|
|
【逆向工具】OllyIce Delphi Peid
【逆向平台】Windows Xp sp2
【软件名称】Farsight Calculator V3.5
【软件大小】
【原版下载】http://www.farsightsoft.com/farsightcalculator.html
【保护方式】
【软件简介】软件简介:
一个易于使用的计算器，可让您储存您的计算过程作为一个程序，并执行算术运算，超过100种的功能，包括代数，三角，双曲，日期，统计，金融等此外farsight计算器包含了一套功能强大的工具，如“财务盒” ， “日期计算” ， “单位转换”等。
【逆向声明】纯属娱乐 ☆
------------------------------------------------------------------------
【逆向过程】Peid查壳,发现无壳,Borland Delphi 6.0 - 7.0の程序.
通过很多种方法可以很快定位到按钮事件.
比如F12暂停法,比如DEDE,比如delphi万能脚本等. 都可以快速定位到按钮事件代码处!
输入の试练码:
Name:Squn
Serial:123456789
0060BB8C . 55 PUSH EBP ; //按钮事件
0060BB8D . 8BEC MOV EBP,ESP
0060BB8F . 6A 00 PUSH 0
0060BB91 . 6A 00 PUSH 0
0060BB93 . 53 PUSH EBX
0060BB94 . 8BD8 MOV EBX,EAX
0060BB96 . 33C0 XOR EAX,EAX
0060BB98 . 55 PUSH EBP
0060BB99 . 68 0CBC6000 PUSH Farsight.0060BC0C
0060BB9E . 64:FF30 PUSH DWORD PTR FS:[EAX]
0060BBA1 . 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060BBA4 . 8D55 FC LEA EDX,DWORD PTR SS:[EBP-4]
0060BBA7 . 8B83 00030000 MOV EAX,DWORD PTR DS:[EBX+300]
0060BBAD . E8 2E7FEBFF CALL Farsight.004C3AE0 ; //取假码 123456789
0060BBB2 . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060BBB5 . 50 PUSH EAX
0060BBB6 . 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
0060BBB9 . 8B83 FC020000 MOV EAX,DWORD PTR DS:[EBX+2FC]
0060BBBF . E8 1C7FEBFF CALL Farsight.004C3AE0 ; //取用户名 Squn
0060BBC4 . 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060BBC7 . 5A POP EDX ;
0060BBC8 . E8 EBEEFFFF CALL Farsight.0060AAB8 ; //关键call F7
0060BBCD . 84C0 TEST AL,AL
0060BBCF . 75 20 JNZ SHORT Farsight.0060BBF1 ; //关键跳转
0060BBD1 . 6A 00 PUSH 0
0060BBD3 . B9 18BC6000 MOV ECX,Farsight.0060BC18
0060BBD8 . BA 1CBC6000 MOV EDX,Farsight.0060BC1C ; ASCII "Invalid Registered User or Key!"
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060BBC8 . E8 EBEEFFFF CALL Farsight.0060AAB8 ; //关键call F7
F7后反汇编代码如下:
0060AAB8 $ 55 PUSH EBP ; //F7来到这里!
0060AAB9 . 8BEC MOV EBP,ESP
0060AABB . 83C4 F0 ADD ESP,-10
0060AABE . 53 PUSH EBX
0060AABF . 56 PUSH ESI
0060AAC0 . 57 PUSH EDI
0060AAC1 . 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060AAC4 . 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060AAC7 . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AACA . E8 59A8DFFF CALL Farsight.00405328
0060AACF . 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060AAD2 . E8 51A8DFFF CALL Farsight.00405328
0060AAD7 . 33C0 XOR EAX,EAX
0060AAD9 . 55 PUSH EBP
0060AADA . 68 B8AB6000 PUSH Farsight.0060ABB8
0060AADF . 64:FF30 PUSH DWORD PTR FS:[EAX]
0060AAE2 . 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060AAE5 . C645 F7 00 MOV BYTE PTR SS:[EBP-9],0
0060AAE9 . 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AAEC . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AAEF . E8 9CFEFFFF CALL Farsight.0060A990 ; //关键call F7
0060AAF4 . 84C0 TEST AL,AL
0060AAF6 . 0F84 A1000000 JE Farsight.0060AB9D ; //关键跳转
0060AAFC . 33C0 XOR EAX,EAX
0060AAFE . 55 PUSH EBP
0060AAFF . 68 93AB6000 PUSH Farsight.0060AB93
0060AB04 . 64:FF30 PUSH DWORD PTR FS:[EAX]
0060AB07 . 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060AB0A . B9 3F000F00 MOV ECX,0F003F
0060AB0F . B2 01 MOV DL,1
0060AB11 . A1 E82C4400 MOV EAX,DWORD PTR DS:[442CE8]
0060AB16 . E8 1183E3FF CALL Farsight.00442E2C
0060AB1B . 8945 F0 MOV DWORD PTR SS:[EBP-10],EAX
0060AB1E . 33C0 XOR EAX,EAX
0060AB20 . 55 PUSH EBP
0060AB21 . 68 82AB6000 PUSH Farsight.0060AB82
0060AB26 . 64:FF30 PUSH DWORD PTR FS:[EAX]
0060AB29 . 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060AB2C . BA 01000080 MOV EDX,80000001
0060AB31 . 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10] ; Farsight.00526B21
0060AB34 . E8 8B83E3FF CALL Farsight.00442EC4
0060AB39 . B1 01 MOV CL,1
0060AB3B . BA D4AB6000 MOV EDX,Farsight.0060ABD4 ; ASCII "SOFTWARE\farsightsoft\FarsightCalc"
0060AB40 . 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10] ; Farsight.00526B21
0060AB43 . E8 E083E3FF CALL Farsight.00442F28
0060AB48 . 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4]
0060AB4B . BA 00AC6000 MOV EDX,Farsight.0060AC00 ; ASCII "UserName"
0060AB50 . 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10] ; Farsight.00526B21
0060AB53 . E8 4487E3FF CALL Farsight.0044329C
0060AB58 . 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8]
0060AB5B . BA 14AC6000 MOV EDX,Farsight.0060AC14 ; ASCII "Sn"
0060AB60 . 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10] ; Farsight.00526B21
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
继续F7
0060AAEF . E8 9CFEFFFF CALL Farsight.0060A990 ; //关键call F7
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A990 /$ 55 PUSH EBP
0060A991 |. 8BEC MOV EBP,ESP
0060A993 |. 83C4 F4 ADD ESP,-0C
0060A996 |. 53 PUSH EBX
0060A997 |. 33C9 XOR ECX,ECX
0060A999 |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A99C |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A99F |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A9A2 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A9A5 |. E8 7EA9DFFF CALL Farsight.00405328
0060A9AA |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A9AD |. E8 76A9DFFF CALL Farsight.00405328
0060A9B2 |. 33C0 XOR EAX,EAX
0060A9B4 |. 55 PUSH EBP
0060A9B5 |. 68 A7AA6000 PUSH Farsight.0060AAA7
0060A9BA |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A9BD |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A9C0 |. 33DB XOR EBX,EBX
0060A9C2 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A9C5 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A9C8 |. E8 C7EEDFFF CALL Farsight.00409894 ; //假码位数是否为0
0060A9CD |. 837D F4 00 CMP DWORD PTR SS:[EBP-C],0
0060A9D1 |. 0F84 B5000000 JE Farsight.0060AA8C
0060A9D7 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A9DA |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A9DD |. E8 86F8FFFF CALL <Farsight.比较用户名+pbの大写MD5跟黑名单の大写MD5> ; //关键call_1 F7 Squn+pb
0060A9E2 |. 84C0 TEST AL,AL
0060A9E4 |. 74 07 JE SHORT Farsight.0060A9ED
0060A9E6 |. 33DB XOR EBX,EBX
0060A9E8 |. E9 9F000000 JMP Farsight.0060AA8C
0060A9ED |> 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A9F0 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A9F3 |. E8 ACF3FFFF CALL <Farsight.比较用户名+tqの大写MD5跟黑名单の大写MD5> ; //关键call_2 F7 Squn+tq
0060A9F8 |. 84C0 TEST AL,AL
0060A9FA |. 74 07 JE SHORT Farsight.0060AA03
0060A9FC |. B3 01 MOV BL,1
0060A9FE |. E9 89000000 JMP Farsight.0060AA8C
0060AA03 |> 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA06 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA09 |. E8 4AF9FFFF CALL <Farsight.用户名+hgfjk的MD5の第一位跟假码第一位比较>; //关键call1 //用户名+hgfjk的MD5の第一位跟假码第一位比较
0060AA0E |. 84C0 TEST AL,AL
0060AA10 |. 74 7A JE SHORT Farsight.0060AA8C ; //不等则跳.不能跳!
