lnn1123's KeyGenme(不要内存注册机)

lnn1123 · 发表于 2006-3-15 15:05:11

不要爆破,不要内存注册机(明码比较) 要玩就做一个 KeyGen:P

wan · 发表于 2006-3-15 16:05:13

变形MD5？ ;P

lnn1123 · 发表于 2006-3-15 16:40:43

原帖由 wan 于 2006-3-15 08:05 发表
变形MD5？ ;P

呵呵,鸡肋

风球 · 发表于 2006-3-15 20:37:42

00401B26 E8 D5F4FFFF call Crackme.00401000 ; 跟进可看到MD5的变形
常数变形如下：
State[0] := $19861123;
State[1] := $88888888;
State[2] := $20041121;
State[3] := $55555555;
FF (a, b, c, d, Block[ 0], 7, $D5456789);
GG (a, b, c, d, Block[ 1], 5, $E2546789);
HH (a, b, c, d, Block[ 5], 4, $EEE12679);
II (a, b, c, d, Block[ 0], 6, $D5789641);
00401B45 FF15 2C304000 call dword ptr ds:[40302C] ; 跟进可看到注册码的形成
\\00A0100C > 55 push ebp
00A0100D 8BEC mov ebp,esp
00A0100F 83C4 F8 add esp,-8
00A01012 53 push ebx
00A01013 57 push edi
00A01014 56 push esi
00A01015 52 push edx
00A01016 FF75 0C push dword ptr ss:[ebp+C]
00A01019 E8 5E000000 call lnn1123.00A0107C
00A0101E FF75 0C push dword ptr ss:[ebp+C]
00A01021 E8 4E000000 call <jmp.&kernel32.lstrlenA>
00A01026 50 push eax
00A01027 FF75 0C push dword ptr ss:[ebp+C]
00A0102A E8 3F000000 call <jmp.&user32.CharUpperBuffA>
00A0102F FF75 0C push dword ptr ss:[ebp+C]
00A01032 E8 3D000000 call <jmp.&kernel32.lstrlenA>
00A01037 33C9 xor ecx,ecx
00A01039 33DB xor ebx,ebx
00A0103B C1E3 04 shl ebx,4 //。。。。
00A0103E 33D2 xor edx,edx
00A01040 8B7D 0C mov edi,dword ptr ss:[ebp+C]
00A01043 8B1439 mov edx,dword ptr ds:[ecx+edi]
00A01046 03DA add ebx,edx
00A01048 8BD3 mov edx,ebx
00A0104A 81E2 000000F0 and edx,F0000000
00A01050 85D2 test edx,edx
00A01052 74 07 je short lnn1123.00A0105B
00A01054 8BF2 mov esi,edx
00A01056 C1EE 18 shr esi,18
00A01059 33DE xor ebx,esi
00A0105B F7D2 not edx
00A0105D 23DA and ebx,edx
00A0105F 41 inc ecx
00A01060 3BC8 cmp ecx,eax
00A01062 ^ 75 D7 jnz short lnn1123.00A0103B //循环运算
00A01064 8BC3 mov eax,ebx
00A01066 5A pop edx
00A01067 5E pop esi
00A01068 5F pop edi
00A01069 5B pop ebx
00A0106A C9 leave
00A0106B C2 0800 retn 8

复制代码

注册码由变形MD5（用户名）得到的值再进行一循环运算而得到
没时间详细看算法，只是看了下MD5的变形```哈哈```

hongxin2005 · 发表于 2006-3-15 22:21:20

目标软件：
破解方式：
难易等级：初
相关工具：peid ollydbg
首先查壳，无。呵呵!用olldbg载入，超级字串查找有错误提示，断在下处

00401B06 .  E8 77010000 CALL <JMP.&user32.GetDlgItemTextA>    ; \GetDlgItemTextA
00401B0B .  8D85 00FFFFFF LEA EAX,DWORD PTR SS:[EBP-100]          ;  注册名
00401B11 .  50          PUSH EAX                               ; /String
00401B12 .  E8 A7010000 CALL <JMP.&kernel32.lstrlenA>          ; \lstrlenA
00401B17 .  8D95 F8FDFFFF LEA EDX,DWORD PTR SS:[EBP-208]
00401B1D .  52          PUSH EDX                               ; /Arg3
00401B1E .  50          PUSH EAX                               ; |Arg2
00401B1F .  8D85 00FFFFFF LEA EAX,DWORD PTR SS:[EBP-100]          ; |
00401B25 .  50          PUSH EAX                               ; |注册名
00401B26 .  E8 D5F4FFFF CALL Crackme.00401000                   ; \利用注册名生成一字串
00401B2B .  833D 2C304000>CMP DWORD PTR DS:[40302C],0
00401B32 .  0F84 97000000 JE Crackme.00401BCF
00401B38 .  8D85 00FFFFFF LEA EAX,DWORD PTR SS:[EBP-100]
00401B3E .  50          PUSH EAX
00401B3F .  FF35 20304000 PUSH DWORD PTR DS:[403020]
00401B45 .  FF15 2C304000 CALL DWORD PTR DS:[40302C]             ;  重要
00401B4B .  50          PUSH EAX
00401B4C .  8D85 00FFFFFF LEA EAX,DWORD PTR SS:[EBP-100]
00401B52 .  68 00010000 PUSH 100                               ; /Count = 100 (256.)
00401B57 .  50          PUSH EAX                               ; |Buffer
00401B58 .  68 F1030000 PUSH 3F1                               ; |ControlID = 3F1 (1009.)
00401B5D .  FF35 20304000 PUSH DWORD PTR DS:[403020]             ; |hWnd = 00270084 ('Crackme V 0.1',class='#32770')

