[psac]

HASP加密狗簡單爆破

--------------------------------------------------------------------------------
簡單HASP爆破

************************************大家別笑哦這個程序就是這麼的簡單*****************************************


@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ OD載入 GO! GO! GO! @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
00441C4E >/$ 55 PUSH EBP
00441C4F |. 8BEC MOV EBP,ESP
00441C51 |. 6A FF PUSH -1
00441C53 |. 68 F8934400 PUSH Wbmp405.004493F8
00441C58 |. 68 D4524400 PUSH Wbmp405.004452D4
00441C5D |. 64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
00441C63 |. 50 PUSH EAX
00441C64 |. 64:8925 00000>MOV DWORD PTR FS:[0],ESP
00441C6B |. 83EC 58 SUB ESP,58
00441C6E |. 53 PUSH EBX
00441C6F |. 56 PUSH ESI
00441C70 |. 57 PUSH EDI
00441C71 |. 8965 E8 MOV DWORD PTR SS:[EBP-18],ESP
00441C74 |. FF15 C4914400 CALL DWORD PTR DS:[<&KERNEL32.GetVersion>
00441C7A |. 33D2 XOR EDX,EDX
00441C7C |. 8AD4 MOV DL,AH
00441C7E |. 8915 E8E44400 MOV DWORD PTR DS:[44E4E8],EDX
00441C84 |. 8BC8 MOV ECX,EAX
00441C86 |. 81E1 FF000000 AND ECX,0FF
00441C8C |. 890D E4E44400 MOV DWORD PTR DS:[44E4E4],ECX
00441C92 |. C1E1 08 SHL ECX,8
00441C95 |. 03CA ADD ECX,EDX
00441C97 |. 890D E0E44400 MOV DWORD PTR DS:[44E4E0],ECX
00441C9D |. C1E8 10 SHR EAX,10
00441CA0 |. A3 DCE44400 MOV DWORD PTR DS:[44E4DC],EAX
00441CA5 |. 33F6 XOR ESI,ESI
00441CA7 |. 56 PUSH ESI
00441CA8 |. E8 F1340000 CALL Wbmp405.0044519E
00441CAD |. 59 POP ECX
00441CAE |. 85C0 TEST EAX,EAX
00441CB0 |. 75 08 JNZ SHORT Wbmp405.00441CBA
00441CB2 |. 6A 1C PUSH 1C
00441CB4 |. E8 B0000000 CALL Wbmp405.00441D69
00441CB9 |. 59 POP ECX
00441CBA |> 8975 FC MOV DWORD PTR SS:[EBP-4],ESI
00441CBD |. E8 D72B0000 CALL Wbmp405.00444899
00441CC2 |. FF15 C8914400 CALL DWORD PTR DS:[<&KERNEL32.GetCommand>
00441CC8 |. A3 A46E4500 MOV DWORD PTR DS:[456EA4],EAX
00441CCD |. E8 9A330000 CALL Wbmp405.0044506C
00441CD2 |. A3 8CE44400 MOV DWORD PTR DS:[44E48C],EAX
00441CD7 |. E8 43310000 CALL Wbmp405.00444E1F
00441CDC |. E8 85300000 CALL Wbmp405.00444D66
00441CE1 |. E8 EE280000 CALL Wbmp405.004445D4
00441CE6 |. 8975 D0 MOV DWORD PTR SS:[EBP-30],ESI
00441CE9 |. 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
00441CEC |. 50 PUSH EAX
00441CED |. FF15 CC914400 CALL DWORD PTR DS:[<&KERNEL32.GetStartup>
00441CF3 |. E8 16300000 CALL Wbmp405.00444D0E
00441CF8 |. 8945 9C MOV DWORD PTR SS:[EBP-64],EAX
00441CFB |. F645 D0 01 TEST BYTE PTR SS:[EBP-30],1
00441CFF |. 74 06 JE SHORT Wbmp405.00441D07
00441D01 |. 0FB745 D4 MOVZX EAX,WORD PTR SS:[EBP-2C]
00441D05 |. EB 03 JMP SHORT Wbmp405.00441D0A
00441D07 |> 6A 0A PUSH 0A
00441D09 |. 58 POP EAX
00441D0A |> 50 PUSH EAX
00441D0B |. FF75 9C PUSH DWORD PTR SS:[EBP-64]
00441D0E |. 56 PUSH ESI
00441D0F |. 56 PUSH ESI
00441D10 |. FF15 F0904400 CALL DWORD PTR DS:[<&KERNEL32.GetModuleH>
00441D16 |. 50 PUSH EAX
00441D17 |. E8 E4F2FBFF CALL Wbmp405.00401000 //F7進去

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

00401000 /$ 83EC 78 SUB ESP,78
00401003 |. A1 6CB14400 MOV EAX,DWORD PTR DS:[44B16C]
00401008 |. 53 PUSH EBX
00401009 |. 894424 04 MOV DWORD PTR SS:[ESP+4],EAX
0040100D |. 8B8424 840000>MOV EAX,DWORD PTR SS:[ESP+84]
