变速精灵 XP 简体中文版注册分析 上

1、用W32Dasm反编该软件后，查找到字符串“变速精灵-未注册板”。
双击后我们就可以来到下面这里：

* Possible StringData Ref from Data Obj ->"变速精灵 - 未注册版"

:00403762 68B4B14000 push 0040B1B4
:00403767 8BCF mov ecx, edi

2、向上来到：
:004036B0 64A100000000 mov eax, dword ptr fs:[00000000]
:004036B6 6AFF push FFFFFFFF
:004036B8 6841734000 push 00407341
:004036BD 50 push eax
:004036BE 8B442410 mov eax, dword ptr [esp+10] ；? eax 显示189993728(计算后的机器码）
:004036C2 64892500000000 mov dword ptr fs:[00000000], esp ；我的机器码是189-728-1015-993
:004036C9 81EC10040000 sub esp, 00000410 ；是机器码的1,4,2部分相连
:004036CF 57 push edi
:004036D0 8BF9 mov edi, ecx
:004036D2 50 push eax
:004036D3 C7476001000000 mov [edi+60], 00000001
:004036DA E8D1D9FFFF call 004010B0 ；进入
:004036DF 8B8C242C040000 mov ecx, dword ptr [esp+0000042C]
:004036E6 83C404 add esp, 00000004
:004036E9 3BC1 cmp eax, ecx ；判断真假注册码
:004036EB 0F8484010000 je 00403875 ；相等则跳
:004036F1 56 push esi
:004036F2 8D4C2410 lea ecx, dword ptr [esp+10]
:004036F6 C7476000000000 mov [edi+60], 00000000

3、进入后来到：
* Referenced by a CALL at Address:
:004036DA

:004010B0 55 push ebp
:004010B1 8BEC mov ebp, esp
:004010B3 56 push esi
:004010B4 8B7508 mov esi, dword ptr [ebp+08]
:004010B7 C1EE0A shr esi, 0A ；将计算后的机器码右移10位
:004010BA 8D05D0104000 lea eax, dword ptr [004010D0]
:004010C0 50 push eax
:004010C1 E8CAFFFFFF call 00401090 ；再进入
:004010C6 C3 ret
4、进入后来到：
:00401090 55 push ebp
:00401091 8BEC mov ebp, esp
:00401093 51 push ecx
:00401094 E800000000 call 00401099 ；再进入

* Referenced by a CALL at Address:
:00401094

:00401099 58 pop eax ；来到这
:0040109A 83E819 sub eax, 00000019
:0040109D 8945FC mov dword ptr [ebp-04], eax
:004010A0 8B45FC mov eax, dword ptr [ebp-04]
:004010A3 8BE5 mov esp, ebp
:004010A5 5D pop ebp
:004010A6 C3 ret

5、最后来到：
:004010D0 C14D080F ror dword ptr [ebp+08], 0F ；机器码循环右移15位
:004010D4 8B4508 mov eax, dword ptr [ebp+08] ；存入eax
:004010D7 33C9 xor ecx, ecx ；计数器ecx清零

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
:004010EA(C)

:004010D9 8BD0 mov edx, eax ；存入edx
:004010DB D3EA shr edx, cl ；右移cl位
:004010DD 83E203 and edx, 00000003 ；与3
:004010E0 03D6 add edx, esi ；加上esi(esi初值为计算后的机器码右移10位的值)
:004010E2 D1E2 shl edx, 1 ；左移1位

[1] [2] [3] [4] 下一页

复制本页网址和标题，发送给你QQ/Msn的好友一起分享

上一篇:光盘卫士 V1.8算法分析

下一篇:xx计费器 V2.xx算法分析