0060AA12 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA15 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA18 |. E8 E7F9FFFF CALL <Farsight.把用户名+hgfjhkjk的MD5の第一位跟假码第>; //关键call2 //把用户名+hgfjhkjk的MD5の第一位跟假码第二位比较
0060AA1D |. 84C0 TEST AL,AL
0060AA1F |. 74 6B JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA21 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA24 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA27 |. E8 8CFAFFFF CALL <Farsight.用户名+hgfjk77的MD5の第一位与假码第三位>; //关键call3 //用户名+hgfjk77的MD5の第一位与假码第三位比较
0060AA2C |. 84C0 TEST AL,AL
0060AA2E |. 74 5C JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA30 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA33 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA36 |. E8 2DFBFFFF CALL <Farsight.用户名+hgfjksss5的MD5の第一位跟假码第>; //关键call4 //用户名+hgfjksss5的MD5の第一位跟假码第四位比较
0060AA3B |. 84C0 TEST AL,AL
0060AA3D |. 74 4D JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA3F |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA42 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA45 |. E8 D2FBFFFF CALL <Farsight.用户名+6578uhgj的MD5の第一位跟假码第五>; //关键call5 //用户名+6578uhgj的MD5の第一位跟假码第五位比较
0060AA4A |. 84C0 TEST AL,AL
0060AA4C |. 74 3E JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA4E |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA51 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA54 |. E8 77FCFFFF CALL <Farsight.用户名+hkjk的MD5の第一位跟假码第六位比较> ; //关键call6 //用户名+hkjk的MD5の第一位跟假码第六位比较
0060AA59 |. 84C0 TEST AL,AL
0060AA5B |. 74 2F JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA5D |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA60 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA63 |. E8 18FDFFFF CALL <Farsight.用户名+asdsd的MD5的第一位跟假码第七位比较>; //关键call7 //用户名+asdsd的MD5的第一位跟假码第七位比较
0060AA68 |. 84C0 TEST AL,AL
0060AA6A |. 74 20 JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA6C |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA6F |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA72 |. E8 B9FDFFFF CALL <Farsight.用户名+xcvxc的MD5の第一位跟假码第八位比较>; //关键call8//用户名+xcvxc的MD5の第一位跟假码第八位比较
0060AA77 |. 84C0 TEST AL,AL
0060AA79 |. 74 11 JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA7B |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060AA7E |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060AA81 |. E8 5AFEFFFF CALL <Farsight.用户名+ytutyu的MD5的第一位跟假码第九位比>; //关键call9//用户名+ytutyu的MD5的第一位跟假码第九位比较
0060AA86 |. 84C0 TEST AL,AL
0060AA88 |. 74 02 JE SHORT Farsight.0060AA8C ; //不能跳!
0060AA8A |. B3 01 MOV BL,1
0060AA8C |> 33C0 XOR EAX,EAX
0060AA8E |. 5A POP EDX ; 0012F864
0060AA8F |. 59 POP ECX ; 0012F864
0060AA90 |. 59 POP ECX ; 0012F864
0060AA91 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060AA94 |. 68 AEAA6000 PUSH Farsight.0060AAAE
0060AA99 |> 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060AA9C |. BA 03000000 MOV EDX,3
0060AAA1 |. E8 F6A3DFFF CALL Farsight.00404E9C
0060AAA6 \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A268 >/$ 55 PUSH EBP ; //F7 关键call_1 来到这里
0060A269 |. 8BEC MOV EBP,ESP
0060A26B |. 83C4 DC ADD ESP,-24
0060A26E |. 53 PUSH EBX
0060A26F |. 33C9 XOR ECX,ECX
0060A271 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A274 |. 894D DC MOV DWORD PTR SS:[EBP-24],ECX
0060A277 |. 894D E4 MOV DWORD PTR SS:[EBP-1C],ECX
0060A27A |. 894D F8 MOV DWORD PTR SS:[EBP-8],ECX
0060A27D |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A280 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A283 |. E8 A0B0DFFF CALL Farsight.00405328
0060A288 |. 33C0 XOR EAX,EAX
0060A28A |. 55 PUSH EBP
0060A28B |. 68 11A36000 PUSH Farsight.0060A311
0060A290 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A293 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A296 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A299 |. B9 28A36000 MOV ECX,Farsight.0060A328 ; ASCII "pb"
0060A29E |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A2A1 |. E8 DEAEDFFF CALL Farsight.00405184 ; //用户名Squn跟pb连接=Squnpb
0060A2A6 |. 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C]
0060A2A9 |. 8D55 E8 LEA EDX,DWORD PTR SS:[EBP-18]
0060A2AC |. E8 9BF9FFFF CALL Farsight.00609C4C
0060A2B1 |. 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18]
0060A2B4 |. 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
0060A2B7 |. E8 04FAFFFF CALL Farsight.00609CC0 ; //用户名+pbのMd5值= "fbc854f293513fd964bbb9372ccf85c2"
0060A2BC |. 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
0060A2BF |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A2C2 |. E8 55F3DFFF CALL Farsight.0040961C ; //把Md5值转大写="FBC854F293513FD964BBB9372CCF85C2"
0060A2C7 |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A2CA |. 50 PUSH EAX
0060A2CB |. 8D55 DC LEA EDX,DWORD PTR SS:[EBP-24]
0060A2CE |. B8 34A36000 MOV EAX,Farsight.0060A334 ; 黑名单:ASCII "56f9c69b5ad4bfd656c8dec9c6228223"
0060A2D3 |. E8 44F3DFFF CALL Farsight.0040961C ; // 刚才的Md5转大写
0060A2D8 |. 8B55 DC MOV EDX,DWORD PTR SS:[EBP-24]
0060A2DB |. 58 POP EAX ; 0012F864
0060A2DC |. E8 A3AFDFFF CALL Farsight.00405284 ; //比较用户名+pbの大写MD5跟黑名单の大写MD5
0060A2E1 |. 75 04 JNZ SHORT Farsight.0060A2E7
0060A2E3 |. B3 01 MOV BL,1
0060A2E5 |. EB 02 JMP SHORT Farsight.0060A2E9