00401014 |. 33DB XOR EBX,EBX
00401016 |. 55 PUSH EBP
00401017 |. 56 PUSH ESI
00401018 |. 8BB424 880000>MOV ESI,DWORD PTR SS:[ESP+88]
0040101F |. 3BC3 CMP EAX,EBX
00401021 |. 57 PUSH EDI
00401022 |. 891D 80344500 MOV DWORD PTR DS:[453480],EBX
00401028 |. 0F85 6B010000 JNZ Wbmp405.00401199
0040102E |. 68 80000000 PUSH 80
00401033 |. 56 PUSH ESI
00401034 |. 8935 FC344500 MOV DWORD PTR DS:[4534FC],ESI
0040103A |. 895C24 68 MOV DWORD PTR SS:[ESP+68],EBX
0040103E |. C74424 6C 301>MOV DWORD PTR SS:[ESP+6C],Wbmp405.004015>
00401046 |. 895C24 70 MOV DWORD PTR SS:[ESP+70],EBX
0040104A |. C74424 74 140>MOV DWORD PTR SS:[ESP+74],14
00401052 |. 897424 78 MOV DWORD PTR SS:[ESP+78],ESI
00401056 |. FF15 2C924400 CALL DWORD PTR DS:[<&USER32.LoadIconA>]
0040105C |. 8B3D 20904400 MOV EDI,DWORD PTR DS:[<&GDI32.GetStockOb>
00401062 |. 53 PUSH EBX
00401063 |. 894424 78 MOV DWORD PTR SS:[ESP+78],EAX
00401067 |. 895C24 7C MOV DWORD PTR SS:[ESP+7C],EBX
0040106B |. FFD7 CALL EDI
0040106D |. 8B2D 28924400 MOV EBP,DWORD PTR DS:[<&USER32.RegisterC>
00401073 |. 8D5424 60 LEA EDX,DWORD PTR SS:[ESP+60]
00401077 |. 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0040107B |. 52 PUSH EDX
0040107C |. 898424 800000>MOV DWORD PTR SS:[ESP+80],EAX
00401083 |. 899C24 840000>MOV DWORD PTR SS:[ESP+84],EBX
0040108A |. 898C24 880000>MOV DWORD PTR SS:[ESP+88],ECX
00401091 |. FFD5 CALL EBP
00401093 |. 66:85C0 TEST AX,AX
00401096 |. 75 11 JNZ SHORT Wbmp405.004010A9
00401098 |. 6A 30 PUSH 30
0040109A |. 68 5CB14400 PUSH Wbmp405.0044B15C
0040109F |. 68 44B14400 PUSH Wbmp405.0044B144
004010A4 |. E9 6E040000 JMP Wbmp405.00401517
004010A9 |> 68 007F0000 PUSH 7F00
004010AE |. 53 PUSH EBX
004010AF |. 895C24 68 MOV DWORD PTR SS:[ESP+68],EBX
004010B3 |. C74424 6C F0D>MOV DWORD PTR SS:[ESP+6C],Wbmp405.0041D3>
004010BB |. 895C24 70 MOV DWORD PTR SS:[ESP+70],EBX
004010BF |. 895C24 74 MOV DWORD PTR SS:[ESP+74],EBX
004010C3 |. 897424 78 MOV DWORD PTR SS:[ESP+78],ESI
004010C7 |. 895C24 7C MOV DWORD PTR SS:[ESP+7C],EBX
004010CB |. FF15 10924400 CALL DWORD PTR DS:[<&USER32.LoadCursorA>>
004010D1 |. 53 PUSH EBX
004010D2 |. 894424 7C MOV DWORD PTR SS:[ESP+7C],EAX
004010D6 |. FFD7 CALL EDI
004010D8 |. 8D4C24 60 LEA ECX,DWORD PTR SS:[ESP+60]
004010DC |. 899C24 800000>MOV DWORD PTR SS:[ESP+80],EBX
004010E3 |. 51 PUSH ECX
004010E4 |. 898424 800000>MOV DWORD PTR SS:[ESP+80],EAX
004010EB |. C78424 880000>MOV DWORD PTR SS:[ESP+88],Wbmp405.0044B1>;
004010F6 |. FFD5 CALL EBP
004010F8 |. 66:85C0 TEST AX,AX
004010FB |. 75 25 JNZ SHORT Wbmp405.00401122
004010FD |. 8B15 94254500 MOV EDX,DWORD PTR DS:[452594]
00401103 |. 6A 30 PUSH 30
00401105 |. 68 5CB14400 PUSH Wbmp405.0044B15C
0040110A |. 68 20B14400 PUSH Wbmp405.0044B120
0040110F |. 52 PUSH EDX
00401110 |. FF15 14924400 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>
00401116 |. 5F POP EDI
00401117 |. 5E POP ESI
00401118 |. 5D POP EBP
00401119 |. 33C0 XOR EAX,EAX
0040111B |. 5B POP EBX
0040111C |. 83C4 78 ADD ESP,78
0040111F |. C2 1000 RETN 10
00401122 |> \68 007F0000 PUSH 7F00
00401127 |. 53 PUSH EBX
00401128 |. 895C24 68 MOV DWORD PTR SS:[ESP+68],EBX
