**登录专家2.10版注册算法
软件主页 http://www.21cnnet.net/ 0167:0052e410 8b0da45e1301 mov ecx,[01135ea4] 0167:0052e416 e8355cedff call 00404050 0167:0052e41b 8b45ec mov eax,[ebp-14] 0167:0052e41e e8e15bedff call 00404004 0167:0052e423 a1a45e1301 mov eax,[01135ea4] 0167:0052e428 e8d75bedff call 00404004 0167:0052e42d 8bf0 mov esi,eax 0167:0052e42f 85f6 test esi,esi 0167:0052e431 0f8eb0000000 jng near 0052e4e7 0167:0052e437 bb01000000 mov ebx,01 以下循环对机器码与用户名+“sef1sn8y3420dnu20fps”进行如下计算 0167:0052e43c 8d45e8 lea eax,[ebp-18] 0167:0052e43f 50 push eax 0167:0052e440 b901000000 mov ecx,01 0167:0052e445 8bd3 mov edx,ebx 0167:0052e447 a1a45e1301 mov eax,[01135ea4] 0167:0052e44c e8bb5dedff call 0040420c 0167:0052e451 8b45e8 mov eax,[ebp-18] 0167:0052e454 e86f5dedff call 004041c8 0167:0052e459 8bf8 mov edi,eax 0167:0052e45b a190ba5700 mov eax,[0057ba90] 0167:0052e460 8b00 mov eax,[eax] 0167:0052e462 e89d5bedff call 00404004 0167:0052e467 3bd8 cmp ebx,eax 0167:0052e469 7f23 jg 0052e48e 0167:0052e46b 8d45e4 lea eax,[ebp-1c] 0167:0052e46e 50 push eax 0167:0052e46f a190ba5700 mov eax,[0057ba90] 0167:0052e474 8b00 mov eax,[eax] 0167:0052e476 b901000000 mov ecx,01 0167:0052e47b 8bd3 mov edx,ebx 0167:0052e47d e88a5dedff call 0040420c 0167:0052e482 8b45e4 mov eax,[ebp-1c] 0167:0052e485 e83e5dedff call 004041c8 0167:0052e48a 8bd0 mov edx,eax 0167:0052e48c eb1d jmp short 0052e4ab 0167:0052e48e 8d45e0 lea eax,[ebp-20] 0167:0052e491 50 push eax 0167:0052e492 b901000000 mov ecx,01 0167:0052e497 8bd3 mov edx,ebx 0167:0052e499 8b45f0 mov eax,[ebp-10] 0167:0052e49c e86b5dedff call 0040420c 0167:0052e4a1 8b45e0 mov eax,[ebp-20] 0167:0052e4a4 e81f5dedff call 004041c8 0167:0052e4a9 8bd0 mov edx,eax 0167:0052e4ab 8a07 mov al,[edi] //按位取机器码给al 0167:0052e4ad 8a12 mov dl,[edx] //用户名按位取出给dl 0167:0052e4af 3c41 cmp al,41 //判断al等不等于"a" 0167:0052e4b1 7502 jnz 0052e4b5等于a就变为f 0167:0052e4b3 b066 mov al,66 0167:0052e4b5 8bf8 mov edi,eax 0167:0052e4b7 81e7ff000000 and edi,ff 机器码按位与运算 0167:0052e4bd 33c0 xor eax,eax 0167:0052e4bf 8ac2 mov al,dl 0167:0052e4c1 03f8 add edi,eax //相加 0167:0052e4c3 03fb add edi,ebx //相加 0167:0052e4c5 8d4ddc lea ecx,[ebp-24] 0167:0052e4c8 ba02000000 mov edx,02 0167:0052e4cd 8bc7 mov eax,edi 0167:0052e4cf e8f8b6edff call 00409bcc 0167:0052e4d4 8b55dc mov edx,[ebp-24] 0167:0052e4d7 8d45f8 lea eax,[ebp-08] 0167:0052e4da e82d5bedff call 0040400c 0167:0052e4df 43 inc ebx 0167:0052e4e0 4e dec esi 0167:0052e4e1 0f8555ffffff jnz near 0052e43c 0167:0052e4e7 8b45f8 mov eax,[ebp-08] 0167:0052e4ea e8155bedff call 00404004 0167:0052e4ef 8d45fc lea eax,[ebp-04] 0167:0052e4f2 8b55f8 mov edx,[ebp-08] 0167:0052e4f5 e82259edff call 00403e1c 0167:0052e4fa 8b45fc mov eax,[ebp-04] 0167:0052e4fd e8025bedff call 00404004 0167:0052e502 8bf0 mov esi,eax 0167:0052e504 85f6 test esi,esi 0167:0052e506 0f8ef6000000 jng near 0052e602 0167:0052e50c bb01000000 mov ebx,01 以下循环对上面循环得到字符串进行再处理。 如果字符串中有a、1、2、r、4、5、8、0、e等字符要分别替换成 m、o、3、7、j、6、d、m、d 0167:0052e511 8b45fc mov eax,[ebp-04] 0167:0052e514 807c18ff41 cmp byte [eax+ebx-01],41 0167:0052e519 750d jnz 0052e528 0167:0052e51b 8d45fc lea eax,[ebp-04] 0167:0052e51e e8b15cedff call 004041d4 0167:0052e523 c64418ff4d mov byte [eax+ebx-01],4d 0167:0052e528 8b45fc mov eax,[ebp-04] 0167:0052e52b 807c18ff31 cmp byte [eax+ebx-01],31 .......................... .................. 0167:0052e5d1 750d jnz 0052e5e0 0167:0052e5d3 8d45fc lea eax,[ebp-04] 0167:0052e5d6 e8f95bedff call 004041d4 0167:0052e5db c64418ff44 mov byte [eax+ebx-01],44 0167:0052e5e0 8d45d8 lea eax,[ebp-28] 0167:0052e5e3 8b55fc mov edx,[ebp-04] 0167:0052e5e6 8a541aff mov dl,[edx+ebx-01] 0167:0052e5ea e83d59edff call 00403f2c 0167:0052e5ef 8b55d8 mov edx,[ebp-28] 0167:0052e5f2 8d45f4 lea eax,[ebp-0c] 0167:0052e5f5 e8125aedff call 0040400c 0167:0052e5fa 43 inc ebx 0167:0052e5fb 4e dec esi 0167:0052e5fc 0f850fffffff jnz near 0052e511 0167:0052e602 a120bb5700 mov eax,[0057bb20] 0167:0052e607 8b00 mov eax,[eax] 0167:0052e609 8b55f4 mov edx,[ebp-0c] 0167:0052e60c e8035bedff call 00404114 //d edx=真注册码 0167:0052e611 7523 jnz 0052e636 0167:0052e613 b301 mov bl,01 0167:0052e615 a114b85700 mov eax,[0057b814] 0167:0052e61a 8b1590ba5700 mov edx,[0057ba90] 0167:0052e620 8b12 mov edx,[edx] 0167:0052e622 e8b157edff call 00403dd8 0167:0052e627 a1a4b85700 mov eax,[0057b8a4] 0167:0052e62c 8b55f4 mov edx,[ebp-0c] 0167:0052e62f e8a457edff call 00403dd8 0167:0052e634 eb02 jmp short 0052e638 我的机器码为a21471e8-299,用户名：zhaocuo[ccg]得到的注册码为do9c96m79fmcbb9b797fdbm3。 注册码放在注册表的hkey_current_user\software\osb\demo中pass=“do9c96m79fmcbb9b797fdbm3” 欢迎光临我的破解小站： ↓相关文章：
|