-
-
[原创]简单替换加密
-
发表于: 2005-1-14 16:28 5197
-
www.wangssoft.com
营养咨询系统
Delphi
无壳
版本5.00
0059A27C /. 55 PUSH EBP
0059A27D |. 8BEC MOV EBP,ESP
0059A27F |. B9 06000000 MOV ECX,6
0059A284 |> 6A 00 /PUSH 0
0059A286 |. 6A 00 |PUSH 0
0059A288 |. 49 |DEC ECX
0059A289 |.^ 75 F9 \JNZ SHORT nutr.0059A284
0059A28B |. 51 PUSH ECX
0059A28C |. 53 PUSH EBX
0059A28D |. 8955 EC MOV DWORD PTR SS:[EBP-14],EDX
0059A290 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0059A293 |. 33C0 XOR EAX,EAX
0059A295 |. 55 PUSH EBP
0059A296 |. 68 6CA45900 PUSH nutr.0059A46C
0059A29B |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0059A29E |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0059A2A1 |. E8 26F0FFFF CALL nutr.005992CC
0059A2A6 |. 8BD0 MOV EDX,EAX
0059A2A8 |. 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8]
0059A2AB |. E8 9CA6E6FF CALL nutr.0040494C
0059A2B0 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0059A2B3 |. E8 5CA7E6FF CALL nutr.00404A14
0059A2B8 |. 85C0 TEST EAX,EAX
0059A2BA |. 75 37 JNZ SHORT nutr.0059A2F3
0059A2BC |. 8D55 E8 LEA EDX,DWORD PTR SS:[EBP-18]
0059A2BF |. B8 80A45900 MOV EAX,nutr.0059A480 ; ASCII "c:"
0059A2C4 |. E8 0FEFFFFF CALL nutr.005991D8
0059A2C9 |. 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18]
0059A2CC |. BA 8CA45900 MOV EDX,nutr.0059A48C ; ASCII "1234"
0059A2D1 |. E8 46A7E6FF CALL nutr.00404A1C
0059A2D6 |. 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18]
0059A2D9 |. 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
0059A2DC |. E8 8BF8FFFF CALL nutr.00599B6C
0059A2E1 |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
0059A2E4 |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8]
0059A2E7 |. BA 9CA45900 MOV EDX,nutr.0059A49C
0059A2EC |. E8 6FA7E6FF CALL nutr.00404A60
0059A2F1 |. EB 37 JMP SHORT nutr.0059A32A
0059A2F3 |> E8 D4EFFFFF CALL nutr.005992CC
0059A2F8 |. 8BD0 MOV EDX,EAX
0059A2FA |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0059A2FD |. E8 4AA6E6FF CALL nutr.0040494C
0059A302 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0059A305 |. BA 8CA45900 MOV EDX,nutr.0059A48C ; ASCII "1234"
0059A30A |. E8 0DA7E6FF CALL nutr.00404A1C
0059A30F |. 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C]
0059A312 |. 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
0059A315 |. E8 52F8FFFF CALL nutr.00599B6C
0059A31A |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
0059A31D |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8]
0059A320 |. BA A8A45900 MOV EDX,nutr.0059A4A8
0059A325 |. E8 36A7E6FF CALL nutr.00404A60
0059A32A |> 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
0059A32D |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0059A330 |. 8B80 04030000 MOV EAX,DWORD PTR DS:[EAX+304]
0059A336 |. E8 2D7AEAFF CALL nutr.00441D68
0059A33B |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20]
0059A33E |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0059A341 |. E8 1AF1FFFF CALL nutr.00599460------------------>跟进
0059A346 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]-------->根据输入的注册码产生的序列号
0059A349 |. 8B55 F0 MOV EDX,DWORD PTR SS:[EBP-10]------->软件的序列号
0059A34C |. E8 07A8E6FF CALL nutr.00404B58
0059A351 |. 0F85 B6000000 JNZ nutr.0059A40D------------------->跳走错误
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