0060A2E7 |> 33DB XOR EBX,EBX
0060A2E9 |> 33C0 XOR EAX,EAX
0060A2EB |. 5A POP EDX ; 0012F864
0060A2EC |. 59 POP ECX ; 0012F864
0060A2ED |. 59 POP ECX ; 0012F864
0060A2EE |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A2F1 |. 68 18A36000 PUSH Farsight.0060A318
0060A2F6 |> 8D45 DC LEA EAX,DWORD PTR SS:[EBP-24]
0060A2F9 |. BA 03000000 MOV EDX,3
0060A2FE |. E8 99ABDFFF CALL Farsight.00404E9C
0060A303 |. 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8]
0060A306 |. BA 02000000 MOV EDX,2
0060A30B |. E8 8CABDFFF CALL Farsight.00404E9C
0060A310 \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
00609DA4 >/$ 55 PUSH EBP ; //比较Squntqの大写MD5跟黑名单の大写MD5
00609DA5 |. 8BEC MOV EBP,ESP
00609DA7 |. B9 0F000000 MOV ECX,0F
00609DAC |> 6A 00 /PUSH 0
00609DAE |. 6A 00 |PUSH 0
00609DB0 |. 49 |DEC ECX
00609DB1 |.^ 75 F9 \JNZ SHORT Farsight.00609DAC
00609DB3 |. 51 PUSH ECX
00609DB4 |. 53 PUSH EBX
00609DB5 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
00609DB8 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00609DBB |. E8 68B5DFFF CALL Farsight.00405328
00609DC0 |. 33C0 XOR EAX,EAX
00609DC2 |. 55 PUSH EBP
00609DC3 |. 68 3DA06000 PUSH Farsight.0060A03D
00609DC8 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
00609DCB |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
00609DCE |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
00609DD1 |. B9 54A06000 MOV ECX,Farsight.0060A054 ; ASCII "tq"
00609DD6 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
00609DD9 |. E8 A6B3DFFF CALL Farsight.00405184 ; //用户名Squn+tq=Squntq
00609DDE |. 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C]
00609DE1 |. 8D55 E8 LEA EDX,DWORD PTR SS:[EBP-18]
00609DE4 |. E8 63FEFFFF CALL Farsight.00609C4C
00609DE9 |. 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18]
00609DEC |. 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
00609DEF |. E8 CCFEFFFF CALL Farsight.00609CC0 ; //用户名+tqのMD5值=ASCII "777cff1c93fd58381450a59ee2f23be5"
00609DF4 |. 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
00609DF7 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609DFA |. E8 1DF8DFFF CALL Farsight.0040961C ; //把SquntqのMD5值转大写=777CFF1C93FD58381450A59EE2F23BE5
00609DFF |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
00609E02 |. 50 PUSH EAX
00609E03 |. 8D55 DC LEA EDX,DWORD PTR SS:[EBP-24]
00609E06 |. B8 60A06000 MOV EAX,Farsight.0060A060 ; //黑名单:ASCII "35e2233a9cbbd40e0da83ca5c185f975"
00609E0B |. E8 0CF8DFFF CALL Farsight.0040961C ; //黑名单MD5值转大写.
00609E10 |. 8B55 DC MOV EDX,DWORD PTR SS:[EBP-24]
00609E13 |. 58 POP EAX ; 0012F864
00609E14 |. E8 6BB4DFFF CALL Farsight.00405284 ; //比较Squntqの大写MD5值跟黑名单中の大写MD5
00609E19 |. 75 07 JNZ SHORT Farsight.00609E22
00609E1B |. B3 01 MOV BL,1
00609E1D |. E9 F3010000 JMP Farsight.0060A015
00609E22 |> 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
00609E25 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609E28 |. E8 EFF7DFFF CALL Farsight.0040961C ; //Squntqの大写MD5值= "777CFF1C93FD58381450A59EE2F23BE5"
00609E2D |. 8B45 D8 MOV EAX,DWORD PTR SS:[EBP-28]
00609E30 |. 50 PUSH EAX
00609E31 |. 8D55 D4 LEA EDX,DWORD PTR SS:[EBP-2C]
00609E34 |. B8 8CA06000 MOV EAX,Farsight.0060A08C ; //黑名单:"f115d581f549c82370d3225ecb083c33"
00609E39 |. E8 DEF7DFFF CALL Farsight.0040961C ; //黑名单转大写="F115D581F549C82370D3225ECB083C33"
00609E3E |. 8B55 D4 MOV EDX,DWORD PTR SS:[EBP-2C] ; Farsight.004040F3
00609E41 |. 58 POP EAX ; 0012F864
00609E42 |. E8 3DB4DFFF CALL Farsight.00405284 ; //比较Squntqの大写MD5跟黑名单の大写MD5
00609E47 |. 75 07 JNZ SHORT Farsight.00609E50
00609E49 |. B3 01 MOV BL,1
00609E4B |. E9 C5010000 JMP Farsight.0060A015
00609E50 |> 8D55 D0 LEA EDX,DWORD PTR SS:[EBP-30]
00609E53 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609E56 |. E8 C1F7DFFF CALL Farsight.0040961C ; //Squntqの大写MD5值= "777CFF1C93FD58381450A59EE2F23BE5"
00609E5B |. 8B45 D0 MOV EAX,DWORD PTR SS:[EBP-30]
00609E5E |. 50 PUSH EAX
00609E5F |. 8D55 CC LEA EDX,DWORD PTR SS:[EBP-34]
00609E62 |. B8 B8A06000 MOV EAX,Farsight.0060A0B8 ; //黑名单:"0ee7e7d913e291d1286c24190509120e"
00609E67 |. E8 B0F7DFFF CALL Farsight.0040961C ; //黑名单MD5转大写="0EE7E7D913E291D1286C24190509120E"
00609E6C |. 8B55 CC MOV EDX,DWORD PTR SS:[EBP-34]
00609E6F |. 58 POP EAX ; 0012F864
00609E70 |. E8 0FB4DFFF CALL Farsight.00405284 ; //比较Squntqの大写MD5跟黑名单の大写MD5
00609E75 |. 75 07 JNZ SHORT Farsight.00609E7E
00609E77 |. B3 01 MOV BL,1
00609E79 |. E9 97010000 JMP Farsight.0060A015
00609E7E |> 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
00609E81 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609E84 |. E8 93F7DFFF CALL Farsight.0040961C
00609E89 |. 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
00609E8C |. 50 PUSH EAX
00609E8D |. 8D55 C4 LEA EDX,DWORD PTR SS:[EBP-3C]
00609E90 |. B8 E4A06000 MOV EAX,Farsight.0060A0E4 ; //黑名单:ASCII "3bfa2682f416c4c3fccc711fe0dc8cee"
00609E95 |. E8 82F7DFFF CALL Farsight.0040961C
00609E9A |. 8B55 C4 MOV EDX,DWORD PTR SS:[EBP-3C] ; user32.77D1D82A
00609E9D |. 58 POP EAX ; 0012F864
00609E9E |. E8 E1B3DFFF CALL Farsight.00405284
00609EA3 |. 75 07 JNZ SHORT Farsight.00609EAC
00609EA5 |. B3 01 MOV BL,1
00609EA7 |. E9 69010000 JMP Farsight.0060A015
00609EAC |> 8D55 C0 LEA EDX,DWORD PTR SS:[EBP-40]
