User Time Administrator 4.6.4.3算法分析

tianxj

【破文标题】User Time Administrator 4.6.4.3算法分析
【破文作者】tianxj
【作者邮箱】tianxj_2007@126.com
【作者主页】WwW.ChiNaPYG.CoM
【破解工具】PEiD,OD
【破解平台】Windows XP
【软件名称】User Time Administrator 4.6.4.3
【软件大小】2758KB
【软件类别】国外软件/开关定时
【软件授权】共享版
【软件语言】英文
【运行环境】Win9x/Me/NT/2000/XP/2003
【更新时间】2008-9-12
【原版下载】自己找一下
【保护方式】注册码
【软件简介】一种实用工具，可让您限制时间为PC用户，并限制他们进入。 如果您担心您的孩子可能会花费太多时间上网或玩游戏-或者您不想他/她使用您的电脑当您要么睡觉或离家出走-这种类型的软件提供了一个解决方案。
【破解声明】我是一只小菜鸟，偶得一点心得，愿与大家分享：）
--------------------------------------------------------------
【破解内容】
--------------------------------------------------------------
**************************************************************
一、运行程序，进行注册，输入错误的注册信息进行检测，有提示信息
"Key is not valid !"
**************************************************************
二、用PEiD对utcc.exe查壳，为 Borland Delphi 6.0 - 7.0
**************************************************************
三、运行OD，打开utcc.exe，用F12暂停法
==============================================================
调用堆栈： 主线程, 条目 14
地址=0012F458
堆栈=005ADF5A
函数过程 / 参数=? <JMP.&user32.MessageBoxA>
调用来自=utcc.005ADF55
结构=0012F454
==============================================================

005ADD70/.55 PUSHEBP005ADD71|.8BEC MOV EBP, ESP005ADD73|.B9 07000000MOV ECX, 7005ADD78|>6A 00/PUSH0005ADD7A|.6A 00|PUSH0005ADD7C|.49 |DEC ECX005ADD7D|.^ 75 F9\JNZ SHORT utcc.005ADD78005ADD7F|.53 PUSHEBX005ADD80|.56 PUSHESI005ADD81|.8BF0 MOV ESI, EAX005ADD83|.8B1D 74F55C00MOV EBX, DWORD PTR DS:[5CF574] ;utcc.005D5C98005ADD89|.33C0 XOR EAX, EAX005ADD8B|.55 PUSHEBP005ADD8C|.68 F6DF5A00PUSHutcc.005ADFF6005ADD91|.64:FF30PUSHDWORD PTR FS:[EAX]005ADD94|.64:8920MOV DWORD PTR FS:[EAX], ESP005ADD97|.8BCB MOV ECX, EBX005ADD99|.A1 0CF95C00MOV EAX, DWORD PTR DS:[5CF90C]005ADD9E|.8B00 MOV EAX, DWORD PTR DS:[EAX]005ADDA0|.8B15 9CD35A00MOV EDX, DWORD PTR DS:[5AD39C] ;utcc.005AD3E8005ADDA6|.E8 ED53EDFFCALLutcc.00483198005ADDAB|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADDAD|.8B80 78030000MOV EAX, DWORD PTR DS:[EAX+378]005ADDB3|.B2 01MOV DL, 1005ADDB5|.E8 8E56EBFFCALLutcc.00463448005ADDBA|.8D55 F8LEA EDX, DWORD PTR SS:[EBP-8]005ADDBD|.B8 0CE05A00MOV EAX, utcc.005AE00C ;ASCII "Registration"005ADDC2|.E8 75E0F7FFCALLutcc.0052BE3C005ADDC7|.8B55 F8MOV EDX, DWORD PTR SS:[EBP-8]005ADDCA|.8D45 FCLEA EAX, DWORD PTR SS:[EBP-4]005ADDCD|.E8 