心灵感应 V1.1 算法分析 -pc6资讯

您的位置：首页 → 精文荟萃 → 破解文章 → 心灵感应 V1.1 算法分析

心灵感应 V1.1 算法分析 时间：2004/10/15 0:57:00来源：本站整理作者：蓝点我要评论(0): 　
软件大小： 190 KB
软件语言：简体中文
软件类别：国产软件 / 共享版 / 趣味软件
应用平台： Win9x/NT/2000/XP
加入时间： 2003-03-18 09:42:02
联系人： hanzhiyan@163.net
开发商： http://www.shiji.net/
下载页面: http://www.skycn.com/soft/11340.html
破解工具： EXDEC,FI
破解人：云枫[OCN]
软件介绍：
心灵感应小游戏，它可以猜出你心里想的什么。
在网上转了一圈，来到天空下载站，发现这个软件蛮有意思的，就下载了下来，玩了两遍，居然不能玩了，要注册。怎么办？破了它。首先用FI检测一下，还好无壳，一看傻了发觉这是VB，而且是用P-CODE方式编译的。不管它了，用EXDEC载入看一看，下面就是它的主要内容和算法：
Proc: 5da928

5DA774: 1b LitStr: c:\
5DA777: 43 FStStrCopy local_0090
5DA77A: 04 FLdRfVar local_0090
5DA77D: 0b ImpAdCallI2 5da0f4
5DA782: 71 FStR4 local_0094
5DA785: 04 FLdRfVar local_008C
5DA788: 05 ImpAdLdRf: 5dc03c
5DA78B: 24 NewIfNullPr 494dd0 (Form2)
5DA78E: 0f VCallAd text
5DA791: 19 FStAdFunc local_0088
5DA794: 08 FLdPr local_0088
5DA797: 0d VCallHresult get__ipropTEXTEDIT 〈-------这里取机器码
5DA79C: 6c ILdRf local_008C
5DA79F: 0a ImpAdCallFPR4:
5DA7A4: ed CR8R8
5DA7A5: 6c ILdRf local_0094
5DA7A8: ec CR8I4
5DA7A9: f5 LitI4: 0xacbd 44221 (....)
5DA7AE: ec CR8I4 <--------先将机器码除以44221并取整
5DA7AF: b6 DivR8
5DA7B0: f5 LitI4: 0x68660 427616 (...)
5DA7B5: ec CR8I4
5DA7B6: ab AddR8 <------然后再加上427616，结果得到的数字就是注册码
5DA7B7: Lead0/e6 FnIntR8
5DA7B9: ed CR8R8
5DA7BA: c8 EqR4 　　　　　　<---------判断注册码真假
5DA7BB: 32 FFreeStr
5DA7C2: 1a FFree1Ad local_0088
5DA7C5: 1c BranchF: 5DA8D1　　<--------一跳就完蛋了
5DA7C8: 04 FLdRfVar local_008C
5DA7CB: 21 FLdPrThis
5DA7CC: 0f VCallAd (object 4 )
5DA7CF: 19 FStAdFunc local_0088
5DA7D2: 08 FLdPr local_0088
5DA7D5: 0d VCallHresult 禚d
5DA7DA: 04 FLdRfVar local_0090
5DA7DD: 21 FLdPrThis
5DA7DE: 0f VCallAd (object 4 )
5DA7E1: 19 FStAdFunc local_0098
5DA7E4: 08 FLdPr local_0098
5DA7E7: 0d VCallHresult 禚d
5DA7EC: 6c ILdRf local_0090
5DA7EF: Lead0/ee FnLenBStr
5DA7F1: 59 PopTmpLdAdStr local_00AC
5DA7F4: 3e FLdZeroAd local_008C
5DA7F7: Lead2/59 PopTmpLdAdStr local_00A8
5DA7FB: f5 LitI4: 0x1 1 (....)
5DA800: 59 PopTmpLdAdStr local_00A4
5DA803: 1b LitStr: password
5DA806: 43 FStStrCopy local_00A0
5DA809: 04 FLdRfVar local_00A0
5DA80C: 1b LitStr: software\wally
5DA80F: 43 FStStrCopy local_009C
5DA812: 04 FLdRfVar local_009C
5DA815: f5 LitI4: 0x80000002 -2147483646 (....)
5DA81A: 59 PopTmpLdAdStr local_0094
