邪恶八进制信息安全团队技术讨论组's Archiver

pub!1c 2006-2-5 13:09

[转载]简单找到英语阅览专家 2.9的注册码

<P>文章作者: hbqjxhw</P>
<P><FONT face=宋体>【破解工具】Peid0.93、OllyDbg<BR>【破解平台】WindowsXPSP2<BR>【软件名称】英语阅览专家2.9<BR>【软件大小】8526KB<BR>【原版下载】[url]http://www.ferha.com/soft/enhelp/download.htm[/url]<BR>【保护方式】SN<BR>【软件简介】只要您有一点英语基础,《英语阅览专家》都能帮助您顺利阅读理解英语新闻、英文小说、英文参考资料。如果您是英语初学者,使用本软件通过大量的兴趣阅读,积累单词、培养英语感觉,迅速提高英语阅读水平。如果专业人士,使用本软件阅读英语参考资料更是如鱼得水,畅快无比。无论工作、学习、休闲,《英语阅览专家》都是您通往英语世界的好帮手。<BR>通常,在阅读英语文章的时候,根据各人水平的不同,或多或少都会有生词。虽然您可以一边查《金山词霸》一边看,但这却破坏了阅读的连惯性。如果出现多个生词的时候,查了后面的,忘记了前面的,严重的影响了阅读的心情。《英语阅览专家》就为这种情况提供了完美的解决方案。<BR>  有以下特点:<BR> 顺利阅读理解英语文章<BR>即时了解您的单词量<BR>内置一流的英语词典<BR>方便的英语文章记录工具<BR>英语学习好伙伴<BR>英语翻译好帮手<BR>------------------------------------------------------------------------<BR>【破解过程】1.Peid0.93查壳,无壳,<BorlandDelphi6.0-7.0><BR>2.运行,根据机器码输入注册码,有错误提示.<BR>3.OllyDbg载入,来到:<BR><BR>0064E9DC>$55PUSHEBP<BR>0064E9DD.8BECMOVEBP,ESP<BR>0064E9DF.83C4F0ADDESP,-10<BR>0064E9E2.53PUSHEBX<BR>0064E9E3.B8CCE36400MOVEAX,EnHelp.0064E3CC<BR>0064E9E8.E8578CDBFFCALLEnHelp.00407644<BR><BR>右键-->Ultra字符串参考-->查找ASCII-->Ctrl+F-->输入"注册码不正确,请重新输入"-->双击来到:0064A3B0处!<BR><BR>0064A338/.55PUSHEBP<BR>0064A339|.8BECMOVEBP,ESP<BR>0064A33B|.6A00PUSH0<BR>0064A33D|.6A00PUSH0<BR>0064A33F|.6A00PUSH0<BR>0064A341|.53PUSHEBX<BR>0064A342|.8BD8MOVEBX,EAX<BR>0064A344|.33C0XOREAX,EAX<BR>0064A346|.55PUSHEBP<BR>0064A347|.68D5A36400PUSHEnHelp.0064A3D5<BR>0064A34C|.64:FF30PUSHDWORDPTRFS:[EAX]<BR>0064A34F|.64:8920MOVDWORDPTRFS:[EAX],ESP<BR>0064A352|.8D45F4LEAEAX,DWORDPTRSS:[EBP-C]<BR>0064A355|.E8B6F3FFFFCALLEnHelp.00649710;计算机器码<BR>0064A35A|.8B55F4MOVEDX,DWORDPTRSS:[EBP-C];把上面计算出的机器码给EDX<BR>0064A35D|.8D4DFCLEAECX,DWORDPTRSS:[EBP-4]<BR>0064A360|.B8ECA36400MOVEAX,EnHelp.0064A3EC;moc.ahraf.www<BR>0064A365|.E88AF5FFFFCALLEnHelp.006498F4<BR>0064A36A|.8D55F8LEAEDX,DWORDPTRSS:[EBP-8]<BR>0064A36D|.8B8314030000MOVEAX,DWORDPTRDS:[EBX+314]<BR>0064A373|.E81435E2FFCALLEnHelp.0046D88C<BR>0064A378|.8B45FCMOVEAX,DWORDPTRSS:[EBP-4];真码给EAX<BR>0064A37B|.8B55F8MOVEDX,DWORDPTRSS:[EBP-8];假码给EDX<BR>0064A37E|.E8E1AFDBFFCALLEnHelp.00405364;注册码比较CALL<BR>0064A383|.752BJNZSHORTEnHelp