网络电视小精灵3.4.9算法分析
从看雪上看到奇怪的注册方式:第一个框不填,第二个框填一个0,注册成功,便下了个最新版,果然如此,安装后竟然出现了一个小蜜蜂通讯软件,还有3721、百度、真棒等垃圾、无耻、卑鄙、下流软件,安装包好几兆,主程序只有不到1M,真BT,看了一下算法,解剖如下:
软件注册码为2段,第一个框内不可以是下列字符:
004824AC /. 55 PUSH EBP
004824AD |. 8BEC MOV EBP,ESP
004824AF |. B9 12000000 MOV ECX,12
004824B4 |> 6A 00 /PUSH 0
004824B6 |. 6A 00 |PUSH 0
004824B8 |. 49 |DEC ECX
004824B9 |.^75 F9 \JNZ SHORT 网络电视.004824B4
004824BB |. 51 PUSH ECX
004824BC |. 53 PUSH EBX
004824BD |. 8BD8 MOV EBX,EAX
004824BF |. 33C0 XOR EAX,EAX
004824C1 |. 55 PUSH EBP
004824C2 |. 68 5A2B4800 PUSH 网络电视.00482B5A
004824C7 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
004824CA |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
004824CD |. 8D55 FC LEA EDX,DWORD PTR SS:[EBP-4]
004824D0 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004824D6 |. E8 39A4FBFF CALL 网络电视.0043C914DS:[
004824DB |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
004824DE |. BA 702B4800 MOV EDX,网络电视.00482B70[EBP ; ASCII "6789"
004824E3 |. E8 1820F8FF CALL 网络电视.00404500B70[
004824E8 |. 75 0F JNZ SHORT 网络电视.004824F9
004824EA |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004824EF |. E8 8065FDFF CALL 网络电视.00458A74DS:[
004824F4 |. E9 43060000 JMP 网络电视.00482B3C DS:
004824F9 |> 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
004824FC |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482502 |. E8 0DA4FBFF CALL 网络电视.0043C914DS:[
00482507 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0048250A |. BA 802B4800 MOV EDX,网络电视.00482B80[EBP ; ASCII "9876"
0048250F |. E8 EC1FF8FF CALL 网络电视.00404500B80[
00482514 |. 75 0F JNZ SHORT 网络电视.00482525
00482516 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048251B |. E8 5465FDFF CALL 网络电视.00458A74DS:[
00482520 |. E9 17060000 JMP 网络电视.00482B3C DS:
00482525 |> 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
00482528 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048252E |. E8 E1A3FBFF CALL 网络电视.0043C914DS:[
00482533 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]
00482536 |. BA 902B4800 MOV EDX,网络电视.00482B90[EBP ; ASCII "666"
0048253B |. E8 C01FF8FF CALL 网络电视.00404500B90[
00482540 |. 75 0F JNZ SHORT 网络电视.00482551
00482542 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482547 |. E8 2865FDFF CALL 网络电视.00458A74DS:[
0048254C |. E9 EB050000 JMP 网络电视.00482B3C DS:
00482551 |> 8D55 F0 LEA EDX,DWORD PTR SS:[EBP-10]
00482554 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048255A |. E8 B5A3FBFF CALL 网络电视.0043C914DS:[
0048255F |. 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10]
00482562 |. BA 9C2B4800 MOV EDX,网络电视.00482B9C[EBP ; ASCII "2008"
00482567 |. E8 941FF8FF CALL 网络电视.00404500B9C[
0048256C |. 75 0F JNZ SHORT 网络电视.0048257D
0048256E |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482573 |. E8 FC64FDFF CALL 网络电视.00458A74DS:[
00482578 |. E9 BF050000 JMP 网络电视.00482B3C DS:
0048257D |> 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14]
00482580 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482586 |. E8 89A3FBFF CALL 网络电视.0043C914DS:[
0048258B |. 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
0048258E |. BA AC2B4800 MOV EDX,网络电视.00482BAC[EBP ; ASCII "4567"
00482593 |. E8 681FF8FF CALL 网络电视.00404500BAC[
00482598 |. 75 0F JNZ SHORT 网络电视.004825A9
0048259A |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048259F |. E8 D064FDFF CALL 网络电视.00458A74DS:[
004825A4 |. E9 93050000 JMP 网络电视.00482B3C DS:
004825A9 |> 8D55 E8 LEA EDX,DWORD PTR SS:[EBP-18]
004825AC |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004825B2 |. E8 5DA3FBFF CALL 网络电视.0043C914DS:[
004825B7 |. 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18]
004825BA |. BA BC2B4800 MOV EDX,网络电视.00482BBC[EBP ; ASCII "3456"
004825BF |. E8 3C1FF8FF CALL 网络电视.00404500BBC[
004825C4 |. 75 0F JNZ SHORT 网络电视.004825D5
004825C6 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004825CB |. E8 A464FDFF CALL 网络电视.00458A74DS:[
004825D0 |. E9 67050000 JMP 网络电视.00482B3C DS:
004825D5 |> 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
004825D8 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004825DE |. E8 31A3FBFF CALL 网络电视.0043C914DS:[
004825E3 |. 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C]
004825E6 |. BA CC2B4800 MOV EDX,网络电视.00482BCC[EBP ; ASCII "79032"
004825EB |. E8 101FF8FF CALL 网络电视.00404500BCC[
004825F0 |. 75 0F JNZ SHORT 网络电视.00482601
004825F2 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004825F7 |. E8 7864FDFF CALL 网络电视.00458A74DS:[
004825FC |. E9 3B050000 JMP 网络电视.00482B3C DS:
00482601 |> 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
00482604 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048260A |. E8 05A3FBFF CALL 网络电视.0043C914DS:[
0048260F |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20]
00482612 |. BA DC2B4800 MOV EDX,网络电视.00482BDC[EBP ; ASCII "7374"
00482617 |. E8 E41EF8FF CALL 网络电视.00404500BDC[
0048261C |. 75 0F JNZ SHORT 网络电视.0048262D
0048261E |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482623 |. E8 4C64FDFF CALL 网络电视.00458A74DS:[
00482628 |. E9 0F050000 JMP 网络电视.00482B3C DS:
0048262D |> 8D55 DC LEA EDX,DWORD PTR SS:[EBP-24]
00482630 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482636 |. E8 D9A2FBFF CALL 网络电视.0043C914DS:[
0048263B |. 8B45 DC MOV EAX,DWORD PTR SS:[EBP-24]
0048263E |. BA EC2B4800 MOV EDX,网络电视.00482BEC[EBP ; ASCII "111"
00482643 |. E8 B81EF8FF CALL 网络电视.00404500BEC[
00482648 |. 75 0F JNZ SHORT 网络电视.00482659
0048264A |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048264F |. E8 2064FDFF CALL 网络电视.00458A74DS:[
00482654 |. E9 E3040000 JMP 网络电视.00482B3C DS:
00482659 |> 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
0048265C |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482662 |. E8 ADA2FBFF CALL 网络电视.0043C914DS:[
00482667 |. 8B45 D8 MOV EAX,DWORD PTR SS:[EBP-28]
0048266A |. BA F82B4800 MOV EDX,网络电视.00482BF8[EBP ; ASCII "103155661"
0048266F |. E8 8C1EF8FF CALL 网络电视.00404500BF8[
00482674 |. 75 0F JNZ SHORT 网络电视.00482685
00482676 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048267B |. E8 F463FDFF CALL 网络电视.00458A74DS:[
00482680 |. E9 B7040000 JMP 网络电视.00482B3C DS:
00482685 |> 8D55 D4 LEA EDX,DWORD PTR SS:[EBP-2C]
00482688 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048268E |. E8 81A2FBFF CALL 网络电视.0043C914DS:[
00482693 |. 8B45 D4 MOV EAX,DWORD PTR SS:[EBP-2C]
00482696 |. BA 0C2C4800 MOV EDX,网络电视.00482C0C[EBP ; ASCII "110"
0048269B |. E8 601EF8FF CALL 网络电视.00404500C0C[
004826A0 |. 75 0F JNZ SHORT 网络电视.004826B1
004826A2 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004826A7 |. E8 C863FDFF CALL 网络电视.00458A74DS:[
004826AC |. E9 8B040000 JMP 网络电视.00482B3C DS:
004826B1 |> 8D55 D0 LEA EDX,DWORD PTR SS:[EBP-30]
004826B4 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004826BA |. E8 55A2FBFF CALL 网络电视.0043C914DS:[
