|
|
|---|---|
|
|
汗，对不起大家
 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
偶用两个号破解了，为的是看自己算的对不对，不好意思啊
一个是xuelang的 一个就是这个了   |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
呵呵呵，试一下
  |
|
|
|
|
|
00407EC6 . FF91 0C070000 call dword ptr ds:[ecx+70C]
00407ECC . 8B4D E8 mov ecx,dword ptr ss:[ebp-18] 00407ECF . 8B55 DC mov edx,dword ptr ss:[ebp-24] 00407ED2 . 51 push ecx 00407ED3 . 52 push edx 00407ED4 . FF15 70104000 call dword ptr ds:[<&MSVBVM60.__vbaStrCm>; MSVBVM60.__vbaStrCmp 00407EDA . 8BF8 mov edi,eax 00407EDC . 8D45 DC lea eax,dword ptr ss:[ebp-24] 00407EDF . F7DF neg edi 00407EE1 . 8D4D E8 lea ecx,dword ptr ss:[ebp-18] 00407EE4 . 50 push eax 00407EE5 . 1BFF sbb edi,edi 00407EE7 . 8D55 E0 lea edx,dword ptr ss:[ebp-20] 00407EEA . 51 push ecx 00407EEB . 47 inc edi 00407EEC . 52 push edx 0012E4A8 0016561C UNICODE "092502A2" 0012E4AC 0016581C UNICODE "111111111111111111" 
|
|
|
 
|
|
|
 unit Unit1; interface uses Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms, Dialogs, StdCtrls; type TForm1 = class(TForm) grp1: TGroupBox; btnReg: TButton; lbl1: TLabel; lbl2: TLabel; usrName: TEdit; regCode: TEdit; lbl3: TLabel; procedure btnRegClick(Sender: TObject); procedure usrNameKeyPress(Sender: TObject; var Key: Char); private { Private declarations } public { Public declarations } end; var Form1: TForm1; implementation function HexToInt(S: string): Integer; begin Result := StrToInt('$' + IntToStr(StrToInt(S))); end; {$R *.dfm} procedure TForm1.btnRegClick(Sender: TObject); var i:Integer; sum:Integer; k:Integer; ByteSum:Integer; ByteSumAcc:Integer; begin ByteSum:=1; if Length(usrName.Text)<5 then begin Application.MessageBox('用户名至少5位数字.', '警告', MB_OK+MB_ICONERROR); Exit; end; for i:=1 to Length(usrName.Text) do begin ByteSum:=ByteSum+HexToInt('3'+copy(usrName.Text,i,1)); ByteSumAcc:=ByteSumAcc+ByteSum; end; regCode.Text:=IntToHex(ByteSumAcc,4)+inttohex(ByteSum,4); end; procedure TForm1.usrNameKeyPress(Sender: TObject; var Key: Char); begin if not (key in ['0'..'9','.',#8]) then begin key:=#0; Messagebeep(0); end; end; end. 注册机: 注册机.rar 
|
|
|
|
|
|
俺也秋凑个热闹,呵呵
算法: 长度为4个的时候,,直接比较,非常简单,算法如下 004061F0 > \FC cld 004061F1 . 8B35 A0974000 mov esi, dword ptr [4097A0] ; 输入的四个字符 004061F7 . A1 90974000 mov eax, dword ptr [409790] ; 值为HEXA 004061FC . 3BF0 cmp esi, eax ; 直接明码比较 004061FE . 0F84 04140000 je 00407608 00406204 . EB 00 jmp short 00406206 字符长度不为4个的时候,只计算前三个字符(不够它自动补0计算),算法处如下: 00403C1F $ 51 push ecx 00403C20 . 52 push edx 00403C21 . 6A 1D push 1D ; /Count = 1D (29.) 00403C23 . 68 A0974000 push 004097A0 ; |Buffer = CrackMe#.004097A0 00403C28 . FF35 B4964000 push dword ptr [4096B4] ; |hWnd = 000503F2 (class='Edit',parent=000603C4) 00403C2E . E8 233A0000 call <jmp.&user32.GetWindowTextA> ; \GetWindowTextA 00403C33 . 83F8 03 cmp eax, 3 00403C36 . 75 00 jnz short 00403C38 00403C38 > 83F8 04 cmp eax, 4 00403C3B . 0F84 AF250000 je 004061F0 ; 检查是否是4个字符,是则跳 00403C41 . 8D35 A0974000 lea esi, dword ptr [4097A0] ; 4097A0放注册码 00403C47 . B3 01 mov bl, 1 00403C49 > 8A06 mov al, byte ptr [esi] ; 依次取三个字符分别处理 00403C4B . 0105 D2974000 add dword ptr [4097D2], eax ; 4097d2存放结果,累加上次的eax值保存 00403C51 . 32C3 xor al, bl ; 当前字符与当前位置序号异或 00403C53 . F6E0 mul al ; 异或结果再平方,结果放eax中 00403C55 . 46 inc esi 00403C56 . FEC3 inc bl 00403C58 . 80FB 04 cmp bl, 4 00403C5B .^ 75 EC jnz short 00403C49 00403C5D . BB F1310000 mov ebx, 31F1 00403C62 . A1 D2974000 mov eax, dword ptr [4097D2] 00403C67 . 3BD8 cmp ebx, eax ; 结果与31F1相比 是则正确 00403C69 . 0F85 81250000 jnz 004061F0 00403C6F . E9 E0130000 jmp 00405054 附C++算法代码:
