【破文标题】Farsight Calculator V3.5 算法分析 ★ By 芊芊
既然这帖子发出来是无字天书.那就麻烦大家去沙发楼层看咯~这里就发一下算法注册机吧~ 【破文标题】Farsight Calculator V3.5 算法分析 ★
【破文作者】Squn☆ 小芊芊
【作者邮箱】
【作者主页】http://squn.52pojie.cn
【破解工具】OllyIce Delphi Peid
【破解平台】Windows Xp sp2
【软件名称】Farsight Calculator V3.5
【软件大小】
【原版下载】http://www.farsightsoft.com/farsightcalculator.html
【保护方式】
【软件简介】软件简介:
一个易于使用的计算器，可让您储存您的计算过程作为一个程序，并执行算术运算，超过100种的功能，包括代数，三角，双曲，日期，统计，金融等此外farsight计算器包含了一套功能强大的工具，如“财务盒” ， “日期计算” ， “单位转换”等。
【破解声明】纯属娱乐 ☆
------------------------------------------------------------------------
【破解过程】Peid查壳,发现无壳,Borland Delphi 6.0 - 7.0の程序.
通过很多种方法可以很快定位到按钮事件.
比如F12暂停法,比如DEDE,比如delphi万能脚本等. 都可以快速定位到按钮事件代码处!
输入の试练码:
Name:Squn
Serial:123456789
0060BB8C .55 PUSH EBP ;//按钮事件
0060BB8D .8BEC MOV EBP,ESP
0060BB8F .6A 00 PUSH 0
0060BB91 .6A 00 PUSH 0
0060BB93 .53 PUSH EBX
0060BB94 .8BD8 MOV EBX,EAX
0060BB96 .33C0 XOR EAX,EAX
0060BB98 .55 PUSH EBP
0060BB99 .68 0CBC6000 PUSH Farsight.0060BC0C
0060BB9E .64:FF30 PUSH DWORD PTR FS:
0060BBA1 .64:8920 MOV DWORD PTR FS:,ESP
0060BBA4 .8D55 FC LEA EDX,DWORD PTR SS:
0060BBA7 .8B83 00030000 MOV EAX,DWORD PTR DS:
0060BBAD .E8 2E7FEBFF CALL Farsight.004C3AE0 ;//取假码 123456789
0060BBB2 .8B45 FC MOV EAX,DWORD PTR SS:
0060BBB5 .50 PUSH EAX
0060BBB6 .8D55 F8 LEA EDX,DWORD PTR SS:
0060BBB9 .8B83 FC020000 MOV EAX,DWORD PTR DS:
0060BBBF .E8 1C7FEBFF CALL Farsight.004C3AE0 ;//取用户名 Squn
0060BBC4 .8B45 F8 MOV EAX,DWORD PTR SS:
0060BBC7 .5A POP EDX ;
0060BBC8 .E8 EBEEFFFF CALL Farsight.0060AAB8 ;//关键callF7
0060BBCD .84C0 TEST AL,AL
0060BBCF .75 20 JNZ SHORT Farsight.0060BBF1 ;//关键跳转
0060BBD1 .6A 00 PUSH 0
0060BBD3 .B9 18BC6000 MOV ECX,Farsight.0060BC18
0060BBD8 .BA 1CBC6000 MOV EDX,Farsight.0060BC1C ;ASCII "Invalid Registered User or Key!"
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060BBC8 .E8 EBEEFFFF CALL Farsight.0060AAB8 ;//关键callF7
F7后反汇编代码如下:
0060AAB8 $55 PUSH EBP ;//F7来到这里!
0060AAB9 .8BEC MOV EBP,ESP
0060AABB .83C4 F0 ADD ESP,-10
0060AABE .53 PUSH EBX
0060AABF .56 PUSH ESI
0060AAC0 .57 PUSH EDI
0060AAC1 .8955 F8 MOV DWORD PTR SS:,EDX
0060AAC4 .8945 FC MOV DWORD PTR SS:,EAX
0060AAC7 .8B45 FC MOV EAX,DWORD PTR SS:
0060AACA .E8 59A8DFFF CALL Farsight.00405328
0060AACF .8B45 F8 MOV EAX,DWORD PTR SS:
0060AAD2 .E8 51A8DFFF CALL Farsight.00405328
0060AAD7 .33C0 XOR EAX,EAX
0060AAD9 .55 PUSH EBP
0060AADA .68 B8AB6000 PUSH Farsight.0060ABB8
0060AADF .64:FF30 PUSH DWORD PTR FS:
0060AAE2 .64:8920 MOV DWORD PTR FS:,ESP
0060AAE5 .C645 F7 00 MOV BYTE PTR SS:,0
0060AAE9 .8B55 F8 MOV EDX,DWORD PTR SS:
0060AAEC .8B45 FC MOV EAX,DWORD PTR SS:
0060AAEF .E8 9CFEFFFF CALL Farsight.0060A990 ;//关键call F7
0060AAF4 .84C0 TEST AL,AL
0060AAF6 .0F84 A1000000 JE Farsight.0060AB9D ;//关键跳转
0060AAFC .33C0 XOR EAX,EAX
0060AAFE .55 PUSH EBP
0060AAFF .68 93AB6000 PUSH Farsight.0060AB93
0060AB04 .64:FF30 PUSH DWORD PTR FS:
0060AB07 .64:8920 MOV DWORD PTR FS:,ESP
0060AB0A .B9 3F000F00 MOV ECX,0F003F
0060AB0F .B2 01 MOV DL,1
0060AB11 .A1 E82C4400 MOV EAX,DWORD PTR DS:
0060AB16 .E8 1183E3FF CALL Farsight.00442E2C
0060AB1B .8945 F0 MOV DWORD PTR SS:,EAX
0060AB1E .33C0 XOR EAX,EAX
0060AB20 .55 PUSH EBP
0060AB21 .68 82AB6000 PUSH Farsight.0060AB82
0060AB26 .64:FF30 PUSH DWORD PTR FS:
0060AB29 .64:8920 MOV DWORD PTR FS:,ESP
0060AB2C .BA 01000080 MOV EDX,80000001
0060AB31 .8B45 F0 MOV EAX,DWORD PTR SS: ;Farsight.00526B21
0060AB34 .E8 8B83E3FF CALL Farsight.00442EC4
0060AB39 .B1 01 MOV CL,1
0060AB3B .BA D4AB6000 MOV EDX,Farsight.0060ABD4 ;ASCII "SOFTWARE\farsightsoft\FarsightCalc"
0060AB40 .8B45 F0 MOV EAX,DWORD PTR SS: ;Farsight.00526B21
0060AB43 .E8 E083E3FF CALL Farsight.00442F28
0060AB48 .8B4D FC MOV ECX,DWORD PTR SS:
0060AB4B .BA 00AC6000 MOV EDX,Farsight.0060AC00 ;ASCII "UserName"
0060AB50 .8B45 F0 MOV EAX,DWORD PTR SS: ;Farsight.00526B21
0060AB53 .E8 4487E3FF CALL Farsight.0044329C
0060AB58 .8B4D F8 MOV ECX,DWORD PTR SS:
0060AB5B .BA 14AC6000 MOV EDX,Farsight.0060AC14 ;ASCII "Sn"
0060AB60 .8B45 F0 MOV EAX,DWORD PTR SS: ;Farsight.00526B21
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
继续F7
0060AAEF .E8 9CFEFFFF CALL Farsight.0060A990 ;//关键call F7
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A990/$55 PUSH EBP
0060A991|.8BEC MOV EBP,ESP
0060A993|.83C4 F4 ADD ESP,-0C
0060A996|.53 PUSH EBX
0060A997|.33C9 XOR ECX,ECX
0060A999|.894D F4 MOV DWORD PTR SS:,ECX
0060A99C|.8955 F8 MOV DWORD PTR SS:,EDX
0060A99F|.8945 FC MOV DWORD PTR SS:,EAX
0060A9A2|.8B45 FC MOV EAX,DWORD PTR SS:
0060A9A5|.E8 7EA9DFFF CALL Farsight.00405328
0060A9AA|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A9AD|.E8 76A9DFFF CALL Farsight.00405328
0060A9B2|.33C0 XOR EAX,EAX
0060A9B4|.55 PUSH EBP
0060A9B5|.68 A7AA6000 PUSH Farsight.0060AAA7
0060A9BA|.64:FF30 PUSH DWORD PTR FS:
0060A9BD|.64:8920 MOV DWORD PTR FS:,ESP
0060A9C0|.33DB XOR EBX,EBX