0040112C |. C74424 6C C0D>MOV DWORD PTR SS:[ESP+6C],Wbmp405.0041D5>
00401134 |. 895C24 70 MOV DWORD PTR SS:[ESP+70],EBX
00401138 |. 895C24 74 MOV DWORD PTR SS:[ESP+74],EBX
0040113C |. 897424 78 MOV DWORD PTR SS:[ESP+78],ESI
00401140 |. 895C24 7C MOV DWORD PTR SS:[ESP+7C],EBX
00401144 |. FF15 10924400 CALL DWORD PTR DS:[<&USER32.LoadCursorA>>
0040114A |. 6A 04 PUSH 4
0040114C |. 894424 7C MOV DWORD PTR SS:[ESP+7C],EAX
00401150 |. FFD7 CALL EDI
00401152 |. 899C24 800000>MOV DWORD PTR SS:[ESP+80],EBX
00401159 |. C78424 840000>MOV DWORD PTR SS:[ESP+84],Wbmp405.0044B1>;
00401164 |. 894424 7C MOV DWORD PTR SS:[ESP+7C],EAX
00401168 |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60]
0040116C |. 50 PUSH EAX
0040116D |. FFD5 CALL EBP
0040116F |. 66:85C0 TEST AX,AX
00401172 |. 75 25 JNZ SHORT Wbmp405.00401199
00401174 |. 8B0D 94254500 MOV ECX,DWORD PTR DS:[452594]
0040117A |. 6A 30 PUSH 30
0040117C |. 68 5CB14400 PUSH Wbmp405.0044B15C
00401181 |. 68 FCB04400 PUSH Wbmp405.0044B0FC
00401186 |. 51 PUSH ECX
00401187 |. FF15 14924400 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>;
0040118D |. 5F POP EDI
0040118E |. 5E POP ESI
0040118F |. 5D POP EBP
00401190 |. 33C0 XOR EAX,EAX
00401192 |. 5B POP EBX
00401193 |. 83C4 78 ADD ESP,78
00401196 |. C2 1000 RETN 10
00401199 |> 6A 45 PUSH 45
0040119B |. 6A 04 PUSH 4
0040119D |. 6A 03 PUSH 3
0040119F |. E8 7CD60000 CALL Wbmp405.0040E820
004011A4 |. B0 52 MOV AL,52
004011A6 |. 83C4 0C ADD ESP,0C
004011A9 |. C64424 14 45 MOV BYTE PTR SS:[ESP+14],45
004011AE |. 884424 15 MOV BYTE PTR SS:[ESP+15],AL
004011B2 |. 884424 16 MOV BYTE PTR SS:[ESP+16],AL
004011B6 |. C64424 17 4F MOV BYTE PTR SS:[ESP+17],4F
004011BB |. 884424 18 MOV BYTE PTR SS:[ESP+18],AL
004011BF |. 885C24 19 MOV BYTE PTR SS:[ESP+19],BL
004011C3 |. FF15 00904400 CALL DWORD PTR DS:[<&COMCTL32.#17>]
004011C9 |. 6A 04 PUSH 4
004011CB |. 6A 03 PUSH 3
004011CD |. 6A 07 PUSH 7
004011CF |. E8 7CD60000 CALL Wbmp405.0040E850
004011D4 |. 83C4 0C ADD ESP,0C
004011D7 |. 8B3D 0C924400 MOV EDI,DWORD PTR DS:[<&USER32.CreateWin>;
004011DD |. 8D5424 10 LEA EDX,DWORD PTR SS:[ESP+10]
004011E1 |. 53 PUSH EBX
004011E2 |. 56 PUSH ESI
004011E3 |. 53 PUSH EBX
004011E4 |. 53 PUSH EBX
004011E5 |. 68 00000080 PUSH 80000000
004011EA |. 68 00000080 PUSH 80000000
004011EF |. 68 00000080 PUSH 80000000
004011F4 |. 68 00000080 PUSH 80000000
004011F9 |. 68 0000CF12 PUSH 12CF0000
004011FE |. 68 F4B04400 PUSH Wbmp405.0044B0F4
00401203 |. 52 PUSH EDX
00401204 |. 53 PUSH EBX
00401205 |. FFD7 CALL EDI
00401207 |. 3BC3 CMP EAX,EBX
00401209 |. A3 94254500 MOV DWORD PTR DS:[452594],EAX
0040120E |. 0F84 0F030000 JE Wbmp405.00401523
00401214 |. 6A 03 PUSH 3
00401216 |. 50 PUSH EAX
00401217 |. FF15 04924400 CALL DWORD PTR DS:[<&USER32.ShowWindow>]
0040121D |. A1 94254500 MOV EAX,DWORD PTR DS:[452594]
00401222 |. 50 PUSH EAX
00401223 |. FF15 C8924400 CALL DWORD PTR DS:[<&USER32.UpdateWindow>
00401229 |. E8 C23E0100 CALL Wbmp405.004150F0
0040122E |. 8B0D 94254500 MOV ECX,DWORD PTR DS:[452594]
00401234 |. 8B2D CC924400 MOV EBP,DWORD PTR DS:[<&USER32.GetClient>
0040123A |. 68 00224500 PUSH Wbmp405.00452200
0040123F |. 51 PUSH ECX