00401000  /$  55          PUSH EBP                            以下是利用用户进行央md5变形算法得到字串过程
00401001  |.  8BEC       MOV EBP,ESP
00401003  |.  83C4 F0    ADD ESP,-10
00401006  |.  60          PUSHAD
00401007  |.  8B7D 08    MOV EDI,DWORD PTR SS:[EBP+8]
0040100A  |.  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
0040100D  |.  40          INC EAX
0040100E  |.  03F8       ADD EDI,EAX
00401010  |.  C647 FF 80 MOV BYTE PTR DS:[EDI-1],80
00401014  |.  33D2       XOR EDX,EDX
00401016  |.  BB 40000000 MOV EBX,40
0040101B  |.  F7F3       DIV EBX
0040101D  |.  F7DA       NEG EDX
0040101F  |.  83C2 40    ADD EDX,40
00401022  |.  83FA 08    CMP EDX,8
00401025  |.  73 03       JNB SHORT Crackme.0040102A
00401027  |.  83C2 40    ADD EDX,40
0040102A  |>  8BCA       MOV ECX,EDX
0040102C  |.  32C0       XOR AL,AL
0040102E  |.  F3:AA       REP STOS BYTE PTR ES:[EDI]
00401030  |.  8B45 0C    MOV EAX,DWORD PTR SS:[EBP+C]
00401033  |.  42          INC EDX
00401034  |.  0155 0C    ADD DWORD PTR SS:[EBP+C],EDX
00401037  |.  33D2       XOR EDX,EDX
00401039  |.  BB 08000000 MOV EBX,8
0040103E  |.  F7E3       MUL EBX
00401040  |.  8947 F8    MOV DWORD PTR DS:[EDI-8],EAX
00401043  |.  8957 FC    MOV DWORD PTR DS:[EDI-4],EDX
00401046  |.  8B55 0C    MOV EDX,DWORD PTR SS:[EBP+C]
00401049  |.  8B7D 08    MOV EDI,DWORD PTR SS:[EBP+8]
0040104C  |.  8B75 10    MOV ESI,DWORD PTR SS:[EBP+10]
0040104F  |.  C706 23118619 MOV DWORD PTR DS:[ESI],19861123    变形md5法
00401055  |.  C746 04 88888>MOV DWORD PTR DS:[ESI+4],88888888
0040105C  |.  C746 08 21110>MOV DWORD PTR DS:[ESI+8],20041121
00401063  |.  C746 0C 55555>MOV DWORD PTR DS:[ESI+C],55555555
0040106A  |>  8B06       /MOV EAX,DWORD PTR DS:[ESI]
0040106C  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
0040106F  |.  8B46 04    |MOV EAX,DWORD PTR DS:[ESI+4]
00401072  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
00401075  |.  8B46 08    |MOV EAX,DWORD PTR DS:[ESI+8]
00401078  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
0040107B  |.  8B46 0C    |MOV EAX,DWORD PTR DS:[ESI+C]
0040107E  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
00401081  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
00401084  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
00401087  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
0040108A  |.  23D8       |AND EBX,EAX
0040108C  |.  F7D0       |NOT EAX
0040108E  |.  23C1       |AND EAX,ECX
00401090  |.  0BC3       |OR EAX,EBX
00401092  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401095  |.  0307       |ADD EAX,DWORD PTR DS:[EDI]
00401097  |.  05 896745D5 |ADD EAX,D5456789
0040109C  |.  B1 07       |MOV CL,7
0040109E  |.  D3C0       |ROL EAX,CL
004010A0  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004010A3  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
004010A6  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004010A9  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
004010AC  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
004010AF  |.  23D8       |AND EBX,EAX
004010B1  |.  F7D0       |NOT EAX
004010B3  |.  23C1       |AND EAX,ECX
004010B5  |.  0BC3       |OR EAX,EBX
004010B7  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004010BA  |.  0347 04    |ADD EAX,DWORD PTR DS:[EDI+4]
004010BD  |.  05 56B7C7E8 |ADD EAX,E8C7B756
004010C2  |.  B1 0C       |MOV CL,0C
004010C4  |.  D3C0       |ROL EAX,CL
004010C6  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004010C9  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
004010CC  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
004010CF  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
004010D2  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
004010D5  |.  23D8       |AND EBX,EAX
004010D7  |.  F7D0       |NOT EAX
004010D9  |.  23C1       |AND EAX,ECX
004010DB  |.  0BC3       |OR EAX,EBX
004010DD  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004010E0  |.  0347 08    |ADD EAX,DWORD PTR DS:[EDI+8]
004010E3  |.  05 DB702024 |ADD EAX,242070DB
004010E8  |.  B1 11       |MOV CL,11
004010EA  |.  D3C0       |ROL EAX,CL
004010EC  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004010EF  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
004010F2  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004010F5  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
004010F8  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
004010FB  |.  23D8       |AND EBX,EAX
004010FD  |.  F7D0       |NOT EAX
004010FF  |.  23C1       |AND EAX,ECX
00401101  |.  0BC3       |OR EAX,EBX
00401103  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
00401106  |.  0347 0C    |ADD EAX,DWORD PTR DS:[EDI+C]
00401109  |.  05 EECEBDC1 |ADD EAX,C1BDCEEE
0040110E  |.  B1 16       |MOV CL,16
00401110  |.  D3C0       |ROL EAX,CL
00401112  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401115  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
00401118  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
0040111B  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
0040111E  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401121  |.  23D8       |AND EBX,EAX
00401123  |.  F7D0       |NOT EAX
00401125  |.  23C1       |AND EAX,ECX
00401127  |.  0BC3       |OR EAX,EBX
00401129  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040112C  |.  0347 10    |ADD EAX,DWORD PTR DS:[EDI+10]
0040112F  |.  05 AF0F7CF5 |ADD EAX,F57C0FAF
00401134  |.  B1 07       |MOV CL,7
00401136  |.  D3C0       |ROL EAX,CL
00401138  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040113B  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
0040113E  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401141  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
00401144  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
00401147  |.  23D8       |AND EBX,EAX
00401149  |.  F7D0       |NOT EAX
0040114B  |.  23C1       |AND EAX,ECX
0040114D  |.  0BC3       |OR EAX,EBX
0040114F  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401152  |.  0347 14    |ADD EAX,DWORD PTR DS:[EDI+14]
00401155  |.  05 2AC68747 |ADD EAX,4787C62A
0040115A  |.  B1 0C       |MOV CL,0C
0040115C  |.  D3C0       |ROL EAX,CL
0040115E  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401161  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
00401164  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
00401167  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
0040116A  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
0040116D  |.  23D8       |AND EBX,EAX
0040116F  |.  F7D0       |NOT EAX
00401171  |.  23C1       |AND EAX,ECX
00401173  |.  0BC3       |OR EAX,EBX
00401175  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401178  |.  0347 18    |ADD EAX,DWORD PTR DS:[EDI+18]
0040117B  |.  05 134630A8 |ADD EAX,A8304613
00401180  |.  B1 11       |MOV CL,11
00401182  |.  D3C0       |ROL EAX,CL
00401184  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401187  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
0040118A  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
0040118D  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
00401190  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
00401193  |.  23D8       |AND EBX,EAX
00401195  |.  F7D0       |NOT EAX
00401197  |.  23C1       |AND EAX,ECX
00401199  |.  0BC3       |OR EAX,EBX
0040119B  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040119E  |.  0347 1C    |ADD EAX,DWORD PTR DS:[EDI+1C]
004011A1  |.  05 019546FD |ADD EAX,FD469501
004011A6  |.  B1 16       |MOV CL,16
004011A8  |.  D3C0       |ROL EAX,CL