0060A9C2|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A9C5|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A9C8|.E8 C7EEDFFF CALL Farsight.00409894 ;//假码位数是否为0
0060A9CD|.837D F4 00 CMP DWORD PTR SS:,0
0060A9D1|.0F84 B5000000 JE Farsight.0060AA8C
0060A9D7|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A9DA|.8B45 FC MOV EAX,DWORD PTR SS:
0060A9DD|.E8 86F8FFFF CALL <Farsight.比较用户名+pbの大写MD5跟黑名单の大写MD5> ;//关键call_1F7Squn+pb
0060A9E2|.84C0 TEST AL,AL
0060A9E4|.74 07 JE SHORT Farsight.0060A9ED
0060A9E6|.33DB XOR EBX,EBX
0060A9E8|.E9 9F000000 JMP Farsight.0060AA8C
0060A9ED|>8B55 F8 MOV EDX,DWORD PTR SS:
0060A9F0|.8B45 FC MOV EAX,DWORD PTR SS:
0060A9F3|.E8 ACF3FFFF CALL <Farsight.比较用户名+tqの大写MD5跟黑名单の大写MD5> ;//关键call_2 F7Squn+tq
0060A9F8|.84C0 TEST AL,AL
0060A9FA|.74 07 JE SHORT Farsight.0060AA03
0060A9FC|.B3 01 MOV BL,1
0060A9FE|.E9 89000000 JMP Farsight.0060AA8C
0060AA03|>8B55 F8 MOV EDX,DWORD PTR SS:
0060AA06|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA09|.E8 4AF9FFFF CALL <Farsight.用户名+hgfjk的MD5の第一位跟假码第一位比较>;//关键call1 //用户名+hgfjk的MD5の第一位跟假码第一位比较
0060AA0E|.84C0 TEST AL,AL
0060AA10|.74 7A JE SHORT Farsight.0060AA8C ;//不等则跳.不能跳!
0060AA12|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA15|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA18|.E8 E7F9FFFF CALL <Farsight.把用户名+hgfjhkjk的MD5の第一位跟假码第>;//关键call2 //把用户名+hgfjhkjk的MD5の第一位跟假码第二位比较
0060AA1D|.84C0 TEST AL,AL
0060AA1F|.74 6B JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA21|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA24|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA27|.E8 8CFAFFFF CALL <Farsight.用户名+hgfjk77的MD5の第一位与假码第三位>;//关键call3 //用户名+hgfjk77的MD5の第一位与假码第三位比较
0060AA2C|.84C0 TEST AL,AL
0060AA2E|.74 5C JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA30|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA33|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA36|.E8 2DFBFFFF CALL <Farsight.用户名+hgfjksss5的MD5の第一位跟假码第>;//关键call4 //用户名+hgfjksss5的MD5の第一位跟假码第四位比较
0060AA3B|.84C0 TEST AL,AL
0060AA3D|.74 4D JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA3F|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA42|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA45|.E8 D2FBFFFF CALL <Farsight.用户名+6578uhgj的MD5の第一位跟假码第五>;//关键call5 //用户名+6578uhgj的MD5の第一位跟假码第五位比较
0060AA4A|.84C0 TEST AL,AL
0060AA4C|.74 3E JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA4E|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA51|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA54|.E8 77FCFFFF CALL <Farsight.用户名+hkjk的MD5の第一位跟假码第六位比较> ;//关键call6 //用户名+hkjk的MD5の第一位跟假码第六位比较
0060AA59|.84C0 TEST AL,AL
0060AA5B|.74 2F JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA5D|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA60|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA63|.E8 18FDFFFF CALL <Farsight.用户名+asdsd的MD5的第一位跟假码第七位比较>;//关键call7 //用户名+asdsd的MD5的第一位跟假码第七位比较
0060AA68|.84C0 TEST AL,AL
0060AA6A|.74 20 JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA6C|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA6F|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA72|.E8 B9FDFFFF CALL <Farsight.用户名+xcvxc的MD5の第一位跟假码第八位比较>;//关键call8//用户名+xcvxc的MD5の第一位跟假码第八位比较
0060AA77|.84C0 TEST AL,AL
0060AA79|.74 11 JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA7B|.8B55 F8 MOV EDX,DWORD PTR SS:
0060AA7E|.8B45 FC MOV EAX,DWORD PTR SS:
0060AA81|.E8 5AFEFFFF CALL <Farsight.用户名+ytutyu的MD5的第一位跟假码第九位比>;//关键call9//用户名+ytutyu的MD5的第一位跟假码第九位比较
0060AA86|.84C0 TEST AL,AL
0060AA88|.74 02 JE SHORT Farsight.0060AA8C ;//不能跳!
0060AA8A|.B3 01 MOV BL,1
0060AA8C|>33C0 XOR EAX,EAX
0060AA8E|.5A POP EDX ;0012F864
0060AA8F|.59 POP ECX ;0012F864
0060AA90|.59 POP ECX ;0012F864
0060AA91|.64:8910 MOV DWORD PTR FS:,EDX
0060AA94|.68 AEAA6000 PUSH Farsight.0060AAAE
0060AA99|>8D45 F4 LEA EAX,DWORD PTR SS:
0060AA9C|.BA 03000000 MOV EDX,3
0060AAA1|.E8 F6A3DFFF CALL Farsight.00404E9C
0060AAA6\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A268 >/$55 PUSH EBP ;//F7 关键call_1 来到这里
0060A269|.8BEC MOV EBP,ESP
0060A26B|.83C4 DC ADD ESP,-24
0060A26E|.53 PUSH EBX
0060A26F|.33C9 XOR ECX,ECX
0060A271|.894D E0 MOV DWORD PTR SS:,ECX
0060A274|.894D DC MOV DWORD PTR SS:,ECX
0060A277|.894D E4 MOV DWORD PTR SS:,ECX
0060A27A|.894D F8 MOV DWORD PTR SS:,ECX
0060A27D|.8945 FC MOV DWORD PTR SS:,EAX
0060A280|.8B45 FC MOV EAX,DWORD PTR SS:
0060A283|.E8 A0B0DFFF CALL Farsight.00405328
0060A288|.33C0 XOR EAX,EAX
0060A28A|.55 PUSH EBP
0060A28B|.68 11A36000 PUSH Farsight.0060A311
0060A290|.64:FF30 PUSH DWORD PTR FS:
0060A293|.64:8920 MOV DWORD PTR FS:,ESP
0060A296|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A299|.B9 28A36000 MOV ECX,Farsight.0060A328 ;ASCII "pb"
0060A29E|.8B55 FC MOV EDX,DWORD PTR SS:
0060A2A1|.E8 DEAEDFFF CALL Farsight.00405184 ;//用户名Squn跟pb连接=Squnpb
0060A2A6|.8B45 E4 MOV EAX,DWORD PTR SS:
0060A2A9|.8D55 E8 LEA EDX,DWORD PTR SS:
0060A2AC|.E8 9BF9FFFF CALL Farsight.00609C4C
0060A2B1|.8D45 E8 LEA EAX,DWORD PTR SS:
0060A2B4|.8D55 F8 LEA EDX,DWORD PTR SS:
0060A2B7|.E8 04FAFFFF CALL Farsight.00609CC0 ;//用户名+pbのMd5值= "fbc854f293513fd964bbb9372ccf85c2"
0060A2BC|.8D55 E0 LEA EDX,DWORD PTR SS:
0060A2BF|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A2C2|.E8 55F3DFFF CALL Farsight.0040961C ;//把Md5值转大写="FBC854F293513FD964BBB9372CCF85C2"
0060A2C7|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A2CA|.50 PUSH EAX
0060A2CB|.8D55 DC LEA EDX,DWORD PTR SS:
0060A2CE|.B8 34A36000 MOV EAX,Farsight.0060A334 ;黑名单:ASCII "56f9c69b5ad4bfd656c8dec9c6228223"
0060A2D3|.E8 44F3DFFF CALL Farsight.0040961C ;// 刚才的Md5转大写
0060A2D8|.8B55 DC MOV EDX,DWORD PTR SS:
0060A2DB|.58 POP EAX ;0012F864
0060A2DC|.E8 A3AFDFFF CALL Farsight.00405284 ;//比较用户名+pbの大写MD5跟黑名单の大写MD5
0060A2E1|.75 04 JNZ SHORT Farsight.0060A2E7
0060A2E3|.B3 01 MOV BL,1
0060A2E5|.EB 02 JMP SHORT Farsight.0060A2E9
0060A2E7|>33DB XOR EBX,EBX
0060A2E9|>33C0 XOR EAX,EAX
0060A2EB|.5A POP EDX ;0012F864
0060A2EC|.59 POP ECX ;0012F864
0060A2ED|.59 POP ECX ;0012F864
0060A2EE|.64:8910 MOV DWORD PTR FS:,EDX
0060A2F1|.68 18A36000 PUSH Farsight.0060A318
0060A2F6|>8D45 DC LEA EAX,DWORD PTR SS:
0060A2F9|.BA 03000000 MOV EDX,3
0060A2FE|.E8 99ABDFFF CALL Farsight.00404E9C
0060A303|.8D45 F8 LEA EAX,DWORD PTR SS:
0060A306|.BA 02000000 MOV EDX,2
0060A30B|.E8 8CABDFFF CALL Farsight.00404E9C
0060A310\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
00609DA4 >/$55 PUSH EBP ;//比较Squntqの大写MD5跟黑名单の大写MD5
00609DA5|.8BEC MOV EBP,ESP
00609DA7|.B9 0F000000 MOV ECX,0F
00609DAC|>6A 00 /PUSH 0
00609DAE|.6A 00 |PUSH 0
00609DB0|.49 |DEC ECX
00609DB1|.^ 75 F9 \JNZ SHORT Farsight.00609DAC
00609DB3|.51 PUSH ECX
00609DB4|.53 PUSH EBX
00609DB5|.8945 FC MOV DWORD PTR SS:,EAX
00609DB8|.8B45 FC MOV EAX,DWORD PTR SS:
00609DBB|.E8 68B5DFFF CALL Farsight.00405328
00609DC0|.33C0 XOR EAX,EAX
00609DC2|.55 PUSH EBP
00609DC3|.68 3DA06000 PUSH Farsight.0060A03D
00609DC8|.64:FF30 PUSH DWORD PTR FS:
00609DCB|.64:8920 MOV DWORD PTR FS:,ESP
00609DCE|.8D45 E4 LEA EAX,DWORD PTR SS:
00609DD1|.B9 54A06000 MOV ECX,Farsight.0060A054 ;ASCII "tq"
00609DD6|.8B55 FC MOV EDX,DWORD PTR SS:
00609DD9|.E8 A6B3DFFF CALL Farsight.00405184 ;//用户名Squn+tq=Squntq
00609DDE|.8B45 E4 MOV EAX,DWORD PTR SS:
00609DE1|.8D55 E8 LEA EDX,DWORD PTR SS:
00609DE4|.E8 63FEFFFF CALL Farsight.00609C4C
00609DE9|.8D45 E8 LEA EAX,DWORD PTR SS:
00609DEC|.8D55 F8 LEA EDX,DWORD PTR SS:
00609DEF|.E8 CCFEFFFF CALL Farsight.00609CC0 ;//用户名+tqのMD5值=ASCII "777cff1c93fd58381450a59ee2f23be5"
00609DF4|.8D55 E0 LEA EDX,DWORD PTR SS:
00609DF7|.8B45 F8 MOV EAX,DWORD PTR SS:
00609DFA|.E8 1DF8DFFF CALL Farsight.0040961C ;//把SquntqのMD5值转大写=777CFF1C93FD58381450A59EE2F23BE5
00609DFF|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
00609E02|.50 PUSH EAX
00609E03|.8D55 DC LEA EDX,DWORD PTR SS:
00609E06|.B8 60A06000 MOV EAX,Farsight.0060A060 ;//黑名单:ASCII "35e2233a9cbbd40e0da83ca5c185f975"
00609E0B|.E8 0CF8DFFF CALL Farsight.0040961C ;//黑名单MD5值转大写.
00609E10|.8B55 DC MOV EDX,DWORD PTR SS:
00609E13|.58 POP EAX ;0012F864
00609E14|.E8 6BB4DFFF CALL Farsight.00405284 ;//比较Squntqの大写MD5值跟黑名单中の大写MD5
00609E19|.75 07 JNZ SHORT Farsight.00609E22
00609E1B|.B3 01 MOV BL,1
00609E1D|.E9 F3010000 JMP Farsight.0060A015
00609E22|>8D55 D8 LEA EDX,DWORD PTR SS:
00609E25|.8B45 F8 MOV EAX,DWORD PTR SS:
00609E28|.E8 EFF7DFFF CALL Farsight.0040961C ;//Squntqの大写MD5值= "777CFF1C93FD58381450A59EE2F23BE5"
00609E2D|.8B45 D8 MOV EAX,DWORD PTR SS:
00609E30|.50 PUSH EAX
00609E31|.8D55 D4 LEA EDX,DWORD PTR SS:
00609E34|.B8 8CA06000 MOV EAX,Farsight.0060A08C ;//黑名单:"f115d581f549c82370d3225ecb083c33"
00609E39|.E8 DEF7DFFF CALL Farsight.0040961C ;//黑名单转大写="F115D581F549C82370D3225ECB083C33"
00609E3E|.8B55 D4 MOV EDX,DWORD PTR SS: ;Farsight.004040F3
00609E41|.58 POP EAX ;0012F864
00609E42|.E8 3DB4DFFF CALL Farsight.00405284 ;//比较Squntqの大写MD5跟黑名单の大写MD5
00609E47|.75 07 JNZ SHORT Farsight.00609E50
00609E49|.B3 01 MOV BL,1
00609E4B|.E9 C5010000 JMP Farsight.0060A015
00609E50|>8D55 D0 LEA EDX,DWORD PTR SS:
00609E53|.8B45 F8 MOV EAX,DWORD PTR SS:
00609E56|.E8 C1F7DFFF CALL Farsight.0040961C ;//Squntqの大写MD5值= "777CFF1C93FD58381450A59EE2F23BE5"
00609E5B|.8B45 D0 MOV EAX,DWORD PTR SS:
00609E5E|.50 PUSH EAX
00609E5F|.8D55 CC LEA EDX,DWORD PTR SS:
00609E62|.B8 B8A06000 MOV EAX,Farsight.0060A0B8 ;//黑名单:"0ee7e7d913e291d1286c24190509120e"
00609E67|.E8 B0F7DFFF CALL Farsight.0040961C ;//黑名单MD5转大写="0EE7E7D913E291D1286C24190509120E"
00609E6C|.8B55 CC MOV EDX,DWORD PTR SS:
00609E6F|.58 POP EAX ;0012F864
00609E70|.E8 0FB4DFFF CALL Farsight.00405284 ;//比较Squntqの大写MD5跟黑名单の大写MD5
00609E75|.75 07 JNZ SHORT Farsight.00609E7E
00609E77|.B3 01 MOV BL,1
00609E79|.E9 97010000 JMP Farsight.0060A015
00609E7E|>8D55 C8 LEA EDX,DWORD PTR SS:
00609E81|.8B45 F8 MOV EAX,DWORD PTR SS:
00609E84|.E8 93F7DFFF CALL Farsight.0040961C
00609E89|.8B45 C8 MOV EAX,DWORD PTR SS:
00609E8C|.50 PUSH EAX
00609E8D|.8D55 C4 LEA EDX,DWORD PTR SS:
00609E90|.B8 E4A06000 MOV EAX,Farsight.0060A0E4 ;//黑名单:ASCII "3bfa2682f416c4c3fccc711fe0dc8cee"
00609E95|.E8 82F7DFFF CALL Farsight.0040961C
00609E9A|.8B55 C4 MOV EDX,DWORD PTR SS: ;user32.77D1D82A
00609E9D|.58 POP EAX ;0012F864
00609E9E|.E8 E1B3DFFF CALL Farsight.00405284
00609EA3|.75 07 JNZ SHORT Farsight.00609EAC
00609EA5|.B3 01 MOV BL,1
00609EA7|.E9 69010000 JMP Farsight.0060A015
00609EAC|>8D55 C0 LEA EDX,DWORD PTR SS:
00609EAF|.8B45 F8 MOV EAX,DWORD PTR SS:
00609EB2|.E8 65F7DFFF CALL Farsight.0040961C
00609EB7|.8B45 C0 MOV EAX,DWORD PTR SS: ;user32.77D1D83F
00609EBA|.50 PUSH EAX
00609EBB|.8D55 BC LEA EDX,DWORD PTR SS:
00609EBE|.B8 10A16000 MOV EAX,Farsight.0060A110 ;//黑名单:ASCII "506f33b54388fee67d3774826ba03791"
00609EC3|.E8 54F7DFFF CALL Farsight.0040961C
00609EC8|.8B55 BC MOV EDX,DWORD PTR SS: ;user32.77D1B473
00609ECB|.58 POP EAX ;0012F864
00609ECC|.E8 B3B3DFFF CALL Farsight.00405284
00609ED1|.75 07 JNZ SHORT Farsight.00609EDA
00609ED3|.B3 01 MOV BL,1
00609ED5|.E9 3B010000 JMP Farsight.0060A015
00609EDA|>8D55 B8 LEA EDX,DWORD PTR SS:
00609EDD|.8B45 F8 MOV EAX,DWORD PTR SS:
00609EE0|.E8 37F7DFFF CALL Farsight.0040961C
00609EE5|.8B45 B8 MOV EAX,DWORD PTR SS:
00609EE8|.50 PUSH EAX
00609EE9|.8D55 B4 LEA EDX,DWORD PTR SS:
00609EEC|.B8 3CA16000 MOV EAX,Farsight.0060A13C ;//黑名单:ASCII "c4a1bf0654a796c1549cc2a44b4d0461"
00609EF1|.E8 26F7DFFF CALL Farsight.0040961C
00609EF6|.8B55 B4 MOV EDX,DWORD PTR SS:
00609EF9|.58 POP EAX ;0012F864
00609EFA|.E8 85B3DFFF CALL Farsight.00405284
00609EFF|.75 07 JNZ SHORT Farsight.00609F08
00609F01|.B3 01 MOV BL,1
00609F03|.E9 0D010000 JMP Farsight.0060A015
00609F08|>8D55 B0 LEA EDX,DWORD PTR SS:
00609F0B|.8B45 F8 MOV EAX,DWORD PTR SS:
00609F0E|.E8 09F7DFFF CALL Farsight.0040961C
00609F13|.8B45 B0 MOV EAX,DWORD PTR SS:
00609F16|.50 PUSH EAX
00609F17|.8D55 AC LEA EDX,DWORD PTR SS:
00609F1A|.B8 68A16000 MOV EAX,Farsight.0060A168 ;//黑名单:ASCII "373b7b3855aa309731693787a369c95d"
00609F1F|.E8 F8F6DFFF CALL Farsight.0040961C
00609F24|.8B55 AC MOV EDX,DWORD PTR SS:
00609F27|.58 POP EAX ;0012F864
00609F28|.E8 57B3DFFF CALL Farsight.00405284
00609F2D|.75 07 JNZ SHORT Farsight.00609F36
00609F2F|.B3 01 MOV BL,1
00609F31|.E9 DF000000 JMP Farsight.0060A015
00609F36|>8D55 A8 LEA EDX,DWORD PTR SS:
00609F39|.8B45 F8 MOV EAX,DWORD PTR SS:
00609F3C|.E8 DBF6DFFF CALL Farsight.0040961C
00609F41|.8B45 A8 MOV EAX,DWORD PTR SS:
00609F44|.50 PUSH EAX
00609F45|.8D55 A4 LEA EDX,DWORD PTR SS:
00609F48|.B8 94A16000 MOV EAX,Farsight.0060A194 ;//黑名单:ASCII "7ac600e921e8bd51d68a1b622f74c1e6"
00609F4D|.E8 CAF6DFFF CALL Farsight.0040961C
00609F52|.8B55 A4 MOV EDX,DWORD PTR SS:
00609F55|.58 POP EAX ;0012F864
00609F56|.E8 29B3DFFF CALL Farsight.00405284
00609F5B|.75 07 JNZ SHORT Farsight.00609F64
00609F5D|.B3 01 MOV BL,1
00609F5F|.E9 B1000000 JMP Farsight.0060A015
00609F64|>8D55 A0 LEA EDX,DWORD PTR SS:
00609F67|.8B45 F8 MOV EAX,DWORD PTR SS:
00609F6A|.E8 ADF6DFFF CALL Farsight.0040961C
00609F6F|.8B45 A0 MOV EAX,DWORD PTR SS:
00609F72|.50 PUSH EAX
00609F73|.8D55 9C LEA EDX,DWORD PTR SS:
00609F76|.B8 C0A16000 MOV EAX,Farsight.0060A1C0 ;//黑名单:ASCII "9e0c00afca2e84555efc91dfe754a2b7"
00609F7B|.E8 9CF6DFFF CALL Farsight.0040961C
00609F80|.8B55 9C MOV EDX,DWORD PTR SS: ;ntdll.7C92EAE3
00609F83|.58 POP EAX ;0012F864
00609F84|.E8 FBB2DFFF CALL Farsight.00405284
00609F89|.75 07 JNZ SHORT Farsight.00609F92
00609F8B|.B3 01 MOV BL,1
00609F8D|.E9 83000000 JMP Farsight.0060A015
00609F92|>8D55 98 LEA EDX,DWORD PTR SS:
00609F95|.8B45 F8 MOV EAX,DWORD PTR SS:
00609F98|.E8 7FF6DFFF CALL Farsight.0040961C
00609F9D|.8B45 98 MOV EAX,DWORD PTR SS:
00609FA0|.50 PUSH EAX
00609FA1|.8D55 94 LEA EDX,DWORD PTR SS:
00609FA4|.B8 ECA16000 MOV EAX,Farsight.0060A1EC ;//黑名单:ASCII "be8b20277c95834b292b1073825273f3"
00609FA9|.E8 6EF6DFFF CALL Farsight.0040961C
00609FAE|.8B55 94 MOV EDX,DWORD PTR SS:
00609FB1|.58 POP EAX ;0012F864
00609FB2|.E8 CDB2DFFF CALL Farsight.00405284
00609FB7|.75 04 JNZ SHORT Farsight.00609FBD
00609FB9|.B3 01 MOV BL,1
00609FBB|.EB 58 JMP SHORT Farsight.0060A015
00609FBD|>8D55 90 LEA EDX,DWORD PTR SS:
00609FC0|.8B45 F8 MOV EAX,DWORD PTR SS:
00609FC3|.E8 54F6DFFF CALL Farsight.0040961C
00609FC8|.8B45 90 MOV EAX,DWORD PTR SS:
00609FCB|.50 PUSH EAX
00609FCC|.8D55 8C LEA EDX,DWORD PTR SS:
00609FCF|.B8 18A26000 MOV EAX,Farsight.0060A218 ;//黑名单:ASCII "d106cc90aefcc54fa16a2e086aecc6e7"
00609FD4|.E8 43F6DFFF CALL Farsight.0040961C
00609FD9|.8B55 8C MOV EDX,DWORD PTR SS:
00609FDC|.58 POP EAX ;0012F864
00609FDD|.E8 A2B2DFFF CALL Farsight.00405284
00609FE2|.75 04 JNZ SHORT Farsight.00609FE8
00609FE4|.B3 01 MOV BL,1
00609FE6|.EB 2D JMP SHORT Farsight.0060A015
00609FE8|>8D55 88 LEA EDX,DWORD PTR SS:
00609FEB|.8B45 F8 MOV EAX,DWORD PTR SS:
00609FEE|.E8 29F6DFFF CALL Farsight.0040961C
00609FF3|.8B45 88 MOV EAX,DWORD PTR SS:
00609FF6|.50 PUSH EAX
00609FF7|.8D55 84 LEA EDX,DWORD PTR SS:
00609FFA|.B8 44A26000 MOV EAX,Farsight.0060A244 ;//黑名单:ASCII "659c1868d7a2344992da9ceda33b1ff6"
00609FFF|.E8 18F6DFFF CALL Farsight.0040961C
0060A004|.8B55 84 MOV EDX,DWORD PTR SS: ;user32.77D1B51C
0060A007|.58 POP EAX ;0012F864
0060A008|.E8 77B2DFFF CALL Farsight.00405284
0060A00D|.75 04 JNZ SHORT Farsight.0060A013
0060A00F|.B3 01 MOV BL,1
0060A011|.EB 02 JMP SHORT Farsight.0060A015
0060A013|>33DB XOR EBX,EBX
0060A015|>33C0 XOR EAX,EAX
0060A017|.5A POP EDX ;0012F864
0060A018|.59 POP ECX ;0012F864
0060A019|.59 POP ECX ;0012F864
0060A01A|.64:8910 MOV DWORD PTR FS:,EDX
0060A01D|.68 44A06000 PUSH Farsight.0060A044
0060A022|>8D45 84 LEA EAX,DWORD PTR SS:
0060A025|.BA 19000000 MOV EDX,19
0060A02A|.E8 6DAEDFFF CALL Farsight.00404E9C
0060A02F|.8D45 F8 LEA EAX,DWORD PTR SS:
0060A032|.BA 02000000 MOV EDX,2
0060A037|.E8 60AEDFFF CALL Farsight.00404E9C
0060A03C\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A358 >/$55 PUSH EBP ;//用户名+hgfjk的MD5の第一位跟假码第一位比较--8:1
0060A359|.8BEC MOV EBP,ESP
0060A35B|.83C4 E0 ADD ESP,-20
0060A35E|.53 PUSH EBX
0060A35F|.33C9 XOR ECX,ECX
0060A361|.894D E0 MOV DWORD PTR SS:,ECX
0060A364|.894D F4 MOV DWORD PTR SS:,ECX
0060A367|.8955 F8 MOV DWORD PTR SS:,EDX
0060A36A|.8945 FC MOV DWORD PTR SS:,EAX
0060A36D|.8B45 FC MOV EAX,DWORD PTR SS:
0060A370|.E8 B3AFDFFF CALL Farsight.00405328
0060A375|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A378|.E8 ABAFDFFF CALL Farsight.00405328
0060A37D|.33C0 XOR EAX,EAX
0060A37F|.55 PUSH EBP
0060A380|.68 E6A36000 PUSH Farsight.0060A3E6
0060A385|.64:FF30 PUSH DWORD PTR FS:
0060A388|.64:8920 MOV DWORD PTR FS:,ESP
0060A38B|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A38E|.B9 FCA36000 MOV ECX,Farsight.0060A3FC ;ASCII "hgfjk"
0060A393|.8B55 FC MOV EDX,DWORD PTR SS:
0060A396|.E8 E9ADDFFF CALL Farsight.00405184 ;//用户名+"hgfjk"=Squnhgfjk
0060A39B|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A39E|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A3A1|.E8 A6F8FFFF CALL Farsight.00609C4C
0060A3A6|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A3A9|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A3AC|.E8 0FF9FFFF CALL Farsight.00609CC0 ;//用户名+hgfjk的MD5=85308a436d4fbe083384467ad65c1292
0060A3B1|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A3B4|.8A00 MOV AL,BYTE PTR DS:
0060A3B6|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A3B9|.3A02 CMP AL,BYTE PTR DS: ;//用户名+hgfjk的MD5の第一位跟假码第一位比较--8:1
0060A3BB|.75 04 JNZ SHORT Farsight.0060A3C1 ;//不等则跳,不能跳!
0060A3BD|.B3 01 MOV BL,1
0060A3BF|.EB 02 JMP SHORT Farsight.0060A3C3
0060A3C1|>33DB XOR EBX,EBX
0060A3C3|>33C0 XOR EAX,EAX
0060A3C5|.5A POP EDX ;0012F864
0060A3C6|.59 POP ECX ;0012F864
0060A3C7|.59 POP ECX ;0012F864
0060A3C8|.64:8910 MOV DWORD PTR FS:,EDX
0060A3CB|.68 EDA36000 PUSH Farsight.0060A3ED
0060A3D0|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A3D3|.E8 A0AADFFF CALL Farsight.00404E78
0060A3D8|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A3DB|.BA 03000000 MOV EDX,3
0060A3E0|.E8 B7AADFFF CALL Farsight.00404E9C
0060A3E5\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A404 >/$55 PUSH EBP ;//把用户名+hgfjhkjk的MD5の第一位跟假码第二位比较
0060A405|.8BEC MOV EBP,ESP
0060A407|.83C4 E0 ADD ESP,-20
0060A40A|.53 PUSH EBX
0060A40B|.33C9 XOR ECX,ECX
0060A40D|.894D E0 MOV DWORD PTR SS:,ECX
0060A410|.894D F4 MOV DWORD PTR SS:,ECX
0060A413|.8955 F8 MOV DWORD PTR SS:,EDX
0060A416|.8945 FC MOV DWORD PTR SS:,EAX
0060A419|.8B45 FC MOV EAX,DWORD PTR SS:
0060A41C|.E8 07AFDFFF CALL Farsight.00405328
0060A421|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A424|.E8 FFAEDFFF CALL Farsight.00405328
0060A429|.33C0 XOR EAX,EAX
0060A42B|.55 PUSH EBP
0060A42C|.68 93A46000 PUSH Farsight.0060A493
0060A431|.64:FF30 PUSH DWORD PTR FS:
0060A434|.64:8920 MOV DWORD PTR FS:,ESP
0060A437|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A43A|.B9 ACA46000 MOV ECX,Farsight.0060A4AC ;ASCII "hgfjhkjk"
0060A43F|.8B55 FC MOV EDX,DWORD PTR SS:
0060A442|.E8 3DADDFFF CALL Farsight.00405184 ;//用户名+hgfjhkjk=Squnhgfjhkjk
0060A447|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A44A|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A44D|.E8 FAF7FFFF CALL Farsight.00609C4C
0060A452|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A455|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A458|.E8 63F8FFFF CALL Farsight.00609CC0 ;//用户名+hgfjhkjk的MD5=d0da19953e92ff6d20cb89b7ea2c13ca
0060A45D|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A460|.8A00 MOV AL,BYTE PTR DS:
0060A462|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A465|.3A42 01 CMP AL,BYTE PTR DS: ;//把用户名+hgfjhkjk的MD5の第一位跟假码第二位比较--d:2
0060A468|.75 04 JNZ SHORT Farsight.0060A46E ;//不等则跳! 不能跳!