00599460 /$ 55 PUSH EBP
00599461 |. 8BEC MOV EBP,ESP
00599463 |. B9 05000000 MOV ECX,5
00599468 |> 6A 00 /PUSH 0
0059946A |. 6A 00 |PUSH 0
0059946C |. 49 |DEC ECX
0059946D |.^ 75 F9 \JNZ SHORT nutr.00599468
0059946F |. 51 PUSH ECX
00599470 |. 53 PUSH EBX
00599471 |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
00599474 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
00599477 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0059947A |. E8 7DB7E6FF CALL nutr.00404BFC
0059947F |. 33C0 XOR EAX,EAX
00599481 |. 55 PUSH EBP
00599482 |. 68 AF995900 PUSH nutr.005999AF
00599487 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0059948A |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0059948D |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
00599490 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00599493 |. E8 F4FAE6FF CALL nutr.00408F8C
00599498 |. 8B55 E4 MOV EDX,DWORD PTR SS:[EBP-1C]
0059949B |. 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
0059949E |. E8 51B3E6FF CALL nutr.004047F4
005994A3 |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
005994A6 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
005994A9 |. E8 46B3E6FF CALL nutr.004047F4
005994AE |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
005994B1 |. E8 A6B2E6FF CALL nutr.0040475C
005994B6 |. 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14]
005994B9 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
005994BC |. E8 33B3E6FF CALL nutr.004047F4
005994C1 |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
005994C4 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
005994C7 |. E8 28B3E6FF CALL nutr.004047F4
005994CC |. 8D4D EC LEA ECX,DWORD PTR SS:[EBP-14]
005994CF |. BA 02000000 MOV EDX,2
005994D4 |. 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10]
005994D7 |. E8 D825EAFF CALL nutr.0043BAB4
005994DC |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
005994DF |. E8 28B7E6FF CALL nutr.00404C0C
005994E4 |. E8 F707E7FF CALL nutr.00409CE0
005994E9 |. 50 PUSH EAX
005994EA |. 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
005994ED |. E8 1AB7E6FF CALL nutr.00404C0C
005994F2 |. E8 E907E7FF CALL nutr.00409CE0
005994F7 |. 5A POP EDX
005994F8 |. 2BD0 SUB EDX,EAX
005994FA |. 8D4D F4 LEA ECX,DWORD PTR SS:[EBP-C]
005994FD |. 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10]
00599500 |. E8 9325EAFF CALL nutr.0043BA98
00599505 |. 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
00599508 |. 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
0059950B |. E8 4C25EAFF CALL nutr.0043BA5C
00599510 |. 8B55 E0 MOV EDX,DWORD PTR SS:[EBP-20]
00599513 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
00599516 |. E8 01B5E6FF CALL nutr.00404A1C
0059951B |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
0059951E |. 8B55 F4 MOV EDX,DWORD PTR SS:[EBP-C]
00599521 |. E8 CEB2E6FF CALL nutr.004047F4
00599526 |. EB 70 JMP SHORT nutr.00599598
00599528 |> 8B45 EC /MOV EAX,DWORD PTR SS:[EBP-14]
0059952B |. E8 DCB6E6FF |CALL nutr.00404C0C
00599530 |. E8 AB07E7FF |CALL nutr.00409CE0
00599535 |. 8BD0 |MOV EDX,EAX
00599537 |. 42 |INC EDX
00599538 |. 8D4D DC |LEA ECX,DWORD PTR SS:[EBP-24]
0059953B |. 8B45 F0 |MOV EAX,DWORD PTR SS:[EBP-10]