004011AA  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004011AD  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
004011B0  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
004011B3  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
004011B6  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
004011B9  |.  23D8       |AND EBX,EAX
004011BB  |.  F7D0       |NOT EAX
004011BD  |.  23C1       |AND EAX,ECX
004011BF  |.  0BC3       |OR EAX,EBX
004011C1  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004011C4  |.  0347 20    |ADD EAX,DWORD PTR DS:[EDI+20]
004011C7  |.  05 D8988069 |ADD EAX,698098D8
004011CC  |.  B1 07       |MOV CL,7
004011CE  |.  D3C0       |ROL EAX,CL
004011D0  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004011D3  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
004011D6  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004011D9  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
004011DC  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
004011DF  |.  23D8       |AND EBX,EAX
004011E1  |.  F7D0       |NOT EAX
004011E3  |.  23C1       |AND EAX,ECX
004011E5  |.  0BC3       |OR EAX,EBX
004011E7  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004011EA  |.  0347 24    |ADD EAX,DWORD PTR DS:[EDI+24]
004011ED  |.  05 AFF7448B |ADD EAX,8B44F7AF
004011F2  |.  B1 0C       |MOV CL,0C
004011F4  |.  D3C0       |ROL EAX,CL
004011F6  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004011F9  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
004011FC  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
004011FF  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
00401202  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
00401205  |.  23D8       |AND EBX,EAX
00401207  |.  F7D0       |NOT EAX
00401209  |.  23C1       |AND EAX,ECX
0040120B  |.  0BC3       |OR EAX,EBX
0040120D  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401210  |.  0347 28    |ADD EAX,DWORD PTR DS:[EDI+28]
00401213  |.  05 B15BFFFF |ADD EAX,FFFF5BB1
00401218  |.  B1 11       |MOV CL,11
0040121A  |.  D3C0       |ROL EAX,CL
0040121C  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
0040121F  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
00401222  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
00401225  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
00401228  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
0040122B  |.  23D8       |AND EBX,EAX
0040122D  |.  F7D0       |NOT EAX
0040122F  |.  23C1       |AND EAX,ECX
00401231  |.  0BC3       |OR EAX,EBX
00401233  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
00401236  |.  0347 2C    |ADD EAX,DWORD PTR DS:[EDI+2C]
00401239  |.  05 BED75C89 |ADD EAX,895CD7BE
0040123E  |.  B1 16       |MOV CL,16
00401240  |.  D3C0       |ROL EAX,CL
00401242  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401245  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
00401248  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
0040124B  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
0040124E  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401251  |.  23D8       |AND EBX,EAX
00401253  |.  F7D0       |NOT EAX
00401255  |.  23C1       |AND EAX,ECX
00401257  |.  0BC3       |OR EAX,EBX
00401259  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040125C  |.  0347 30    |ADD EAX,DWORD PTR DS:[EDI+30]
0040125F  |.  05 2211906B |ADD EAX,6B901122
00401264  |.  B1 07       |MOV CL,7
00401266  |.  D3C0       |ROL EAX,CL
00401268  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040126B  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
0040126E  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401271  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
00401274  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
00401277  |.  23D8       |AND EBX,EAX
00401279  |.  F7D0       |NOT EAX
0040127B  |.  23C1       |AND EAX,ECX
0040127D  |.  0BC3       |OR EAX,EBX
0040127F  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401282  |.  0347 34    |ADD EAX,DWORD PTR DS:[EDI+34]
00401285  |.  05 937198FD |ADD EAX,FD987193
0040128A  |.  B1 0C       |MOV CL,0C
0040128C  |.  D3C0       |ROL EAX,CL
0040128E  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401291  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
00401294  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
00401297  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
0040129A  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
0040129D  |.  23D8       |AND EBX,EAX
0040129F  |.  F7D0       |NOT EAX
004012A1  |.  23C1       |AND EAX,ECX
004012A3  |.  0BC3       |OR EAX,EBX
004012A5  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004012A8  |.  0347 38    |ADD EAX,DWORD PTR DS:[EDI+38]
004012AB  |.  05 8E4379A6 |ADD EAX,A679438E
004012B0  |.  B1 11       |MOV CL,11
004012B2  |.  D3C0       |ROL EAX,CL
004012B4  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004012B7  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
004012BA  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004012BD  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
004012C0  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
004012C3  |.  23D8       |AND EBX,EAX
004012C5  |.  F7D0       |NOT EAX
004012C7  |.  23C1       |AND EAX,ECX
004012C9  |.  0BC3       |OR EAX,EBX
004012CB  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004012CE  |.  0347 3C    |ADD EAX,DWORD PTR DS:[EDI+3C]
004012D1  |.  05 2108B449 |ADD EAX,49B40821
004012D6  |.  B1 16       |MOV CL,16
004012D8  |.  D3C0       |ROL EAX,CL
004012DA  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004012DD  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
004012E0  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
004012E3  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
004012E6  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
004012E9  |.  23C1       |AND EAX,ECX
004012EB  |.  F7D1       |NOT ECX
004012ED  |.  23CB       |AND ECX,EBX
004012EF  |.  0BC1       |OR EAX,ECX
004012F1  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004012F4  |.  0347 04    |ADD EAX,DWORD PTR DS:[EDI+4]
004012F7  |.  05 896754E2 |ADD EAX,E2546789
004012FC  |.  B1 05       |MOV CL,5
004012FE  |.  D3C0       |ROL EAX,CL
00401300  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
00401303  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
00401306  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401309  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
0040130C  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
0040130F  |.  23C1       |AND EAX,ECX
00401311  |.  F7D1       |NOT ECX
00401313  |.  23CB       |AND ECX,EBX
00401315  |.  0BC1       |OR EAX,ECX
00401317  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
0040131A  |.  0347 18    |ADD EAX,DWORD PTR DS:[EDI+18]
0040131D  |.  05 40B340C0 |ADD EAX,C040B340
00401322  |.  B1 09       |MOV CL,9
00401324  |.  D3C0       |ROL EAX,CL
00401326  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401329  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
0040132C  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
0040132F  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
00401332  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
00401335  |.  23C1       |AND EAX,ECX
00401337  |.  F7D1       |NOT ECX
00401339  |.  23CB       |AND ECX,EBX
0040133B  |.  0BC1       |OR EAX,ECX
0040133D  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401340  |.  0347 2C    |ADD EAX,DWORD PTR DS:[EDI+2C]
00401343  |.  05 515A5E26 |ADD EAX,265E5A51