00401240 |. A3 085B4500 MOV DWORD PTR DS:[455B08],EAX
00401245 |. FFD5 CALL EBP
00401247 |. 8B15 0C224500 MOV EDX,DWORD PTR DS:[45220C]
0040124D |. 83C2 B0 ADD EDX,-50
00401250 |. 8915 14D64400 MOV DWORD PTR DS:[44D614],EDX
00401256 |. E8 857D0300 CALL Wbmp405.00438FE0
0040125B |. 8B0D 08224500 MOV ECX,DWORD PTR DS:[452208]
00401261 |. 8B15 14D64400 MOV EDX,DWORD PTR DS:[44D614]
00401267 |. A3 005B4500 MOV DWORD PTR DS:[455B00],EAX
0040126C |. A1 94254500 MOV EAX,DWORD PTR DS:[452594]
00401271 |. 53 PUSH EBX
00401272 |. 56 PUSH ESI
00401273 |. 6A 01 PUSH 1
00401275 |. 50 PUSH EAX
00401276 |. A1 00224500 MOV EAX,DWORD PTR DS:[452200]
0040127B |. 81C1 8DFDFFFF ADD ECX,-273
00401281 |. 6A 50 PUSH 50
00401283 |. 51 PUSH ECX
00401284 |. 05 73020000 ADD EAX,273
00401289 |. 52 PUSH EDX
0040128A |. 50 PUSH EAX
0040128B |. 68 00004050 PUSH 50400000
00401290 |. 68 38B14400 PUSH Wbmp405.0044B138
00401295 |. 68 38B14400 PUSH Wbmp405.0044B138
0040129A |. 53 PUSH EBX
0040129B |. FFD7 CALL EDI
0040129D |. 3BC3 CMP EAX,EBX
0040129F |. A3 FCD64400 MOV DWORD PTR DS:[44D6FC],EAX
004012A4 |. 75 25 JNZ SHORT Wbmp405.004012CB
004012A6 |. 8B0D 94254500 MOV ECX,DWORD PTR DS:[452594]
004012AC |. 6A 30 PUSH 30
004012AE |. 68 5CB14400 PUSH Wbmp405.0044B15C
004012B3 |. 68 DCB04400 PUSH Wbmp405.0044B0DC
004012B8 |. 51 PUSH ECX
004012B9 |. FF15 14924400 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>
004012BF |. 5F POP EDI
004012C0 |. 5E POP ESI
004012C1 |. 5D POP EBP
004012C2 |. 33C0 XOR EAX,EAX
004012C4 |. 5B POP EBX
004012C5 |. 83C4 78 ADD ESP,78
004012C8 |. C2 1000 RETN 10
004012CB |> 6A FC PUSH -4
004012CD |. 50 PUSH EAX
004012CE |. FF15 A4924400 CALL DWORD PTR DS:[<&USER32.GetWindowLon>
004012D4 |. 8B15 FCD64400 MOV EDX,DWORD PTR DS:[44D6FC]
004012DA |. 50 PUSH EAX
004012DB |. 6A FC PUSH -4
004012DD |. 52 PUSH EDX
004012DE |. A3 84344500 MOV DWORD PTR DS:[453484],EAX
004012E3 |. FF15 18924400 CALL DWORD PTR DS:[<&USER32.SetWindowLon>
004012E9 |. A1 FCD64400 MOV EAX,DWORD PTR DS:[44D6FC]
004012EE |. 68 D0214500 PUSH Wbmp405.004521D0
004012F3 |. 50 PUSH EAX
004012F4 |. FFD5 CALL EBP
004012F6 |. E8 F57C0300 CALL Wbmp405.00438FF0
004012FB |. 8B0D 94254500 MOV ECX,DWORD PTR DS:[452594]
00401301 |. A3 045B4500 MOV DWORD PTR DS:[455B04],EAX
00401306 |. A1 00224500 MOV EAX,DWORD PTR DS:[452200]
0040130B |. 53 PUSH EBX
0040130C |. 56 PUSH ESI
0040130D |. 6A 02 PUSH 2
0040130F |. 51 PUSH ECX
00401310 |. 8B0D 14D64400 MOV ECX,DWORD PTR DS:[44D614]
00401316 |. 8D90 73020000 LEA EDX,DWORD PTR DS:[EAX+273]
0040131C |. 6A 50 PUSH 50
0040131E |. 52 PUSH EDX
0040131F |. 51 PUSH ECX
00401320 |. 50 PUSH EAX
00401321 |. 68 00008050 PUSH 50800000
00401326 |. 68 14B14400 PUSH Wbmp405.0044B114
0040132B |. 68 14B14400 PUSH Wbmp405.0044B114
00401330 |. 53 PUSH EBX
00401331 |. FFD7 CALL EDI
00401333 |. 3BC3 CMP EAX,EBX
00401335 |. A3 00D74400 MOV DWORD PTR DS:[44D700],EAX
0040133A |. 75 25 JNZ SHORT Wbmp405.00401361
0040133C |. 8B15 94254500 MOV EDX,DWORD PTR DS:[452594]
00401342 |. 6A 30 PUSH 30
00401344 |. 68 5CB14400 PUSH Wbmp405.0044B15C
00401349 |. 68 C4B04400 PUSH Wbmp405.0044B0C4
