XXX网络电视 1.0 注册算法分析+VB注册机源码

冷血书生 · 发表于 2006-10-16 20:01:49

【破解日期】 2006年10月16日
【破解作者】冷血书生
【作者邮箱】暂没
【作者主页】 hxxp://www.126sohu.com
【使用工具】 OD
【破解平台】 Win9x/NT/2000/XP
【软件名称】 3hi网络电视 1.0
【下载地址】 http://www.onlinedown.net/soft/53037.htm
【软件简介】功能简介:提供大量的网络电视节目,可免费在线观看。(频道列表定期更新,可保证丰富的节目资源)
操作方法:运行程序后，在频道列表中选择节目,双击或点“立即播放”按钮即可播放。点“更新频道列表”按钮可以下载最新的节目频道列表。
注意事项:系统需要安装 Windows Media Player 9 及以上版本播放器。宽带网络速率最好保证在 512k 以上。

【软件大小】 1553KB
【加壳方式】无
【破解声明】我是一只小菜鸟，偶得一点心得，愿与大家分享：）
--------------------------------------------------------------------------------
【破解内容】

00418E32 mov ecx,3hi网络?00433028             ; 计算机名
00418E37 call esi
00418E39 mov edi,dword ptr ds:[<&MSVBVM60.__vb>; MSVBVM60.__vbaFreeVar
00418E3F lea ecx,dword ptr ss:[ebp-2C]
00418E42 call edi
00418E44 lea ecx,dword ptr ss:[ebp-2C]
00418E47 push 0
00418E49 push ecx
00418E4A call dword ptr ds:[<&MSVBVM60.#608>]  ; MSVBVM60.rtcVarBstrFromAnsi
00418E50 push 0
00418E52 push -1
00418E54 push 1
00418E56 lea edx,dword ptr ss:[ebp-2C]
00418E59 push 3hi网络?00405880
00418E5E push edx
00418E5F lea eax,dword ptr ss:[ebp-1C]
00418E62 push eax
00418E63 call dword ptr ds:[<&MSVBVM60.__vbaSt>; MSVBVM60.__vbaStrVarVal
00418E69 mov ecx,dword ptr ds:[433028]       ; 计算机名
00418E6F push eax
00418E70 push ecx
00418E71 call dword ptr ds:[<&MSVBVM60.#712>]  ; MSVBVM60.rtcReplace
00418E77 mov edx,eax
00418E79 mov ecx,3hi网络?00433028
00418E7E call esi
00418E80 lea ecx,dword ptr ss:[ebp-1C]
00418E83 call dword ptr ds:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeStr
00418E89 lea ecx,dword ptr ss:[ebp-2C]
00418E8C call edi
00418E8E lea edx,dword ptr ss:[ebp-4C]
00418E91 lea eax,dword ptr ss:[ebp-2C]
00418E94 push edx
00418E95 push eax
00418E96 mov dword ptr ss:[ebp-44],3hi网络?00433>
00418E9D mov dword ptr ss:[ebp-4C],4008
00418EA4 call dword ptr ds:[<&MSVBVM60.#520>]  ; MSVBVM60.rtcTrimVar
00418EAA lea ecx,dword ptr ss:[ebp-2C]
00418EAD push ecx
00418EAE call ebx
00418EB0 mov edx,eax
00418EB2 mov ecx,3hi网络?00433028
00418EB7 call esi
00418EB9 lea ecx,dword ptr ss:[ebp-2C]
00418EBC call edi
00418EBE lea edx,dword ptr ss:[ebp-4C]
00418EC1 lea eax,dword ptr ss:[ebp-2C]
00418EC4 push edx
00418EC5 push eax
00418EC6 mov dword ptr ss:[ebp-44],3hi网络?00433>
00418ECD mov dword ptr ss:[ebp-4C],4008
00418ED4 call dword ptr ds:[<&MSVBVM60.#518>]  ; MSVBVM60.rtcLowerCaseVar
00418EDA lea ecx,dword ptr ss:[ebp-2C]       /// 将计算机名大写转小写
00418EDD push ecx
00418EDE call ebx
00418EE0 mov edx,eax                         ;
00418EE2 mov ecx,3hi网络?00433028
00418EE7 call esi
00418EE9 lea ecx,dword ptr ss:[ebp-2C]
00418EEC call edi
00418EEE mov edx,3hi网络?004062EC
00418EF3 lea ecx,dword ptr ss:[ebp-18]
00418EF6 call dword ptr ds:[<&MSVBVM60.__vbaSt>; MSVBVM60.__vbaStrCopy
00418EFC mov edx,dword ptr ds:[433028]
00418F02 push edx
00418F03 call dword ptr ds:[<&MSVBVM60.__vbaLe>; MSVBVM60.__vbaLenBstr
00418F09 mov edi,eax
00418F0B test edi,edi
00418F0D jle 3hi网络?00418FB2
00418F13 lea eax,dword ptr ss:[ebp-2C]
00418F16 lea ecx,dword ptr ss:[ebp-4C]
00418F19 push eax
00418F1A push edi
00418F1B lea edx,dword ptr ss:[ebp-3C]
00418F1E push ecx
00418F1F push edx
00418F20 mov dword ptr ss:[ebp-24],1
00418F27 mov dword ptr ss:[ebp-2C],2
00418F2E mov dword ptr ss:[ebp-44],3hi网络?00433>
00418F35 mov dword ptr ss:[ebp-4C],4008
00418F3C call dword ptr ds:[<&MSVBVM60.#632>]  ; MSVBVM60.rtcMidCharVar
00418F42 lea eax,dword ptr ss:[ebp-3C]
00418F45 lea ecx,dword ptr ss:[ebp-1C]
00418F48 push eax
00418F49 push ecx
00418F4A call dword ptr ds:[<&MSVBVM60.__vbaSt>; MSVBVM60.__vbaStrVarVal
00418F50 push eax
00418F51 call dword ptr ds:[<&MSVBVM60.#516>]  ; MSVBVM60.rtcAnsiValueBstr
00418F57 mov ecx,eax                         ; 倒取计算机名ASCII值
00418F59 call dword ptr ds:[<&MSVBVM60.__vbaI2>; MSVBVM60.__vbaI2Abs
00418F5F mov edx,dword ptr ss:[ebp-18]
00418F62 push edx
00418F63 movsx ebx,ax                         ;