00401348  |.  B1 0E       |MOV CL,0E
0040134A  |.  D3C0       |ROL EAX,CL
0040134C  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
0040134F  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
00401352  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
00401355  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
00401358  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
0040135B  |.  23C1       |AND EAX,ECX
0040135D  |.  F7D1       |NOT ECX
0040135F  |.  23CB       |AND ECX,EBX
00401361  |.  0BC1       |OR EAX,ECX
00401363  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
00401366  |.  0307       |ADD EAX,DWORD PTR DS:[EDI]
00401368  |.  05 AAC7B6E9 |ADD EAX,E9B6C7AA
0040136D  |.  B1 14       |MOV CL,14
0040136F  |.  D3C0       |ROL EAX,CL
00401371  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401374  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
00401377  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
0040137A  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
0040137D  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401380  |.  23C1       |AND EAX,ECX
00401382  |.  F7D1       |NOT ECX
00401384  |.  23CB       |AND ECX,EBX
00401386  |.  0BC1       |OR EAX,ECX
00401388  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040138B  |.  0347 14    |ADD EAX,DWORD PTR DS:[EDI+14]
0040138E  |.  05 5D102FD6 |ADD EAX,D62F105D
00401393  |.  B1 05       |MOV CL,5
00401395  |.  D3C0       |ROL EAX,CL
00401397  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040139A  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
0040139D  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004013A0  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
004013A3  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
004013A6  |.  23C1       |AND EAX,ECX
004013A8  |.  F7D1       |NOT ECX
004013AA  |.  23CB       |AND ECX,EBX
004013AC  |.  0BC1       |OR EAX,ECX
004013AE  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004013B1  |.  0347 28    |ADD EAX,DWORD PTR DS:[EDI+28]
004013B4  |.  05 53144402 |ADD EAX,2441453
004013B9  |.  B1 09       |MOV CL,9
004013BB  |.  D3C0       |ROL EAX,CL
004013BD  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004013C0  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
004013C3  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
004013C6  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
004013C9  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
004013CC  |.  23C1       |AND EAX,ECX
004013CE  |.  F7D1       |NOT ECX
004013D0  |.  23CB       |AND ECX,EBX
004013D2  |.  0BC1       |OR EAX,ECX
004013D4  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004013D7  |.  0347 3C    |ADD EAX,DWORD PTR DS:[EDI+3C]
004013DA  |.  05 81E6A1D8 |ADD EAX,D8A1E681
004013DF  |.  B1 0E       |MOV CL,0E
004013E1  |.  D3C0       |ROL EAX,CL
004013E3  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004013E6  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
004013E9  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004013EC  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
004013EF  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
004013F2  |.  23C1       |AND EAX,ECX
004013F4  |.  F7D1       |NOT ECX
004013F6  |.  23CB       |AND ECX,EBX
004013F8  |.  0BC1       |OR EAX,ECX
004013FA  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004013FD  |.  0347 10    |ADD EAX,DWORD PTR DS:[EDI+10]
00401400  |.  05 C8FBD3E7 |ADD EAX,E7D3FBC8
00401405  |.  B1 14       |MOV CL,14
00401407  |.  D3C0       |ROL EAX,CL
00401409  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040140C  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
0040140F  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
00401412  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
00401415  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401418  |.  23C1       |AND EAX,ECX
0040141A  |.  F7D1       |NOT ECX
0040141C  |.  23CB       |AND ECX,EBX
0040141E  |.  0BC1       |OR EAX,ECX
00401420  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401423  |.  0347 24    |ADD EAX,DWORD PTR DS:[EDI+24]
00401426  |.  05 E6CDE121 |ADD EAX,21E1CDE6
0040142B  |.  B1 05       |MOV CL,5
0040142D  |.  D3C0       |ROL EAX,CL
0040142F  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
00401432  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
00401435  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401438  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
0040143B  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
0040143E  |.  23C1       |AND EAX,ECX
00401440  |.  F7D1       |NOT ECX
00401442  |.  23CB       |AND ECX,EBX
00401444  |.  0BC1       |OR EAX,ECX
00401446  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401449  |.  0347 38    |ADD EAX,DWORD PTR DS:[EDI+38]
0040144C  |.  05 D60737C3 |ADD EAX,C33707D6
00401451  |.  B1 09       |MOV CL,9
00401453  |.  D3C0       |ROL EAX,CL
00401455  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401458  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
0040145B  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
0040145E  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
00401461  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
00401464  |.  23C1       |AND EAX,ECX
00401466  |.  F7D1       |NOT ECX
00401468  |.  23CB       |AND ECX,EBX
0040146A  |.  0BC1       |OR EAX,ECX
0040146C  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040146F  |.  0347 0C    |ADD EAX,DWORD PTR DS:[EDI+C]
00401472  |.  05 870DD5F4 |ADD EAX,F4D50D87
00401477  |.  B1 0E       |MOV CL,0E
00401479  |.  D3C0       |ROL EAX,CL
0040147B  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
0040147E  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
00401481  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
00401484  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
00401487  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
0040148A  |.  23C1       |AND EAX,ECX
0040148C  |.  F7D1       |NOT ECX
0040148E  |.  23CB       |AND ECX,EBX
00401490  |.  0BC1       |OR EAX,ECX
00401492  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
00401495  |.  0347 20    |ADD EAX,DWORD PTR DS:[EDI+20]
00401498  |.  05 ED145A45 |ADD EAX,455A14ED
0040149D  |.  B1 14       |MOV CL,14
0040149F  |.  D3C0       |ROL EAX,CL
004014A1  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004014A4  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
004014A7  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
004014AA  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
004014AD  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
004014B0  |.  23C1       |AND EAX,ECX
004014B2  |.  F7D1       |NOT ECX
004014B4  |.  23CB       |AND ECX,EBX
004014B6  |.  0BC1       |OR EAX,ECX
004014B8  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004014BB  |.  0347 34    |ADD EAX,DWORD PTR DS:[EDI+34]
004014BE  |.  05 05E9E3A9 |ADD EAX,A9E3E905
004014C3  |.  B1 05       |MOV CL,5
004014C5  |.  D3C0       |ROL EAX,CL
004014C7  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004014CA  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
004014CD  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004014D0  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
004014D3  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
004014D6  |.  23C1       |AND EAX,ECX
004014D8  |.  F7D1       |NOT ECX
004014DA  |.  23CB       |AND ECX,EBX
004014DC  |.  0BC1       |OR EAX,ECX