767BE5FFCALLutcc.00405948005ADDD2|.8B55 FCMOV EDX, DWORD PTR SS:[EBP-4]005ADDD5|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADDD7|.E8 7C57EBFFCALLutcc.00463558005ADDDC|.8D55 F0LEA EDX, DWORD PTR SS:[EBP-10]005ADDDF|.B8 24E05A00MOV EAX, utcc.005AE024 ;ASCII "Registration name"005ADDE4|.E8 53E0F7FFCALLutcc.0052BE3C005ADDE9|.8B55 F0MOV EDX, DWORD PTR SS:[EBP-10]005ADDEC|.8D45 F4LEA EAX, DWORD PTR SS:[EBP-C]005ADDEF|.E8 547BE5FFCALLutcc.00405948005ADDF4|.8B55 F4MOV EDX, DWORD PTR SS:[EBP-C]005ADDF7|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADDF9|.8B80 60030000MOV EAX, DWORD PTR DS:[EAX+360]005ADDFF|.E8 5457EBFFCALLutcc.00463558005ADE04|.8D55 E8LEA EDX, DWORD PTR SS:[EBP-18]005ADE07|.B8 40E05A00MOV EAX, utcc.005AE040 ;ASCII "Registration key"005ADE0C|.E8 2BE0F7FFCALLutcc.0052BE3C005ADE11|.8B55 E8MOV EDX, DWORD PTR SS:[EBP-18]005ADE14|.8D45 ECLEA EAX, DWORD PTR SS:[EBP-14]005ADE17|.E8 2C7BE5FFCALLutcc.00405948005ADE1C|.8B55 ECMOV EDX, DWORD PTR SS:[EBP-14]005ADE1F|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADE21|.8B80 68030000MOV EAX, DWORD PTR DS:[EAX+368]005ADE27|.E8 2C57EBFFCALLutcc.00463558005ADE2C|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADE2E|.8B10 MOV EDX, DWORD PTR DS:[EAX]005ADE30|.FF92 FC000000CALLNEAR DWORD PTR DS:[EDX+FC]005ADE36|.48 DEC EAX005ADE37|.0F85 3F010000JNZ utcc.005ADF7C005ADE3D|.8D55 E0LEA EDX, DWORD PTR SS:[EBP-20]005ADE40|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADE42|.8B80 64030000MOV EAX, DWORD PTR DS:[EAX+364]005ADE48|.E8 DB56EBFFCALLutcc.00463528005ADE4D|.8B45 E0MOV EAX, DWORD PTR SS:[EBP-20] ;//用户名005ADE50|.8D55 E4LEA EDX, DWORD PTR SS:[EBP-1C]005ADE53|.E8 64C6E5FFCALLutcc.0040A4BC005ADE58|.8B45 E4MOV EAX, DWORD PTR SS:[EBP-1C] ;//用户名005ADE5B|.50 PUSHEAX005ADE5C|.8D55 D8LEA EDX, DWORD PTR SS:[EBP-28]005ADE5F|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADE61|.8B80 6C030000MOV EAX, DWORD PTR DS:[EAX+36C]005ADE67|.E8 BC56EBFFCALLutcc.00463528005ADE6C|.8B45 D8MOV EAX, DWORD PTR SS:[EBP-28] ;//试练码005ADE6F|.8D55 DCLEA EDX, DWORD PTR SS:[EBP-24]005ADE72|.E8 45C6E5FFCALLutcc.0040A4BC005ADE77|.8B55 DCMOV EDX, DWORD PTR SS:[EBP-24] ;//试练码005ADE7A|.A1 78F45C00MOV EAX, DWORD PTR DS:[5CF478]005ADE7F|.8B00 MOV EAX, DWORD PTR DS:[EAX]005ADE81|.59 POP ECX;//用户名005ADE82|.E8 