亿维E书 V1.0算法

关键call//

004DBB77 F8跟进//

------------------------------

0167:004DB7AC 55 PUSH EBP

0167:004DB7AD 8BEC MOV EBP,ESP

0167:004DB7AF 83C4D0 ADD ESP,BYTE -30

0167:004DB7B2 53 PUSH EBX

0167:004DB7B3 56 PUSH ESI

0167:004DB7B4 57 PUSH EDI

0167:004DB7B5 33D2 XOR EDX,EDX

0167:004DB7B7 8955D0 MOV [EBP-30],EDX

0167:004DB7BA 8955D4 MOV [EBP-2C],EDX

0167:004DB7BD 8955F8 MOV [EBP-08],EDX

0167:004DB7C0 8955F4 MOV [EBP-0C],EDX

0167:004DB7C3 8955EC MOV [EBP-14],EDX

0167:004DB7C6 8955E4 MOV [EBP-1C],EDX

0167:004DB7C9 8945FC MOV [EBP-04],EAX

0167:004DB7CC 33C0 XOR EAX,EAX

0167:004DB7CE 55 PUSH EBP

0167:004DB7CF 6803BA4D00 PUSH DWORD 004DBA03

0167:004DB7D4 64FF30 PUSH DWORD [FS:EAX]

0167:004DB7D7 648920 MOV [FS:EAX],ESP

0167:004DB7DA 8D55F8 LEA EDX,[EBP-08]

0167:004DB7DD A198174E00 MOV EAX,[004E1798]

0167:004DB7E2 8B00 MOV EAX,[EAX]

0167:004DB7E4 8B80F8020000 MOV EAX,[EAX+02F8]

0167:004DB7EA E8310DF9FF CALL 0046C520

0167:004DB7EF 8D45E4 LEA EAX,[EBP-1C] 中间值"ILOVEADA"

0167:004DB7F2 BA1CBA4D00 MOV EDX,004DBA1C

0167:004DB7F7 E8B48FF2FF CALL 004047B0

0167:004DB7FC 8D55F4 LEA EDX,[EBP-0C]

0167:004DB7FF A198174E00 MOV EAX,[004E1798]

0167:004DB804 8B00 MOV EAX,[EAX]

0167:004DB806 8B80FC020000 MOV EAX,[EAX+02FC]

0167:004DB80C E80F0DF9FF CALL 0046C520

0167:004DB811 8B45E4 MOV EAX,[EBP-1C]

0167:004DB814 E8BF91F2FF CALL 004049D8

0167:004DB819 8945F0 MOV [EBP-10],EAX

0167:004DB81C 33FF XOR EDI,EDI

0167:004DB81E C745E801000000 MOV DWORD [EBP-18],01

0167:004DB825 BB80000000 MOV EBX,80 EBX初始=$80

0167:004DB82A C645E300 MOV BYTE [EBP-1D],00

0167:004DB82E 8B45F8 MOV EAX,[EBP-08] 用户名

0167:004DB831 E8A291F2FF CALL 004049D8 计算长度

0167:004DB836 8BF0 MOV ESI,EAX 用户名长度

0167:004DB838 83FE01 CMP ESI,BYTE +01

0167:004DB83B 0F8CA7000000 JL NEAR 004DB8E8

0167:004DB841 8B45F8 MOV EAX,[EBP-08] 用户名

0167:004DB844 0FB64430FF MOVZX EAX,BYTE [EAX+ESI-01] 从最后一位开始取注册名ASCII码

0167:004DB849 03C3 ADD EAX,EBX EAX=EAX+EBX

0167:004DB84B B9FF000000 MOV ECX,FF ECX=$FF

0167:004DB850 99 CDQ EDX清零

0167:004DB851 F7F9 IDIV ECX EAX除$FF

0167:004DB853 8BDA MOV EBX,EDX 余数放到EBX,准备第二轮计算初始值

0167:004DB855 3B7DF0 CMP EDI,[EBP-10] 注册码长度和中间数长度比较

0167:004DB858 7D03 JNL 004DB85D 没有继续

0167:004DB85A 47 INC EDI 计数器加一

0167:004DB85B EB05 JMP SHORT 004DB862

0167:004DB85D BF01000000 MOV EDI,01 用户名大于中间数,则从1开始计算,也就是重复循环

0167:004DB862 8B45E4 MOV EAX,[EBP-1C] 取中间数"ILOVEADA"