00609EAF |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609EB2 |. E8 65F7DFFF CALL Farsight.0040961C
00609EB7 |. 8B45 C0 MOV EAX,DWORD PTR SS:[EBP-40] ; user32.77D1D83F
00609EBA |. 50 PUSH EAX
00609EBB |. 8D55 BC LEA EDX,DWORD PTR SS:[EBP-44]
00609EBE |. B8 10A16000 MOV EAX,Farsight.0060A110 ; //黑名单:ASCII "506f33b54388fee67d3774826ba03791"
00609EC3 |. E8 54F7DFFF CALL Farsight.0040961C
00609EC8 |. 8B55 BC MOV EDX,DWORD PTR SS:[EBP-44] ; user32.77D1B473
00609ECB |. 58 POP EAX ; 0012F864
00609ECC |. E8 B3B3DFFF CALL Farsight.00405284
00609ED1 |. 75 07 JNZ SHORT Farsight.00609EDA
00609ED3 |. B3 01 MOV BL,1
00609ED5 |. E9 3B010000 JMP Farsight.0060A015
00609EDA |> 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
00609EDD |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609EE0 |. E8 37F7DFFF CALL Farsight.0040961C
00609EE5 |. 8B45 B8 MOV EAX,DWORD PTR SS:[EBP-48]
00609EE8 |. 50 PUSH EAX
00609EE9 |. 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C]
00609EEC |. B8 3CA16000 MOV EAX,Farsight.0060A13C ; //黑名单:ASCII "c4a1bf0654a796c1549cc2a44b4d0461"
00609EF1 |. E8 26F7DFFF CALL Farsight.0040961C
00609EF6 |. 8B55 B4 MOV EDX,DWORD PTR SS:[EBP-4C]
00609EF9 |. 58 POP EAX ; 0012F864
00609EFA |. E8 85B3DFFF CALL Farsight.00405284
00609EFF |. 75 07 JNZ SHORT Farsight.00609F08
00609F01 |. B3 01 MOV BL,1
00609F03 |. E9 0D010000 JMP Farsight.0060A015
00609F08 |> 8D55 B0 LEA EDX,DWORD PTR SS:[EBP-50]
00609F0B |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609F0E |. E8 09F7DFFF CALL Farsight.0040961C
00609F13 |. 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50]
00609F16 |. 50 PUSH EAX
00609F17 |. 8D55 AC LEA EDX,DWORD PTR SS:[EBP-54]
00609F1A |. B8 68A16000 MOV EAX,Farsight.0060A168 ; //黑名单:ASCII "373b7b3855aa309731693787a369c95d"
00609F1F |. E8 F8F6DFFF CALL Farsight.0040961C
00609F24 |. 8B55 AC MOV EDX,DWORD PTR SS:[EBP-54]
00609F27 |. 58 POP EAX ; 0012F864
00609F28 |. E8 57B3DFFF CALL Farsight.00405284
00609F2D |. 75 07 JNZ SHORT Farsight.00609F36
00609F2F |. B3 01 MOV BL,1
00609F31 |. E9 DF000000 JMP Farsight.0060A015
00609F36 |> 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
00609F39 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609F3C |. E8 DBF6DFFF CALL Farsight.0040961C
00609F41 |. 8B45 A8 MOV EAX,DWORD PTR SS:[EBP-58]
00609F44 |. 50 PUSH EAX
00609F45 |. 8D55 A4 LEA EDX,DWORD PTR SS:[EBP-5C]
00609F48 |. B8 94A16000 MOV EAX,Farsight.0060A194 ; //黑名单:ASCII "7ac600e921e8bd51d68a1b622f74c1e6"
00609F4D |. E8 CAF6DFFF CALL Farsight.0040961C
00609F52 |. 8B55 A4 MOV EDX,DWORD PTR SS:[EBP-5C]
00609F55 |. 58 POP EAX ; 0012F864
00609F56 |. E8 29B3DFFF CALL Farsight.00405284
00609F5B |. 75 07 JNZ SHORT Farsight.00609F64
00609F5D |. B3 01 MOV BL,1
00609F5F |. E9 B1000000 JMP Farsight.0060A015
00609F64 |> 8D55 A0 LEA EDX,DWORD PTR SS:[EBP-60]
00609F67 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609F6A |. E8 ADF6DFFF CALL Farsight.0040961C
00609F6F |. 8B45 A0 MOV EAX,DWORD PTR SS:[EBP-60]
00609F72 |. 50 PUSH EAX
00609F73 |. 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64]
00609F76 |. B8 C0A16000 MOV EAX,Farsight.0060A1C0 ; //黑名单:ASCII "9e0c00afca2e84555efc91dfe754a2b7"
00609F7B |. E8 9CF6DFFF CALL Farsight.0040961C
00609F80 |. 8B55 9C MOV EDX,DWORD PTR SS:[EBP-64] ; ntdll.7C92EAE3
00609F83 |. 58 POP EAX ; 0012F864
00609F84 |. E8 FBB2DFFF CALL Farsight.00405284
00609F89 |. 75 07 JNZ SHORT Farsight.00609F92
00609F8B |. B3 01 MOV BL,1
00609F8D |. E9 83000000 JMP Farsight.0060A015
00609F92 |> 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
00609F95 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609F98 |. E8 7FF6DFFF CALL Farsight.0040961C
00609F9D |. 8B45 98 MOV EAX,DWORD PTR SS:[EBP-68]
00609FA0 |. 50 PUSH EAX
00609FA1 |. 8D55 94 LEA EDX,DWORD PTR SS:[EBP-6C]
00609FA4 |. B8 ECA16000 MOV EAX,Farsight.0060A1EC ; //黑名单:ASCII "be8b20277c95834b292b1073825273f3"
00609FA9 |. E8 6EF6DFFF CALL Farsight.0040961C
00609FAE |. 8B55 94 MOV EDX,DWORD PTR SS:[EBP-6C]
00609FB1 |. 58 POP EAX ; 0012F864
00609FB2 |. E8 CDB2DFFF CALL Farsight.00405284
00609FB7 |. 75 04 JNZ SHORT Farsight.00609FBD
00609FB9 |. B3 01 MOV BL,1
00609FBB |. EB 58 JMP SHORT Farsight.0060A015
00609FBD |> 8D55 90 LEA EDX,DWORD PTR SS:[EBP-70]
00609FC0 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609FC3 |. E8 54F6DFFF CALL Farsight.0040961C
00609FC8 |. 8B45 90 MOV EAX,DWORD PTR SS:[EBP-70]
00609FCB |. 50 PUSH EAX
00609FCC |. 8D55 8C LEA EDX,DWORD PTR SS:[EBP-74]
00609FCF |. B8 18A26000 MOV EAX,Farsight.0060A218 ; //黑名单:ASCII "d106cc90aefcc54fa16a2e086aecc6e7"
00609FD4 |. E8 43F6DFFF CALL Farsight.0040961C
00609FD9 |. 8B55 8C MOV EDX,DWORD PTR SS:[EBP-74]
00609FDC |. 58 POP EAX ; 0012F864
00609FDD |. E8 A2B2DFFF CALL Farsight.00405284
00609FE2 |. 75 04 JNZ SHORT Farsight.00609FE8
00609FE4 |. B3 01 MOV BL,1
00609FE6 |. EB 2D JMP SHORT Farsight.0060A015
00609FE8 |> 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
00609FEB |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
00609FEE |. E8 29F6DFFF CALL Farsight.0040961C
00609FF3 |. 8B45 88 MOV EAX,DWORD PTR SS:[EBP-78]
00609FF6 |. 50 PUSH EAX
00609FF7 |. 8D55 84 LEA EDX,DWORD PTR SS:[EBP-7C]
00609FFA |. B8 44A26000 MOV EAX,Farsight.0060A244 ; //黑名单:ASCII "659c1868d7a2344992da9ceda33b1ff6"