004826BF |. 8B45 D0 MOV EAX,DWORD PTR SS:[EBP-30]
004826C2 |. BA 182C4800 MOV EDX,网络电视.00482C18[EBP ; ASCII "8888"
004826C7 |. E8 341EF8FF CALL 网络电视.00404500C18[
004826CC |. 75 0F JNZ SHORT 网络电视.004826DD
004826CE |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004826D3 |. E8 9C63FDFF CALL 网络电视.00458A74DS:[
004826D8 |. E9 5F040000 JMP 网络电视.00482B3C DS:
004826DD |> 8D55 CC LEA EDX,DWORD PTR SS:[EBP-34]
004826E0 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004826E6 |. E8 29A2FBFF CALL 网络电视.0043C914DS:[
004826EB |. 8B45 CC MOV EAX,DWORD PTR SS:[EBP-34]
004826EE |. BA 282C4800 MOV EDX,网络电视.00482C28[EBP ; ASCII "888"
004826F3 |. E8 081EF8FF CALL 网络电视.00404500C28[
004826F8 |. 75 0F JNZ SHORT 网络电视.00482709
004826FA |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004826FF |. E8 7063FDFF CALL 网络电视.00458A74DS:[
00482704 |. E9 33040000 JMP 网络电视.00482B3C DS:
00482709 |> 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0048270C |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482712 |. E8 FDA1FBFF CALL 网络电视.0043C914DS:[
00482717 |. 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38]
0048271A |. BA 342C4800 MOV EDX,网络电视.00482C34[EBP ; ASCII "123"
0048271F |. E8 DC1DF8FF CALL 网络电视.00404500C34[
00482724 |. 75 0F JNZ SHORT 网络电视.00482735
00482726 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048272B |. E8 4463FDFF CALL 网络电视.00458A74DS:[
00482730 |. E9 07040000 JMP 网络电视.00482B3C DS:
00482735 |> 8D55 C4 LEA EDX,DWORD PTR SS:[EBP-3C]
00482738 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048273E |. E8 D1A1FBFF CALL 网络电视.0043C914DS:[
00482743 |. 8B45 C4 MOV EAX,DWORD PTR SS:[EBP-3C]
00482746 |. BA 402C4800 MOV EDX,网络电视.00482C40[EBP ; ASCII "1234"
0048274B |. E8 B01DF8FF CALL 网络电视.00404500C40[
00482750 |. 75 0F JNZ SHORT 网络电视.00482761
00482752 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482757 |. E8 1863FDFF CALL 网络电视.00458A74DS:[
0048275C |. E9 DB030000 JMP 网络电视.00482B3C DS:
00482761 |> 8D55 C0 LEA EDX,DWORD PTR SS:[EBP-40]
00482764 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048276A |. E8 A5A1FBFF CALL 网络电视.0043C914DS:[
0048276F |. 8B45 C0 MOV EAX,DWORD PTR SS:[EBP-40]
00482772 |. BA 182C4800 MOV EDX,网络电视.00482C18[EBP ; ASCII "8888"
00482777 |. E8 841DF8FF CALL 网络电视.00404500C18[
0048277C |. 75 0F JNZ SHORT 网络电视.0048278D
0048277E |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482783 |. E8 EC62FDFF CALL 网络电视.00458A74DS:[
00482788 |. E9 AF030000 JMP 网络电视.00482B3C DS:
0048278D |> 8D55 BC LEA EDX,DWORD PTR SS:[EBP-44]
00482790 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482796 |. E8 79A1FBFF CALL 网络电视.0043C914DS:[
0048279B |. 8B45 BC MOV EAX,DWORD PTR SS:[EBP-44]
0048279E |. BA 502C4800 MOV EDX,网络电视.00482C50[EBP ; ASCII "9999"
004827A3 |. E8 581DF8FF CALL 网络电视.00404500C50[
004827A8 |. 75 0F JNZ SHORT 网络电视.004827B9
004827AA |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004827AF |. E8 C062FDFF CALL 网络电视.00458A74DS:[
004827B4 |. E9 83030000 JMP 网络电视.00482B3C DS:
004827B9 |> 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
004827BC |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004827C2 |. E8 4DA1FBFF CALL 网络电视.0043C914DS:[
004827C7 |. 8B45 B8 MOV EAX,DWORD PTR SS:[EBP-48]
004827CA |. BA 602C4800 MOV EDX,网络电视.00482C60[EBP ; ASCII "1111"
004827CF |. E8 2C1DF8FF CALL 网络电视.00404500C60[
004827D4 |. 75 0F JNZ SHORT 网络电视.004827E5