.0064A3B0<BR>0064A385|.A1247B6500MOVEAX,DWORDPTRDS:[657B24]<BR>0064A38A|.C60001MOVBYTEPTRDS:[EAX],1<BR>0064A38D|.A1207D6500MOVEAX,DWORDPTRDS:[657D20]<BR>0064A392|.8B00MOVEAX,DWORDPTRDS:[EAX]<BR>0064A394|.8B4058MOVEAX,DWORDPTRDS:[EAX+58]<BR>0064A397|.8B4DFCMOVECX,DWORDPTRSS:[EBP-4]<BR>0064A39A|.BA04A46400MOVEDX,EnHelp.0064A404;registercode<BR>0064A39F|.E83CF8FFFFCALLEnHelp.00649BE0把注册码写入EnData.mdb中<BR>0064A3A4|.B81CA46400MOVEAX,EnHelp.0064A41C;感谢你的注册,现在你可以使用本软件的所有功能<BR>0064A3A9|.E8AE3FDFFFCALLEnHelp.0043E35C<BR>0064A3AE|.EB0AJMPSHORTEnHelp.0064A3BA<BR>0064A3B0|>B854A46400MOVEAX,EnHelp.0064A454;注册码不正确,请重新输入<BR>0064A3B5|.E8A23FDFFFCALLEnHelp.0043E35C<BR>0064A3BA|>33C0XOREAX,EAX<BR>0064A3BC|.5APOPEDX<BR>0064A3BD|.59POPECX<BR>0064A3BE|.59POPECX<BR>0064A3BF|.64:8910MOVDWORDPTRFS:[EAX],EDX<BR>0064A3C2|.68DCA36400PUSHEnHelp.0064A3DC<BR>0064A3C7|>8D45F4LEAEAX,DWORDPTRSS:[EBP-C]<BR>0064A3CA|.BA03000000MOVEDX,3<BR>0064A3CF|.E898ABDBFFCALLEnHelp.00404F6C<BR>0064A3D4\.C3RETN<BR><BR><BR>-------------------CALLEnHelp.00649710--------------------------<BR>00649710$55PUSHEBP标准MD5计算<BR>00649711.8BECMOVEBP,ESP<BR>00649713.50PUSHEAX<BR>00649714.B810000000MOVEAX,10<BR>00649719>81C404F0FFFFADDESP,-0FFC<BR>0064971F.50PUSHEAX<BR>00649720.48DECEAX<BR>00649721.^75F6JNZSHORTEnHelp.00649719<BR>00649723.8B45FCMOVEAX,DWORDPTRSS:[EBP-4]<BR>00649726.83C4C8ADDESP,-38<BR>00649729.53PUSHEBX<BR>0064972A.56PUSHESI<BR>0064972B.57PUSHEDI<BR>0064972C.33D2XOREDX,EDX<BR>0064972E.8995C4FFFEFFMOVDWORDPTRSS:[EBP+FFFEFFC4],EDX<BR>00649734.8995D8FFFEFFMOVDWORDPTRSS:[EBP+FFFEFFD8],EDX<BR>0064973A.8995D4FFFEFFMOVDWORDPTRSS:[EBP+FFFEFFD4],EDX<BR>00649740.8995D0FFFEFFMOVDWORDPTRSS:[EBP+FFFEFFD0],EDX<BR>00649746.8995CCFFFEFFMOVDWORDPTRSS:[EBP+FFFEFFCC],EDX<BR>0064974C.8995C8FFFEFFMOVDWORDPTRSS:[EBP+FFFEFFC8],EDX<BR>00649752.8955FCMOVDWORDPTRSS:[EBP-4],EDX<BR>00649755.8BF8MOVEDI,EAX<BR>00649757.33C0XOREAX,EAX<BR>00649759.55PUSHEBP<BR>0064975A.68E6986400PUSHEnHelp.006498E6<BR>0064975F.64:FF30PUSHDWORDPTRFS:[EAX]<BR>00649762.64:8920MOVDWORDPTRFS:[EAX],ESP<BR>00649765.8D85FCFFFEFFLEAEAX,DWORDPTRSS:[EBP+FFFEFFFC]<BR>0064976B.83C9FFORECX,FFFFFFFF<BR>0064976E.33D2XOREDX,EDX<BR>00649770.E817FDFFFFCALLEnHelp.0064948C<BR>00649775.84C0TESTAL,AL<BR>00649777.0F8499000000JEEnHelp.00649816<BR>0064977D.8D8DD8FFFEFFLEAECX,DWORDPTRSS:[EBP+FFFEFFD8];取BIOS信息<BR>00649783.8D85FCFFFEFFLEAEAX,DWORDPTRSS:[EBP+FFFEFFFC]<BR>00649789.BAF5FF0F00MOVEDX,0FFFF5<BR>0064978E.E8A9FDFFFFCALLEnHelp.0064953C;第一处<BR>00649793.FFB5D8FFFEFFPUSHDWORDPTRSS:[EBP+FFFEFFD8]<BR>00649799.8D8DD4FFFEFFLEAECX,DWORDPTRSS:[EBP+FFFEFFD4]<BR>0064979F.8D85FCFFFEFFLEAEAX,DWORDPTRSS:[EBP+FFFEFFFC]<BR>006497A5.BA68FA0F00MOVEDX,0FFA68<BR>006497AA.E88DFDFFFFCALLEnHelp.0064953C;第二处<BR>006497AF.FFB5D4FFFEFFPUSHDWORDPTRSS:[EBP+FFFEFFD4]<BR>006497B5.8D8DD0FFFEFFLEAECX,DWORDPTRSS:[EBP+FFFEFFD0]<BR>006497BB.8D85FCFFFEFFLEAEAX,DWORDPTRSS:[EBP+FFFEFFFC]<BR>006497C1.BA61E00F00MOVEDX,0FE061<BR>006497C6.E871FDFFFFCALLEnHelp.0064953C;第三处<BR>006497CB.FFB5D0FFFEFFPUSHDWORDPTRSS:[EBP+FFFEFFD0]<BR>006497D1.8D8DCCFFFEFFLEAECX,DWORDPTRSS:[EBP+FFFEFFCC]<BR>006497D7.8D85FCFFFEFFLEAEAX,DWORDPTRSS:[EBP+FFFEFFFC]<BR>006497DD.BA71EC0F00MOVEDX,0FEC71<BR>006497E2.E855FDFFFFCALLEnHelp.0064953C;第四处<BR>006497E7.FFB5CCFFFEFFPUSHDWORDPTRSS:[EBP+FFFEFFCC]<BR>006497ED.8D8DC8FFFEFFLEAECX,DWORDPTRSS:[EBP+FFFEFFC8]<BR>006497F3.8D85FCFFFEFFLEAEAX,DWORDPTRSS:[EBP+FFFEFFFC]<BR>006497F9.BA91E00F00MOVEDX,0FE091<BR>006497FE.E839FDFFFFCALLEnHelp.0064953C;第五处<BR>00649803.FFB5C8FFFEFFPUSHDWORDPTRSS:[EBP+FFFEFFC8]<BR>00649809.8D45FCLEAEAX,DWORDPTRSS:[EBP-4]<BR>0064980C.BA05000000MOVEDX,5<BR>00649811.E8C2BADBFFCALLEnHelp.004052D8;把上面1+2+3+4+5合并<BR>00649816>33D2XOREDX,EDX<BR>00649818.55PUSHEBP<BR>00649819.68B9986400PUSHEnHelp.006498B9<BR>0064981E.64:FF32PUSHDWORDPTRFS:[EDX]<BR>00649821.64:8922MOVDWORDPTRFS:[EDX],ESP<BR>00649824.33C9XORECX,ECX<BR>00649826.B201MOVDL,1<BR>00649828.A1AC6F6400MOVEAX,DWORDPTRDS:[646FAC]<BR>0064982D.E8FA16DEFFCALLEnHelp.0042AF2C<BR>00649832.8BD8MOVEBX,EAX<BR>00649834.8BC3MOVEAX,EBX<BR>00649836.8B10MOVEDX,DWORDPTRDS:[EAX]<BR>00649838.FF5240CALLDWORDPTRDS:[EDX+40];标准md5的四个常数<BR>0064983B.8B55FCMOVEDX,DWORDPTRSS:[EBP-4];把上面取的主板BIOS信息组合后给EDX,准备计算它的MD5值.