00609FFF |. E8 18F6DFFF CALL Farsight.0040961C
0060A004 |. 8B55 84 MOV EDX,DWORD PTR SS:[EBP-7C] ; user32.77D1B51C
0060A007 |. 58 POP EAX ; 0012F864
0060A008 |. E8 77B2DFFF CALL Farsight.00405284
0060A00D |. 75 04 JNZ SHORT Farsight.0060A013
0060A00F |. B3 01 MOV BL,1
0060A011 |. EB 02 JMP SHORT Farsight.0060A015
0060A013 |> 33DB XOR EBX,EBX
0060A015 |> 33C0 XOR EAX,EAX
0060A017 |. 5A POP EDX ; 0012F864
0060A018 |. 59 POP ECX ; 0012F864
0060A019 |. 59 POP ECX ; 0012F864
0060A01A |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A01D |. 68 44A06000 PUSH Farsight.0060A044
0060A022 |> 8D45 84 LEA EAX,DWORD PTR SS:[EBP-7C]
0060A025 |. BA 19000000 MOV EDX,19
0060A02A |. E8 6DAEDFFF CALL Farsight.00404E9C
0060A02F |. 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8]
0060A032 |. BA 02000000 MOV EDX,2
0060A037 |. E8 60AEDFFF CALL Farsight.00404E9C
0060A03C \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A358 >/$ 55 PUSH EBP ; //用户名+hgfjk的MD5の第一位跟假码第一位比较--8:1
0060A359 |. 8BEC MOV EBP,ESP
0060A35B |. 83C4 E0 ADD ESP,-20
0060A35E |. 53 PUSH EBX
0060A35F |. 33C9 XOR ECX,ECX
0060A361 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A364 |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A367 |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A36A |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A36D |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A370 |. E8 B3AFDFFF CALL Farsight.00405328
0060A375 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A378 |. E8 ABAFDFFF CALL Farsight.00405328
0060A37D |. 33C0 XOR EAX,EAX
0060A37F |. 55 PUSH EBP
0060A380 |. 68 E6A36000 PUSH Farsight.0060A3E6
0060A385 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A388 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A38B |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A38E |. B9 FCA36000 MOV ECX,Farsight.0060A3FC ; ASCII "hgfjk"
0060A393 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A396 |. E8 E9ADDFFF CALL Farsight.00405184 ; //用户名+"hgfjk"=Squnhgfjk
0060A39B |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A39E |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A3A1 |. E8 A6F8FFFF CALL Farsight.00609C4C
0060A3A6 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A3A9 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A3AC |. E8 0FF9FFFF CALL Farsight.00609CC0 ; //用户名+hgfjk的MD5=85308a436d4fbe083384467ad65c1292
0060A3B1 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A3B4 |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A3B6 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A3B9 |. 3A02 CMP AL,BYTE PTR DS:[EDX] ; //用户名+hgfjk的MD5の第一位跟假码第一位比较--8:1
0060A3BB |. 75 04 JNZ SHORT Farsight.0060A3C1 ; //不等则跳,不能跳!
0060A3BD |. B3 01 MOV BL,1
0060A3BF |. EB 02 JMP SHORT Farsight.0060A3C3
0060A3C1 |> 33DB XOR EBX,EBX
0060A3C3 |> 33C0 XOR EAX,EAX
0060A3C5 |. 5A POP EDX ; 0012F864
0060A3C6 |. 59 POP ECX ; 0012F864
0060A3C7 |. 59 POP ECX ; 0012F864
0060A3C8 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A3CB |. 68 EDA36000 PUSH Farsight.0060A3ED
0060A3D0 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A3D3 |. E8 A0AADFFF CALL Farsight.00404E78
0060A3D8 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A3DB |. BA 03000000 MOV EDX,3
0060A3E0 |. E8 B7AADFFF CALL Farsight.00404E9C
0060A3E5 \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A404 >/$ 55 PUSH EBP ; //把用户名+hgfjhkjk的MD5の第一位跟假码第二位比较
0060A405 |. 8BEC MOV EBP,ESP
0060A407 |. 83C4 E0 ADD ESP,-20
0060A40A |. 53 PUSH EBX
0060A40B |. 33C9 XOR ECX,ECX
0060A40D |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A410 |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A413 |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A416 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A419 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A41C |. E8 07AFDFFF CALL Farsight.00405328
0060A421 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A424 |. E8 FFAEDFFF CALL Farsight.00405328
0060A429 |. 33C0 XOR EAX,EAX
0060A42B |. 55 PUSH EBP
0060A42C |. 68 93A46000 PUSH Farsight.0060A493
0060A431 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A434 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A437 |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A43A |. B9 ACA46000 MOV ECX,Farsight.0060A4AC ; ASCII "hgfjhkjk"
0060A43F |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A442 |. E8 3DADDFFF CALL Farsight.00405184 ; //用户名+hgfjhkjk=Squnhgfjhkjk
0060A447 |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A44A |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A44D |. E8 FAF7FFFF CALL Farsight.00609C4C
0060A452 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A455 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A458 |. E8 63F8FFFF CALL Farsight.00609CC0 ; //用户名+hgfjhkjk的MD5=d0da19953e92ff6d20cb89b7ea2c13ca
0060A45D |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A460 |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A462 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A465 |. 3A42 01 CMP AL,BYTE PTR DS:[EDX+1] ; //把用户名+hgfjhkjk的MD5の第一位跟假码第二位比较--d:2
0060A468 |. 75 04 JNZ SHORT Farsight.0060A46E ; //不等则跳! 不能跳!
