Sie sind auf Seite 1von 1

//////////////////////////////////////////

//Get Shielden+Licensor.2.3.X.X KeyNotes//


//
Safengine_Memcpy #8D4DD4E8#
////
//////////////////////////////////////////
var Safengine_CRC
VAR Safengine_Memcpy
VAR RandKey
VAR RandKeySize
VAR RSAPublicKey
VAR RSAPublicKeySize
VAR CodeStart
VAR CodeSize
VAR CodeEnd
BPHWCALL
BC
GMI eip,CODEBASE
MOV CodeStart,$RESULT
GMI eip,CodeSize
MOV CodeSize,$RESULT
MOV CodeEnd,CodeStart
ADD CodeEnd,CodeSize
MOV Safengine_Memcpy,006AED27 ///address
MOV RSAPublicKeySize,104
MOV RandKeySize,0AA0
find CodeStart,#C1C00733C6413B4C240872F0#
add $RESULT,0C
mov Safengine_CRC,$RESULT
bp Safengine_CRC
run
run
run
run
run
run
bc Safengine_CRC
EVAL "edx > {CodeStart} && edx < {CodeEnd} && [esp+4] > 0A0"
BPCND Safengine_Memcpy,$RESULT
loop:
RUN
MOV Safengine,[esp+4]
is_RandKey:
CMP Safengine,RandKeySize
JNZ is_RSAPublicKey
ITOA edx
WRTA "Notes.txt","RandKey:" + $RESULT
DM edx,Safengine,"RandKey.bin"
JMP loop
is_RSAPublicKey:
CMP Safengine,RSAPublicKeySize
JNZ loop
ITOA edx
WRTA "Notes.txt","RSAPublicKey:" + $RESULT
DM edx,Safengine * 2 + 10,"RSAPublicKey.bin"
BC Safengine_Memcpy
MSG "Get Success,Thanks Use! :) By:Sound"
exit:
RET

Das könnte Ihnen auch gefallen