0059953E |. E8 7125EAFF |CALL nutr.0043BAB4
00599543 |. 8B55 DC |MOV EDX,DWORD PTR SS:[EBP-24]
00599546 |. 8D45 EC |LEA EAX,DWORD PTR SS:[EBP-14]
00599549 |. E8 A6B2E6FF |CALL nutr.004047F4
0059954E |. 8B45 FC |MOV EAX,DWORD PTR SS:[EBP-4]
00599551 |. E8 B6B6E6FF |CALL nutr.00404C0C
00599556 |. E8 8507E7FF |CALL nutr.00409CE0
0059955B |. 50 |PUSH EAX
0059955C |. 8B45 EC |MOV EAX,DWORD PTR SS:[EBP-14]
0059955F |. E8 A8B6E6FF |CALL nutr.00404C0C
00599564 |. E8 7707E7FF |CALL nutr.00409CE0
00599569 |. 5A |POP EDX
0059956A |. 2BD0 |SUB EDX,EAX
0059956C |. 8D4D F4 |LEA ECX,DWORD PTR SS:[EBP-C]
0059956F |. 8B45 F0 |MOV EAX,DWORD PTR SS:[EBP-10]
00599572 |. E8 2125EAFF |CALL nutr.0043BA98
00599577 |. 8D55 D8 |LEA EDX,DWORD PTR SS:[EBP-28]
0059957A |. 8B45 EC |MOV EAX,DWORD PTR SS:[EBP-14]
0059957D |. E8 DA24EAFF |CALL nutr.0043BA5C
00599582 |. 8B55 D8 |MOV EDX,DWORD PTR SS:[EBP-28]
00599585 |. 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C]
00599588 |. E8 8FB4E6FF |CALL nutr.00404A1C
0059958D |. 8D45 F0 |LEA EAX,DWORD PTR SS:[EBP-10]
00599590 |. 8B55 F4 |MOV EDX,DWORD PTR SS:[EBP-C]
00599593 |. E8 5CB2E6FF |CALL nutr.004047F4
00599598 |> 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
0059959B |. E8 6CB6E6FF |CALL nutr.00404C0C
005995A0 |. E8 3B07E7FF |CALL nutr.00409CE0
005995A5 |. 8BD8 |MOV EBX,EAX
005995A7 |. 8B45 F0 |MOV EAX,DWORD PTR SS:[EBP-10]
005995AA |. E8 5DB6E6FF |CALL nutr.00404C0C
005995AF |. E8 2C07E7FF |CALL nutr.00409CE0
005995B4 |. 3BD8 |CMP EBX,EAX
005995B6 |.^ 0F82 6CFFFFFF \JB nutr.00599528
005995BC |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
005995BF |. 8B55 F4 MOV EDX,DWORD PTR SS:[EBP-C]
005995C2 |. E8 2DB2E6FF CALL nutr.004047F4
005995C7 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
005995CA |. E8 8DB1E6FF CALL nutr.0040475C
005995CF |. E9 96030000 JMP nutr.0059996A
005995D4 |> 8B45 F0 /MOV EAX,DWORD PTR SS:[EBP-10]
005995D7 |. 8A00 |MOV AL,BYTE PTR DS:[EAX]
005995D9 |. 8845 EB |MOV BYTE PTR SS:[EBP-15],AL
005995DC |. 33C0 |XOR EAX,EAX
005995DE |. 8A45 EB |MOV AL,BYTE PTR SS:[EBP-15]
005995E1 |. 83C0 D0 |ADD EAX,-30 ; Switch (cases 30..7A)
005995E4 |. 83F8 4A |CMP EAX,4A
005995E7 |. 0F87 57030000 |JA nutr.00599944
005995ED |. 8A80 FA955900 |MOV AL,BYTE PTR DS:[EAX+5995FA]－－－－－》@@@
005995F3 |. FF2485 459659>|JMP DWORD PTR DS:[EAX*4+599645]
005995FA |. 0A |DB 0A ; Index table to switch 00599645
005995FB |. 01 |DB 01
005995FC |. 03 |DB 03
005995FD |. 05 |DB 05
005995FE |. 04 |DB 04
005995FF |. 02 |DB 02
00599600 |. 06 |DB 06
00599601 |. 07 |DB 07
00599602 |. 09 |DB 09
00599603 |. 08 |DB 08
00599604 |. 00 |DB 00
00599605 |. 00 |DB 00
00599606 |. 00 |DB 00
00599607 |. 00 |DB 00
00599608 |. 00 |DB 00
00599609 |. 00 |DB 00
0059960A |. 00 |DB 00
0059960B |. 00 |DB 00
0059960C |. 00 |DB 00
0059960D |. 00 |DB 00
0059960E |. 00 |DB 00
0059960F |. 00 |DB 00
00599610 |. 00 |DB 00
00599611 |. 00 |DB 00
00599612 |. 00 |DB 00
00599613 |. 00 |DB 00
00599614 |. 00 |DB 00
00599615 |. 00 |DB 00
00599616 |. 00 |DB 00
00599617 |. 00 |DB 00
00599618 |. 00 |DB 00
00599619 |. 00 |DB 00
0059961A |. 00 |DB 00
0059961B |. 00 |DB 00
0059961C |. 00 |DB 00
0059961D |. 00 |DB 00
0059961E |. 00 |DB 00
0059961F |. 00 |DB 00
00599620 |. 00 |DB 00
00599621 |. 00 |DB 00
00599622 |. 00 |DB 00