0060A46A |. B3 01 MOV BL,1
0060A46C |. EB 02 JMP SHORT Farsight.0060A470
0060A46E |> 33DB XOR EBX,EBX
0060A470 |> 33C0 XOR EAX,EAX
0060A472 |. 5A POP EDX ; 0012F864
0060A473 |. 59 POP ECX ; 0012F864
0060A474 |. 59 POP ECX ; 0012F864
0060A475 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A478 |. 68 9AA46000 PUSH Farsight.0060A49A
0060A47D |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A480 |. E8 F3A9DFFF CALL Farsight.00404E78
0060A485 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A488 |. BA 03000000 MOV EDX,3
0060A48D |. E8 0AAADFFF CALL Farsight.00404E9C
0060A492 \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A4B8 >/$ 55 PUSH EBP ; //用户名+hgfjk77的MD5の第一位与假码第三位比较
0060A4B9 |. 8BEC MOV EBP,ESP
0060A4BB |. 83C4 E0 ADD ESP,-20
0060A4BE |. 53 PUSH EBX
0060A4BF |. 33C9 XOR ECX,ECX
0060A4C1 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A4C4 |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A4C7 |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A4CA |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A4CD |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A4D0 |. E8 53AEDFFF CALL Farsight.00405328
0060A4D5 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A4D8 |. E8 4BAEDFFF CALL Farsight.00405328
0060A4DD |. 33C0 XOR EAX,EAX
0060A4DF |. 55 PUSH EBP
0060A4E0 |. 68 47A56000 PUSH Farsight.0060A547
0060A4E5 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A4E8 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A4EB |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A4EE |. B9 60A56000 MOV ECX,Farsight.0060A560 ; ASCII "hgfjk77"
0060A4F3 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A4F6 |. E8 89ACDFFF CALL Farsight.00405184 ; //用户名+hgfjk77=Squnhgfjk77
0060A4FB |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A4FE |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A501 |. E8 46F7FFFF CALL Farsight.00609C4C
0060A506 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A509 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A50C |. E8 AFF7FFFF CALL Farsight.00609CC0 ; //用户名+hgfjk77的MD5=4884950f4ac922debe8eebeb9667f0d2
0060A511 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A514 |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A516 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A519 |. 3A42 02 CMP AL,BYTE PTR DS:[EDX+2] ; //用户名+hgfjk77的MD5の第一位与假码第三位比较--4:3
0060A51C |. 75 04 JNZ SHORT Farsight.0060A522 ; //不等则跳!不能跳!
0060A51E |. B3 01 MOV BL,1
0060A520 |. EB 02 JMP SHORT Farsight.0060A524
0060A522 |> 33DB XOR EBX,EBX
0060A524 |> 33C0 XOR EAX,EAX
0060A526 |. 5A POP EDX ; 0012F864
0060A527 |. 59 POP ECX ; 0012F864
0060A528 |. 59 POP ECX ; 0012F864
0060A529 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A52C |. 68 4EA56000 PUSH Farsight.0060A54E
0060A531 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A534 |. E8 3FA9DFFF CALL Farsight.00404E78
0060A539 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A53C |. BA 03000000 MOV EDX,3
0060A541 |. E8 56A9DFFF CALL Farsight.00404E9C
0060A546 \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A568 >/$ 55 PUSH EBP ; //用户名+hgfjksss5的MD5の第一位跟假码第四位比较
0060A569 |. 8BEC MOV EBP,ESP
0060A56B |. 83C4 E0 ADD ESP,-20
0060A56E |. 53 PUSH EBX
0060A56F |. 33C9 XOR ECX,ECX
0060A571 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A574 |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A577 |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A57A |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A57D |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A580 |. E8 A3ADDFFF CALL Farsight.00405328
0060A585 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A588 |. E8 9BADDFFF CALL Farsight.00405328
0060A58D |. 33C0 XOR EAX,EAX
0060A58F |. 55 PUSH EBP
0060A590 |. 68 F7A56000 PUSH Farsight.0060A5F7
0060A595 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A598 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A59B |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A59E |. B9 10A66000 MOV ECX,Farsight.0060A610 ; ASCII "hgfjksss5"
0060A5A3 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A5A6 |. E8 D9ABDFFF CALL Farsight.00405184 ; //用户名+hgfjksss5=Squnhgfjksss5
0060A5AB |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A5AE |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A5B1 |. E8 96F6FFFF CALL Farsight.00609C4C
0060A5B6 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A5B9 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A5BC |. E8 FFF6FFFF CALL Farsight.00609CC0 ; //用户名+hgfjksss5的MD5= "fb872c236922181e3e8ade9bc38b32b7"
0060A5C1 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A5C4 |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A5C6 |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A5C9 |. 3A42 03 CMP AL,BYTE PTR DS:[EDX+3] ; //用户名+hgfjksss5的MD5の第一位跟假码第四位比较--f:4
0060A5CC |. 75 04 JNZ SHORT Farsight.0060A5D2 ; //不能跳!
0060A5CE |. B3 01 MOV BL,1
0060A5D0 |. EB 02 JMP SHORT Farsight.0060A5D4
0060A5D2 |> 33DB XOR EBX,EBX
0060A5D4 |> 33C0 XOR EAX,EAX
0060A5D6 |. 5A POP EDX ; 0012F864
0060A5D7 |. 59 POP ECX ; 0012F864
0060A5D8 |. 59 POP ECX ; 0012F864
0060A5D9 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A5DC |. 68 FEA56000 PUSH Farsight.0060A5FE
0060A5E1 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A5E4 |. E8 8FA8DFFF CALL Farsight.00404E78
0060A5E9 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A5EC |. BA 03000000 MOV EDX,3
0060A5F1 |. E8 A6A8DFFF CALL Farsight.00404E9C
0060A5F6 \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A61C >/$ 55 PUSH EBP ; //用户名+6578uhgj的MD5の第一位跟假码第五位比较
0060A61D |. 8BEC MOV EBP,ESP
0060A61F |. 83C4 E0 ADD ESP,-20
0060A622 |. 53 PUSH EBX
0060A623 |. 33C9 XOR ECX,ECX
0060A625 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A628 |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A62B |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A62E |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A631 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A634 |. E8 EFACDFFF CALL Farsight.00405328
0060A639 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A63C |. E8 E7ACDFFF CALL Farsight.00405328
0060A641 |. 33C0 XOR EAX,EAX
0060A643 |. 55 PUSH EBP
0060A644 |. 68 ABA66000 PUSH Farsight.0060A6AB
0060A649 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A64C |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A64F |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A652 |. B9 C4A66000 MOV ECX,Farsight.0060A6C4 ; ASCII "6578uhgj"
0060A657 |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A65A |. E8 25ABDFFF CALL Farsight.00405184 ; //用户名+6578uhgj=Squn6578uhgj
0060A65F |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A662 |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A665 |. E8 E2F5FFFF CALL Farsight.00609C4C
0060A66A |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A66D |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A670 |. E8 4BF6FFFF CALL Farsight.00609CC0 ; //用户名+6578uhgj的MD5=ed597f285db126613442a3263e24e55d
0060A675 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A678 |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A67A |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A67D |. 3A42 04 CMP AL,BYTE PTR DS:[EDX+4] ; //用户名+6578uhgj的MD5の第一位跟假码第五位比较--e:5
0060A680 |. 75 04 JNZ SHORT Farsight.0060A686 ; //不能跳!