00418F66 call dword ptr ds:[<&MSVBVM60.__vbaI4>; MSVBVM60.__vbaI4Str
00418F6C add ebx,eax                         ; 累加
00418F6E jo 3hi网络?004190BD
00418F74 push ebx
00418F75 call dword ptr ds:[<&MSVBVM60.__vbaSt>; MSVBVM60.__vbaStrI4
00418F7B mov edx,eax                         ;
00418F7D lea ecx,dword ptr ss:[ebp-18]
00418F80 call esi
00418F82 lea ecx,dword ptr ss:[ebp-1C]
00418F85 call dword ptr ds:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeStr
00418F8B lea eax,dword ptr ss:[ebp-3C]
00418F8E lea ecx,dword ptr ss:[ebp-2C]
00418F91 push eax
00418F92 push ecx
00418F93 push 2
00418F95 call dword ptr ds:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeVarList
00418F9B mov ebx,dword ptr ds:[<&MSVBVM60.__vb>; MSVBVM60.__vbaStrVarMove
00418FA1 add esp,0C
00418FA4 sub edi,1
00418FA7 jo 3hi网络?004190BD
00418FAD jmp 3hi网络?00418F0B                   ; 循环计算
00418FB2 mov edx,dword ptr ss:[ebp-18]       ; 计算结果
00418FB5 mov edi,dword ptr ds:[<&MSVBVM60.__vb>; MSVBVM60.__vbaStrCat
00418FBB push edx
00418FBC push 3hi网络?004062F4                ; UNICODE "061011" /// 固定字符串
00418FC1 call edi
00418FC3 mov dword ptr ss:[ebp-24],eax       ; 计算结果与固定字符串连接
00418FC6 lea eax,dword ptr ss:[ebp-2C]
00418FC9 push 6
00418FCB lea ecx,dword ptr ss:[ebp-3C]
00418FCE push eax
00418FCF push ecx
00418FD0 mov dword ptr ss:[ebp-2C],8
00418FD7 call dword ptr ds:[<&MSVBVM60.#617>]  ; MSVBVM60.rtcLeftCharVar
00418FDD lea edx,dword ptr ss:[ebp-3C]
00418FE0 push edx
00418FE1 call ebx
00418FE3 mov edx,eax                         ; 取前六位
00418FE5 lea ecx,dword ptr ss:[ebp-18]
00418FE8 call esi
00418FEA lea eax,dword ptr ss:[ebp-3C]
00418FED lea ecx,dword ptr ss:[ebp-2C]
00418FF0 push eax
00418FF1 push ecx
00418FF2 push 2
00418FF4 call dword ptr ds:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeVarList
00418FFA mov edx,dword ptr ss:[ebp-18]       ;
00418FFD add esp,0C
00419000 push edx
00419001 call dword ptr ds:[<&MSVBVM60.__vbaI4>; MSVBVM60.__vbaI4Str
00419007 mov dword ptr ss:[ebp-24],eax       ; 转为16进制
0041900A lea eax,dword ptr ss:[ebp-2C]
0041900D lea ecx,dword ptr ss:[ebp-3C]
00419010 push eax
00419011 push ecx
00419012 mov dword ptr ss:[ebp-2C],3
00419019 call dword ptr ds:[<&MSVBVM60.#573>]  ; MSVBVM60.rtcHexVarFromVar
0041901F lea edx,dword ptr ss:[ebp-3C]
00419022 push edx
00419023 call ebx
00419025 mov edx,eax                         ;
00419027 lea ecx,dword ptr ss:[ebp-18]
0041902A call esi
0041902C lea eax,dword ptr ss:[ebp-3C]
0041902F lea ecx,dword ptr ss:[ebp-2C]
00419032 push eax
00419033 push ecx
00419034 push 2
00419036 call dword ptr ds:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeVarList
0041903C mov edx,dword ptr ss:[ebp-18]
0041903F add esp,0C
00419042 push 3hi网络?00406308                ; UNICODE "TV" /// 固定字符串
00419047 push edx
00419048 call edi                               ; 固定字符串TV与前面的结果连接
0041904A mov edx,eax
0041904C lea ecx,dword ptr ss:[ebp-18]
0041904F call esi
00419051 mov eax,dword ptr ss:[ebp+8]
00419054 mov edx,dword ptr ss:[ebp-18]
00419057 mov ecx,dword ptr ds:[eax]
00419059 push ecx
0041905A push edx
0041905B call dword ptr ds:[<&MSVBVM60.__vbaSt>; MSVBVM60.__vbaStrCmp  /// 经典真假码比较
00419061 test eax,eax
00419063 jnz short 3hi网络?0041907C
00419065 mov edx,dword ptr ss:[ebp-18]
00419068 mov ecx,3hi网络?0043302C
0041906D call dword ptr ds:[<&MSVBVM60.__vbaSt>; MSVBVM60.__vbaStrCopy
00419073 mov word ptr ds:[433030],0FFFF
0041907C push 3hi网络?004190AA                ; ASCII "婱餩^d?"
00419081 jmp short 3hi网络?004190A0
00419083 lea ecx,dword ptr ss:[ebp-1C]
00419086 call dword ptr ds:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeStr
0041908C lea eax,dword ptr ss:[ebp-3C]
0041908F lea ecx,dword ptr ss:[ebp-2C]
00419092 push eax
00419093 push ecx
00419094 push 2
00419096 call dword ptr ds:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeVarList
0041909C add esp,0C
0041909F retn