0040134E |. 52 PUSH EDX
0040134F |. FF15 14924400 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>
00401355 |. 5F POP EDI
00401356 |. 5E POP ESI
00401357 |. 5D POP EBP
00401358 |. 33C0 XOR EAX,EAX
0040135A |. 5B POP EBX
0040135B |. 83C4 78 ADD ESP,78
0040135E |. C2 1000 RETN 10
00401361 |> 391D 005B4500 CMP DWORD PTR DS:[455B00],EBX //比較
00401367 |. 7D 1E JGE SHORT Wbmp405.00401387 //跳過去，不跳 OVER
00401369 |. 8D4424 14 LEA EAX,DWORD PTR SS:[ESP+14]
0040136D |. 6A 0B PUSH 0B
0040136F |. 50 PUSH EAX
00401370 |. 8D4C24 44 LEA ECX,DWORD PTR SS:[ESP+44]
00401374 |. 68 BCB04400 PUSH Wbmp405.0044B0BC
00401379 |. 51 PUSH ECX
0040137A |. E8 A7FC0300 CALL Wbmp405.00441026
0040137F |. 83C4 10 ADD ESP,10
00401382 |. E9 84010000 JMP Wbmp405.0040150B
00401387 |> 391D 045B4500 CMP DWORD PTR DS:[455B04],EBX
0040138D |. 75 43 JNZ SHORT Wbmp405.004013D2
0040138F |. 68 802F4500 PUSH Wbmp405.00452F80
00401394 |. 8D4C24 18 LEA ECX,DWORD PTR SS:[ESP+18]
00401398 |. 6A 0C PUSH 0C
0040139A |. 51 PUSH ECX
0040139B |. 8D5424 48 LEA EDX,DWORD PTR SS:[ESP+48]
0040139F |. 68 ACB04400 PUSH Wbmp405.0044B0AC
004013A4 |. 52 PUSH EDX
004013A5 |. E8 7CFC0300 CALL Wbmp405.00441026
004013AA |. 8B0D 94254500 MOV ECX,DWORD PTR DS:[452594]
004013B0 |. 83C4 14 ADD ESP,14
004013B3 |. 8D4424 3C LEA EAX,DWORD PTR SS:[ESP+3C]
004013B7 |. 6A 30 PUSH 30
004013B9 |. 68 5CB14400 PUSH Wbmp405.0044B15C
004013BE |. 50 PUSH EAX
004013BF |. 51 PUSH ECX
004013C0 |. FF15 14924400 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>;
004013C6 |. 5F POP EDI
004013C7 |. 5E POP ESI
004013C8 |. 5D POP EBP
004013C9 |. 33C0 XOR EAX,EAX
004013CB |. 5B POP EBX
004013CC |. 83C4 78 ADD ESP,78
004013CF |. C2 1000 RETN 10
004013D2 |> 6A FC PUSH -4
004013D4 |. 50 PUSH EAX
004013D5 |. FF15 A4924400 CALL DWORD PTR DS:[<&USER32.GetWindowLon>
004013DB |. 8B15 00D74400 MOV EDX,DWORD PTR DS:[44D700]
004013E1 |. 50 PUSH EAX
004013E2 |. 6A FC PUSH -4
004013E4 |. 52 PUSH EDX
004013E5 |. A3 84344500 MOV DWORD PTR DS:[453484],EAX
004013EA |. FF15 18924400 CALL DWORD PTR DS:[<&USER32.SetWindowLon>
004013F0 |. A1 942F4500 MOV EAX,DWORD PTR DS:[452F94]
004013F5 |. 33C9 XOR ECX,ECX
004013F7 |. 8ACC MOV CL,AH
004013F9 |. 25 FF000000 AND EAX,0FF
004013FE |. 8BD1 MOV EDX,ECX
00401400 |. 2BD0 SUB EDX,EAX
00401402 |. 83FA 64 CMP EDX,64 //比較
00401405 |. 0F85 E2000000 JNZ Wbmp405.004014ED //不能跳
0040140B |. 33C0 XOR EAX,EAX
0040140D |. A0 962F4500 MOV AL,BYTE PTR DS:[452F96]
00401412 |. 2BC1 SUB EAX,ECX
00401414 |. 3BC2 CMP EAX,EDX // 比較
00401416 |. 0F85 D1000000 JNZ Wbmp405.004014ED //不能跳
0040141C |. 8B35 D0924400 MOV ESI,DWORD PTR DS:[<&USER32.GetMessag>
00401422 |. 53 PUSH EBX
00401423 |. 53 PUSH EBX
00401424 |. 8D4C24 28 LEA ECX,DWORD PTR SS:[ESP+28]
00401428 |. 53 PUSH EBX
00401429 |. 51 PUSH ECX
0040142A |. FFD6 CALL ESI
0040142C |. 85C0 TEST EAX,EAX
0040142E |. 74 28 JE SHORT Wbmp405.00401458
00401430 |. 8B3D 1C924400 MOV EDI,DWORD PTR DS:[<&USER32.Translate>
00401436 |. 8B2D 20924400 MOV EBP,DWORD PTR DS:[<&USER32.DispatchM>
0040143C |> 8D5424 20 /LEA EDX,DWORD PTR SS:[ESP+20]
00401440 |. 52 |PUSH EDX
00401441 |. FFD7 |CALL EDI
