- UID
- 5581
注册时间2005-12-20
阅读权限40
最后登录1970-1-1
独步武林
 
该用户从未签到
|
tailsman、supercleaner、winzip等
适合初学者
放上一篇老的教程 新版注册算法似乎没变 供参考
SuperCleaner 2.0破解纪录及注册机
SuperCleaner 2.0 (2001.3.22)
344KB
http://www.firase.com/download/cleansetup.exe
帮助用户清洗他们的计算机硬盘内不必要的文件的程序。它能扫描你的系统让你选择不再需要的文件进行删除。并能备份文件已避免你误删除有用的文件，此备份功能将不必要的文件扔进再循环箱，这样可以让你再必要的时候恢复信息.
Name:Free User Code:1175-43316-941-11662
姓名 aa 注册码 270-10088-218-2716
1) 追注册码
:00409FDD E8AE000000 call 0040A090 注册码计算部分=>
:00409FE2 8B8C2414010000 mov ecx, dword ptr [esp+00000114]
:00409FE9 83C408 add esp, 00000008
:00409FEC 8D442404 lea eax, dword ptr [esp+04]
:00409FF0 50 push eax *** 一处真码
:00409FF1 51 push ecx ***一处假码
* Reference To: KERNEL32.lstrcmpA, Ord:0329h
|
:00409FF2 FF153C614100 Call dword ptr [0041613C]
:00409FF8 85C0 test eax, eax
:00409FFA 0F94C0 sete al
2)算法分析
注册码由四部分组成 a1-a2-a3-a4
:0040A090 81EC00010000 sub esp, 00000100
:0040A096 A040B94100 mov al, byte ptr [0041B940]
:0040A09B 53 push ebx
:0040A09C 55 push ebp
:0040A09D 56 push esi
:0040A09E 57 push edi
:0040A09F 88442410 mov byte ptr [esp+10], al
:0040A0A3 B93F000000 mov ecx, 0000003F
:0040A0A8 33C0 xor eax, eax
:0040A0AA 8D7C2411 lea edi, dword ptr [esp+11]
:0040A0AE F3 repz
:0040A0AF AB stosd
:0040A0B0 66AB stosw
:0040A0B2 AA stosb
:0040A0B3 8BBC2414010000 mov edi, dword ptr [esp+00000114]
:0040A0BA 57 push edi
* Reference To: KERNEL32.lstrlenA, Ord:0335h
|
:0040A0BB FF15D0614100 Call dword ptr [004161D0]
:0040A0C1 8BF0 mov esi, eax
:0040A0C3 33C9 xor ecx, ecx
:0040A0C5 33C0 xor eax, eax
:0040A0C7 85F6 test esi, esi esi=姓名长度
:0040A0C9 7E13 jle 0040A0DE
:0040A0CB 8B15FC894100 mov edx, dword ptr [004189FC] 查4189FC,edx=26(十六进制,后同)
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A0DC(C)
| 计算a1(第一部分)
:0040A0D1 0FBE1C38 movsx ebx, byte ptr [eax+edi]---------------------/ movsx表示取一个字符,
写注册机很常用的一个标志性语句
:0040A0D5 03DA add ebx, edx ebx+edx=ebx+26,相加后的结果存入ebx
:0040A0D7 03CB add ecx, ebx ecx+ebx,相加后的结果存入ecx,ecx相当于储数器
:0040A0D9 40 inc eax eax相当于计数器
:0040A0DA 3BC6 cmp eax, esi 比较姓名中的字母是否被取完
:0040A0DC 7CF3 jl 0040A0D1----------------------------------------\ 重复循环
以上逐个取姓名字母asci值+26,求和,存入ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A0C9(C)
|
:0040A0DE 8B9C2418010000 mov ebx, dword ptr [esp+00000118]
:0040A0E5 51 push ecx
* Possible StringData Ref from Data Obj ->"%ld-"
|
:0040A0E6 68448A4100 push 00418A44
:0040A0EB 53 push ebx
* Reference To: USER32.wsprintfA, Ord:02B3h
|
:0040A0EC FF15D4624100 Call dword ptr [004162D4]
:0040A0F2 83C40C add esp, 0000000C
:0040A0F5 33C9 xor ecx, ecx
:0040A0F7 33C0 xor eax, eax
:0040A0F9 85F6 test esi, esi
:0040A0FB 7E14 jle 0040A111
:0040A0FD 8B15008A4100 mov edx, dword ptr [00418A00] edx=34
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A10F(C)
| 计算a2(第二部分)
:0040A103 0FBE2C38 movsx ebp, byte ptr [eax+edi]--------------------/
:0040A107 0FAFEA imul ebp, edx
:0040A10A 03CD add ecx, ebp
:0040A10C 40 inc eax
:0040A10D 3BC6 cmp eax, esi
:0040A10F 7CF2 jl 0040A103--------------------------------------\
以上逐个取姓名字母asci值乘34,求和,存入ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A0FB(C)
|
:0040A111 51 push ecx
:0040A112 8D4C2414 lea ecx, dword ptr [esp+14]
* Possible StringData Ref from Data Obj ->"%ld-"
|
:0040A116 68448A4100 push 00418A44
:0040A11B 51 push ecx
* Reference To: USER32.wsprintfA, Ord:02B3h
|