0060A46A|.B3 01 MOV BL,1
0060A46C|.EB 02 JMP SHORT Farsight.0060A470
0060A46E|>33DB XOR EBX,EBX
0060A470|>33C0 XOR EAX,EAX
0060A472|.5A POP EDX ;0012F864
0060A473|.59 POP ECX ;0012F864
0060A474|.59 POP ECX ;0012F864
0060A475|.64:8910 MOV DWORD PTR FS:,EDX
0060A478|.68 9AA46000 PUSH Farsight.0060A49A
0060A47D|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A480|.E8 F3A9DFFF CALL Farsight.00404E78
0060A485|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A488|.BA 03000000 MOV EDX,3
0060A48D|.E8 0AAADFFF CALL Farsight.00404E9C
0060A492\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A4B8 >/$55 PUSH EBP ;//用户名+hgfjk77的MD5の第一位与假码第三位比较
0060A4B9|.8BEC MOV EBP,ESP
0060A4BB|.83C4 E0 ADD ESP,-20
0060A4BE|.53 PUSH EBX
0060A4BF|.33C9 XOR ECX,ECX
0060A4C1|.894D E0 MOV DWORD PTR SS:,ECX
0060A4C4|.894D F4 MOV DWORD PTR SS:,ECX
0060A4C7|.8955 F8 MOV DWORD PTR SS:,EDX
0060A4CA|.8945 FC MOV DWORD PTR SS:,EAX
0060A4CD|.8B45 FC MOV EAX,DWORD PTR SS:
0060A4D0|.E8 53AEDFFF CALL Farsight.00405328
0060A4D5|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A4D8|.E8 4BAEDFFF CALL Farsight.00405328
0060A4DD|.33C0 XOR EAX,EAX
0060A4DF|.55 PUSH EBP
0060A4E0|.68 47A56000 PUSH Farsight.0060A547
0060A4E5|.64:FF30 PUSH DWORD PTR FS:
0060A4E8|.64:8920 MOV DWORD PTR FS:,ESP
0060A4EB|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A4EE|.B9 60A56000 MOV ECX,Farsight.0060A560 ;ASCII "hgfjk77"
0060A4F3|.8B55 FC MOV EDX,DWORD PTR SS:
0060A4F6|.E8 89ACDFFF CALL Farsight.00405184 ;//用户名+hgfjk77=Squnhgfjk77
0060A4FB|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A4FE|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A501|.E8 46F7FFFF CALL Farsight.00609C4C
0060A506|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A509|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A50C|.E8 AFF7FFFF CALL Farsight.00609CC0 ;//用户名+hgfjk77的MD5=4884950f4ac922debe8eebeb9667f0d2
0060A511|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A514|.8A00 MOV AL,BYTE PTR DS:
0060A516|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A519|.3A42 02 CMP AL,BYTE PTR DS: ;//用户名+hgfjk77的MD5の第一位与假码第三位比较--4:3
0060A51C|.75 04 JNZ SHORT Farsight.0060A522 ;//不等则跳!不能跳!
0060A51E|.B3 01 MOV BL,1
0060A520|.EB 02 JMP SHORT Farsight.0060A524
0060A522|>33DB XOR EBX,EBX
0060A524|>33C0 XOR EAX,EAX
0060A526|.5A POP EDX ;0012F864
0060A527|.59 POP ECX ;0012F864
0060A528|.59 POP ECX ;0012F864
0060A529|.64:8910 MOV DWORD PTR FS:,EDX
0060A52C|.68 4EA56000 PUSH Farsight.0060A54E
0060A531|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A534|.E8 3FA9DFFF CALL Farsight.00404E78
0060A539|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A53C|.BA 03000000 MOV EDX,3
0060A541|.E8 56A9DFFF CALL Farsight.00404E9C
0060A546\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A568 >/$55 PUSH EBP ;//用户名+hgfjksss5的MD5の第一位跟假码第四位比较
0060A569|.8BEC MOV EBP,ESP
0060A56B|.83C4 E0 ADD ESP,-20
0060A56E|.53 PUSH EBX
0060A56F|.33C9 XOR ECX,ECX
0060A571|.894D E0 MOV DWORD PTR SS:,ECX
0060A574|.894D F4 MOV DWORD PTR SS:,ECX
0060A577|.8955 F8 MOV DWORD PTR SS:,EDX
0060A57A|.8945 FC MOV DWORD PTR SS:,EAX
0060A57D|.8B45 FC MOV EAX,DWORD PTR SS:
0060A580|.E8 A3ADDFFF CALL Farsight.00405328
0060A585|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A588|.E8 9BADDFFF CALL Farsight.00405328
0060A58D|.33C0 XOR EAX,EAX
0060A58F|.55 PUSH EBP
0060A590|.68 F7A56000 PUSH Farsight.0060A5F7
0060A595|.64:FF30 PUSH DWORD PTR FS:
0060A598|.64:8920 MOV DWORD PTR FS:,ESP
0060A59B|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A59E|.B9 10A66000 MOV ECX,Farsight.0060A610 ;ASCII "hgfjksss5"
0060A5A3|.8B55 FC MOV EDX,DWORD PTR SS:
0060A5A6|.E8 D9ABDFFF CALL Farsight.00405184 ;//用户名+hgfjksss5=Squnhgfjksss5
0060A5AB|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A5AE|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A5B1|.E8 96F6FFFF CALL Farsight.00609C4C
0060A5B6|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A5B9|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A5BC|.E8 FFF6FFFF CALL Farsight.00609CC0 ;//用户名+hgfjksss5的MD5= "fb872c236922181e3e8ade9bc38b32b7"
0060A5C1|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A5C4|.8A00 MOV AL,BYTE PTR DS:
0060A5C6|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A5C9|.3A42 03 CMP AL,BYTE PTR DS: ;//用户名+hgfjksss5的MD5の第一位跟假码第四位比较--f:4
0060A5CC|.75 04 JNZ SHORT Farsight.0060A5D2 ;//不能跳!
0060A5CE|.B3 01 MOV BL,1
0060A5D0|.EB 02 JMP SHORT Farsight.0060A5D4
0060A5D2|>33DB XOR EBX,EBX
0060A5D4|>33C0 XOR EAX,EAX
0060A5D6|.5A POP EDX ;0012F864
0060A5D7|.59 POP ECX ;0012F864
0060A5D8|.59 POP ECX ;0012F864
0060A5D9|.64:8910 MOV DWORD PTR FS:,EDX
0060A5DC|.68 FEA56000 PUSH Farsight.0060A5FE
0060A5E1|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A5E4|.E8 8FA8DFFF CALL Farsight.00404E78
0060A5E9|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A5EC|.BA 03000000 MOV EDX,3
0060A5F1|.E8 A6A8DFFF CALL Farsight.00404E9C
0060A5F6\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A61C >/$55 PUSH EBP ;//用户名+6578uhgj的MD5の第一位跟假码第五位比较
0060A61D|.8BEC MOV EBP,ESP
0060A61F|.83C4 E0 ADD ESP,-20
0060A622|.53 PUSH EBX
0060A623|.33C9 XOR ECX,ECX
0060A625|.894D E0 MOV DWORD PTR SS:,ECX
0060A628|.894D F4 MOV DWORD PTR SS:,ECX
0060A62B|.8955 F8 MOV DWORD PTR SS:,EDX
0060A62E|.8945 FC MOV DWORD PTR SS:,EAX
0060A631|.8B45 FC MOV EAX,DWORD PTR SS:
0060A634|.E8 EFACDFFF CALL Farsight.00405328
0060A639|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A63C|.E8 E7ACDFFF CALL Farsight.00405328
0060A641|.33C0 XOR EAX,EAX
0060A643|.55 PUSH EBP
0060A644|.68 ABA66000 PUSH Farsight.0060A6AB
0060A649|.64:FF30 PUSH DWORD PTR FS:
0060A64C|.64:8920 MOV DWORD PTR FS:,ESP
0060A64F|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A652|.B9 C4A66000 MOV ECX,Farsight.0060A6C4 ;ASCII "6578uhgj"
0060A657|.8B55 FC MOV EDX,DWORD PTR SS:
0060A65A|.E8 25ABDFFF CALL Farsight.00405184 ;//用户名+6578uhgj=Squn6578uhgj
0060A65F|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A662|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A665|.E8 E2F5FFFF CALL Farsight.00609C4C
0060A66A|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A66D|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A670|.E8 4BF6FFFF CALL Farsight.00609CC0 ;//用户名+6578uhgj的MD5=ed597f285db126613442a3263e24e55d
0060A675|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A678|.8A00 MOV AL,BYTE PTR DS:
0060A67A|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A67D|.3A42 04 CMP AL,BYTE PTR DS: ;//用户名+6578uhgj的MD5の第一位跟假码第五位比较--e:5
0060A680|.75 04 JNZ SHORT Farsight.0060A686 ;//不能跳!