0167:004DB865 0FB64438FF MOVZX EAX,BYTE [EAX+EDI-01] 逐位取ASCII码

0167:004DB86A 33D8 XOR EBX,EAX 和前面计算的结果XOR

0167:004DB86C 8D45EC LEA EAX,[EBP-14]

0167:004DB86F 50 PUSH EAX

0167:004DB870 895DD8 MOV [EBP-28],EBX 放到[EBP-28]存起来

0167:004DB873 C645DC00 MOV BYTE [EBP-24],00

0167:004DB877 8D55D8 LEA EDX,[EBP-28]

0167:004DB87A 33C9 XOR ECX,ECX

0167:004DB87C B830BA4D00 MOV EAX,004DBA30

0167:004DB881 E8EEE2F2FF CALL 00409B74 转换成字母

0167:004DB886 8D45D4 LEA EAX,[EBP-2C]

0167:004DB889 50 PUSH EAX

0167:004DB88A 8B45EC MOV EAX,[EBP-14]

0167:004DB88D E84691F2FF CALL 004049D8

0167:004DB892 8BC8 MOV ECX,EAX

0167:004DB894 8B55E8 MOV EDX,[EBP-18]

0167:004DB897 8B45F4 MOV EAX,[EBP-0C]

0167:004DB89A E89993F2FF CALL 00404C38

0167:004DB89F 8B45D4 MOV EAX,[EBP-2C] 取2位假码

0167:004DB8A2 8B55EC MOV EDX,[EBP-14] 取相应计算出来的2位真码

0167:004DB8A5 E87A92F2FF CALL 00404B24 比较

0167:004DB8AA 0F9445E3 SETZ [EBP-1D] 设标志位,不对就拜拜了!

0167:004DB8AE 8D45D0 LEA EAX,[EBP-30]

0167:004DB8B1 50 PUSH EAX

0167:004DB8B2 8B45EC MOV EAX,[EBP-14]

0167:004DB8B5 E81E91F2FF CALL 004049D8

0167:004DB8BA 8BC8 MOV ECX,EAX

0167:004DB8BC 8B55E8 MOV EDX,[EBP-18]

0167:004DB8BF 8B45F4 MOV EAX,[EBP-0C]

0167:004DB8C2 E87193F2FF CALL 00404C38

0167:004DB8C7 8B55D0 MOV EDX,[EBP-30]

0167:004DB8CA 8B45EC MOV EAX,[EBP-14]

0167:004DB8CD E85292F2FF CALL 00404B24 还是比较

0167:004DB8D2 750B JNZ 004DB8DF 对了继续下两位计算!

0167:004DB8D4 8B45EC MOV EAX,[EBP-14]

0167:004DB8D7 E8FC90F2FF CALL 004049D8

0167:004DB8DC 0145E8 ADD [EBP-18],EAX

0167:004DB8DF 4E DEC ESI

0167:004DB8E0 85F6 TEST ESI,ESI

0167:004DB8E2 0F8559FFFFFF JNZ NEAR 004DB841

0167:004DB8E8 807DE300 CMP BYTE [EBP-1D],00

0167:004DB8EC 0F84B8000000 JZ NEAR 004DB9AA

0167:004DB8F2 B201 MOV DL,01

0167:004DB8F4 A100D84300 MOV EAX,[0043D800]

0167:004DB8F9 E80220F6FF CALL 0043D900

0167:004DB8FE 8BD8 MOV EBX,EAX

0167:004DB900 BA01000080 MOV EDX,80000001

0167:004DB905 8BC3 MOV EAX,EBX

0167:004DB907 E89420F6FF CALL 0043D9A0

0167:004DB90C B101 MOV CL,01

0167:004DB90E BA40BA4D00 MOV EDX,004DBA40

0167:004DB913 8BC3 MOV EAX,EBX

0167:004DB915 E8EA20F6FF CALL 0043DA04

0167:004DB91A 84C0 TEST AL,AL

0167:004DB91C 7426 JZ 004DB944

0167:004DB91E 8B4DF8 MOV ECX,[EBP-08]

0167:004DB921 BA6CBA4D00 MOV EDX,004DBA6C

0167:004DB926 8BC3 MOV EAX,EBX

0167:004DB928 E89322F6FF CALL 0043DBC0

0167:004DB92D 8B4DF4 MOV ECX,[EBP-0C]

0167:004DB930 BA7CBA4D00 MOV EDX,004DBA7C

0167:004DB935 8BC3 MOV EAX,EBX

0167:004DB937 E88422F6FF CALL 0043DBC0

0167:004DB93C A1F81A4E00 MOV EAX,[004E1AF8]