5DA81D: 0a ImpAdCallFPR4: 5da564
5DA822: 32 FFreeStr
5DA82D: 29 FFreeAd:
5DA834: f5 LitI4: 0x2 2 (....)
5DA839: 59 PopTmpLdAdStr local_00AC
5DA83C: 1b LitStr: 11
5DA83F: 43 FStStrCopy local_009C
5DA842: 04 FLdRfVar local_009C
5DA845: f5 LitI4: 0x1 1 (....)
5DA84A: 59 PopTmpLdAdStr local_00A4
5DA84D: 1b LitStr: timest
5DA850: 43 FStStrCopy local_0090
5DA853: 04 FLdRfVar local_0090
5DA856: 1b LitStr: system\CurrentControlSet\Control\timest
5DA859: 43 FStStrCopy local_008C
5DA85C: 04 FLdRfVar local_008C
5DA85F: f5 LitI4: 0x80000002 -2147483646 (....)
5DA864: 59 PopTmpLdAdStr local_0094
5DA867: 0a ImpAdCallFPR4: 5da564
5DA86C: 32 FFreeStr
5DA875: 27 LitVar_Missing
5DA878: 27 LitVar_Missing
5DA87B: 3a LitVarStr: ( local_00DC )
5DA880: 4e FStVarCopyObj local_00EC
5DA883: 04 FLdRfVar local_00EC
5DA886: f5 LitI4: 0x40 64 (...@)
5DA88B: 3a LitVarStr: ( local_00BC )
5DA890: 4e FStVarCopyObj local_00CC
5DA893: 04 FLdRfVar local_00CC
5DA896: 0a ImpAdCallFPR4:
5DA89B: 36 FFreeVar
5DA8A6: 27 LitVar_Missing
5DA8A9: 25 PopAdLdVar
5DA8AA: 27 LitVar_Missing
5DA8AD: 25 PopAdLdVar
5DA8AE: 05 ImpAdLdRf: 5dc008
5DA8B1: 24 NewIfNullPr 49488c (Form1)
5DA8B4: 0d VCallHresult meth__imethSHOW
5DA8B9: 6c ILdRf local_param_0008
5DA8BC: Lead2/9c FStAdNoPop
5DA8C0: 05 ImpAdLdRf: 5dc3fc
5DA8C3: 24 NewIfNullPr 495838
5DA8C6: 0d VCallHresult CVBApplication::Unload
5DA8CB: 1a FFree1Ad local_0088
5DA8CE: 1e Branch: 5da925
5DA8D1: 27 LitVar_Missing
5DA8D4: 27 LitVar_Missing
5DA8D7: 3a LitVarStr: ( local_00BC )
5DA8DC: 4e FStVarCopyObj local_00EC
5DA8DF: 04 FLdRfVar local_00EC
5DA8E2: f5 LitI4: 0x40 64 (...@)
5DA8E7: 1b LitStr:
5DA8EA: 1b LitStr:
5DA8ED: 2a ConcatStr
5DA8EE: 23 FStStrNoPop local_008C
5DA8F1: 1b LitStr: hanzhiyan@163.net
5DA8F4: 2a ConcatStr
5DA8F5: 46 CVarStr local_00CC
5DA8F8: 0a ImpAdCallFPR4:
5DA8FD: 2f FFree1Str local_008C
5DA900: 36 FFreeVar
5DA90B: 1b LitStr:
5DA90E: 05 ImpAdLdRf: 5dc03c
5DA911: 24 NewIfNullPr 494dd0 (Form2)
5DA914: 0f VCallAd text
5DA917: 19 FStAdFunc local_0088
5DA91A: 08 FLdPr local_0088
5DA91D: 0d VCallHresult put__ipropTEXTEDIT
5DA922: 1a FFree1Ad local_0088
5DA925: 13 ExitProcHresult

Successfully went through the program!
Now it's up to you to decipher it hehe!

文章评论

查看所有0条评论>>

热门文章 去除winrar注册框方法