004014DE  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004014E1  |.  0347 08    |ADD EAX,DWORD PTR DS:[EDI+8]
004014E4  |.  05 F8A3EFFC |ADD EAX,FCEFA3F8
004014E9  |.  B1 09       |MOV CL,9
004014EB  |.  D3C0       |ROL EAX,CL
004014ED  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004014F0  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
004014F3  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
004014F6  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
004014F9  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
004014FC  |.  23C1       |AND EAX,ECX
004014FE  |.  F7D1       |NOT ECX
00401500  |.  23CB       |AND ECX,EBX
00401502  |.  0BC1       |OR EAX,ECX
00401504  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401507  |.  0347 1C    |ADD EAX,DWORD PTR DS:[EDI+1C]
0040150A  |.  05 D9026F67 |ADD EAX,676F02D9
0040150F  |.  B1 0E       |MOV CL,0E
00401511  |.  D3C0       |ROL EAX,CL
00401513  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401516  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
00401519  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
0040151C  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
0040151F  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
00401522  |.  23C1       |AND EAX,ECX
00401524  |.  F7D1       |NOT ECX
00401526  |.  23CB       |AND ECX,EBX
00401528  |.  0BC1       |OR EAX,ECX
0040152A  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040152D  |.  0347 30    |ADD EAX,DWORD PTR DS:[EDI+30]
00401530  |.  05 8A4C2A8D |ADD EAX,8D2A4C8A
00401535  |.  B1 14       |MOV CL,14
00401537  |.  D3C0       |ROL EAX,CL
00401539  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040153C  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
0040153F  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
00401542  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
00401545  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401548  |.  33C3       |XOR EAX,EBX
0040154A  |.  33C1       |XOR EAX,ECX
0040154C  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040154F  |.  0347 14    |ADD EAX,DWORD PTR DS:[EDI+14]
00401552  |.  05 7926E1EE |ADD EAX,EEE12679
00401557  |.  B1 04       |MOV CL,4
00401559  |.  D3C0       |ROL EAX,CL
0040155B  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040155E  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
00401561  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401564  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
00401567  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
0040156A  |.  33C3       |XOR EAX,EBX
0040156C  |.  33C1       |XOR EAX,ECX
0040156E  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401571  |.  0347 20    |ADD EAX,DWORD PTR DS:[EDI+20]
00401574  |.  05 81F67187 |ADD EAX,8771F681
00401579  |.  B1 0B       |MOV CL,0B
0040157B  |.  D3C0       |ROL EAX,CL
0040157D  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401580  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
00401583  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
00401586  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
00401589  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
0040158C  |.  33C3       |XOR EAX,EBX
0040158E  |.  33C1       |XOR EAX,ECX
00401590  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401593  |.  0347 2C    |ADD EAX,DWORD PTR DS:[EDI+2C]
00401596  |.  05 22619D6D |ADD EAX,6D9D6122
0040159B  |.  B1 10       |MOV CL,10
0040159D  |.  D3C0       |ROL EAX,CL
0040159F  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004015A2  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
004015A5  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004015A8  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
004015AB  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
004015AE  |.  33C3       |XOR EAX,EBX
004015B0  |.  33C1       |XOR EAX,ECX
004015B2  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004015B5  |.  0347 38    |ADD EAX,DWORD PTR DS:[EDI+38]
004015B8  |.  05 0C38E5FD |ADD EAX,FDE5380C
004015BD  |.  B1 17       |MOV CL,17
004015BF  |.  D3C0       |ROL EAX,CL
004015C1  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004015C4  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
004015C7  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
004015CA  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
004015CD  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
004015D0  |.  33C3       |XOR EAX,EBX
004015D2  |.  33C1       |XOR EAX,ECX
004015D4  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004015D7  |.  0347 04    |ADD EAX,DWORD PTR DS:[EDI+4]
004015DA  |.  05 44EABEA4 |ADD EAX,A4BEEA44
004015DF  |.  B1 04       |MOV CL,4
004015E1  |.  D3C0       |ROL EAX,CL
004015E3  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004015E6  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
004015E9  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004015EC  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
004015EF  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
004015F2  |.  33C3       |XOR EAX,EBX
004015F4  |.  33C1       |XOR EAX,ECX
004015F6  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004015F9  |.  0347 10    |ADD EAX,DWORD PTR DS:[EDI+10]
004015FC  |.  05 A9CFDE4B |ADD EAX,4BDECFA9
00401601  |.  B1 0B       |MOV CL,0B
00401603  |.  D3C0       |ROL EAX,CL
00401605  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401608  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
0040160B  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
0040160E  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
00401611  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
00401614  |.  33C3       |XOR EAX,EBX
00401616  |.  33C1       |XOR EAX,ECX
00401618  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040161B  |.  0347 1C    |ADD EAX,DWORD PTR DS:[EDI+1C]
0040161E  |.  05 604BBBF6 |ADD EAX,F6BB4B60
00401623  |.  B1 10       |MOV CL,10
00401625  |.  D3C0       |ROL EAX,CL
00401627  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
0040162A  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
0040162D  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
00401630  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
00401633  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
00401636  |.  33C3       |XOR EAX,EBX
00401638  |.  33C1       |XOR EAX,ECX
0040163A  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040163D  |.  0347 28    |ADD EAX,DWORD PTR DS:[EDI+28]
00401640  |.  05 70BCBFBE |ADD EAX,BEBFBC70
00401645  |.  B1 17       |MOV CL,17
00401647  |.  D3C0       |ROL EAX,CL
00401649  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040164C  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
0040164F  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
00401652  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
00401655  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401658  |.  33C3       |XOR EAX,EBX
0040165A  |.  33C1       |XOR EAX,ECX
0040165C  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040165F  |.  0347 34    |ADD EAX,DWORD PTR DS:[EDI+34]
00401662  |.  05 C67E9B28 |ADD EAX,289B7EC6
00401667  |.  B1 04       |MOV CL,4
00401669  |.  D3C0       |ROL EAX,CL
0040166B  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040166E  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
00401671  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401674  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
00401677  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
0040167A  |.  33C3       |XOR EAX,EBX