0167:004DB941 C60001 MOV BYTE [EAX],01

0167:004DB944 8BC3 MOV EAX,EBX

0167:004DB946 E82520F6FF CALL 0043D970

0167:004DB94B 8BC3 MOV EAX,EBX

0167:004DB94D E8B27FF2FF CALL 00403904

0167:004DB952 8B45FC MOV EAX,[EBP-04]

0167:004DB955 8B809C050000 MOV EAX,[EAX+059C]

0167:004DB95B 33D2 XOR EDX,EDX

0167:004DB95D E87A2DFAFF CALL 0047E6DC

0167:004DB962 8B45FC MOV EAX,[EBP-04]

0167:004DB965 8B80A0050000 MOV EAX,[EAX+05A0]

0167:004DB96B 33D2 XOR EDX,EDX

0167:004DB96D E86A2DFAFF CALL 0047E6DC

0167:004DB972 8B45FC MOV EAX,[EBP-04]

0167:004DB975 8B80A4050000 MOV EAX,[EAX+05A4]

0167:004DB97B 33D2 XOR EDX,EDX

0167:004DB97D E85A2DFAFF CALL 0047E6DC

0167:004DB982 E8152AFFFF CALL 004CE39C

0167:004DB987 6A40 PUSH BYTE +40

0167:004DB989 A114184E00 MOV EAX,[004E1814]

0167:004DB98E 8B00 MOV EAX,[EAX]

0167:004DB990 E84392F2FF CALL 00404BD8

0167:004DB995 8BD0 MOV EDX,EAX

0167:004DB997 B984BA4D00 MOV ECX,004DBA84

0167:004DB99C A1181A4E00 MOV EAX,[004E1A18]

0167:004DB9A1 8B00 MOV EAX,[EAX]

0167:004DB9A3 E8D016FBFF CALL 0048D078

0167:004DB9A8 EB21 JMP SHORT 004DB9CB

0167:004DB9AA 6A40 PUSH BYTE +40

0167:004DB9AC A1E8174E00 MOV EAX,[004E17E8]

0167:004DB9B1 8B00 MOV EAX,[EAX]

0167:004DB9B3 E82092F2FF CALL 00404BD8

0167:004DB9B8 8BD0 MOV EDX,EAX

0167:004DB9BA B984BA4D00 MOV ECX,004DBA84

0167:004DB9BF A1181A4E00 MOV EAX,[004E1A18]

0167:004DB9C4 8B00 MOV EAX,[EAX]

0167:004DB9C6 E8AD16FBFF CALL 0048D078

0167:004DB9CB 33C0 XOR EAX,EAX

0167:004DB9CD 5A POP EDX

0167:004DB9CE 59 POP ECX

0167:004DB9CF 59 POP ECX

0167:004DB9D0 648910 MOV [FS:EAX],EDX

0167:004DB9D3 680ABA4D00 PUSH DWORD 004DBA0A

0167:004DB9D8 8D45D0 LEA EAX,[EBP-30]

0167:004DB9DB BA02000000 MOV EDX,02

0167:004DB9E0 E8578DF2FF CALL 0040473C

0167:004DB9E5 8D45E4 LEA EAX,[EBP-1C]

0167:004DB9E8 E82B8DF2FF CALL 00404718

0167:004DB9ED 8D45EC LEA EAX,[EBP-14]

0167:004DB9F0 E8238DF2FF CALL 00404718

0167:004DB9F5 8D45F4 LEA EAX,[EBP-0C]

0167:004DB9F8 BA02000000 MOV EDX,02

0167:004DB9FD E83A8DF2FF CALL 0040473C

（出处：赢政天下整理收藏）

相关文章：

·语音界面2.0算法分析及注册机源码！

·侠客系统修改器1.21破解手记--算法分析

·中文拨号上网计时计费器 V4.12注册算法分析

·ClockWise 3.22e注册码算法分析

·CoolClock V1.02注册算法分析

·Directory Scanner v1.5 注册算法分析

·Disk Chief 1.2 简单注册算法分析

·EffeTech HTTP Sniffer 3.2注册算法分析

·eLib2.01算法分析

·EZ MP3 Recorder 1.15 注册算法分析

相关软件：

→ 特别推荐

→ 热点TOP10

我为人人《《==》》人人为我

关于我们 |

帮助(？)

| 广告服务 |

版权声明 |

商业合作 |

发展历程 |

加盟我们 |

联系我们

Copyright © 1999-2003

winzheng.com All Rights Reserved.

繁体版:由华琦数码技术提供

Powered

by:MeSky.Net