char a, b, c;
// 输入4个为HEXA,小于3个的,后面它把0补上去按3个计算
// 其它的,则通过如下计算,
// 可见ascii从0x20至0x80
const int min = 0x20, max = 0x80;
for(int i=min; i<=max; i++)
{
for(int j=min;j<=max; j++)
{
for(int k=min; k<=max; k++)
{
unsigned short al = 0;
unsigned long eax = 0, sum = 0;
// 取第一个
al = i;
eax = (eax & 0xFFFFFF00) + al;
sum = sum + eax;
al = al ^ 1; // 与1异或
eax = al * al; // 平方一下
// 取第二个
al = j;
eax = (eax & 0xFFFFFF00) + al; // 上次的eax低字节清0,再加上这次的字符
sum = sum + eax; // 累计eax
al = al ^ 2; // 与2异或
eax = al * al; // 平方一下
// 取第三个,同上
al = k;
eax = (eax & 0xFFFFFF00) + al;
sum = sum + eax;
//结果与0x31f0比较,上收正确
if(sum == 0x31f1)
{
cout<<"OK-"<<(char)i<<(char)j<<(char)k<<endl;
}
}
}
}
 |
|
|
 下载源码: 注册机.rar  delphi7.0 调试 unit Unit1; interface uses Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms, Dialogs, StdCtrls; type TForm1 = class(TForm) grp1: TGroupBox; btnReg: TButton; lbl1: TLabel; lbl2: TLabel; usrName: TEdit; regCode: TEdit; lbl3: TLabel; procedure btnRegClick(Sender: TObject); procedure usrNameKeyPress(Sender: TObject; var Key: Char); private { Private declarations } function stringtohex(str:string):string;//字符串转十六进制内码 function hextostring(str:string):string; //十六进制内码转字符串 function hextoint(hex:string):integer;// 十六进制字符转整数 public { Public declarations } end; var Form1: TForm1; implementation {$R *.dfm} procedure TForm1.btnRegClick(Sender: TObject); var i:Integer; sum:Integer; k:Integer; ByteSum:Integer; ByteSumAcc:Integer; start:Integer; begin ByteSum:=1; ByteSumAcc:=0; start:=1; if Length(usrName.Text)<5 then begin Application.MessageBox('用户名至少5位.', '警告', MB_OK+MB_ICONERROR); Exit; end; for i:=1 to (Length(stringtohex(usrName.Text)) div 2) do begin ByteSum:=ByteSum+HexToInt(copy(stringtohex(usrName.Text),start,2)); ByteSumAcc:=ByteSumAcc+ByteSum; start:=start+2; end; regCode.Text:=IntToHex(ByteSumAcc,4)+inttohex(ByteSum,4); end; procedure TForm1.usrNameKeyPress(Sender: TObject; var Key: Char); begin {if not (key in ['0'..'9','.',#8]) then begin key:=#0; Messagebeep(0); end; } end; function TForm1.stringtohex(str: string): string; var i:integer; s:string; begin s:=''; for i:=1 to length(str) do begin s:=s+inttohex(Integer(str[i]),2); end; result:=s; end; function TForm1.hextostring(str: string): string; var s,t:string; i,j:integer; p:pchar; begin s:=''; i:=1; while i< length(str) do begin t:=str[i]+str[i+1]; s:=s+chr(hextoint(t)); i:=i+2; end; result:=s; end; function TForm1.hextoint(hex: string): integer; Var i: integer; Function Ncf(num, f: integer): integer; Var i: integer; Begin result := 1; If f = 0 Then exit; For i := 1 To f Do result := result * num; End; Function HexCharToInt(HexToken: char): Integer; Begin If HexToken > #97 Then HexToken := Chr(Ord(HexToken) - 32); { use lowercase aswell } Result := 0; If (HexToken > #47) And (HexToken < #58) Then { chars 0....9 } Result := Ord(HexToken) - 48 Else If (HexToken > #64) And (HexToken < #71) Then { chars A....F } Result := Ord(HexToken) - 65 + 10; End; Begin result := 0; hex := ansiuppercase(trim(hex)); If hex = '' Then exit; For i := 1 To length(hex) Do result := result + HexCharToInt(hex[i]) * ncf(16, length(hex) - i); end; end. |
|
|
|
|
|
谢,老大鼓励,很有成就感,呵呵
|
|
|
|
|
|
|
|
|
|