51690100CALLutcc.005C47D8;//关键CALL005ADE87|.84C0 TESTAL, AL005ADE89|.0F84 A6000000JEutcc.005ADF35;//关键跳转005ADE8F|.6A 40PUSH40005ADE91|.B8 0CE05A00MOV EAX, utcc.005AE00C ;ASCII "Registration"005ADE96|.E8 C5EB0000CALLutcc.005BCA60005ADE9B|.50 PUSHEAX005ADE9C|.B8 5CE05A00MOV EAX, utcc.005AE05C ;ASCII "Thank you for your registration!"005ADEA1|.E8 BAEB0000CALLutcc.005BCA60005ADEA6|.50 PUSHEAX005ADEA7|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADEA9|.E8 16D7EBFFCALLutcc.0046B5C4005ADEAE|.50 PUSHEAX; |hOwner005ADEAF|.E8 38ACE5FFCALL<JMP.&user32.MessageBoxA>; \MessageBoxA005ADEB4|.A1 78F45C00MOV EAX, DWORD PTR DS:[5CF478]005ADEB9|.8B00 MOV EAX, DWORD PTR DS:[EAX]005ADEBB|.E8 906B0100CALLutcc.005C4A50005ADEC0|.8D55 CCLEA EDX, DWORD PTR SS:[EBP-34]005ADEC3|.B8 88E05A00MOV EAX, utcc.005AE088 ;ASCII "Registered by"005ADEC8|.E8 6FDFF7FFCALLutcc.0052BE3C005ADECD|.FF75 CCPUSHDWORD PTR SS:[EBP-34]005ADED0|.68 9CE05A00PUSHutcc.005AE09C005ADED5|.8D45 C8LEA EAX, DWORD PTR SS:[EBP-38]005ADED8|.8B15 44F15C00MOV EDX, DWORD PTR DS:[5CF144]005ADEDE|.E8 7581E5FFCALLutcc.00406058005ADEE3|.FF75 C8PUSHDWORD PTR SS:[EBP-38]005ADEE6|.8D45 D0LEA EAX, DWORD PTR SS:[EBP-30]005ADEE9|.BA 03000000MOV EDX, 3005ADEEE|.E8 F181E5FFCALLutcc.004060E4005ADEF3|.8B55 D0MOV EDX, DWORD PTR SS:[EBP-30]005ADEF6|.8D45 D4LEA EAX, DWORD PTR SS:[EBP-2C]005ADEF9|.E8 4A7AE5FFCALLutcc.00405948005ADEFE|.8B55 D4MOV EDX, DWORD PTR SS:[EBP-2C]005ADF01|.8B86 6C030000MOV EAX, DWORD PTR DS:[ESI+36C]005ADF07|.E8 4C56EBFFCALLutcc.00463558005ADF0C|.A1 3CF15C00MOV EAX, DWORD PTR DS:[5CF13C]005ADF11|.8B80 7C030000MOV EAX, DWORD PTR DS:[EAX+37C]005ADF17|.33D2 XOR EDX, EDX005ADF19|.E8 2A55EBFFCALLutcc.00463448005ADF1E|.A1 3CF15C00MOV EAX, DWORD PTR DS:[5CF13C]005ADF23|.8B80 78030000MOV EAX, DWORD PTR DS:[EAX+378]005ADF29|.C780 5C020000 01>MOV DWORD PTR DS:[EAX+25C], 1005ADF33|.EB 47JMP SHORT utcc.005ADF7C005ADF35|>6A 30PUSH30005ADF37|.B8 0CE05A00MOV EAX, utcc.005AE00C ;ASCII "Registration"005ADF3C|.E8 1FEB0000CALLutcc.005BCA60005ADF41|.50 PUSHEAX005ADF42|.B8 A8E05A00MOV EAX, utcc.005AE0A8 ;ASCII "Key is not valid !"005ADF47|.E8 14EB0000CALLutcc.005BCA60005ADF4C|.50 PUSHEAX005ADF4D|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADF4F|.E8 70D6EBFFCALLutcc.0046B5C4005ADF54|.50 PUSHEAX; |hOwner005ADF55|.E8 92ABE5FFCALL<JMP.