV EAX,DWORD PTR DS:
0056F19A|.50 PUSH EAX
0056F19B|.A1 647A7E00 MOV EAX,DWORD PTR DS:
0056F1A0|.8B00 MOV EAX,DWORD PTR DS:
0056F1A2|.B9 0CF45600 MOV ECX,Proteank.0056F40C ;memo
0056F1A7|.BA 1CF45600 MOV EDX,Proteank.0056F41C ;winner
0056F1AC|.8B30 MOV ESI,DWORD PTR DS:
0056F1AE|.FF56 0C CALL DWORD PTR DS:
0056F1B1|.8D95 D4FEFFFF LEA EDX,DWORD PTR SS:
0056F1B7|.8B83 54030000 MOV EAX,DWORD PTR DS:
0056F1BD|.E8 7EF6EDFF CALL Proteank.0044E840
0056F1C2|.8B85 D4FEFFFF MOV EAX,DWORD PTR SS:
0056F1C8|.50 PUSH EAX
0056F1C9|.A1 647A7E00 MOV EAX,DWORD PTR DS:
0056F1CE|.8B00 MOV EAX,DWORD PTR DS:
0056F1D0|.B9 00F45600 MOV ECX,Proteank.0056F400 ;id
0056F1D5|.BA 1CF45600 MOV EDX,Proteank.0056F41C ;winner
0056F1DA|.8B30 MOV ESI,DWORD PTR DS:
0056F1DC|.FF56 04 CALL DWORD PTR DS:
0056F1DF|.BA 1CF45600 MOV EDX,Proteank.0056F41C ;winner
0056F1E4|.8B83 5C030000 MOV EAX,DWORD PTR DS:
0056F1EA|.E8 81F6EDFF CALL Proteank.0044E870
0056F1EF|.E8 80E1E9FF CALL Proteank.0040D374
0056F1F4|.B8 2CF45600 MOV EAX,Proteank.0056F42C ;注册完成！\n\n谢谢您使用守护者软件！
0056F1F9|.E8 5E84EDFF CALL Proteank.0044765C
0056F1FE|.A1 54907E00 MOV EAX,DWORD PTR DS:
0056F203|.E8 0CCFEFFF CALL Proteank.0046C114
0056F208|.EB 2D JMP SHORT Proteank.0056F237
0056F20A|>A1 3C797E00 MOV EAX,DWORD PTR DS:
0056F20F|.8300 12 ADD DWORD PTR DS:,12
0056F212|.A1 3C797E00 MOV EAX,DWORD PTR DS:
0056F217|.8338 58 CMP DWORD PTR DS:,58
0056F21A|.7E 1B JLE SHORT Proteank.0056F237
0056F21C|.E8 53E1E9FF CALL Proteank.0040D374
0056F221|.B8 58F45600 MOV EAX,Proteank.0056F458 ;您的注册错误次数太多，软件即将关闭！
0056F226|.E8 3184EDFF CALL Proteank.0044765C
0056F22B|.A1 507C7E00 MOV EAX,DWORD PTR DS:
0056F230|.8B00 MOV EAX,DWORD PTR DS:
0056F232|.E8 DDCEEFFF CALL Proteank.0046C114
0056F237|>33C0 XOR EAX,EAX
0056F239|.5A POP EDX
0056F23A|.59 POP ECX
0056F23B|.59 POP ECX
0056F23C|.64:8910 MOV DWORD PTR FS:,EDX
0056F23F|.68 89F25600 PUSH Proteank.0056F289
0056F244|>8D85 D4FEFFFF LEA EAX,DWORD PTR SS:
0056F24A|.BA 0D000000 MOV EDX,0D
0056F24F|.E8 F455E9FF CALL Proteank.00404848
0056F254|.8D85 08FFFFFF LEA EAX,DWORD PTR SS:
0056F25A|.BA 04000000 MOV EDX,4
0056F25F|.E8 E455E9FF CALL Proteank.00404848
0056F264|.8D85 18FFFFFF LEA EAX,DWORD PTR SS:
0056F26A|.BA 2E000000 MOV EDX,2E
0056F26F|.E8 D455E9FF CALL Proteank.00404848
0056F274|.8D45 D0 LEA EAX,DWORD PTR SS:
0056F277|.BA 03000000 MOV EDX,3
0056F27C|.E8 C755E9FF CALL Proteank.00404848
0056F281\.C3 RETN
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
提供几个注册码：
123456-345678-789012
123-5+6=124
54+3+76=133
0*9*8+7+2=9
I124M133F9559----->注册码
123456-345678-244024
123-5+6=124
54+3+76=133
0*4*4+2+4=6
I124M133G6554----->注册码
987654-321098-765432
987-5+4=986
12+3+90=105
4*5*6+7+2=129
K986M105H 5
K986M105H129515----->注册码
987644-322098-765422
987-4+4=987
22+3+90=115
4*5*6+7+2=129
K987M115G129425----->注册码
1234567890
FGHIJKLMNE
SN1、注册代码1中的第四位作索引取字符串“FGHIJKLMNE”中的字母。
SN2、取注册代码1中的前三位数减去注册代码1中的第五位数再加注册代码1中的第六位数。
SN3、注册代码2中的第六位作索引取字符串“FGHIJKLMNE”中的字母。
SN4、取注册代码2中的第二、三位对调之后的数加注册代码2中的第一位数再加注册代码2中的第四、五位对调之后的数。
SN5、注册代码3中的第五位作索引取字符串“FGHIJKLMNE”中的字母。
SN6、取注册代码3中的第四位数乘以注册代码3中的第三位数再乘以注册代码3中的第二位数接着加注册代码3中的第一位数再加注册代码3中的第六位数。
SN7、取注册代码1中的第五位数。
SN8、取注册代码2中的第三位数。
SN9、取注册代码3中的第三位数。
注册码为：SN1+SN2+SN3+SN4+SN5+SN6+SN7+SN8+SN9
注册代码1保存在中
注册代码2保存在中
注册代码3保存在中
注册信息保存在：（如果注册后再试，可修改REG键值）
"reg"=dword:00000001
"form6.top"=dword:00000032
"form6.left"=dword:000000bc
"name"="hbqjxhw"
"office"="hao"
"ID"="K987M115G129425"
"Skins"=dword:00000009
"part.width"=dword:00000400
"part.height"=dword:00000300
"picshow1"=dword:00000000
提供注册机，注册程序就不写了（偷懒）。
----------------------------------------------------------------------------------------------
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享:)
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!
----------------------------------------------------------------------------------------------
文章写于2006-03-03 23:30:20 学习一下 谢谢，很好的东西，学到了很多 顶啊!学习了! 这么好的文章我太佩服了!~~
页:
[1]