00401443 |. 8D4424 20 |LEA EAX,DWORD PTR SS:[ESP+20]
00401447 |. 50 |PUSH EAX
00401448 |. FFD5 |CALL EBP
0040144A |. 53 |PUSH EBX
0040144B |. 53 |PUSH EBX
0040144C |. 8D4C24 28 |LEA ECX,DWORD PTR SS:[ESP+28]
00401450 |. 53 |PUSH EBX
00401451 |. 51 |PUSH ECX
00401452 |. FFD6 |CALL ESI
00401454 |. 85C0 |TEST EAX,EAX
00401456 |.^ 75 E4 \JNZ SHORT Wbmp405.0040143C
00401458 |> 8B15 18D74400 MOV EDX,DWORD PTR DS:[44D718]
0040145E |. 8B3D 18904400 MOV EDI,DWORD PTR DS:[<&GDI32.DeleteDC>]
00401464 |. 52 PUSH EDX
00401465 |. FFD7 CALL EDI
00401467 |. A1 1CD74400 MOV EAX,DWORD PTR DS:[44D71C]
0040146C |. 8B35 28904400 MOV ESI,DWORD PTR DS:[<&GDI32.DeleteObje>
00401472 |. 50 PUSH EAX
00401473 |. FFD6 CALL ESI
00401475 |. 8B0D 24D74400 MOV ECX,DWORD PTR DS:[44D724]
0040147B |. 891D 18D74400 MOV DWORD PTR DS:[44D718],EBX
00401481 |. 51 PUSH ECX
00401482 |. FFD7 CALL EDI
00401484 |. 8B15 2CD74400 MOV EDX,DWORD PTR DS:[44D72C]
0040148A |. 52 PUSH EDX
0040148B |. FFD6 CALL ESI
0040148D |. A1 6C204500 MOV EAX,DWORD PTR DS:[45206C]
00401492 |. 50 PUSH EAX
00401493 |. FFD6 CALL ESI
00401495 |. 8B0D E0344500 MOV ECX,DWORD PTR DS:[4534E0]
0040149B |. 8B3D 74914400 MOV EDI,DWORD PTR DS:[<&KERNEL32.GlobalU>
004014A1 |. 51 PUSH ECX
004014A2 |. 891D 24D74400 MOV DWORD PTR DS:[44D724],EBX
004014A8 |. FFD7 CALL EDI
004014AA |. 8B15 E0344500 MOV EDX,DWORD PTR DS:[4534E0]
004014B0 |. 8B2D 70914400 MOV EBP,DWORD PTR DS:[<&KERNEL32.GlobalF>
004014B6 |. 52 PUSH EDX
004014B7 |. FFD5 CALL EBP
004014B9 |. A1 F0344500 MOV EAX,DWORD PTR DS:[4534F0]
004014BE |. 50 PUSH EAX
004014BF |. FFD7 CALL EDI
004014C1 |. 8B0D F0344500 MOV ECX,DWORD PTR DS:[4534F0]
004014C7 |. 51 PUSH ECX
004014C8 |. FFD5 CALL EBP
004014CA |. 8B15 3CD74400 MOV EDX,DWORD PTR DS:[44D73C]
004014D0 |. 52 PUSH EDX
004014D1 |. FFD6 CALL ESI
004014D3 |. E8 88B50000 CALL Wbmp405.0040CA60
004014D8 |. 53 PUSH EBX
004014D9 |. FF15 24924400 CALL DWORD PTR DS:[<&USER32.MessageBeep>>
004014DF |. 5F POP EDI
004014E0 |. 5E POP ESI
004014E1 |. 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20]
004014E5 |. 5D POP EBP
004014E6 |. 5B POP EBX
004014E7 |. 83C4 78 ADD ESP,78
004014EA |. C2 1000 RETN 10
004014ED |> 68 802F4500 PUSH Wbmp405.00452F80
004014F2 |. 8D4424 18 LEA EAX,DWORD PTR SS:[ESP+18]
004014F6 |. 6A 0D PUSH 0D
004014F8 |. 50 PUSH EAX
004014F9 |. 8D4C24 48 LEA ECX,DWORD PTR SS:[ESP+48]
004014FD |. 68 9CB04400 PUSH Wbmp405.0044B09C
00401502 |. 51 PUSH ECX
00401503 |. E8 1EFB0300 CALL Wbmp405.00441026
00401508 |. 83C4 14 ADD ESP,14
0040150B |> 6A 30 PUSH 30
0040150D |. 8D5424 40 LEA EDX,DWORD PTR SS:[ESP+40]
00401511 |. 68 5CB14400 PUSH Wbmp405.0044B15C
00401516 |. 52 PUSH EDX
00401517 |> A1 94254500 MOV EAX,DWORD PTR DS:[452594]
0040151C |. 50 PUSH EAX
0040151D |. FF15 14924400 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>;
00401523 |> 5F POP EDI
00401524 |. 5E POP ESI
00401525 |. 5D POP EBP
00401526 |. 33C0 XOR EAX,EAX
00401528 |. 5B POP EBX
00401529 |. 83C4 78 ADD ESP,78
0040152C \. C2 1000 RETN 10



@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
我靠不太敢相信......... 這樣就可以把HASP給強暴了…^_^……
果然儲存後軟體界面可以進去但是很多功能已經.... :-( ......繼續看看............