&user32.MessageBoxA>; \MessageBoxA005ADF5A|.8B03 MOV EAX, DWORD PTR DS:[EBX]005ADF5C|.E8 1B68E5FFCALLutcc.0040477C005ADF61|.A1 3CF15C00MOV EAX, DWORD PTR DS:[5CF13C]005ADF66|.C780 94020000 02>MOV DWORD PTR DS:[EAX+294], 2005ADF70|.A1 3CF15C00MOV EAX, DWORD PTR DS:[5CF13C]005ADF75|.E8 A211EDFFCALLutcc.0047F11C005ADF7A|.EB 07JMP SHORT utcc.005ADF83005ADF7C|>8B03 MOV EAX, DWORD PTR DS:[EBX]005ADF7E|.E8 F967E5FFCALLutcc.0040477C005ADF83|>33C0 XOR EAX, EAX005ADF85|.5A POP EDX005ADF86|.59 POP ECX005ADF87|.59 POP ECX005ADF88|.64:8910MOV DWORD PTR FS:[EAX], EDX005ADF8B|.68 FDDF5A00PUSHutcc.005ADFFD005ADF90|>8D45 C8LEA EAX, DWORD PTR SS:[EBP-38]005ADF93|.BA 03000000MOV EDX, 3005ADF98|.E8 437FE5FFCALLutcc.00405EE0005ADF9D|.8D45 D4LEA EAX, DWORD PTR SS:[EBP-2C]005ADFA0|.E8 1B77E5FFCALLutcc.004056C0005ADFA5|.8D45 D8LEA EAX, DWORD PTR SS:[EBP-28]005ADFA8|.E8 1377E5FFCALLutcc.004056C0005ADFAD|.8D45 DCLEA EAX, DWORD PTR SS:[EBP-24]005ADFB0|.E8 0B77E5FFCALLutcc.004056C0005ADFB5|.8D45 E0LEA EAX, DWORD PTR SS:[EBP-20]005ADFB8|.E8 0377E5FFCALLutcc.004056C0005ADFBD|.8D45 E4LEA EAX, DWORD PTR SS:[EBP-1C]005ADFC0|.E8 FB76E5FFCALLutcc.004056C0005ADFC5|.8D45 E8LEA EAX, DWORD PTR SS:[EBP-18]005ADFC8|.E8 FB7EE5FFCALLutcc.00405EC8005ADFCD|.8D45 ECLEA EAX, DWORD PTR SS:[EBP-14]005ADFD0|.E8 EB76E5FFCALLutcc.004056C0005ADFD5|.8D45 F0LEA EAX, DWORD PTR SS:[EBP-10]005ADFD8|.E8 EB7EE5FFCALLutcc.00405EC8005ADFDD|.8D45 F4LEA EAX, DWORD PTR SS:[EBP-C]005ADFE0|.E8 DB76E5FFCALLutcc.004056C0005ADFE5|.8D45 F8LEA EAX, DWORD PTR SS:[EBP-8]005ADFE8|.E8 DB7EE5FFCALLutcc.00405EC8005ADFED|.8D45 FCLEA EAX, DWORD PTR SS:[EBP-4]005ADFF0|.E8 CB76E5FFCALLutcc.004056C0005ADFF5\.C3 RETN005ADFF6 .^ E9 5D6FE5FFJMP utcc.00404F58005ADFFB .^ EB 93JMP SHORT utcc.005ADF90005ADFFD .5E POP ESI005ADFFE .5B POP EBX005ADFFF .8BE5 MOV ESP, EBP005AE001 .5D POP EBP005AE002 .C3 RETN==============================================================005C47D8/$55 PUSHEBP005C47D9|.8BEC MOV EBP, ESP005C47DB|.51 PUSHECX005C47DC|.B9 07000000MOV ECX, 7005C47E1|>6A 00/PUSH0005C47E3|.6A 00|PUSH0005C47E5|.49 |DEC ECX005C47E6|.