<BR>0064983E.8BC3MOVEAX,EBX<BR>00649840.E873A3FFFFCALLEnHelp.00643BB8<BR>00649845.8D95DCFFFEFFLEAEDX,DWORDPTRSS:[EBP+FFFEFFDC]<BR>0064984B.8BC3MOVEAX,EBX<BR>0064984D.8B08MOVECX,DWORDPTRDS:[EAX]<BR>0064984F.FF5144CALLDWORDPTRDS:[ECX+44]<BR>00649852.8BC3MOVEAX,EBX<BR>00649854.8B10MOVEDX,DWORDPTRDS:[EAX]<BR>00649856.FF5238CALLDWORDPTRDS:[EDX+38]<BR>00649859.8BD8MOVEBX,EAX;把常数0X80给EBX<BR>0064985B.8D45FCLEAEAX,DWORDPTRSS:[EBP-4]<BR>0064985E.E8E5B6DBFFCALLEnHelp.00404F48<BR>00649863.8BC3MOVEAX,EBX<BR>00649865.B90A000000MOVECX,0A<BR>0064986A.99CDQ<BR>0064986B.F7F9IDIVECX<BR>0064986D.8BF0MOVESI,EAX<BR>0064986F.4EDECESI<BR>00649870.85F6TESTESI,ESI<BR>00649872.7C2DJLSHORTEnHelp.006498A1<BR>00649874.46INCESI<BR>00649875.8D9DDCFFFEFFLEAEBX,DWORDPTRSS:[EBP+FFFEFFDC]<BR>0064987B>8D8DC4FFFEFFLEAECX,DWORDPTRSS:[EBP+FFFEFFC4]<BR>00649881.33C0XOREAX,EAX<BR>00649883.8A03MOVAL,BYTEPTRDS:[EBX]<BR>00649885.BA01000000MOVEDX,1<BR>0064988A.E8D10ADCFFCALLEnHelp.0040A360<BR>0064988F.8B95C4FFFEFFMOVEDX,DWORDPTRSS:[EBP+FFFEFFC4]<BR>00649895.8D45FCLEAEAX,DWORDPTRSS:[EBP-4]<BR>00649898.E883B9DBFFCALLEnHelp.00405220<BR>0064989D.43INCEBX<BR>0064989E.4EDECESI;取经过MD5后值的循环值为0x80/0xa<BR>0064989F.^75DAJNZSHORTEnHelp.0064987B;上面的计算如果取值小于0xF,则前面的“0”舍去。<BR>006498A1>8BC7MOVEAX,EDI<BR>006498A3.8B55FCMOVEDX,DWORDPTRSS:[EBP-4]<BR>006498A6.E8F1B6DBFFCALLEnHelp.00404F9C<BR>006498AB.33C0XOREAX,EAX<BR>006498AD.5APOPEDX<BR>006498AE.59POPECX<BR>006498AF.59POPECX<BR>006498B0.64:8910MOVDWORDPTRFS:[EAX],EDX<BR>006498B3.68C0986400PUSHEnHelp.006498C0<BR>006498B8>C3RETN<BR><BR><BR><BR>-----------------CALLEnHelp.006498F4-----------------------<BR>006498F4/$55PUSHEBP;标准MD5计算<BR>006498F5|.8BECMOVEBP,ESP<BR>006498F7|.83C4BCADDESP,-44<BR>006498FA|.53PUSHEBX<BR>006498FB|.56PUSHESI<BR>006498FC|.57PUSHEDI<BR>006498FD|.33DBXOREBX,EBX<BR>006498FF|.895DBCMOVDWORDPTRSS:[EBP-44],EBX<BR>00649902|.895DC0MOVDWORDPTRSS:[EBP-40],EBX<BR>00649905|.895DC4MOVDWORDPTRSS:[EBP-3C],EBX<BR>00649908|.895DC8MOVDWORDPTRSS:[EBP-38],EBX<BR>0064990B|.895DF4MOVDWORDPTRSS:[EBP-C],EBX<BR>0064990E|.895DF0MOVDWORDPTRSS:[EBP-10],EBX<BR>00649911|.895DECMOVDWORDPTRSS:[EBP-14],EBX<BR>00649914|.894DF8MOVDWORDPTRSS:[EBP-8],ECX<BR>00649917|.8955FCMOVDWORDPTRSS:[EBP-4],EDX<BR>0064991A|.8B45FCMOVEAX,DWORDPTRSS:[EBP-4];把机器码给EDX,准备计算它的MD5值.