004827D6 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004827DB |. E8 9462FDFF CALL 网络电视.00458A74DS:[
004827E0 |. E9 57030000 JMP 网络电视.00482B3C DS:
004827E5 |> 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C]
004827E8 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004827EE |. E8 21A1FBFF CALL 网络电视.0043C914DS:[
004827F3 |. 8B45 B4 MOV EAX,DWORD PTR SS:[EBP-4C]
004827F6 |. BA 702C4800 MOV EDX,网络电视.00482C70[EBP ; ASCII "mazy"
004827FB |. E8 001DF8FF CALL 网络电视.00404500C70[
00482800 |. 75 0F JNZ SHORT 网络电视.00482811
00482802 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482807 |. E8 6862FDFF CALL 网络电视.00458A74DS:[
0048280C |. E9 2B030000 JMP 网络电视.00482B3C DS:
00482811 |> 8D55 B0 LEA EDX,DWORD PTR SS:[EBP-50]
00482814 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048281A |. E8 F5A0FBFF CALL 网络电视.0043C914DS:[
0048281F |. 8B45 B0 MOV EAX,DWORD PTR SS:[EBP-50]
00482822 |. BA 802C4800 MOV EDX,网络电视.00482C80[EBP ; ASCII "WJUQ"
00482827 |. E8 D41CF8FF CALL 网络电视.00404500C80[
0048282C |. 75 0F JNZ SHORT 网络电视.0048283D
0048282E |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482833 |. E8 3C62FDFF CALL 网络电视.00458A74DS:[
00482838 |. E9 FF020000 JMP 网络电视.00482B3C DS:
0048283D |> 8D55 AC LEA EDX,DWORD PTR SS:[EBP-54]
00482840 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482846 |. E8 C9A0FBFF CALL 网络电视.0043C914DS:[
0048284B |. 8B45 AC MOV EAX,DWORD PTR SS:[EBP-54]
0048284E |. BA 902C4800 MOV EDX,网络电视.00482C90[EBP ; ASCII "ugly"
00482853 |. E8 A81CF8FF CALL 网络电视.00404500C90[
00482858 |. 75 0F JNZ SHORT 网络电视.00482869
0048285A |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048285F |. E8 1062FDFF CALL 网络电视.00458A74DS:[
00482864 |. E9 D3020000 JMP 网络电视.00482B3C DS:
00482869 |> 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0048286C |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482872 |. E8 9DA0FBFF CALL 网络电视.0043C914DS:[
00482877 |. 8B45 A8 MOV EAX,DWORD PTR SS:[EBP-58]
0048287A |. BA A02C4800 MOV EDX,网络电视.00482CA0[EBP ; ASCII "UGLY"
0048287F |. E8 7C1CF8FF CALL 网络电视.00404500CA0[
00482884 |. 75 0F JNZ SHORT 网络电视.00482895
00482886 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048288B |. E8 E461FDFF CALL 网络电视.00458A74DS:[
00482890 |. E9 A7020000 JMP 网络电视.00482B3C DS:
00482895 |> 8D55 A4 LEA EDX,DWORD PTR SS:[EBP-5C]
00482898 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048289E |. E8 71A0FBFF CALL 网络电视.0043C914DS:[
004828A3 |. 8B45 A4 MOV EAX,DWORD PTR SS:[EBP-5C]
004828A6 |. BA B02C4800 MOV EDX,网络电视.00482CB0[EBP ; ASCII "qwertyuiopasdfghjklzxcvbnm123456789"
004828AB |. E8 501CF8FF CALL 网络电视.00404500asdf
004828B0 |. 75 0F JNZ SHORT 网络电视.004828C1
004828B2 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004828B7 |. E8 B861FDFF CALL 网络电视.00458A74DS:[
004828BC |. E9 7B020000 JMP 网络电视.00482B3C DS:
004828C1 |> 8D55 A0 LEA EDX,DWORD PTR SS:[EBP-60]
004828C4 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004828CA |. E8 45A0FBFF CALL 网络电视.0043C914DS:[
004828CF |. 8B45 A0 MOV EAX,DWORD PTR SS:[EBP-60]
004828D2 |. BA DC2C4800 MOV EDX,网络电视.00482CDC[EBP ; ASCII "asdfghjkl"
004828D7 |. E8 241CF8FF CALL 网络电视.00404500CDC[
004828DC |. 75 0F JNZ SHORT 网络电视.004828ED
004828DE |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004828E3 |. E8 8C61FDFF CALL 网络电视.00458A74DS:[
004828E8 |. E9 4F020000 JMP 网络电视.00482B3C DS:
004828ED |> 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64]