^ 75 F9\JNZ SHORT utcc.005C47E1005C47E8|.51 PUSHECX005C47E9|.874D FCXCHGDWORD PTR SS:[EBP-4], ECX005C47EC|.53 PUSHEBX005C47ED|.56 PUSHESI005C47EE|.894D F8MOV DWORD PTR SS:[EBP-8], ECX005C47F1|.8955 FCMOV DWORD PTR SS:[EBP-4], EDX005C47F4|.8B45 FCMOV EAX, DWORD PTR SS:[EBP-4];//试练码005C47F7|.E8 4413E4FFCALLutcc.00405B40005C47FC|.8B45 F8MOV EAX, DWORD PTR SS:[EBP-8];//用户名005C47FF|.E8 3C13E4FFCALLutcc.00405B40005C4804|.33C0 XOR EAX, EAX005C4806|.55 PUSHEBP005C4807|.68 E5495C00PUSHutcc.005C49E5005C480C|.64:FF30PUSHDWORD PTR FS:[EAX]005C480F|.64:8920MOV DWORD PTR FS:[EAX], ESP005C4812|.33DB XOR EBX, EBX005C4814|.8D45 E8LEA EAX, DWORD PTR SS:[EBP-18]005C4817|.8B55 FCMOV EDX, DWORD PTR SS:[EBP-4]005C481A|.E8 390FE4FFCALLutcc.00405758005C481F|.A1 3CF75C00MOV EAX, DWORD PTR DS:[5CF73C]005C4824|.8B55 FCMOV EDX, DWORD PTR SS:[EBP-4];//试练码005C4827|.E8 E80EE4FFCALLutcc.00405714005C482C|.A1 F0F85C00MOV EAX, DWORD PTR DS:[5CF8F0]005C4831|.8B55 F8MOV EDX, DWORD PTR SS:[EBP-8];//用户名005C4834|.E8 DB0EE4FFCALLutcc.00405714005C4839|.8B55 E8MOV EDX, DWORD PTR SS:[EBP-18] ;//试练码005C483C|.8BC2 MOV EAX, EDX005C483E|.85C0 TESTEAX, EAX005C4840|.74 05JESHORT utcc.005C4847005C4842|.83E8 04SUB EAX, 4005C4845|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C4847|>83F8 0BCMP EAX, 0B005C484A|.0F8E F7000000JLE utcc.005C4947;//注册码长度大于0Bh005C4850|.8BC2 MOV EAX, EDX005C4852|.85C0 TESTEAX, EAX005C4854|.74 05JESHORT utcc.005C485B005C4856|.83E8 04SUB EAX, 4005C4859|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C485B|>83F8 0ECMP EAX, 0E005C485E|.0F8F E3000000JGutcc.005C4947;//注册码长度小于等于0Eh005C4864|.8D45 F4LEA EAX, DWORD PTR SS:[EBP-C]005C4867|.50 PUSHEAX005C4868|.B9 06000000MOV ECX, 6005C486D|.BA 01000000MOV EDX, 1005C4872|.8B45 FCMOV EAX, DWORD PTR SS:[EBP-4];//试练码005C4875|.E8 3E13E4FFCALLutcc.00405BB8005C487A|.8B15 F0F85C00MOV EDX, DWORD PTR DS:[5CF8F0] ;utcc.005CF144005C4880|.8B12 MOV EDX, DWORD PTR DS:[EDX]005C4882|.8D45 D0LEA EAX, DWORD PTR SS:[EBP-30]005C4885|.B9 FC495C00MOV ECX, utcc.005C49FC ;ASCII "User Time Administrator"005C488A|.E8 4911E4FFCALLutcc.004059D8;//用户名与"User Time Administrator"相连005C488F|.8B45 D0MOV EAX, DWORD PTR SS:[EBP-30] ;//相连字符串005C4892|.8D55 D4LEA EDX, DWORD PTR SS:[EBP-2C]005C4895|.E8 9A2BFBFFCALLutcc.00577434;//MD5初始化005C489A|.8D45 D4LEA EAX, DWORD PTR SS:[EBP-2C]005C489D|.8D55 E4LEA EDX, DWORD PTR SS:[EBP-1C]005C48A0|.E8 1B2BFBFFCALLutcc.005773C0;//MD5运算005C48A5|.8B45 E4MOV EAX, DWORD PTR SS:[EBP-1C] ;//相连字符串MD5值大写005C48A8|.8D55 F0LEA EDX, DWORD PTR SS:[EBP-10]005C48AB|.E8 