0060A682 |. B3 01 MOV BL,1
0060A684 |. EB 02 JMP SHORT Farsight.0060A688
0060A686 |> 33DB XOR EBX,EBX
0060A688 |> 33C0 XOR EAX,EAX
0060A68A |. 5A POP EDX ; 0012F864
0060A68B |. 59 POP ECX ; 0012F864
0060A68C |. 59 POP ECX ; 0012F864
0060A68D |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A690 |. 68 B2A66000 PUSH Farsight.0060A6B2
0060A695 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A698 |. E8 DBA7DFFF CALL Farsight.00404E78
0060A69D |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A6A0 |. BA 03000000 MOV EDX,3
0060A6A5 |. E8 F2A7DFFF CALL Farsight.00404E9C
0060A6AA \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A6D0 >/$ 55 PUSH EBP ; //用户名+hkjk的MD5の第一位跟假码第六位比较
0060A6D1 |. 8BEC MOV EBP,ESP
0060A6D3 |. 83C4 E0 ADD ESP,-20
0060A6D6 |. 53 PUSH EBX
0060A6D7 |. 33C9 XOR ECX,ECX
0060A6D9 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A6DC |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A6DF |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A6E2 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A6E5 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A6E8 |. E8 3BACDFFF CALL Farsight.00405328
0060A6ED |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A6F0 |. E8 33ACDFFF CALL Farsight.00405328
0060A6F5 |. 33C0 XOR EAX,EAX
0060A6F7 |. 55 PUSH EBP
0060A6F8 |. 68 5FA76000 PUSH Farsight.0060A75F
0060A6FD |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A700 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A703 |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A706 |. B9 78A76000 MOV ECX,Farsight.0060A778 ; hkjk
0060A70B |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A70E |. E8 71AADFFF CALL Farsight.00405184 ; //用户名+hkjk=Squnhkjk
0060A713 |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A716 |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A719 |. E8 2EF5FFFF CALL Farsight.00609C4C
0060A71E |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A721 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A724 |. E8 97F5FFFF CALL Farsight.00609CC0 ; //用户名+hkjk的MD5=405b1020f3c7327fda10bc84168e5485
0060A729 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A72C |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A72E |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A731 |. 3A42 05 CMP AL,BYTE PTR DS:[EDX+5] ; //用户名+hkjk的MD5の第一位跟假码第六位比较--4:6
0060A734 |. 75 04 JNZ SHORT Farsight.0060A73A ; //不能跳!
0060A736 |. B3 01 MOV BL,1
0060A738 |. EB 02 JMP SHORT Farsight.0060A73C
0060A73A |> 33DB XOR EBX,EBX
0060A73C |> 33C0 XOR EAX,EAX
0060A73E |. 5A POP EDX ; 0012F864
0060A73F |. 59 POP ECX ; 0012F864
0060A740 |. 59 POP ECX ; 0012F864
0060A741 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A744 |. 68 66A76000 PUSH Farsight.0060A766
0060A749 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A74C |. E8 27A7DFFF CALL Farsight.00404E78
0060A751 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A754 |. BA 03000000 MOV EDX,3
0060A759 |. E8 3EA7DFFF CALL Farsight.00404E9C
0060A75E \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A780 >/$ 55 PUSH EBP ; //用户名+asdsd的MD5的第一位跟假码第七位比较
0060A781 |. 8BEC MOV EBP,ESP
0060A783 |. 83C4 E0 ADD ESP,-20
0060A786 |. 53 PUSH EBX
0060A787 |. 33C9 XOR ECX,ECX
0060A789 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A78C |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A78F |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A792 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A795 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A798 |. E8 8BABDFFF CALL Farsight.00405328
0060A79D |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A7A0 |. E8 83ABDFFF CALL Farsight.00405328
0060A7A5 |. 33C0 XOR EAX,EAX
0060A7A7 |. 55 PUSH EBP
0060A7A8 |. 68 0FA86000 PUSH Farsight.0060A80F
0060A7AD |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A7B0 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A7B3 |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A7B6 |. B9 28A86000 MOV ECX,Farsight.0060A828 ; asdsd
0060A7BB |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A7BE |. E8 C1A9DFFF CALL Farsight.00405184 ; //用户名+asdsd=Squnasdsd
0060A7C3 |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A7C6 |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A7C9 |. E8 7EF4FFFF CALL Farsight.00609C4C
0060A7CE |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A7D1 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A7D4 |. E8 E7F4FFFF CALL Farsight.00609CC0 ; //用户名+asdsd的MD5=934f52ecf9a1bfa42412db7df58cda8e
0060A7D9 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A7DC |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A7DE |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A7E1 |. 3A42 06 CMP AL,BYTE PTR DS:[EDX+6] ; //用户名+asdsd的MD5的第一位跟假码第七位比较--9:7
0060A7E4 |. 75 04 JNZ SHORT Farsight.0060A7EA ; //不能跳!
0060A7E6 |. B3 01 MOV BL,1
0060A7E8 |. EB 02 JMP SHORT Farsight.0060A7EC
0060A7EA |> 33DB XOR EBX,EBX
0060A7EC |> 33C0 XOR EAX,EAX
0060A7EE |. 5A POP EDX ; 0012F864
0060A7EF |. 59 POP ECX ; 0012F864
0060A7F0 |. 59 POP ECX ; 0012F864
0060A7F1 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A7F4 |. 68 16A86000 PUSH Farsight.0060A816
0060A7F9 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A7FC |. E8 77A6DFFF CALL Farsight.00404E78
0060A801 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A804 |. BA 03000000 MOV EDX,3
0060A809 |. E8 8EA6DFFF CALL Farsight.00404E9C
0060A80E \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A830 >/$ 55 PUSH EBP ; //用户名+xcvxc的MD5の第一位跟假码第八位比较
0060A831 |. 8BEC MOV EBP,ESP
0060A833 |. 83C4 E0 ADD ESP,-20
0060A836 |. 53 PUSH EBX
0060A837 |. 33C9 XOR ECX,ECX
0060A839 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A83C |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A83F |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A842 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A845 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A848 |. E8 DBAADFFF CALL Farsight.00405328
0060A84D |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A850 |. E8 D3AADFFF CALL Farsight.00405328
0060A855 |. 33C0 XOR EAX,EAX
0060A857 |. 55 PUSH EBP
0060A858 |. 68 BFA86000 PUSH Farsight.0060A8BF
0060A85D |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A860 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A863 |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A866 |. B9 D8A86000 MOV ECX,Farsight.0060A8D8 ; xcvxc
0060A86B |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A86E |. E8 11A9DFFF CALL Farsight.00405184 ; //用户名+xcvxc=Squnxcvxc
0060A873 |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A876 |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A879 |. E8 CEF3FFFF CALL Farsight.00609C4C
0060A87E |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A881 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A884 |. E8 37F4FFFF CALL Farsight.00609CC0 ; //用户名+xcvxc的MD5=d7e9a24f898a7f19d7c10d070f8a87df
0060A889 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A88C |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A88E |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A891 |. 3A42 07 CMP AL,BYTE PTR DS:[EDX+7] ; //用户名+xcvxc的MD5の第一位跟假码第八位比较--d:8
0060A894 |. 75 04 JNZ SHORT Farsight.0060A89A ; //不能跳!