0040167C  |.  33C1       |XOR EAX,ECX
0040167E  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401681  |.  0307       |ADD EAX,DWORD PTR DS:[EDI]
00401683  |.  05 FA27A1EA |ADD EAX,EAA127FA
00401688  |.  B1 0B       |MOV CL,0B
0040168A  |.  D3C0       |ROL EAX,CL
0040168C  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040168F  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
00401692  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
00401695  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
00401698  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
0040169B  |.  33C3       |XOR EAX,EBX
0040169D  |.  33C1       |XOR EAX,ECX
0040169F  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004016A2  |.  0347 0C    |ADD EAX,DWORD PTR DS:[EDI+C]
004016A5  |.  05 8530EFD4 |ADD EAX,D4EF3085
004016AA  |.  B1 10       |MOV CL,10
004016AC  |.  D3C0       |ROL EAX,CL
004016AE  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004016B1  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
004016B4  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004016B7  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
004016BA  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
004016BD  |.  33C3       |XOR EAX,EBX
004016BF  |.  33C1       |XOR EAX,ECX
004016C1  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004016C4  |.  0347 18    |ADD EAX,DWORD PTR DS:[EDI+18]
004016C7  |.  05 051D8804 |ADD EAX,4881D05
004016CC  |.  B1 17       |MOV CL,17
004016CE  |.  D3C0       |ROL EAX,CL
004016D0  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004016D3  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
004016D6  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
004016D9  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
004016DC  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
004016DF  |.  33C3       |XOR EAX,EBX
004016E1  |.  33C1       |XOR EAX,ECX
004016E3  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004016E6  |.  0347 24    |ADD EAX,DWORD PTR DS:[EDI+24]
004016E9  |.  05 39D0D4D9 |ADD EAX,D9D4D039
004016EE  |.  B1 04       |MOV CL,4
004016F0  |.  D3C0       |ROL EAX,CL
004016F2  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004016F5  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
004016F8  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004016FB  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
004016FE  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
00401701  |.  33C3       |XOR EAX,EBX
00401703  |.  33C1       |XOR EAX,ECX
00401705  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401708  |.  0347 30    |ADD EAX,DWORD PTR DS:[EDI+30]
0040170B  |.  05 E599DBE6 |ADD EAX,E6DB99E5
00401710  |.  B1 0B       |MOV CL,0B
00401712  |.  D3C0       |ROL EAX,CL
00401714  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401717  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
0040171A  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
0040171D  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
00401720  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
00401723  |.  33C3       |XOR EAX,EBX
00401725  |.  33C1       |XOR EAX,ECX
00401727  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040172A  |.  0347 3C    |ADD EAX,DWORD PTR DS:[EDI+3C]
0040172D  |.  05 F87CA21F |ADD EAX,1FA27CF8
00401732  |.  B1 10       |MOV CL,10
00401734  |.  D3C0       |ROL EAX,CL
00401736  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401739  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
0040173C  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
0040173F  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
00401742  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
00401745  |.  33C3       |XOR EAX,EBX
00401747  |.  33C1       |XOR EAX,ECX
00401749  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040174C  |.  0347 08    |ADD EAX,DWORD PTR DS:[EDI+8]
0040174F  |.  05 6556ACC4 |ADD EAX,C4AC5665
00401754  |.  B1 17       |MOV CL,17
00401756  |.  D3C0       |ROL EAX,CL
00401758  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040175B  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
0040175E  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
00401761  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
00401764  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401767  |.  F7D1       |NOT ECX
00401769  |.  0BC1       |OR EAX,ECX
0040176B  |.  33C3       |XOR EAX,EBX
0040176D  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401770  |.  0307       |ADD EAX,DWORD PTR DS:[EDI]
00401772  |.  05 419678D5 |ADD EAX,D5789641
00401777  |.  B1 06       |MOV CL,6
00401779  |.  D3C0       |ROL EAX,CL
0040177B  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040177E  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
00401781  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401784  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
00401787  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
0040178A  |.  F7D1       |NOT ECX
0040178C  |.  0BC1       |OR EAX,ECX
0040178E  |.  33C3       |XOR EAX,EBX
00401790  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401793  |.  0347 1C    |ADD EAX,DWORD PTR DS:[EDI+1C]
00401796  |.  05 97FF2A43 |ADD EAX,432AFF97
0040179B  |.  B1 0A       |MOV CL,0A
0040179D  |.  D3C0       |ROL EAX,CL
0040179F  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004017A2  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
004017A5  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
004017A8  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
004017AB  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
004017AE  |.  F7D1       |NOT ECX
004017B0  |.  0BC1       |OR EAX,ECX
004017B2  |.  33C3       |XOR EAX,EBX
004017B4  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004017B7  |.  0347 38    |ADD EAX,DWORD PTR DS:[EDI+38]
004017BA  |.  05 A72394AB |ADD EAX,AB9423A7
004017BF  |.  B1 0F       |MOV CL,0F
004017C1  |.  D3C0       |ROL EAX,CL
004017C3  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004017C6  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
004017C9  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004017CC  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
004017CF  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
004017D2  |.  F7D1       |NOT ECX
004017D4  |.  0BC1       |OR EAX,ECX
004017D6  |.  33C3       |XOR EAX,EBX
004017D8  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004017DB  |.  0347 14    |ADD EAX,DWORD PTR DS:[EDI+14]
004017DE  |.  05 39A093FC |ADD EAX,FC93A039
004017E3  |.  B1 15       |MOV CL,15
004017E5  |.  D3C0       |ROL EAX,CL
004017E7  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004017EA  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
004017ED  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
004017F0  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
004017F3  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
004017F6  |.  F7D1       |NOT ECX
004017F8  |.  0BC1       |OR EAX,ECX
004017FA  |.  33C3       |XOR EAX,EBX
004017FC  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004017FF  |.  0347 30    |ADD EAX,DWORD PTR DS:[EDI+30]
00401802  |.  05 C3595B65 |ADD EAX,655B59C3
00401807  |.  B1 06       |MOV CL,6
00401809  |.  D3C0       |ROL EAX,CL
0040180B  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040180E  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
00401811  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401814  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