<BR>0064991D|.E8E6BADBFFCALLEnHelp.00405408<BR>00649922|.33C0XOREAX,EAX<BR>00649924|.55PUSHEBP<BR>00649925|.68A69A6400PUSHEnHelp.00649AA6<BR>0064992A|.64:FF30PUSHDWORDPTRFS:[EAX]<BR>0064992D|.64:8920MOVDWORDPTRFS:[EAX],ESP<BR>00649930|.33C9XORECX,ECX<BR>00649932|.B201MOVDL,1<BR>00649934|.A1AC6F6400MOVEAX,DWORDPTRDS:[646FAC]<BR>00649939|.E8EE15DEFFCALLEnHelp.0042AF2C<BR>0064993E|.8BF8MOVEDI,EAX<BR>00649940|.8BC7MOVEAX,EDI<BR>00649942|.8B10MOVEDX,DWORDPTRDS:[EAX]<BR>00649944|.FF5240CALLDWORDPTRDS:[EDX+40];标准MD5的四个常数<BR>00649947|.8B55FCMOVEDX,DWORDPTRSS:[EBP-4]<BR>0064994A|.8BC7MOVEAX,EDI<BR>0064994C|.E867A2FFFFCALLEnHelp.00643BB8<BR>00649951|.8D55CCLEAEDX,DWORDPTRSS:[EBP-34]<BR>00649954|.8BC7MOVEAX,EDI<BR>00649956|.8B08MOVECX,DWORDPTRDS:[EAX]<BR>00649958|.FF5144CALLDWORDPTRDS:[ECX+44]<BR>0064995B|.8BC7MOVEAX,EDI<BR>0064995D|.8B10MOVEDX,DWORDPTRDS:[EAX]<BR>0064995F|.FF5238CALLDWORDPTRDS:[EDX+38]<BR>00649962|.8BD8MOVEBX,EAX;把常数0x80给EBX<BR>00649964|.8D45F4LEAEAX,DWORDPTRSS:[EBP-C]<BR>00649967|.E8DCB5DBFFCALLEnHelp.00404F48<BR>0064996C|.8BC3MOVEAX,EBX<BR>0064996E|.B909000000MOVECX,9<BR>00649973|.99CDQ<BR>00649974|.F7F9IDIVECX<BR>00649976|.48DECEAX<BR>00649977|.85C0TESTEAX,EAX<BR>00649979|.7C26JLSHORTEnHelp.006499A1<BR>0064997B|.40INCEAX<BR>0064997C|.89C3MOVEBX,EAX<BR>0064997E|.8D75CCLEAESI,DWORDPTRSS:[EBP-34]<BR>00649981|>8D4DC8/LEAECX,DWORDPTRSS:[EBP-38]<BR>00649984|.33C0|XOREAX,EAX<BR>00649986|.8A06|MOVAL,BYTEPTRDS:[ESI]<BR>00649988|.BA01000000|MOVEDX,1<BR>0064998D|.E8CE09DCFF|CALLEnHelp.0040A360<BR>00649992|.8B55C8|MOVEDX,DWORDPTRSS:[EBP-38]<BR>00649995|.8D45F4|LEAEAX,DWORDPTRSS:[EBP-C]<BR>00649998|.E883B8DBFF|CALLEnHelp.00405220<BR>0064999D|.46|INCESI<BR>0064999E|.4B|DECEBX;取经过MD5后值的循环值为0x80/0x9<BR>0064999F|.^75E0\JNZSHORTEnHelp.00649981;上面的计算如果取值小于0xF,则前面的“0”舍去。