00599623 |. 00 |DB 00
00599624 |. 00 |DB 00
00599625 |. 00 |DB 00
00599626 |. 00 |DB 00
00599627 |. 00 |DB 00
00599628 |. 00 |DB 00
00599629 |. 00 |DB 00
0059962A |. 00 |DB 00
0059962B |. 0B |DB 0B
0059962C |. 0C |DB 0C
0059962D |. 0D |DB 0D
0059962E |. 0E |DB 0E
0059962F |. 0F |DB 0F
00599630 |. 10 |DB 10
00599631 |. 11 |DB 11
00599632 |. 12 |DB 12
00599633 |. 13 |DB 13
00599634 |. 14 |DB 14
00599635 |. 15 |DB 15
00599636 |. 16 |DB 16
00599637 |. 17 |DB 17
00599638 |. 18 |DB 18
00599639 |. 19 |DB 19
0059963A |. 1A |DB 1A
0059963B |. 1B |DB 1B
0059963C |. 1C |DB 1C
0059963D |. 1D |DB 1D
0059963E |. 1E |DB 1E
0059963F |. 1F |DB 1F
00599640 |. 20 |DB 20
00599641 |. 21 |DB 21
00599642 |. 22 |DB 22
00599643 |. 23 |DB 23
00599644 |. 24 |DB 24
00599645 |. 44995900 |DD nutr.00599944 ; Switch table used at 005995F3
00599649 |. D9965900 |DD nutr.005996D9
0059964D |. EB965900 |DD nutr.005996EB
00599651 |. FD965900 |DD nutr.005996FD
00599655 |. 0F975900 |DD nutr.0059970F
00599659 |. 21975900 |DD nutr.00599721
0059965D |. 33975900 |DD nutr.00599733
00599661 |. 45975900 |DD nutr.00599745
00599665 |. 57975900 |DD nutr.00599757
00599669 |. 69975900 |DD nutr.00599769
0059966D |. 7B975900 |DD nutr.0059977B
00599671 |. 8D975900 |DD nutr.0059978D
00599675 |. 9F975900 |DD nutr.0059979F
00599679 |. B1975900 |DD nutr.005997B1
0059967D |. C3975900 |DD nutr.005997C3
00599681 |. D5975900 |DD nutr.005997D5
00599685 |. E7975900 |DD nutr.005997E7
00599689 |. F9975900 |DD nutr.005997F9
0059968D |. 0B985900 |DD nutr.0059980B
00599691 |. 1D985900 |DD nutr.0059981D
00599695 |. 2F985900 |DD nutr.0059982F
00599699 |. 41985900 |DD nutr.00599841
0059969D |. 53985900 |DD nutr.00599853
005996A1 |. 65985900 |DD nutr.00599865
005996A5 |. 77985900 |DD nutr.00599877
005996A9 |. 89985900 |DD nutr.00599889
005996AD |. 9B985900 |DD nutr.0059989B
005996B1 |. AD985900 |DD nutr.005998AD
005996B5 |. BF985900 |DD nutr.005998BF
005996B9 |. CE985900 |DD nutr.005998CE
005996BD |. DD985900 |DD nutr.005998DD
005996C1 |. EC985900 |DD nutr.005998EC
005996C5 |. FB985900 |DD nutr.005998FB
005996C9 |. 0A995900 |DD nutr.0059990A
005996CD |. 19995900 |DD nutr.00599919
005996D1 |. 28995900 |DD nutr.00599928
005996D5 |. 37995900 |DD nutr.00599937
005996D9 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 31 ('1') of switch 005995E1
005996DC |. BA C4995900 |MOV EDX,nutr.005999C4
005996E1 |. E8 36B3E6FF |CALL nutr.00404A1C
005996E6 |. E9 59020000 |JMP nutr.00599944
005996EB |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 35 ('5') of switch 005995E1
005996EE |. BA D0995900 |MOV EDX,nutr.005999D0
005996F3 |. E8 24B3E6FF |CALL nutr.00404A1C
005996F8 |. E9 47020000 |JMP nutr.00599944
005996FD |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 32 ('2') of switch 005995E1
00599700 |. BA DC995900 |MOV EDX,nutr.005999DC
00599705 |. E8 12B3E6FF |CALL nutr.00404A1C
0059970A |. E9 35020000 |JMP nutr.00599944
0059970F |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 34 ('4') of switch 005995E1
00599712 |. BA E8995900 |MOV EDX,nutr.005999E8
00599717 |. E8 00B3E6FF |CALL nutr.00404A1C
0059971C |. E9 23020000 |JMP nutr.00599944
00599721 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 33 ('3') of switch 005995E1
00599724 |. BA F4995900 |MOV EDX,nutr.005999F4