00401817  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
0040181A  |.  F7D1       |NOT ECX
0040181C  |.  0BC1       |OR EAX,ECX
0040181E  |.  33C3       |XOR EAX,EBX
00401820  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401823  |.  0347 0C    |ADD EAX,DWORD PTR DS:[EDI+C]
00401826  |.  05 92CC0C8F |ADD EAX,8F0CCC92
0040182B  |.  B1 0A       |MOV CL,0A
0040182D  |.  D3C0       |ROL EAX,CL
0040182F  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401832  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
00401835  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
00401838  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
0040183B  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
0040183E  |.  F7D1       |NOT ECX
00401840  |.  0BC1       |OR EAX,ECX
00401842  |.  33C3       |XOR EAX,EBX
00401844  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401847  |.  0347 28    |ADD EAX,DWORD PTR DS:[EDI+28]
0040184A  |.  05 7DF4EFFF |ADD EAX,FFEFF47D
0040184F  |.  B1 0F       |MOV CL,0F
00401851  |.  D3C0       |ROL EAX,CL
00401853  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401856  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
00401859  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
0040185C  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
0040185F  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
00401862  |.  F7D1       |NOT ECX
00401864  |.  0BC1       |OR EAX,ECX
00401866  |.  33C3       |XOR EAX,EBX
00401868  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040186B  |.  0347 04    |ADD EAX,DWORD PTR DS:[EDI+4]
0040186E  |.  05 D15D8485 |ADD EAX,85845DD1
00401873  |.  B1 15       |MOV CL,15
00401875  |.  D3C0       |ROL EAX,CL
00401877  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040187A  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
0040187D  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
00401880  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
00401883  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401886  |.  F7D1       |NOT ECX
00401888  |.  0BC1       |OR EAX,ECX
0040188A  |.  33C3       |XOR EAX,EBX
0040188C  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040188F  |.  0347 20    |ADD EAX,DWORD PTR DS:[EDI+20]
00401892  |.  05 4F7EA86F |ADD EAX,6FA87E4F
00401897  |.  B1 06       |MOV CL,6
00401899  |.  D3C0       |ROL EAX,CL
0040189B  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040189E  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
004018A1  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004018A4  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
004018A7  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
004018AA  |.  F7D1       |NOT ECX
004018AC  |.  0BC1       |OR EAX,ECX
004018AE  |.  33C3       |XOR EAX,EBX
004018B0  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004018B3  |.  0347 3C    |ADD EAX,DWORD PTR DS:[EDI+3C]
004018B6  |.  05 E0E62CFE |ADD EAX,FE2CE6E0
004018BB  |.  B1 0A       |MOV CL,0A
004018BD  |.  D3C0       |ROL EAX,CL
004018BF  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
004018C2  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
004018C5  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
004018C8  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
004018CB  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
004018CE  |.  F7D1       |NOT ECX
004018D0  |.  0BC1       |OR EAX,ECX
004018D2  |.  33C3       |XOR EAX,EBX
004018D4  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
004018D7  |.  0347 18    |ADD EAX,DWORD PTR DS:[EDI+18]
004018DA  |.  05 144301A3 |ADD EAX,A3014314
004018DF  |.  B1 0F       |MOV CL,0F
004018E1  |.  D3C0       |ROL EAX,CL
004018E3  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
004018E6  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
004018E9  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004018EC  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
004018EF  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
004018F2  |.  F7D1       |NOT ECX
004018F4  |.  0BC1       |OR EAX,ECX
004018F6  |.  33C3       |XOR EAX,EBX
004018F8  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
004018FB  |.  0347 34    |ADD EAX,DWORD PTR DS:[EDI+34]
004018FE  |.  05 A111084E |ADD EAX,4E0811A1
00401903  |.  B1 15       |MOV CL,15
00401905  |.  D3C0       |ROL EAX,CL
00401907  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040190A  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
0040190D  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
00401910  |.  8B5D F4    |MOV EBX,DWORD PTR SS:[EBP-C]
00401913  |.  8B4D F0    |MOV ECX,DWORD PTR SS:[EBP-10]
00401916  |.  F7D1       |NOT ECX
00401918  |.  0BC1       |OR EAX,ECX
0040191A  |.  33C3       |XOR EAX,EBX
0040191C  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
0040191F  |.  0347 10    |ADD EAX,DWORD PTR DS:[EDI+10]
00401922  |.  05 827E53F7 |ADD EAX,F7537E82
00401927  |.  B1 06       |MOV CL,6
00401929  |.  D3C0       |ROL EAX,CL
0040192B  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040192E  |.  8945 FC    |MOV DWORD PTR SS:[EBP-4],EAX
00401931  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
00401934  |.  8B5D F8    |MOV EBX,DWORD PTR SS:[EBP-8]
00401937  |.  8B4D F4    |MOV ECX,DWORD PTR SS:[EBP-C]
0040193A  |.  F7D1       |NOT ECX
0040193C  |.  0BC1       |OR EAX,ECX
0040193E  |.  33C3       |XOR EAX,EBX
00401940  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401943  |.  0347 2C    |ADD EAX,DWORD PTR DS:[EDI+2C]
00401946  |.  05 35F23ABD |ADD EAX,BD3AF235
0040194B  |.  B1 0A       |MOV CL,0A
0040194D  |.  D3C0       |ROL EAX,CL
0040194F  |.  0345 FC    |ADD EAX,DWORD PTR SS:[EBP-4]
00401952  |.  8945 F0    |MOV DWORD PTR SS:[EBP-10],EAX
00401955  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
00401958  |.  8B5D FC    |MOV EBX,DWORD PTR SS:[EBP-4]
0040195B  |.  8B4D F8    |MOV ECX,DWORD PTR SS:[EBP-8]
0040195E  |.  F7D1       |NOT ECX
00401960  |.  0BC1       |OR EAX,ECX
00401962  |.  33C3       |XOR EAX,EBX
00401964  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
00401967  |.  0347 08    |ADD EAX,DWORD PTR DS:[EDI+8]
0040196A  |.  05 BBD2D72A |ADD EAX,2AD7D2BB
0040196F  |.  B1 0F       |MOV CL,0F
00401971  |.  D3C0       |ROL EAX,CL
00401973  |.  0345 F0    |ADD EAX,DWORD PTR SS:[EBP-10]
00401976  |.  8945 F4    |MOV DWORD PTR SS:[EBP-C],EAX
00401979  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
0040197C  |.  8B5D F0    |MOV EBX,DWORD PTR SS:[EBP-10]
0040197F  |.  8B4D FC    |MOV ECX,DWORD PTR SS:[EBP-4]
00401982  |.  F7D1       |NOT ECX
00401984  |.  0BC1       |OR EAX,ECX
00401986  |.  33C3       |XOR EAX,EBX
00401988  |.  0345 F8    |ADD EAX,DWORD PTR SS:[EBP-8]
0040198B  |.  0347 24    |ADD EAX,DWORD PTR DS:[EDI+24]
0040198E  |.  05 91D386EB |ADD EAX,EB86D391
00401993  |.  B1 15       |MOV CL,15
00401995  |.  D3C0       |ROL EAX,CL
00401997  |.  0345 F4    |ADD EAX,DWORD PTR SS:[EBP-C]
0040199A  |.  8945 F8    |MOV DWORD PTR SS:[EBP-8],EAX
0040199D  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]
004019A0  |.  0106       |ADD DWORD PTR DS:[ESI],EAX
004019A2  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
004019A5  |.  0146 04    |ADD DWORD PTR DS:[ESI+4],EAX
004019A8  |.  8B45 F4    |MOV EAX,DWORD PTR SS:[EBP-C]
004019AB  |.  0146 08    |ADD DWORD PTR DS:[ESI+8],EAX
004019AE  |.  8B45 F0    |MOV EAX,DWORD PTR SS:[EBP-10]
004019B1  |.  0146 0C    |ADD DWORD PTR DS:[ESI+C],EAX
004019B4  |.  83C7 40    |ADD EDI,40
004019B7  |.  83EA 40    |SUB EDX,40
004019BA  |.^ 0F85 AAF6FFFF \JNZ Crackme.0040106A