0060A682|.B3 01 MOV BL,1
0060A684|.EB 02 JMP SHORT Farsight.0060A688
0060A686|>33DB XOR EBX,EBX
0060A688|>33C0 XOR EAX,EAX
0060A68A|.5A POP EDX ;0012F864
0060A68B|.59 POP ECX ;0012F864
0060A68C|.59 POP ECX ;0012F864
0060A68D|.64:8910 MOV DWORD PTR FS:,EDX
0060A690|.68 B2A66000 PUSH Farsight.0060A6B2
0060A695|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A698|.E8 DBA7DFFF CALL Farsight.00404E78
0060A69D|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A6A0|.BA 03000000 MOV EDX,3
0060A6A5|.E8 F2A7DFFF CALL Farsight.00404E9C
0060A6AA\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A6D0 >/$55 PUSH EBP ;//用户名+hkjk的MD5の第一位跟假码第六位比较
0060A6D1|.8BEC MOV EBP,ESP
0060A6D3|.83C4 E0 ADD ESP,-20
0060A6D6|.53 PUSH EBX
0060A6D7|.33C9 XOR ECX,ECX
0060A6D9|.894D E0 MOV DWORD PTR SS:,ECX
0060A6DC|.894D F4 MOV DWORD PTR SS:,ECX
0060A6DF|.8955 F8 MOV DWORD PTR SS:,EDX
0060A6E2|.8945 FC MOV DWORD PTR SS:,EAX
0060A6E5|.8B45 FC MOV EAX,DWORD PTR SS:
0060A6E8|.E8 3BACDFFF CALL Farsight.00405328
0060A6ED|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A6F0|.E8 33ACDFFF CALL Farsight.00405328
0060A6F5|.33C0 XOR EAX,EAX
0060A6F7|.55 PUSH EBP
0060A6F8|.68 5FA76000 PUSH Farsight.0060A75F
0060A6FD|.64:FF30 PUSH DWORD PTR FS:
0060A700|.64:8920 MOV DWORD PTR FS:,ESP
0060A703|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A706|.B9 78A76000 MOV ECX,Farsight.0060A778 ;hkjk
0060A70B|.8B55 FC MOV EDX,DWORD PTR SS:
0060A70E|.E8 71AADFFF CALL Farsight.00405184 ;//用户名+hkjk=Squnhkjk
0060A713|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A716|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A719|.E8 2EF5FFFF CALL Farsight.00609C4C
0060A71E|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A721|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A724|.E8 97F5FFFF CALL Farsight.00609CC0 ;//用户名+hkjk的MD5=405b1020f3c7327fda10bc84168e5485
0060A729|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A72C|.8A00 MOV AL,BYTE PTR DS:
0060A72E|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A731|.3A42 05 CMP AL,BYTE PTR DS: ;//用户名+hkjk的MD5の第一位跟假码第六位比较--4:6
0060A734|.75 04 JNZ SHORT Farsight.0060A73A ;//不能跳!
0060A736|.B3 01 MOV BL,1
0060A738|.EB 02 JMP SHORT Farsight.0060A73C
0060A73A|>33DB XOR EBX,EBX
0060A73C|>33C0 XOR EAX,EAX
0060A73E|.5A POP EDX ;0012F864
0060A73F|.59 POP ECX ;0012F864
0060A740|.59 POP ECX ;0012F864
0060A741|.64:8910 MOV DWORD PTR FS:,EDX
0060A744|.68 66A76000 PUSH Farsight.0060A766
0060A749|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A74C|.E8 27A7DFFF CALL Farsight.00404E78
0060A751|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A754|.BA 03000000 MOV EDX,3
0060A759|.E8 3EA7DFFF CALL Farsight.00404E9C
0060A75E\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A780 >/$55 PUSH EBP ;//用户名+asdsd的MD5的第一位跟假码第七位比较
0060A781|.8BEC MOV EBP,ESP
0060A783|.83C4 E0 ADD ESP,-20
0060A786|.53 PUSH EBX
0060A787|.33C9 XOR ECX,ECX
0060A789|.894D E0 MOV DWORD PTR SS:,ECX
0060A78C|.894D F4 MOV DWORD PTR SS:,ECX
0060A78F|.8955 F8 MOV DWORD PTR SS:,EDX
0060A792|.8945 FC MOV DWORD PTR SS:,EAX
0060A795|.8B45 FC MOV EAX,DWORD PTR SS:
0060A798|.E8 8BABDFFF CALL Farsight.00405328
0060A79D|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A7A0|.E8 83ABDFFF CALL Farsight.00405328
0060A7A5|.33C0 XOR EAX,EAX
0060A7A7|.55 PUSH EBP
0060A7A8|.68 0FA86000 PUSH Farsight.0060A80F
0060A7AD|.64:FF30 PUSH DWORD PTR FS:
0060A7B0|.64:8920 MOV DWORD PTR FS:,ESP
0060A7B3|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A7B6|.B9 28A86000 MOV ECX,Farsight.0060A828 ;asdsd
0060A7BB|.8B55 FC MOV EDX,DWORD PTR SS:
0060A7BE|.E8 C1A9DFFF CALL Farsight.00405184 ;//用户名+asdsd=Squnasdsd
0060A7C3|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A7C6|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A7C9|.E8 7EF4FFFF CALL Farsight.00609C4C
0060A7CE|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A7D1|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A7D4|.E8 E7F4FFFF CALL Farsight.00609CC0 ;//用户名+asdsd的MD5=934f52ecf9a1bfa42412db7df58cda8e
0060A7D9|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A7DC|.8A00 MOV AL,BYTE PTR DS:
0060A7DE|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A7E1|.3A42 06 CMP AL,BYTE PTR DS: ;//用户名+asdsd的MD5的第一位跟假码第七位比较--9:7
0060A7E4|.75 04 JNZ SHORT Farsight.0060A7EA ;//不能跳!
0060A7E6|.B3 01 MOV BL,1
0060A7E8|.EB 02 JMP SHORT Farsight.0060A7EC
0060A7EA|>33DB XOR EBX,EBX
0060A7EC|>33C0 XOR EAX,EAX
0060A7EE|.5A POP EDX ;0012F864
0060A7EF|.59 POP ECX ;0012F864
0060A7F0|.59 POP ECX ;0012F864
0060A7F1|.64:8910 MOV DWORD PTR FS:,EDX
0060A7F4|.68 16A86000 PUSH Farsight.0060A816
0060A7F9|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A7FC|.E8 77A6DFFF CALL Farsight.00404E78
0060A801|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A804|.BA 03000000 MOV EDX,3
0060A809|.E8 8EA6DFFF CALL Farsight.00404E9C
0060A80E\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A830 >/$55 PUSH EBP ;//用户名+xcvxc的MD5の第一位跟假码第八位比较
0060A831|.8BEC MOV EBP,ESP
0060A833|.83C4 E0 ADD ESP,-20
0060A836|.53 PUSH EBX
0060A837|.33C9 XOR ECX,ECX
0060A839|.894D E0 MOV DWORD PTR SS:,ECX
0060A83C|.894D F4 MOV DWORD PTR SS:,ECX
0060A83F|.8955 F8 MOV DWORD PTR SS:,EDX
0060A842|.8945 FC MOV DWORD PTR SS:,EAX
0060A845|.8B45 FC MOV EAX,DWORD PTR SS:
0060A848|.E8 DBAADFFF CALL Farsight.00405328
0060A84D|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A850|.E8 D3AADFFF CALL Farsight.00405328
0060A855|.33C0 XOR EAX,EAX
0060A857|.55 PUSH EBP
0060A858|.68 BFA86000 PUSH Farsight.0060A8BF
0060A85D|.64:FF30 PUSH DWORD PTR FS:
0060A860|.64:8920 MOV DWORD PTR FS:,ESP
0060A863|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A866|.B9 D8A86000 MOV ECX,Farsight.0060A8D8 ;xcvxc
0060A86B|.8B55 FC MOV EDX,DWORD PTR SS:
0060A86E|.E8 11A9DFFF CALL Farsight.00405184 ;//用户名+xcvxc=Squnxcvxc
0060A873|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A876|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A879|.E8 CEF3FFFF CALL Farsight.00609C4C
0060A87E|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A881|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A884|.E8 37F4FFFF CALL Farsight.00609CC0 ;//用户名+xcvxc的MD5=d7e9a24f898a7f19d7c10d070f8a87df
0060A889|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A88C|.8A00 MOV AL,BYTE PTR DS:
0060A88E|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A891|.3A42 07 CMP AL,BYTE PTR DS: ;//用户名+xcvxc的MD5の第一位跟假码第八位比较--d:8
0060A894|.75 04 JNZ SHORT Farsight.0060A89A ;//不能跳!