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

004391E0 /$ A1 105B4500 MOV EAX,DWORD PTR DS:[455B10]
004391E5 |. 8B0D 0C5B4500 MOV ECX,DWORD PTR DS:[455B0C]
004391EB |. 8B15 48E44400 MOV EDX,DWORD PTR DS:[44E448]
004391F1 |. 56 PUSH ESI
004391F2 |. 68 B8EB4400 PUSH Wbmp405.0044EBB8 ; /Arg9 = 0044EBB8
004391F7 |. 68 B4EB4400 PUSH Wbmp405.0044EBB4 ; |Arg8 = 0044EBB4
004391FC |. 68 B0EB4400 PUSH Wbmp405.0044EBB0 ; |Arg7 = 0044EBB0
00439201 |. 68 ACEB4400 PUSH Wbmp405.0044EBAC ; |Arg6 = 0044EBAC
00439206 |. 50 PUSH EAX ; |Arg5 => 000077F0
00439207 |. A1 4CE44400 MOV EAX,DWORD PTR DS:[44E44C] ; |
0043920C |. 51 PUSH ECX ; |Arg4 => 00007705
0043920D |. 52 PUSH EDX ; |Arg3 => 00000000
0043920E |. 50 PUSH EAX ; |Arg2 => 0000012C
0043920F |. 6A 01 PUSH 1 ; |Arg1 = 00000001
00439211 |. C705 30B04400>MOV DWORD PTR DS:[44B030],-1
0043921B |. C705 7CEB4400>MOV DWORD PTR DS:[44EB7C],1
00439225 |. E8 867D0000 CALL Wbmp405.00440FB0
0043922A |. A1 B4EB4400 MOV EAX,DWORD PTR DS:[44EBB4]
0043922F |. 83C4 24 ADD ESP,24
00439232 |. 83F8 9C CMP EAX,-64
00439235 |. 0F84 DF000000 JE Wbmp405.0043931A //nop
0043923B |. 83F8 9B CMP EAX,-65
0043923E |. 0F84 F2000000 JE Wbmp405.00439336 //nop
00439244 |. 83F8 9A CMP EAX,-66
00439247 |. 0F84 E4000000 JE Wbmp405.00439331 //nop
0043924D |. A1 ACEB4400 MOV EAX,DWORD PTR DS:[44EBAC]
00439252 |. 33F6 XOR ESI,ESI
00439254 |. 3BC6 CMP EAX,ESI //比較
00439256 |. 75 07 JNZ SHORT Wbmp405.0043925F //還等什麼，JMP! GO.......
00439258 |. 68 ACC34400 PUSH Wbmp405.0044C3AC
0043925D |. EB 69 JMP SHORT Wbmp405.004392C8
0043925F |> 8B0D 105B4500 MOV ECX,DWORD PTR DS:[455B10]
00439265 |. 8B15 0C5B4500 MOV EDX,DWORD PTR DS:[455B0C]
0043926B |. A1 48E44400 MOV EAX,DWORD PTR DS:[44E448]
00439270 |. 68 B8EB4400 PUSH Wbmp405.0044EBB8
00439275 |. 68 B4EB4400 PUSH Wbmp405.0044EBB4
0043927A |. 68 B0EB4400 PUSH Wbmp405.0044EBB0
0043927F |. 68 ACEB4400 PUSH Wbmp405.0044EBAC
00439284 |. 51 PUSH ECX
00439285 |. 8B0D 4CE44400 MOV ECX,DWORD PTR DS:[44E44C]
0043928B |. 52 PUSH EDX
0043928C |. 50 PUSH EAX
0043928D |. 51 PUSH ECX
0043928E |. 6A 05 PUSH 5
00439290 |. C705 7CEB4400>MOV DWORD PTR DS:[44EB7C],5
0043929A |. E8 117D0000 CALL Wbmp405.00440FB0
0043929F |. 8B15 B0EB4400 MOV EDX,DWORD PTR DS:[44EBB0]
004392A5 |. 8B0495 60C244>MOV EAX,DWORD PTR DS:[EDX*4+44C260]
004392AC |. 50 PUSH EAX
004392AD |. 68 80EB4400 PUSH Wbmp405.0044EB80
004392B2 |. E8 6F7D0000 CALL Wbmp405.00441026
004392B7 |. A1 B4EB4400 MOV EAX,DWORD PTR DS:[44EBB4]
004392BC |. 83C4 2C ADD ESP,2C
004392BF |. 3BC6 CMP EAX,ESI //比較