004828F0 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004828F6 |. E8 19A0FBFF CALL 网络电视.0043C914DS:[
004828FB |. 8B45 9C MOV EAX,DWORD PTR SS:[EBP-64]
004828FE |. BA F02C4800 MOV EDX,网络电视.00482CF0[EBP ; ASCII "VBTH"
00482903 |. E8 F81BF8FF CALL 网络电视.00404500CF0[
00482908 |. 75 0F JNZ SHORT 网络电视.00482919
0048290A |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048290F |. E8 6061FDFF CALL 网络电视.00458A74DS:[
00482914 |. E9 23020000 JMP 网络电视.00482B3C DS:
00482919 |> 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
0048291C |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482922 |. E8 ED9FFBFF CALL 网络电视.0043C914DS:[
00482927 |. 8B45 98 MOV EAX,DWORD PTR SS:[EBP-68]
0048292A |. BA 002D4800 MOV EDX,网络电视.00482D00[EBP ; ASCII "KNBM"
0048292F |. E8 CC1BF8FF CALL 网络电视.00404500D00[
00482934 |. 75 0F JNZ SHORT 网络电视.00482945
00482936 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
0048293B |. E8 3461FDFF CALL 网络电视.00458A74DS:[
00482940 |. E9 F7010000 JMP 网络电视.00482B3C DS:
00482945 |> 8D55 94 LEA EDX,DWORD PTR SS:[EBP-6C]
00482948 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048294E |. E8 C19FFBFF CALL 网络电视.0043C914DS:[
00482953 |. 8B45 94 MOV EAX,DWORD PTR SS:[EBP-6C]
00482956 |. BA 102D4800 MOV EDX,网络电视.00482D10[EBP ; ASCII "00C"
0048295B |. E8 A01BF8FF CALL 网络电视.00404500D10[
00482960 |. 75 0F JNZ SHORT 网络电视.00482971
00482962 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482967 |. E8 0861FDFF CALL 网络电视.00458A74DS:[
0048296C |. E9 CB010000 JMP 网络电视.00482B3C DS:
00482971 |> 8D55 90 LEA EDX,DWORD PTR SS:[EBP-70]
00482974 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
0048297A |. E8 959FFBFF CALL 网络电视.0043C914DS:[
0048297F |. 8B45 90 MOV EAX,DWORD PTR SS:[EBP-70]
00482982 |. BA 1C2D4800 MOV EDX,网络电视.00482D1C[EBP ; ASCII "hzmzy"
00482987 |. E8 741BF8FF CALL 网络电视.00404500D1C[
0048298C |. 75 0F JNZ SHORT 网络电视.0048299D
0048298E |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482993 |. E8 DC60FDFF CALL 网络电视.00458A74DS:[
00482998 |. E9 9F010000 JMP 网络电视.00482B3C DS:
0048299D |> 8D55 8C LEA EDX,DWORD PTR SS:[EBP-74]
004829A0 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004829A6 |. E8 699FFBFF CALL 网络电视.0043C914DS:[
004829AB |. 8B45 8C MOV EAX,DWORD PTR SS:[EBP-74]
004829AE |. BA 2C2D4800 MOV EDX,网络电视.00482D2C[EBP ; ASCII "chinese"
004829B3 |. E8 481BF8FF CALL 网络电视.00404500D2C[
004829B8 |. 75 0F JNZ SHORT 网络电视.004829C9
004829BA |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004829BF |. E8 B060FDFF CALL 网络电视.00458A74DS:[
004829C4 |. E9 73010000 JMP 网络电视.00482B3C DS:
004829C9 |> 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
004829CC |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004829D2 |. E8 3D9FFBFF CALL 网络电视.0043C914DS:[
004829D7 |. 8B45 88 MOV EAX,DWORD PTR SS:[EBP-78]
004829DA |. BA 3C2D4800 MOV EDX,网络电视.00482D3C[EBP ; ASCII "newnewer"
004829DF |. E8 1C1BF8FF CALL 网络电视.00404500D3C[
004829E4 |. 75 0F JNZ SHORT 网络电视.004829F5
004829E6 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
004829EB |. E8 8460FDFF CALL 网络电视.00458A74DS:[
004829F0 |. E9 47010000 JMP 网络电视.00482B3C DS:
004829F5 |> 8D55 84 LEA EDX,DWORD PTR SS:[EBP-7C]
004829F8 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
004829FE |. E8 119FFBFF CALL 网络电视.0043C914DS:[
00482A03 |. 8B45 84 MOV EAX,DWORD PTR SS:[EBP-7C]
00482A06 |. BA 502D4800 MOV EDX,网络电视.00482D50[EBP ; ASCII "chinesejia"