0060A896|.B3 01 MOV BL,1
0060A898|.EB 02 JMP SHORT Farsight.0060A89C
0060A89A|>33DB XOR EBX,EBX
0060A89C|>33C0 XOR EAX,EAX
0060A89E|.5A POP EDX ;0012F864
0060A89F|.59 POP ECX ;0012F864
0060A8A0|.59 POP ECX ;0012F864
0060A8A1|.64:8910 MOV DWORD PTR FS:,EDX
0060A8A4|.68 C6A86000 PUSH Farsight.0060A8C6
0060A8A9|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A8AC|.E8 C7A5DFFF CALL Farsight.00404E78
0060A8B1|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A8B4|.BA 03000000 MOV EDX,3
0060A8B9|.E8 DEA5DFFF CALL Farsight.00404E9C
0060A8BE\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A8E0 >/$55 PUSH EBP ;//用户名+ytutyu的MD5的第一位跟假码第九位比较
0060A8E1|.8BEC MOV EBP,ESP
0060A8E3|.83C4 E0 ADD ESP,-20
0060A8E6|.53 PUSH EBX
0060A8E7|.33C9 XOR ECX,ECX
0060A8E9|.894D E0 MOV DWORD PTR SS:,ECX
0060A8EC|.894D F4 MOV DWORD PTR SS:,ECX
0060A8EF|.8955 F8 MOV DWORD PTR SS:,EDX
0060A8F2|.8945 FC MOV DWORD PTR SS:,EAX
0060A8F5|.8B45 FC MOV EAX,DWORD PTR SS:
0060A8F8|.E8 2BAADFFF CALL Farsight.00405328
0060A8FD|.8B45 F8 MOV EAX,DWORD PTR SS:
0060A900|.E8 23AADFFF CALL Farsight.00405328
0060A905|.33C0 XOR EAX,EAX
0060A907|.55 PUSH EBP
0060A908|.68 6FA96000 PUSH Farsight.0060A96F
0060A90D|.64:FF30 PUSH DWORD PTR FS:
0060A910|.64:8920 MOV DWORD PTR FS:,ESP
0060A913|.8D45 E0 LEA EAX,DWORD PTR SS:
0060A916|.B9 88A96000 MOV ECX,Farsight.0060A988 ;ytutyu
0060A91B|.8B55 FC MOV EDX,DWORD PTR SS:
0060A91E|.E8 61A8DFFF CALL Farsight.00405184 ;//用户名+ytutyu=Squnytutyu
0060A923|.8B45 E0 MOV EAX,DWORD PTR SS: ;Farsight.0048553F
0060A926|.8D55 E4 LEA EDX,DWORD PTR SS:
0060A929|.E8 1EF3FFFF CALL Farsight.00609C4C
0060A92E|.8D45 E4 LEA EAX,DWORD PTR SS:
0060A931|.8D55 F4 LEA EDX,DWORD PTR SS:
0060A934|.E8 87F3FFFF CALL Farsight.00609CC0 ;//用户名+ytutyu的MD5=db548c6928fd97269a4265d979abb14a
0060A939|.8B45 F4 MOV EAX,DWORD PTR SS: ;Farsight.00526AB8
0060A93C|.8A00 MOV AL,BYTE PTR DS:
0060A93E|.8B55 F8 MOV EDX,DWORD PTR SS:
0060A941|.3A42 08 CMP AL,BYTE PTR DS: ;//用户名+ytutyu的MD5的第一位跟假码第九位比较--d:9
0060A944|.75 04 JNZ SHORT Farsight.0060A94A ;//不能跳!
0060A946|.B3 01 MOV BL,1
0060A948|.EB 02 JMP SHORT Farsight.0060A94C
0060A94A|>33DB XOR EBX,EBX
0060A94C|>33C0 XOR EAX,EAX
0060A94E|.5A POP EDX ;0012F864
0060A94F|.59 POP ECX ;0012F864
0060A950|.59 POP ECX ;0012F864
0060A951|.64:8910 MOV DWORD PTR FS:,EDX
0060A954|.68 76A96000 PUSH Farsight.0060A976
0060A959|>8D45 E0 LEA EAX,DWORD PTR SS:
0060A95C|.E8 17A5DFFF CALL Farsight.00404E78
0060A961|.8D45 F4 LEA EAX,DWORD PTR SS:
0060A964|.BA 03000000 MOV EDX,3
0060A969|.E8 2EA5DFFF CALL Farsight.00404E9C
0060A96E\.C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
算法到此结束.
简单总结一下:
用户名位数不限制.
注册码前9位:
第一位 = 用户名+hgfjk的MD5の第一位
第二位 = 用户名+hgfjhkjk的MD5の第一位
第三位 = 用户名+hgfjk77的MD5の第一位
第四位 = 用户名+hgfjksss5的MD5の第一位
第五位 = 用户名+6578uhgj的MD5の第一位
第六位 = 用户名+hkjk的MD5の第一位
第七位 = 用户名+asdsd的MD5の第一位
第八位 = 用户名+xcvxc的MD5の第一位
第九位 = 用户名+ytutyu的MD5の第一位
注册码前9位の算法如上,9位以后の随便写即可!
delphi算法注册机核心代码(稍后附上完整源代码):
szTemp:= RivestStr(szName + 'hgfjk');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + 'hgfjhkjk');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + 'hgfjk77');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + 'hgfjksss5');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + '6578uhgj');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + 'hkjk');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + 'asdsd');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + 'xcvxc');
szCode:=szCode + szTemp;
szTemp:= RivestStr(szName + 'ytutyu');
szCode:=szCode + szTemp;
------------------------------------------------------------------------
【破解总结】附上一组可用注册码:
Username : Squn
Serial : 8d4fe49dd
注册码前9位必须为8d4fe49dd.后面可以随意!
算法分析=细心再细心 o(∩_∩)o
------------------------------------------------------------------------
【版权声明】版权米有 ★ 嘻嘻~转载请注明哦~ 首发吾爱破解.
2009-2-20 是沙发么....膜拜了 :lol 感觉和我以前用易语言写的cm算法差不多 原帖由 zapline 于 2009-2-20 16:09 发表 http://bbs.52pojie.cn/images/common/back.gif
:lol 感觉和我以前用易语言写的cm算法差不多
是啊 算法挺弱智的...
旧版本的这个计算器算法更弱智一些... :loveliness: 太难了...不过还是谢谢小芊芊分享，我先仔细研究一下:lol hehe 支持下squn 大姐 学习算法
顺便膜拜下:) 膜拜下。。。 强大的MM，收我吧，教我算法。