////////////////////////////////////////////////////////////////////////////////////////////

VB注册机源码:

Private Sub Command1_Click()
Dim a, b, c As String
Dim i, sum As Integer
a = StrReverse(Text1.Text)
Length = Len(LCase(a))
For i = 1 To Length
sum = sum + Asc(Mid(LCase(a), i, 1))
Next i
b = sum & "061011"
b = Hex(Mid(b, 1, 6))
c = "TV" & b
Text2.Text = c
End Sub
--------------------------------------------------------------------------------
【版权声明】本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!

qq500com · 发表于 2006-10-16 22:54:34

看不懂也顶！！

bfqyygy · 发表于 2006-10-16 23:20:16

好简单的算法呀!!!:lol:

zyhxhw · 发表于 2006-10-24 21:49:49

还能看到有人在破解,真高兴,谢谢了!

avel · 发表于 2007-1-24 15:56:15

学习~!
嘿嘿!!!!

madshime · 发表于 2007-1-30 04:03:45

还不会很算法:L

glts · 发表于 2007-2-1 16:28:24

学习书生的方法

chadd · 发表于 2007-2-2 15:53:29

a = StrReverse(Text1.Text) 中的 StrReverse 是什么意思。

liaopp · 发表于 2007-2-2 17:04:08

好复杂呀，不过要支持一下

杜杜哎哟 · 发表于 2007-2-3 13:34:28

偶先攻破脱壳再说算法的事

		自动登录	找回密码
密码			加入我们

[原创] XXX网络电视 1.0 注册算法分析+VB注册机源码

评分

相关帖子