00482A0B |. E8 F01AF8FF CALL 网络电视.00404500"50[
00482A10 |. 75 0F JNZ SHORT 网络电视.00482A21
00482A12 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482A17 |. E8 5860FDFF CALL 网络电视.00458A74DS:[
00482A1C |. E9 1B010000 JMP 网络电视.00482B3C DS:
00482A21 |> 8D55 80 LEA EDX,DWORD PTR SS:[EBP-80]
00482A24 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482A2A |. E8 E59EFBFF CALL 网络电视.0043C914DS:[
00482A2F |. 8B45 80 MOV EAX,DWORD PTR SS:[EBP-80]
00482A32 |. BA 642D4800 MOV EDX,网络电视.00482D64[EBP ; ASCII "KUNG"
00482A37 |. E8 C41AF8FF CALL 网络电视.00404500D64[
00482A3C |. 75 0F JNZ SHORT 网络电视.00482A4D
00482A3E |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482A43 |. E8 2C60FDFF CALL 网络电视.00458A74DS:[
00482A48 |. E9 EF000000 JMP 网络电视.00482B3C DS:
00482A4D |> 8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84]
00482A53 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482A59 |. E8 B69EFBFF CALL 网络电视.0043C914DS:[
00482A5E |. 8B85 7CFFFFFF MOV EAX,DWORD PTR SS:[EBP-84]
00482A64 |. BA 742D4800 MOV EDX,网络电视.00482D74[EBP ; ASCII "abcd"
00482A69 |. E8 921AF8FF CALL 网络电视.00404500D74[
00482A6E |. 75 0F JNZ SHORT 网络电视.00482A7F
00482A70 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482A75 |. E8 FA5FFDFF CALL 网络电视.00458A74DS:[
00482A7A |. E9 BD000000 JMP 网络电视.00482B3C DS:
00482A7F |> 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
00482A85 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482A8B |. E8 849EFBFF CALL 网络电视.0043C914DS:[
00482A90 |. 8B85 78FFFFFF MOV EAX,DWORD PTR SS:[EBP-88]
00482A96 |. BA 842D4800 MOV EDX,网络电视.00482D84[EBP ; ASCII "kong"
00482A9B |. E8 601AF8FF CALL 网络电视.00404500D84[
00482AA0 |. 75 0F JNZ SHORT 网络电视.00482AB1
00482AA2 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482AA7 |. E8 C85FFDFF CALL 网络电视.00458A74DS:[
00482AAC |. E9 8B000000 JMP 网络电视.00482B3C DS:
00482AB1 |> 8D95 74FFFFFF LEA EDX,DWORD PTR SS:[EBP-8C]
00482AB7 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482ABD |. E8 529EFBFF CALL 网络电视.0043C914DS:[
00482AC2 |. 8B85 74FFFFFF MOV EAX,DWORD PTR SS:[EBP-8C]
00482AC8 |. BA 942D4800 MOV EDX,网络电视.00482D94[EBP ; ASCII "yuyu"
00482ACD |. E8 2E1AF8FF CALL 网络电视.00404500D94[
00482AD2 |. 75 0C JNZ SHORT 网络电视.00482AE0
00482AD4 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482AD9 |. E8 965FFDFF CALL 网络电视.00458A74DS:[
00482ADE |. EB 5C JMP SHORT 网络电视.00482B3C
00482AE0 |> 8D95 70FFFFFF LEA EDX,DWORD PTR SS:[EBP-90]
00482AE6 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482AEC |. E8 239EFBFF CALL 网络电视.0043C914DS:[
00482AF1 |. 8B85 70FFFFFF MOV EAX,DWORD PTR SS:[EBP-90]
00482AF7 |. BA A42D4800 MOV EDX,网络电视.00482DA4[EBP ; ASCII "bbschinesejia"
00482AFC |. E8 FF19F8FF CALL 网络电视.00404500jia"
00482B01 |. 75 0C JNZ SHORT 网络电视.00482B0F
00482B03 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482B08 |. E8 675FFDFF CALL 网络电视.00458A74DS:[
00482B0D |. EB 2D JMP SHORT 网络电视.00482B3C
00482B0F |> 8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94]
00482B15 |. 8B83 4C030000 MOV EAX,DWORD PTR DS:[EBX+34C]
00482B1B |. E8 F49DFBFF CALL 网络电视.0043C914DS:[
00482B20 |. 8B85 6CFFFFFF MOV EAX,DWORD PTR SS:[EBP-94]
00482B26 |. BA BC2D4800 MOV EDX,网络电视.00482DBC[EBP ; ASCII "abc"
00482B2B |. E8 D019F8FF CALL 网络电视.00404500DBC[
00482B30 |. 75 0A JNZ SHORT 网络电视.00482B3C
00482B32 |. A1 DCEC4A00 MOV EAX,DWORD PTR DS:[4AECDC]
00482B37 |. E8 385FFDFF CALL 网络电视.00458A74DS:[