:0040A11C FF15D4624100 Call dword ptr [004162D4]
:0040A122 83C40C add esp, 0000000C
:0040A125 8D542410 lea edx, dword ptr [esp+10]
:0040A129 52 push edx
:0040A12A 53 push ebx
* Reference To: KERNEL32.lstrcatA, Ord:0326h
|
:0040A12B FF15F0604100 Call dword ptr [004160F0]
:0040A131 33C9 xor ecx, ecx
:0040A133 33C0 xor eax, eax
:0040A135 85F6 test esi, esi
:0040A137 7E13 jle 0040A14C
:0040A139 8B15048A4100 mov edx, dword ptr [00418A04] edx=0C
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A14A(C)
| 计算a3(第三部分)
:0040A13F 0FBE2C38 movsx ebp, byte ptr [eax+edi]--------------------------/
:0040A143 03EA add ebp, edx
:0040A145 03CD add ecx, ebp
:0040A147 40 inc eax
:0040A148 3BC6 cmp eax, esi
:0040A14A 7CF3 jl 0040A13F---------------------------------------------\
以上逐个取姓名字母asci值+0C,求和,存入ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A137(C)
|
:0040A14C 51 push ecx
:0040A14D 8D442414 lea eax, dword ptr [esp+14]
* Possible StringData Ref from Data Obj ->"%ld-"
|
:0040A151 68448A4100 push 00418A44
:0040A156 50 push eax
* Reference To: USER32.wsprintfA, Ord:02B3h
|
:0040A157 FF15D4624100 Call dword ptr [004162D4]
:0040A15D 83C40C add esp, 0000000C
:0040A160 8D4C2410 lea ecx, dword ptr [esp+10]
:0040A164 51 push ecx
:0040A165 53 push ebx
* Reference To: KERNEL32.lstrcatA, Ord:0326h
|
:0040A166 FF15F0604100 Call dword ptr [004160F0]
:0040A16C 33C9 xor ecx, ecx
:0040A16E 33C0 xor eax, eax
:0040A170 85F6 test esi, esi
:0040A172 7E14 jle 0040A188
:0040A174 8B15088A4100 mov edx, dword ptr [00418A08] edx=0E
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A186(C)
| 计算a4(第四部分)
:0040A17A 0FBE2C38 movsx ebp, byte ptr [eax+edi]-------------------------/
:0040A17E 0FAFEA imul ebp, edx
:0040A181 03CD add ecx, ebp
:0040A183 40 inc eax
:0040A184 3BC6 cmp eax, esi
:0040A186 7CF2 jl 0040A17A--------------------------------------------\
以上逐个取姓名字母asci值乘0E,求和,存入ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A172(C)
|
:0040A188 51 push ecx
:0040A189 8D542414 lea edx, dword ptr [esp+14]
* Possible StringData Ref from Data Obj ->"%ld"
|
:0040A18D 68408A4100 push 00418A40
:0040A192 52 push edx
* Reference To: USER32.wsprintfA, Ord:02B3h
|
:0040A193 FF15D4624100 Call dword ptr [004162D4]
:0040A199 83C40C add esp, 0000000C
:0040A19C 8D442410 lea eax, dword ptr [esp+10]
:0040A1A0 50 push eax
:0040A1A1 53 push ebx
* Reference To: KERNEL32.lstrcatA, Ord:0326h
|
:0040A1A2 FF15F0604100 Call dword ptr [004160F0]
:0040A1A8 5F pop edi
:0040A1A9 5E pop esi
:0040A1AA 5D pop ebp
:0040A1AB 5B pop ebx
:0040A1AC 81C400010000 add esp, 00000100
:0040A1B2 C3 ret
3)注册机(TC2.0)
#include <stdio.h>
int main(void)
{
int counter=0;
unsigned long a1,a2,a3,a4=0;
unsigned long b=0;
unsigned long c=0;
unsigned char yourname[63];
printf("SuperClean2.0 KeyGen by guodong\n");
printf("http://fpx.yeah.net\n");
printf("***************************\n");
printf("please enter your name:");
gets(yourname);
for(counter=0;yourname[counter]!='\0';++counter)
{
b=yourname[counter];
c=b+c;
}
a1=c+counter*0x26;
a2=c*0x34;
a3=c+counter*0x0c;
a4=c*0x0e;
printf("Your name is:");
puts(yourname);
printf("Your register number is:%ld-%ld-%ld-%ld\n",a1,a2,a3,a4);
printf("bye");
return(0);
}
[ 本帖最后由 风飘雪 于 2006-5-16 10:22 编辑 ] |
|
IP卡
发表于 2006-1-16 14:58:46
提升卡
置顶卡
变色卡
千斤顶
显身卡
发表于 2006-1-16 17:03:40
发表于 2006-1-20 09:02:18
发表于 2006-2-15 10:05:17