<BR>006499A1|>8BC7MOVEAX,EDI<BR>006499A3|.E870A6DBFFCALLEnHelp.00404018<BR>006499A8|.8D45ECLEAEAX,DWORDPTRSS:[EBP-14]<BR>006499AB|.E898B5DBFFCALLEnHelp.00404F48<BR>006499B0|.8D45F0LEAEAX,DWORDPTRSS:[EBP-10]<BR>006499B3|.8B55F4MOVEDX,DWORDPTRSS:[EBP-C]<BR>006499B6|.E825B6DBFFCALLEnHelp.00404FE0<BR>006499BB|.8D55C4LEAEDX,DWORDPTRSS:[EBP-3C]<BR>006499BE|.8B45F0MOVEAX,DWORDPTRSS:[EBP-10]<BR>006499C1|.E8E6FBFFFFCALLEnHelp.006495AC<BR>006499C6|.8B55C4MOVEDX,DWORDPTRSS:[EBP-3C]<BR>006499C9|.8D45F0LEAEAX,DWORDPTRSS:[EBP-10]<BR>006499CC|.E80FB6DBFFCALLEnHelp.00404FE0<BR>006499D1|.8B45F0MOVEAX,DWORDPTRSS:[EBP-10]<BR>006499D4|.E83FB8DBFFCALLEnHelp.00405218<BR>006499D9|.8BD8MOVEBX,EAX<BR>006499DB|.85DBTESTEBX,EBX<BR>006499DD|.7E46JLESHORTEnHelp.00649A25<BR>006499DF|.BE01000000MOVESI,1<BR>006499E4|>8D45C0/LEAEAX,DWORDPTRSS:[EBP-40];用“-”把上面计算的MD5值每四位数分隔,最后不足四位数也可以<BR>006499E7|.50|PUSHEAX<BR>006499E8|.B901000000|MOVECX,1<BR>006499ED|.8BD6|MOVEDX,ESI<BR>006499EF|.8B45F0|MOVEAX,DWORDPTRSS:[EBP-10]<BR>006499F2|.E881BADBFF|CALLEnHelp.00405478<BR>006499F7|.8B55C0|MOVEDX,DWORDPTRSS:[EBP-40]<BR>006499FA|.8D45EC|LEAEAX,DWORDPTRSS:[EBP-14]<BR>006499FD|.E81EB8DBFF|CALLEnHelp.00405220<BR>00649A02|.8BC6|MOVEAX,ESI<BR>00649A04|.2503000080|ANDEAX,80000003<BR>00649A09|.7905|JNSSHORTEnHelp.00649A10<BR>00649A0B|.48|DECEAX<BR>00649A0C|.83C8FC|OREAX,FFFFFFFC<BR>00649A0F|.40|INCEAX<BR>00649A10|>85C0|TESTEAX,EAX<BR>00649A12|.750D|JNZSHORTEnHelp.00649A21<BR>00649A14|.8D45EC|LEAEAX,DWORDPTRSS:[EBP-14]<BR>00649A17|.BABC9A6400|MOVEDX,EnHelp.00649ABC;-<BR>00649A1C|.E8FFB7DBFF|CALLEnHelp.00405220<BR>00649A21|>46|INCESI<BR>00649A22|.4B|DECEBX<BR>00649A23|.^75BF\JNZSHORTEnHelp.006499E4<BR>00649A25|>8D45BCLEAEAX,DWORDPTRSS:[EBP-44]<BR>00649A28|.50PUSHEAX<BR>00649A29|.8B45ECMOVEAX,DWORDPTRSS:[EBP-14]<BR>00649A2C|.E8E7B7DBFFCALLEnHelp.00405218<BR>00649A31|.8BD0MOVEDX,EAX<BR>00649A33|.B901000000MOVECX,1<BR>00649A38|.8B45ECMOVEAX,DWORDPTRSS:[EBP-14]<BR>00649A3B|.E838BADBFFCALLEnHelp.00405478<BR>00649A40|.8B45BCMOVEAX,DWORDPTRSS:[EBP-44]<BR>00649A43|.BABC9A6400MOVEDX,EnHelp.00649ABC;-<BR>00649A48|.E817B9DBFFCALLEnHelp.00405364<BR>00649A4D|.751CJNZSHORTEnHelp.00649A6B<BR>00649A4F|.8D45ECLEAEAX,DWORDPTRSS:[EBP-14]<BR>00649A52|.50PUSHEAX<BR>00649A53|.8B45ECMOVEAX,DWORDPTRSS:[EBP-14]<BR>00649A56|.E8BDB7DBFFCALLEnHelp.00405218<BR>00649A5B|.8BC8MOVECX,EAX<BR>00649A5D|.49DECECX<BR>00649A5E|.BA01000000MOVEDX,1<BR>00649A63|.8B45ECMOVEAX,DWORDPTRSS:[EBP-14]<BR>00649A66|.E80DBADBFFCALLEnHelp.00405478<BR>00649A6B|>8B45F8MOVEAX,DWORDPTRSS:[EBP-8]<BR>00649A6E|.8B55ECMOVEDX,DWORDPTRSS:[EBP-14]<BR>00649A71|.E826B5DBFFCALLEnHelp.00404F9C<BR>00649A76|.33C0XOREAX,EAX<BR>00649A78|.5APOPEDX<BR>00649A79|.59POPECX<BR>00649A7A|.59POPECX<BR>00649A7B|.64:8910MOVDWORDPTRFS:[EAX],EDX<BR>00649A7E|.68AD9A6400PUSHEnHelp.00649AAD<BR>00649A83|>8D45BCLEAEAX,DWORDPTRSS:[EBP-44]<BR>00649A86|.BA04000000MOVEDX,4<BR>00649A8B|.E8DCB4DBFFCALLEnHelp.00404F6C<BR>00649A90|.8D45ECLEAEAX,DWORDPTRSS:[EBP-14]<BR>00649A93|.BA03000000MOVEDX,3<BR>00649A98|.E8CFB4DBFFCALLEnHelp.00404F6C<BR>00649A9D|.8D45FCLEAEAX,DWORDPTRSS:[EBP-4]<BR>00649AA0|.E8A3B4DBFFCALLEnHelp.00404F48<BR>00649AA5\.C3RETN<BR><BR><BR>-----------------CALLDWORDPTRDS:[EDX+40]------------------------<BR>006479E8.53PUSHEBX;标准MD5的四个常数<BR>006479E9.8BD8MOVEBX,EAX<BR>006479EB.8BC3MOVEAX,EBX<BR>006479ED.8B10MOVEDX,DWORDPTRDS:[EAX]<BR>006479EF.FF5248CALLDWORDPTRDS:[EDX+48]<BR>006479F2.C7434001234>MOVDWORDPTRDS:[EBX+40],67452301<BR>006479F9.C7434489ABC>MOVDWORDPTRDS:[EBX+44],EFCDAB89<BR>00647A00.C74348FEDCB>MOVDWORDPTRDS:[EBX+48],98BADCFE<BR>00647A07.C7434C76543>MOVDWORDPTRDS:[EBX+4C],10325476<BR>00647A0E.C6433001MOVBYTEPTRDS:[EBX+30],1<BR>00647A12.5BPOPEBX<BR>00647A13.C3RETN<BR><BR><BR>机器码:BD50904731914DD4E2479497<BR>机器码的MD5值:98066175423c97155177061b56c63983(用MD5工具计算出)<BR>0102030405060708090A0B0C0D0E(0x80/9)<BR>98066175423C97155177061B56C63983--->后面几位崛?<BR>9866175423C9715517761B56C6<BR>机器码的MD5值经过计算后:9866175423C9715517761B56C6<BR>用“-”把上面计算的MD5值每四位数分隔,最后不足四位数也可以:<BR>9866-1754-23C9-7155-1776-1B56-C6<BR>注册码:9866-1754-23C9-7155-1776-1B56-C6<BR><BR><BR>4.运行EnHelp.exe,输入注册码9866-1754-23C9-7155-1776-1B56-C6,OK,注册成功!关闭再运行!<BR>5.打开EnData.mdb中Reg项并册除RegisterCode对应的注册码.重新运行又提示未注册.</FONT><BR><BR></P>

页: [1]
© 1999-2008 EvilOctal Security Team