00482B3C |> 33C0 XOR EAX,EAX
00482B3E |. 5A POP EDX
00482B3F |. 59 POP ECX
00482B40 |. 59 POP ECX
00482B41 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
00482B44 |. 68 612B4800 PUSH 网络电视.00482B61EAX]
00482B49 |> 8D85 6CFFFFFF LEA EAX,DWORD PTR SS:[EBP-94]
00482B4F |. BA 25000000 MOV EDX,25
00482B54 |. E8 BF15F8FF CALL 网络电视.00404118
00482B59 \. C3 RETN
第一个框的注册码运算:
00481F30 /$ 55 PUSH EBP
00481F31 |. 8BEC MOV EBP,ESP
00481F33 |. 51 PUSH ECX
00481F34 |. 53 PUSH EBX
00481F35 |. 56 PUSH ESI
00481F36 |. 8BF2 MOV ESI,EDX
00481F38 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX 取得第一个框中的注册码。
00481F3B |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00481F3E |. E8 6126F8FF CALL 网络电视.004045A4SS:[
00481F43 |. 33C0 XOR EAX,EAX
00481F45 |. 55 PUSH EBP
00481F46 |. 68 9E1F4800 PUSH 网络电视.00481F9E
00481F4B |. 64:FF30 PUSH DWORD PTR FS:[EAX]
00481F4E |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
00481F51 |. 33DB XOR EBX,EBX
00481F53 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00481F56 |. E8 5924F8FF CALL 网络电视.004043B4SS:[ 取得注册码位数
00481F5B |. 85C0 TEST EAX,EAX
00481F5D |. 76 1C JBE SHORT 网络电视.00481F7B
00481F5F |. BA 01000000 MOV EDX,1
00481F64 |> 8B4D FC /MOV ECX,DWORD PTR SS:[EBP-4]
00481F67 |. 0FB64C11 FF |MOVZX ECX,BYTE PTR DS:[ECX+EDX-1] 取第一位,设为sn1
00481F6C |. 03D9 |ADD EBX,ECX 相加:EBX+ECX,第一位为sn1+0
00481F6E |. 8BCB |MOV ECX,EBX 和移入ECX
00481F70 |. 03C9 |ADD ECX,ECX ECX再相加
00481F72 |. 8D0C49 |LEA ECX,DWORD PTR DS:[ECX+ECX*2] 再运算:ECX+ECX*2
00481F75 |. 8BD9 |MOV EBX,ECX 结果移入EBX
00481F77 |. 42 |INC EDX 计数
00481F78 |. 48 |DEC EAX EAX减1
00481F79 |.^75 E9 \JNZ SHORT 网络电视.00481F64 若没取完就返回累加。
上面注册码运算可以表示为:假设填入的为01,则第一位0:30+0=30,然后:30+30=60,然后60+60*2=120,运算为16进制。
第二位:31+120=151,然后151+151=2A2,然后2A2+2A2*2=7E6。其它位数依此类推。
00481F7B |> 8BC3 MOV EAX,EBX
00481F7D |. 33D2 XOR EDX,EDX
00481F7F |. 52 PUSH EDX
00481F80 |. 50 PUSH EAX
00481F81 |. 8BC6 MOV EAX,ESI
00481F83 |. E8 7C68F8FF CALL 网络电视.00408804 这里计算出第二段注册码
00481F88 |. 33C0 XOR EAX,EAX
00481F8A |. 5A POP EDX
00481F8B |. 59 POP ECX
00481F8C |. 59 POP ECX
00481F8D |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
00481F90 |. 68 A51F4800 PUSH 网络电视.00481FA5EAX]
00481F95 |> 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
00481F98 |. E8 5721F8FF CALL 网络电视.004040F4
00481F9D \. C3 RETN
00481F9E .^E9 D11AF8FF JMP 网络电视.00403A74
00481FA3 .^EB F0 JMP SHORT 网络电视.00481F95
00481FA5 . 5E POP ESI
00481FA6 . 5B POP EBX
00481FA7 . 59 POP ECX
00481FA8 . 5D POP EBP
00481FA9 . C3 RETN
进入计算的00481F83 CALL 00408804:
00408804 /$ 55 PUSH EBP
00408805 |. 8BEC MOV EBP,ESP
00408807 |. 56 PUSH ESI
00408808 |. 89E6 MOV ESI,ESP
0040880A |. 83EC 20 SUB ESP,20
0040880D |. 31C9 XOR ECX,ECX
0040880F |. 50 PUSH EAX
00408810 |. 31D2 XOR EDX,EDX
00408812 |. 8D45 08 LEA EAX,DWORD PTR SS:[EBP+8]
00408815 |. E8 1EFFFFFF CALL 网络电视.00408738 再进入
0040881A |. 89F2 MOV EDX,ESI
0040881C |. 58 POP EAX
0040881D |. E8 C2B9FFFF CALL 网络电视.004041E4
00408822 |. 83C4 20 ADD ESP,20
00408825 |. 5E POP ESI
00408826 |. 5D POP EBP
00408827 \. C2 0800 RETN 8
进入00408815 CALL 00408738
00408738 /$ 08C9 OR CL,CL
0040873A |. 75 30 JNZ SHORT 网络电视.0040876C
0040873C |. B9 0A000000 MOV ECX,0A
00408741 |. F740 04 000000>TEST DWORD PTR DS:[EAX+4],80000000
00408748 |. 74 22 JE SHORT 网络电视.0040876C+4],
0040874A |. FF70 04 PUSH DWORD PTR DS:[EAX+4]
0040874D |. FF30 PUSH DWORD PTR DS:[EAX]