00599729 |. E8 EEB2E6FF |CALL nutr.00404A1C
0059972E |. E9 11020000 |JMP nutr.00599944
00599733 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 36 ('6') of switch 005995E1
00599736 |. BA 009A5900 |MOV EDX,nutr.00599A00
0059973B |. E8 DCB2E6FF |CALL nutr.00404A1C
00599740 |. E9 FF010000 |JMP nutr.00599944
00599745 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 37 ('7') of switch 005995E1
00599748 |. BA 0C9A5900 |MOV EDX,nutr.00599A0C
0059974D |. E8 CAB2E6FF |CALL nutr.00404A1C
00599752 |. E9 ED010000 |JMP nutr.00599944
00599757 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 39 ('9') of switch 005995E1
0059975A |. BA 189A5900 |MOV EDX,nutr.00599A18
0059975F |. E8 B8B2E6FF |CALL nutr.00404A1C
00599764 |. E9 DB010000 |JMP nutr.00599944
00599769 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 38 ('8') of switch 005995E1
0059976C |. BA 249A5900 |MOV EDX,nutr.00599A24
00599771 |. E8 A6B2E6FF |CALL nutr.00404A1C
00599776 |. E9 C9010000 |JMP nutr.00599944
0059977B |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 30 ('0') of switch 005995E1
0059977E |. BA 309A5900 |MOV EDX,nutr.00599A30
00599783 |. E8 94B2E6FF |CALL nutr.00404A1C
00599788 |. E9 B7010000 |JMP nutr.00599944
0059978D |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 61 ('a') of switch 005995E1
00599790 |. BA 3C9A5900 |MOV EDX,nutr.00599A3C
00599795 |. E8 82B2E6FF |CALL nutr.00404A1C
0059979A |. E9 A5010000 |JMP nutr.00599944
0059979F |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 62 ('b') of switch 005995E1
005997A2 |. BA 489A5900 |MOV EDX,nutr.00599A48
005997A7 |. E8 70B2E6FF |CALL nutr.00404A1C
005997AC |. E9 93010000 |JMP nutr.00599944
005997B1 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 63 ('c') of switch 005995E1
005997B4 |. BA 549A5900 |MOV EDX,nutr.00599A54
005997B9 |. E8 5EB2E6FF |CALL nutr.00404A1C
005997BE |. E9 81010000 |JMP nutr.00599944
005997C3 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 64 ('d') of switch 005995E1
005997C6 |. BA 609A5900 |MOV EDX,nutr.00599A60
005997CB |. E8 4CB2E6FF |CALL nutr.00404A1C
005997D0 |. E9 6F010000 |JMP nutr.00599944
005997D5 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 65 ('e') of switch 005995E1
005997D8 |. BA 6C9A5900 |MOV EDX,nutr.00599A6C
005997DD |. E8 3AB2E6FF |CALL nutr.00404A1C
005997E2 |. E9 5D010000 |JMP nutr.00599944
005997E7 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 66 ('f') of switch 005995E1
005997EA |. BA 789A5900 |MOV EDX,nutr.00599A78
005997EF |. E8 28B2E6FF |CALL nutr.00404A1C
005997F4 |. E9 4B010000 |JMP nutr.00599944
005997F9 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 67 ('g') of switch 005995E1
005997FC |. BA 849A5900 |MOV EDX,nutr.00599A84
00599801 |. E8 16B2E6FF |CALL nutr.00404A1C
00599806 |. E9 39010000 |JMP nutr.00599944
0059980B |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 68 ('h') of switch 005995E1
0059980E |. BA 909A5900 |MOV EDX,nutr.00599A90
00599813 |. E8 04B2E6FF |CALL nutr.00404A1C
00599818 |. E9 27010000 |JMP nutr.00599944
0059981D |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 69 ('i') of switch 005995E1
00599820 |. BA 9C9A5900 |MOV EDX,nutr.00599A9C
00599825 |. E8 F2B1E6FF |CALL nutr.00404A1C
0059982A |. E9 15010000 |JMP nutr.00599944