004392C1 |. 75 42 JNZ SHORT Wbmp405.00439305 //JMP
004392C3 |. 68 98C34400 PUSH Wbmp405.0044C398
004392C8 |> 68 80EB4400 PUSH Wbmp405.0044EB80
004392CD |. E8 547D0000 CALL Wbmp405.00441026
004392D2 |. 83C4 08 ADD ESP,8
004392D5 |. 8935 B8EB4400 MOV DWORD PTR DS:[44EBB8],ESI
004392DB |. 8935 B4EB4400 MOV DWORD PTR DS:[44EBB4],ESI
004392E1 |. 8935 B0EB4400 MOV DWORD PTR DS:[44EBB0],ESI
004392E7 |. 8935 ACEB4400 MOV DWORD PTR DS:[44EBAC],ESI
004392ED |. 8935 78EB4400 MOV DWORD PTR DS:[44EB78],ESI
004392F3 |. 66:8935 A8EB4>MOV WORD PTR DS:[44EBA8],SI
004392FA |. 8935 50E44400 MOV DWORD PTR DS:[44E450],ESI
00439300 |. 83C8 FF OR EAX,FFFFFFFF
00439303 |. 5E POP ESI
00439304 |. C3 RETN
00439305 |> A1 B0EB4400 MOV EAX,DWORD PTR DS:[44EBB0]
0043930A |. 3BC6 CMP EAX,ESI
0043930C |. 0F8C 8C000000 JL Wbmp405.0043939E
00439312 |. 8935 30B04400 MOV DWORD PTR DS:[44B030],ESI
00439318 |. 5E POP ESI
00439319 |. C3 RETN
0043931A |> 68 88C34400 PUSH Wbmp405.0044C388
0043931F |. 68 80EB4400 PUSH Wbmp405.0044EB80
00439324 |. E8 FD7C0000 CALL Wbmp405.00441026
00439329 |. A1 B4EB4400 MOV EAX,DWORD PTR DS:[44EBB4]
0043932E |. 83C4 08 ADD ESP,8
00439331 |> 83F8 9B CMP EAX,-65
00439334 |. 75 17 JNZ SHORT Wbmp405.0043934D
00439336 |> 68 70C34400 PUSH Wbmp405.0044C370
0043933B |. 68 80EB4400 PUSH Wbmp405.0044EB80
00439340 |. E8 E17C0000 CALL Wbmp405.00441026
00439345 |. A1 B4EB4400 MOV EAX,DWORD PTR DS:[44EBB4]
0043934A |. 83C4 08 ADD ESP,8
0043934D |> 83F8 9A CMP EAX,-66
00439350 |. 75 12 JNZ SHORT Wbmp405.00439364
00439352 |. 68 5CC34400 PUSH Wbmp405.0044C35C
00439357 |. 68 80EB4400 PUSH Wbmp405.0044EB80
0043935C |. E8 C57C0000 CALL Wbmp405.00441026
00439361 |. 83C4 08 ADD ESP,8
00439364 |> 33F6 XOR ESI,ESI
00439366 |. C705 74EB4400>MOV DWORD PTR DS:[44EB74],0C
00439370 |. 8935 B8EB4400 MOV DWORD PTR DS:[44EBB8],ESI
00439376 |. 8935 B4EB4400 MOV DWORD PTR DS:[44EBB4],ESI
0043937C |. 8935 B0EB4400 MOV DWORD PTR DS:[44EBB0],ESI
00439382 |. 8935 ACEB4400 MOV DWORD PTR DS:[44EBAC],ESI
00439388 |. 8935 78EB4400 MOV DWORD PTR DS:[44EB78],ESI
0043938E |. 66:8935 A8EB4>MOV WORD PTR DS:[44EBA8],SI
00439395 |. 8935 50E44400 MOV DWORD PTR DS:[44E450],ESI
0043939B |. 83C8 FF OR EAX,FFFFFFFF
0043939E |> 5E POP ESI
0043939F \. C3 RETN

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

經過台灣朋友的測試功能全部正常。由於時間關係只能很粗粗的寫一下，但是程式碼貼的很完整朋友們應該可以看的很明白。這是我遇到的用
的最差勁的一隻HASP了，5月份時候脫一隻HASP狗殼用了5個多小時，玩過HASP的朋友應該看的出來這是直接用的HASP SDK中的東西。寫，
這個東西沒啥意義只是建議罈子上想玩狗的朋友做找些狗的SDK和資料看看，別盲目的拿狗就殺.......有時間了把脫HASP狗殼的貼上來。

新的一年快到了祝罈子上的所有朋友在新的一年中有份好的心情，也祝福我自己新年後有自己喜歡的一份新的工作!




By:dragon
2005.12.20