0060A896 |. B3 01 MOV BL,1
0060A898 |. EB 02 JMP SHORT Farsight.0060A89C
0060A89A |> 33DB XOR EBX,EBX
0060A89C |> 33C0 XOR EAX,EAX
0060A89E |. 5A POP EDX ; 0012F864
0060A89F |. 59 POP ECX ; 0012F864
0060A8A0 |. 59 POP ECX ; 0012F864
0060A8A1 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A8A4 |. 68 C6A86000 PUSH Farsight.0060A8C6
0060A8A9 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A8AC |. E8 C7A5DFFF CALL Farsight.00404E78
0060A8B1 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A8B4 |. BA 03000000 MOV EDX,3
0060A8B9 |. E8 DEA5DFFF CALL Farsight.00404E9C
0060A8BE \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
0060A8E0 >/$ 55 PUSH EBP ; //用户名+ytutyu的MD5的第一位跟假码第九位比较
0060A8E1 |. 8BEC MOV EBP,ESP
0060A8E3 |. 83C4 E0 ADD ESP,-20
0060A8E6 |. 53 PUSH EBX
0060A8E7 |. 33C9 XOR ECX,ECX
0060A8E9 |. 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
0060A8EC |. 894D F4 MOV DWORD PTR SS:[EBP-C],ECX
0060A8EF |. 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX
0060A8F2 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0060A8F5 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0060A8F8 |. E8 2BAADFFF CALL Farsight.00405328
0060A8FD |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0060A900 |. E8 23AADFFF CALL Farsight.00405328
0060A905 |. 33C0 XOR EAX,EAX
0060A907 |. 55 PUSH EBP
0060A908 |. 68 6FA96000 PUSH Farsight.0060A96F
0060A90D |. 64:FF30 PUSH DWORD PTR FS:[EAX]
0060A910 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
0060A913 |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A916 |. B9 88A96000 MOV ECX,Farsight.0060A988 ; ytutyu
0060A91B |. 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
0060A91E |. E8 61A8DFFF CALL Farsight.00405184 ; //用户名+ytutyu=Squnytutyu
0060A923 |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] ; Farsight.0048553F
0060A926 |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0060A929 |. E8 1EF3FFFF CALL Farsight.00609C4C
0060A92E |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
0060A931 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0060A934 |. E8 87F3FFFF CALL Farsight.00609CC0 ; //用户名+ytutyu的MD5=db548c6928fd97269a4265d979abb14a
0060A939 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; Farsight.00526AB8
0060A93C |. 8A00 MOV AL,BYTE PTR DS:[EAX]
0060A93E |. 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-8]
0060A941 |. 3A42 08 CMP AL,BYTE PTR DS:[EDX+8] ; //用户名+ytutyu的MD5的第一位跟假码第九位比较--d:9
0060A944 |. 75 04 JNZ SHORT Farsight.0060A94A ; //不能跳!
0060A946 |. B3 01 MOV BL,1
0060A948 |. EB 02 JMP SHORT Farsight.0060A94C
0060A94A |> 33DB XOR EBX,EBX
0060A94C |> 33C0 XOR EAX,EAX
0060A94E |. 5A POP EDX ; 0012F864
0060A94F |. 59 POP ECX ; 0012F864
0060A950 |. 59 POP ECX ; 0012F864
0060A951 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
0060A954 |. 68 76A96000 PUSH Farsight.0060A976
0060A959 |> 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0060A95C |. E8 17A5DFFF CALL Farsight.00404E78
0060A961 |. 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C]
0060A964 |. BA 03000000 MOV EDX,3
0060A969 |. E8 2EA5DFFF CALL Farsight.00404E9C
0060A96E \. C3 RETN
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
算法到此结束.
简单总结一下:
用户名位数不限制.
注册码前9位:
第一位 = 用户名+hgfjk的MD5の第一位
第二位 = 用户名+hgfjhkjk的MD5の第一位
第三位 = 用户名+hgfjk77的MD5の第一位
第四位 = 用户名+hgfjksss5的MD5の第一位
第五位 = 用户名+6578uhgj的MD5の第一位
第六位 = 用户名+hkjk的MD5の第一位
第七位 = 用户名+asdsd的MD5の第一位
第八位 = 用户名+xcvxc的MD5の第一位
第九位 = 用户名+ytutyu的MD5の第一位
注册码前9位の算法如上,9位以后の随便写即可!
delphi算法注册机核心代码(稍后附上完整源代码):
szTemp:= RivestStr(szName + 'hgfjk');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + 'hgfjhkjk');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + 'hgfjk77');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + 'hgfjksss5');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + '6578uhgj');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + 'hkjk');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + 'asdsd');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + 'xcvxc');
szCode:=szCode + szTemp[1];
szTemp:= RivestStr(szName + 'ytutyu');
szCode:=szCode + szTemp[1];
------------------------------------------------------------------------
【逆向总结】附上一组可用注册码:
Username : Squn
Serial : 8d4fe49dd
注册码前9位必须为8d4fe49dd.后面可以随意!
算法分析=细心再细心 o(∩_∩)o
|
评分
-
| 参与人数 22 | HB +21 |
THX +11 |
收起
理由
|
|
花盗睡鼠
| + 1 |
|
[吾爱汇编论坛52HB.COM]-学破解防破解，知进攻懂防守！ |
|
Jawon
| |
+ 1 |
|
|
Soul1999
| |
+ 1 |
|
|
后学真
| + 1 |
|
|
|
冷亦飞
| + 1 |
|
|
|
飞刀梦想
| + 1 |
|
|
|
zxjzzh
| + 2 |
|
[吾爱汇编论坛52HB.COM]-吃水不忘打井人，给个评分懂感恩！ |
|
啊啊啊了
| + 1 |
|
|
|
xgbnapsua
| |
+ 1 |
|
|
小猪呼噜噜
| + 2 |
+ 1 |
[吾爱汇编论坛52HB.COM]-学破解防破解，知进攻懂防守！ |
|
jaunic
| + 2 |
|
|
|
梦寻
| |
+ 1 |
[吾爱汇编论坛52HB.COM]-感谢楼主热心分享，小小评分不成敬意！ |
|
playboy
| |
+ 1 |
|
|
上帝的恩赐
| + 2 |
|
[吾爱汇编论坛52HB.COM]-软件反汇编逆向分析，软件安全必不可少！ |
|
ldljlzw
| + 1 |
|
|
|
bnjzzheng
| + 1 |
|
[吾爱汇编论坛52HB.COM]-软件反汇编逆向分析，软件安全必不可少！ |
|
成丰羽
| |
+ 1 |
[吾爱汇编论坛52HB.COM]-感谢楼主热心分享，小小评分不成敬意！ |
|
消逝的过去
| |
+ 1 |
[吾爱汇编论坛52HB.COM]-软件反汇编逆向分析，软件安全必不可少！ |
|
hnymsh
| |
+ 1 |
|
|
lies
| + 1 |
|
|
|
有何不可
| + 1 |
+ 1 |
评分=感恩！简单却充满爱！感谢您的作品！ |
|
逍遥枷锁
| + 4 |
+ 1 |
好人有好报！你的热心我永远不忘！谢谢！ |
查看全部评分
|
[复制链接]
|RSS|手机版|小黑屋|帮助|吾爱汇编
( 
京公网安备11011502005403号 , 京ICP备20003498号-6 )|网站地图
窥视卡
雷达卡