0040874F |. 89E0 MOV EAX,ESP
00408751 |. F71C24 NEG DWORD PTR SS:[ESP]
00408754 |. 835424 04 00 ADC DWORD PTR SS:[ESP+4],0
00408759 |. F75C24 04 NEG DWORD PTR SS:[ESP+4]
0040875D |. E8 0A000000 CALL 网络电视.0040876C 再进入
00408762 |. C646 FF 2D MOV BYTE PTR DS:[ESI-1],2D
00408766 |. 4E DEC ESI
00408767 |. 41 INC ECX
00408768 |. 83C4 08 ADD ESP,8
0040876B |. C3 RETN
进入0040875D CALL 0040876C
0040876C |$ 56 PUSH ESI
0040876D |. 83EC 04 SUB ESP,4
00408770 |. D97C24 02 FSTCW WORD PTR SS:[ESP+2]
00408774 |. D93C24 FSTCW WORD PTR SS:[ESP]
00408777 |. 66:810C24 000F OR WORD PTR SS:[ESP],0F00
0040877D |. D92C24 FLDCW WORD PTR SS:[ESP]
00408780 |. 66:890C24 MOV WORD PTR SS:[ESP],CX
00408784 |. D9E8 FLD1
00408786 |. F740 04 000000>TEST DWORD PTR DS:[EAX+4],80000000
0040878D |. 74 27 JE SHORT 网络电视.004087B6+4],
0040878F |. FF70 04 PUSH DWORD PTR DS:[EAX+4]
00408792 |. FF30 PUSH DWORD PTR DS:[EAX]
00408794 |. 816424 04 FFFF>AND DWORD PTR SS:[ESP+4],7FFFFFFF
0040879C |. 68 FFFFFF7F PUSH 7FFFFFFF
004087A1 |. 68 FFFFFFFF PUSH -1
004087A6 |. DF6C24 08 FILD QWORD PTR SS:[ESP+8]
004087AA |. DF2C24 FILD QWORD PTR SS:[ESP]
004087AD |. D8C2 FADD ST,ST(2)
004087AF |. DEC1 FADDP ST(1),ST
004087B1 |. 83C4 10 ADD ESP,10
004087B4 |. EB 02 JMP SHORT 网络电视.004087B8
004087B6 |> DF28 FILD QWORD PTR DS:[EAX] 装入整数形式的第一段注册码7E6
004087B8 |> DF0424 FILD WORD PTR SS:[ESP] 装入ESP整数形式A
004087BB |. D9C1 FLD ST(1) 把第一段注册码换算成实数2022装入,此为第二段注册码,以后的运算都是骗人的。
004087BD |> 4E /DEC ESI
004087BE |. D9F8 |FPREM
004087C0 |. DF1C24 |FISTP WORD PTR SS:[ESP]
004087C3 |. DCF9 |FDIV ST(1),ST
004087C5 |. 8A0424 |MOV AL,BYTE PTR SS:[ESP]
004087C8 |. 04 30 |ADD AL,30
004087CA |. 3C 3A |CMP AL,3A
004087CC |. 72 02 |JB SHORT 网络电视.004087D0
004087CE |. 04 07 |ADD AL,7
004087D0 |> 8806 |MOV BYTE PTR DS:[ESI],AL
004087D2 |. D9C1 |FLD ST(1)
004087D4 |. D8D3 |FCOM ST(3)
004087D6 |. 9B |WAIT
004087D7 |. DFE0 |FSTSW AX
004087D9 |. 9E |SAHF
004087DA |.^73 E1 \JNB SHORT 网络电视.004087BD
004087DC |. D96C24 02 FLDCW WORD PTR SS:[ESP+2]
004087E0 |. 83C4 04 ADD ESP,4
004087E3 |. DDC3 FFREE ST(3)
004087E5 |. DDC2 FFREE ST(2)
004087E7 |. DDC1 FFREE ST(1)
004087E9 |. DDC0 FFREE ST
004087EB |. 59 POP ECX
004087EC |. 29F1 SUB ECX,ESI
004087EE |. 29CA SUB EDX,ECX
004087F0 |. 76 10 JBE SHORT 网络电视.00408802
004087F2 |. 29D6 SUB ESI,EDX
004087F4 |. B0 30 MOV AL,30
004087F6 |. 01D1 ADD ECX,EDX
004087F8 |. EB 03 JMP SHORT 网络电视.004087FD
004087FA |> 880432 /MOV BYTE PTR DS:[EDX+ESI],AL
004087FD |> 4A DEC EDX
004087FE |.^75 FA \JNZ SHORT 网络电视.004087FA
00408800 |. 8806 MOV BYTE PTR DS:[ESI],AL
00408802 \> C3 RETN
总结:注册码和机器码无关,第一段注册码不能是以下字符:
"6789"
"666" 吉利数都不要?
"9876"
"2008"北京奥林匹克。^_^
"4567"
"3456"
"79032" 作者的生日?
"111"
"7374"
"103155661" 我的机器码。莫非所有机器码都一样?
"110" 没有119、120、122、114、170、121。
"8888"吉利数都不要?
"1234"
"888"吉利数都不要?
"8888"吉利数都不要?
"9999"吉利数都不要?
"1111"
"mazy"
"WJUQ"
"ugly"
"UGLY"
"qwertyuiopasdfghjklzxcvbnm123456789"谁会输入这么长?
"asdfghjkl"
"VBTH"
"KNBM"
"00C"
"hzmzy"
"newnewer"
"chinese" 中国人也不行?
"chinesejia" 中国人家?
"KUNG"
"abcd"
"kong"
"yuyu"
"bbschinesejia" 这是那个论坛?
"abc"
"123"
最经典的787878怎么没有?^_^
第二段的注册码通过第一段注册码得出,运算可以表示为:假设第一段为01,则进行16进制运算:第一位0:30+0=30,然后:30+30=60,然后60+60*2=120。
第二位:31+120=151,然后151+151=2A2,然后2A2+2A2*2=7E6。其它位数依此类推。最后把得数换算成实数即为第二段注册码,怎么换算?就是10进制。^_^
比如01-2022就是一组可用注册码,还有最经典的787878-3087228。
这个软件不会检查是否输入注册码,因此,第一个框中不填,第二个框中就只用一个0就可以搞定了,因为第一个框中没有数据,再计算也只是一个0。
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课