- UID
- 1874
注册时间2005-6-3
阅读权限30
最后登录1970-1-1
龙战于野
该用户从未签到
|
目标:里诺仓库管理软件(单机版) V3.30
下载:网上搜吧
目的:Study Only
- 00654050 /$ 55 PUSH EBP
- 00654051 |. 8BEC MOV EBP,ESP
- 00654053 |. B9 04000000 MOV ECX,4
- 00654058 |> 6A 00 /PUSH 0
- 0065405A |. 6A 00 |PUSH 0
- 0065405C |. 49 |DEC ECX
- 0065405D |.^ 75 F9 \JNZ SHORT Depot,1.00654058
- 0065405F |. 51 PUSH ECX
- 00654060 |. 53 PUSH EBX
- 00654061 |. 56 PUSH ESI
- 00654062 |. 8BF0 MOV ESI,EAX
- 00654064 |. 33C0 XOR EAX,EAX
- 00654066 |. 55 PUSH EBP
- 00654067 |. 68 65416500 PUSH Depot,1.00654165
- 0065406C |. 64:FF30 PUSH DWORD PTR FS:[EAX]
- 0065406F |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
- 00654072 |. 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
- 00654075 |. 8B86 08030000 MOV EAX,DWORD PTR DS:[ESI+308]
- 0065407B |. E8 5C42E3FF CALL Depot,1.004882DC
- 00654080 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8] ; 假码:1234
- 00654083 |. 8D55 FC LEA EDX,DWORD PTR SS:[EBP-4]
- 00654086 |. E8 6D59DBFF CALL Depot,1.004099F8
- 0065408B |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
- 0065408E |. 50 PUSH EAX ; PUSH 假码
- 0065408F |. 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14]
- 00654092 |. 8B86 04030000 MOV EAX,DWORD PTR DS:[ESI+304]
- 00654098 |. E8 3F42E3FF CALL Depot,1.004882DC
- 0065409D |. 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] ; 用户名:NAME
- 006540A0 |. 8D55 F0 LEA EDX,DWORD PTR SS:[EBP-10]
- 006540A3 |. E8 5059DBFF CALL Depot,1.004099F8
- 006540A8 |. 8B55 F0 MOV EDX,DWORD PTR SS:[EBP-10]
- 006540AB |. 8D4D F4 LEA ECX,DWORD PTR SS:[EBP-C]
- 006540AE |. 8BC6 MOV EAX,ESI
- 006540B0 |. E8 FF000000 CALL Depot,1.006541B4 ;计算注册码CALL
- 006540B5 |. 8B55 F4 MOV EDX,DWORD PTR SS:[EBP-C]
- ; 出现 ASCII "DEPw-54D4245d5-14E4"
- 006540B8 |. 58 POP EAX ; 取得 假码:1234
- 006540B9 |. E8 520DDBFF CALL Depot,1.00404E10 ; 比较
- 006540BE |. 75 50 JNZ SHORT Depot,1.00654110
复制代码
要做内存注册机上面信息就可以了
再下面算法跟踪和算法注册机我就不贴了,简单,大家可以练练手 |
|