0059982F |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 6A ('j') of switch 005995E1
00599832 |. BA A89A5900 |MOV EDX,nutr.00599AA8
00599837 |. E8 E0B1E6FF |CALL nutr.00404A1C
0059983C |. E9 03010000 |JMP nutr.00599944
00599841 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 6B ('k') of switch 005995E1
00599844 |. BA B49A5900 |MOV EDX,nutr.00599AB4
00599849 |. E8 CEB1E6FF |CALL nutr.00404A1C
0059984E |. E9 F1000000 |JMP nutr.00599944
00599853 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 6C ('l') of switch 005995E1
00599856 |. BA C09A5900 |MOV EDX,nutr.00599AC0
0059985B |. E8 BCB1E6FF |CALL nutr.00404A1C
00599860 |. E9 DF000000 |JMP nutr.00599944
00599865 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 6D ('m') of switch 005995E1
00599868 |. BA CC9A5900 |MOV EDX,nutr.00599ACC
0059986D |. E8 AAB1E6FF |CALL nutr.00404A1C
00599872 |. E9 CD000000 |JMP nutr.00599944
00599877 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 6E ('n') of switch 005995E1
0059987A |. BA D89A5900 |MOV EDX,nutr.00599AD8
0059987F |. E8 98B1E6FF |CALL nutr.00404A1C
00599884 |. E9 BB000000 |JMP nutr.00599944
00599889 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 6F ('o') of switch 005995E1
0059988C |. BA E49A5900 |MOV EDX,nutr.00599AE4
00599891 |. E8 86B1E6FF |CALL nutr.00404A1C
00599896 |. E9 A9000000 |JMP nutr.00599944
0059989B |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 70 ('p') of switch 005995E1
0059989E |. BA F09A5900 |MOV EDX,nutr.00599AF0
005998A3 |. E8 74B1E6FF |CALL nutr.00404A1C
005998A8 |. E9 97000000 |JMP nutr.00599944
005998AD |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 71 ('q') of switch 005995E1
005998B0 |. BA FC9A5900 |MOV EDX,nutr.00599AFC
005998B5 |. E8 62B1E6FF |CALL nutr.00404A1C
005998BA |. E9 85000000 |JMP nutr.00599944
005998BF |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 72 ('r') of switch 005995E1
005998C2 |. BA 089B5900 |MOV EDX,nutr.00599B08
005998C7 |. E8 50B1E6FF |CALL nutr.00404A1C
005998CC |. EB 76 |JMP SHORT nutr.00599944
005998CE |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 73 ('s') of switch 005995E1
005998D1 |. BA 149B5900 |MOV EDX,nutr.00599B14
005998D6 |. E8 41B1E6FF |CALL nutr.00404A1C
005998DB |. EB 67 |JMP SHORT nutr.00599944
005998DD |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 74 ('t') of switch 005995E1
005998E0 |. BA 209B5900 |MOV EDX,nutr.00599B20
005998E5 |. E8 32B1E6FF |CALL nutr.00404A1C
005998EA |. EB 58 |JMP SHORT nutr.00599944
005998EC |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 75 ('u') of switch 005995E1
005998EF |. BA 2C9B5900 |MOV EDX,nutr.00599B2C
005998F4 |. E8 23B1E6FF |CALL nutr.00404A1C
005998F9 |. EB 49 |JMP SHORT nutr.00599944
005998FB |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 76 ('v') of switch 005995E1
005998FE |. BA 389B5900 |MOV EDX,nutr.00599B38
00599903 |. E8 14B1E6FF |CALL nutr.00404A1C
00599908 |. EB 3A |JMP SHORT nutr.00599944
0059990A |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 77 ('w') of switch 005995E1
0059990D |. BA 449B5900 |MOV EDX,nutr.00599B44
00599912 |. E8 05B1E6FF |CALL nutr.00404A1C
00599917 |. EB 2B |JMP SHORT nutr.00599944
00599919 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 78 ('x') of switch 005995E1