A858E4FFCALLutcc.0040A158005C48B0|.8D45 ECLEA EAX, DWORD PTR SS:[EBP-14]005C48B3|.E8 080EE4FFCALLutcc.004056C0005C48B8|.8D45 CCLEA EAX, DWORD PTR SS:[EBP-34]005C48BB|.50 PUSHEAX005C48BC|.B9 02000000MOV ECX, 2005C48C1|.BA 01000000MOV EDX, 1005C48C6|.8B45 FCMOV EAX, DWORD PTR SS:[EBP-4]005C48C9|.E8 EA12E4FFCALLutcc.00405BB8;//取试练码1.2位005C48CE|.8B45 CCMOV EAX, DWORD PTR SS:[EBP-34]005C48D1|.E8 7661E4FFCALLutcc.0040AA4C005C48D6|.8BF0 MOV ESI, EAX005C48D8|.8D45 C8LEA EAX, DWORD PTR SS:[EBP-38]005C48DB|.50 PUSHEAX005C48DC|.B9 02000000MOV ECX, 2005C48E1|.BA 03000000MOV EDX, 3005C48E6|.8B45 FCMOV EAX, DWORD PTR SS:[EBP-4]005C48E9|.E8 CA12E4FFCALLutcc.00405BB8;//取试练码3.4位005C48EE|.8B45 C8MOV EAX, DWORD PTR SS:[EBP-38]005C48F1|.E8 5661E4FFCALLutcc.0040AA4C005C48F6|.03F0 ADD ESI, EAX005C48F8|.8D45 C4LEA EAX, DWORD PTR SS:[EBP-3C]005C48FB|.50 PUSHEAX005C48FC|.B9 02000000MOV ECX, 2005C4901|.BA 05000000MOV EDX, 5005C4906|.8B45 FCMOV EAX, DWORD PTR SS:[EBP-4]005C4909|.E8 AA12E4FFCALLutcc.00405BB8;//取试练码5.6位005C490E|.8B45 C4MOV EAX, DWORD PTR SS:[EBP-3C]005C4911|.E8 3661E4FFCALLutcc.0040AA4C005C4916|.03F0 ADD ESI, EAX ;//取左边6位,每2个一组累加005C4918|.8B5D FCMOV EBX, DWORD PTR SS:[EBP-4]005C491B|.85DB TESTEBX, EBX005C491D|.74 05JESHORT utcc.005C4924005C491F|.83EB 04SUB EBX, 4005C4922|.8B1B MOV EBX, DWORD PTR DS:[EBX];//试练码长度005C4924|>8D45 C0LEA EAX, DWORD PTR SS:[EBP-40]005C4927|.50 PUSHEAX005C4928|.8BD3 MOV EDX, EBX ;//试练码长度005C492A|.4A DEC EDX;//EDX=EDX-1005C492B|.B9 02000000MOV ECX, 2005C4930|.8B45 FCMOV EAX, DWORD PTR SS:[EBP-4]005C4933|.E8 8012E4FFCALLutcc.00405BB8;//取试练码右边2位005C4938|.8B45 C0MOV EAX, DWORD PTR SS:[EBP-40]005C493B|.E8 0C61E4FFCALLutcc.0040AA4C005C4940|.3BF0 CMP ESI, EAX ;//累加值与右边2位的值比较005C4942|.0F94C0 SETEAL005C4945|.8BD8 MOV EBX, EAX005C4947|>84DB TESTBL, BL005C4949|.74 72JESHORT utcc.005C49BD005C494B|.A1 70F95C00MOV EAX, DWORD PTR DS:[5CF970]005C4950|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C4952|.8B4D F4MOV ECX, DWORD PTR SS:[EBP-C]005C4955|.BA 1C4A5C00MOV EDX, utcc.005C4A1C ;ASCII "KY"005C495A|.E8 799CECFFCALLutcc.0048E5D8005C495F|.A1 70F95C00MOV EAX, DWORD PTR DS:[5CF970]005C4964|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C4966|.8B4D FCMOV ECX, DWORD PTR SS:[EBP-4]005C4969|.BA 284A5C00MOV EDX, utcc.005C4A28 ;ASCII "UK"005C496E|.E8 