1000100C 55             PUSH EBP                               ; 以下计算正确注册码
1000100D 8BEC          MOV EBP,ESP
1000100F 83C4 F8       ADD ESP,-8
10001012 53             PUSH EBX
10001013 57             PUSH EDI
10001014 56             PUSH ESI
10001015 52             PUSH EDX
10001016 FF75 0C       PUSH DWORD PTR SS:[EBP+C]
10001019 E8 5E000000    CALL 1000107C
1000101E FF75 0C       PUSH DWORD PTR SS:[EBP+C]
10001021 E8 4E000000    CALL 10001074                         ; 得到下面用到的循环次数
10001026 50             PUSH EAX
10001027 FF75 0C       PUSH DWORD PTR SS:[EBP+C]
1000102A E8 3F000000    CALL 1000106E                         ; JMP 到 user32.CharUpperBuffA
1000102F FF75 0C       PUSH DWORD PTR SS:[EBP+C]
10001032 E8 3D000000    CALL 10001074                         ; JMP 到 kernel32.lstrlenA
10001037 33C9          XOR ECX,ECX                            ; kernel32.7C80C710
10001039 33DB          XOR EBX,EBX
1000103B C1E3 04       SHL EBX,4                      从这开始计算正确注册码
1000103E 33D2          XOR EDX,EDX
10001040 8B7D 0C       MOV EDI,DWORD PTR SS:[EBP+C]
10001043 8B1439       MOV EDX,DWORD PTR DS:[ECX+EDI]    长串的前四位16进制代码赋给edx
10001046 03DA          ADD EBX,EDX
10001048 8BD3          MOV EDX,EBX
1000104A 81E2 000000F0 AND EDX,F0000000
10001050 85D2          TEST EDX,EDX
10001052 74 07          JE SHORT 1000105B
10001054 8BF2          MOV ESI,EDX
10001056 C1EE 18       SHR ESI,18
10001059 33DE          XOR EBX,ESI
1000105B F7D2          NOT EDX
1000105D 23DA          AND EBX,EDX
1000105F 41             INC ECX
10001060 3BC8          CMP ECX,EAX
10001062  ^ 75 D7          JNZ SHORT 1000103B
10001064 8BC3          MOV EAX,EBX                      其中ebx中即为正确注册码
10001066 5A             POP EDX
10001067 5E             POP ESI
10001068 5F             POP EDI
10001069 5B             POP EBX
1000106A C9             LEAVE
1000106B C2 0800       RETN 8

算法：1、以用户注册名计算一长串(32位)。
   2、一共循环0x20次进行循环取四字串给edx,再参与计算出ebx。如我的：8703DEE9CC58A74A96EFEAB711D83792
   在取串转化进，依次交错取，如我的依次取8703，703d,03de ,3dee......
   3、ebx即为注册码。
name:tong
sn:06e2b402

野猫III · 发表于 2006-3-15 23:24:17

晕咯...

lnn1123 · 发表于 2006-3-16 12:21:08

呵呵,比较简单

		自动登录	找回密码
密码			加入我们

lnn1123's KeyGenme(不要内存注册机)

本帖子中包含更多资源

相关帖子