0059991C |. BA 509B5900 |MOV EDX,nutr.00599B50
00599921 |. E8 F6B0E6FF |CALL nutr.00404A1C
00599926 |. EB 1C |JMP SHORT nutr.00599944
00599928 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 79 ('y') of switch 005995E1
0059992B |. BA 5C9B5900 |MOV EDX,nutr.00599B5C
00599930 |. E8 E7B0E6FF |CALL nutr.00404A1C
00599935 |. EB 0D |JMP SHORT nutr.00599944
00599937 |> 8D45 F4 |LEA EAX,DWORD PTR SS:[EBP-C] ; Case 7A ('z') of switch 005995E1
0059993A |. BA 689B5900 |MOV EDX,nutr.00599B68
0059993F |. E8 D8B0E6FF |CALL nutr.00404A1C
00599944 |> 8B45 F0 |MOV EAX,DWORD PTR SS:[EBP-10] ; Default case of switch 005995E1
00599947 |. E8 C0B2E6FF |CALL nutr.00404C0C
0059994C |. E8 8F03E7FF |CALL nutr.00409CE0
00599951 |. 8BD0 |MOV EDX,EAX
00599953 |. 4A |DEC EDX
00599954 |. 8D4D D4 |LEA ECX,DWORD PTR SS:[EBP-2C]
00599957 |. 8B45 F0 |MOV EAX,DWORD PTR SS:[EBP-10]
0059995A |. E8 5521EAFF |CALL nutr.0043BAB4
0059995F |. 8B55 D4 |MOV EDX,DWORD PTR SS:[EBP-2C]
00599962 |. 8D45 F0 |LEA EAX,DWORD PTR SS:[EBP-10]
00599965 |. E8 8AAEE6FF |CALL nutr.004047F4
0059996A |> 837D F0 00 CMP DWORD PTR SS:[EBP-10],0
0059996E |.^ 0F85 60FCFFFF \JNZ nutr.005995D4
00599974 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00599977 |. 8B55 F4 MOV EDX,DWORD PTR SS:[EBP-C]
0059997A |. E8 31AEE6FF CALL nutr.004047B0
0059997F |. 33C0 XOR EAX,EAX
00599981 |. 5A POP EDX
00599982 |. 59 POP ECX
00599983 |. 59 POP ECX
00599984 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
00599987 |. 68 B6995900 PUSH nutr.005999B6
0059998C |> 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
0059998F |. BA 05000000 MOV EDX,5
00599994 |. E8 E7ADE6FF CALL nutr.00404780
00599999 |. 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14]
0059999C |. BA 03000000 MOV EDX,3
005999A1 |. E8 DAADE6FF CALL nutr.00404780
005999A6 |. 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
005999A9 |. E8 AEADE6FF CALL nutr.0040475C
005999AE \. C3 RETN
005999AF .^ E9 0CA7E6FF JMP nutr.004040C0
005999B4 .^ EB D6 JMP SHORT nutr.0059998C
005999B6 . 5B POP EBX
005999B7 . 8BE5 MOV ESP,EBP
005999B9 . 5D POP EBP
005999BA . C3 RETN
这段有两个小循环，第一个小循环把输入的注册码打乱顺序，方法如下：
输入9821034567abcde
0012FC30 00F3D900 ASCII "9821034567abcde"
0012FC34 00F3D900 ASCII "9821034567abcde"
0012FC30 00F3D900 ASCII "9821034567abced"
0012FC34 00F3D900 ASCII "9821034567abced"
0012FC30 00F3D92C ASCII "9821034567abdec"
0012FC34 00F3D92C ASCII "9821034567abdec"
0012FC30 00F3D948 ASCII "9821034567acedb"
0012FC34 00F3D948 ASCII "9821034567acedb"
0012FC30 00F3D964 ASCII "9821034567bdeca"
0012FC34 00F3D964 ASCII "9821034567bdeca"
0012FC30 00F3D980 ASCII "982103456acedb7"
0012FC34 00F3D980 ASCII "982103456acedb7"
0012FC30 00F3D99C ASCII "982103457bdeca6"
0012FC34 00F3D99C ASCII "982103457bdeca6"
0012FC30 00F3D9B8 ASCII "98210346acedb75"
0012FC34 00F3D9B8 ASCII "98210346acedb75"
……………………………………
0012FC30 00F3DA44 ASCII "81357bdeca64029"
0012FC34 00F3DA44 ASCII "81357bdeca64029"
得到的最好结果再在第二个循环中换位
替换表格如下：
1 4
2 5
3 9
4 1
5 2
6 7
7 6
8 0
9 3
0 8
a z
b y
c d
d c
e i
f g
g f
h j
i e
j h
k l
l k
m n
n m
o p
p o
q r
r q
s t
t s
u v
v u
w x
x w
y b
z a
把注册码反向： "215975342586100"
542362915207488
然后再根据位置反向即刻得到正确的注册码
9821034567abcde 858442730622591
81357bdeca64029 542362915207488
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