659CECFFCALLutcc.0048E5D8005C4973|.A1 70F95C00MOV EAX, DWORD PTR DS:[5CF970]005C4978|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C497A|.8B4D F8MOV ECX, DWORD PTR SS:[EBP-8]005C497D|.BA 344A5C00MOV EDX, utcc.005C4A34 ;ASCII "UN"005C4982|.E8 519CECFFCALLutcc.0048E5D8005C4987|.A1 70F95C00MOV EAX, DWORD PTR DS:[5CF970]005C498C|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C498E|.8B4D F0MOV ECX, DWORD PTR SS:[EBP-10]005C4991|.BA 404A5C00MOV EDX, utcc.005C4A40 ;ASCII "ES"005C4996|.E8 3D9CECFFCALLutcc.0048E5D8005C499B|.A1 70F95C00MOV EAX, DWORD PTR DS:[5CF970]005C49A0|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C49A2|.8B4D ECMOV ECX, DWORD PTR SS:[EBP-14]005C49A5|.BA 4C4A5C00MOV EDX, utcc.005C4A4C ;ASCII "DS"005C49AA|.E8 299CECFFCALLutcc.0048E5D8005C49AF|.A1 70F95C00MOV EAX, DWORD PTR DS:[5CF970]005C49B4|.8B00 MOV EAX, DWORD PTR DS:[EAX]005C49B6|.B2 01MOV DL, 1005C49B8|.E8 239BECFFCALLutcc.0048E4E0005C49BD|>33C0 XOR EAX, EAX005C49BF|.5A POP EDX005C49C0|.59 POP ECX005C49C1|.59 POP ECX005C49C2|.64:8910MOV DWORD PTR FS:[EAX], EDX005C49C5|.68 EC495C00PUSHutcc.005C49EC005C49CA|>8D45 C0LEA EAX, DWORD PTR SS:[EBP-40]005C49CD|.BA 05000000MOV EDX, 5005C49D2|.E8 0D0DE4FFCALLutcc.004056E4005C49D7|.8D45 E4LEA EAX, DWORD PTR SS:[EBP-1C]005C49DA|.BA 07000000MOV EDX, 7005C49DF|.E8 000DE4FFCALLutcc.004056E4005C49E4\.C3 RETN005C49E5 .^ E9 6E05E4FFJMP utcc.00404F58005C49EA .^ EB DEJMP SHORT utcc.005C49CA005C49EC .8BC3 MOV EAX, EBX005C49EE .5E POP ESI005C49EF .5B POP EBX005C49F0 .8BE5 MOV ESP, EBP005C49F2 .5D POP EBP005C49F3 .C3 RETN

**************************************************************
【破解总结】
--------------------------------------------------------------
【算法总结】
1.注册码和用户名无关
2.注册码长度为12或13或14位
3.注册码左边6位每2个一组累加值必须等于右边2位的值
--------------------------------------------------------------
【算法注册机】
(略)
--------------------------------------------------------------
【注册信息】
一组可用的注册码
用户名：(任意)
注册码：222222666666
--------------------------------------------------------------
感谢飘云老大、猫老大、Nisy老大以及很多前辈们的学习教程以及所有帮助过我的论坛兄弟姐妹们！谢谢
--------------------------------------------------------------
【版权声明】破文是学习的手记，兴趣是成功的源泉；本破文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!

uzcool

看的晕呼呼的。。。算法不懂汗死。。。

下雪天

很不错了,有时间好好分析下 [s:40][s:40][s:40]

guishouce

看了一下 学到了很多 谢谢

awen6688

很不错了,看了一下 学到了很多 谢谢.