4U WMA MP3 Converter 5.0.5
4U WMA MP3 Converter 5.0.5【加密方式】 用户名和注册码
【破解工具】 FlyOD V1.10、
【软件限制】 20天限制
【下载地址】 http://www.shareware.cn/
【破解平台】 Microsoft Windows XP SP2
Borland Delphi 6.0 - 7.0编写。
此文章由下向上看
用od的查字串的插件
0048DC8D |.55 push ebp
0048DC8E |.68 61DD4800 push WMAMP3Co.0048DD61
0048DC93 |.64:FF30 push dword ptr fs:
0048DC96 |.64:8920 mov dword ptr fs:,esp
0048DC99 |.33DB xor ebx,ebx
0048DC9B |.BA 78DD4800 mov edx,WMAMP3Co.0048DD78
0048DCA0 |.8B45 FC mov eax,dword ptr ss:
0048DCA3 |.E8 2C70F7FF call WMAMP3Co.00404CD4
0048DCA8 |.85C0 test eax,eax
0048DCAA |.7E 0B jle short WMAMP3Co.0048DCB7
0048DCAC |.8D45 F8 lea eax,dword ptr ss:
0048DCAF |.8B55 FC mov edx,dword ptr ss:
0048DCB2 |.E8 C16AF7FF call WMAMP3Co.00404778
0048DCB7 |>8D4D F4 lea ecx,dword ptr ss:
0048DCBA |.8B55 FC mov edx,dword ptr ss:
Stack ss:=00DF30EC, (ASCII "chenli")
edx=0048DD78 (WMAMP3Co.0048DD78),
0048DCBD |.8BC6 mov eax,esi
0048DCBF |.E8 60010000 call WMAMP3Co.0048DE24
0048DCC4 |.8B55 F4 mov edx,dword ptr ss:
Stack ss:=00DF8AD8, (ASCII "0A0D5-3B461-BD53E-E876B-0D53B")---真码在这
edx=0013EA60
0048DCC7 |.8B45 F8 mov eax,dword ptr ss:
Stack ss:=00DF8A10, (ASCII "987654321")
eax=00000000
0048DCCA |.E8 D5ADF7FF call WMAMP3Co.00408AA4
0048DCCF |.85C0 test eax,eax--------------往上找合适的断点48DC8D合适
0048DCD1 |.75 44 jnz short WMAMP3Co.0048DD17--------------在这里呢
0048DCD3 |.8B4D F8 mov ecx,dword ptr ss:
0048DCD6 |.8B55 FC mov edx,dword ptr ss:
0048DCD9 |.8BC6 mov eax,esi
0048DCDB |.E8 D4F1FFFF call WMAMP3Co.0048CEB4
0048DCE0 |.84C0 test al,al
0048DCE2 |.74 62 je short WMAMP3Co.0048DD46
0048DCE4 |.B3 01 mov bl,1
0048DCE6 |.6A 40 push 40
0048DCE8 |.8D55 F0 lea edx,dword ptr ss:
0048DCEB |.A1 ECEF4B00 mov eax,dword ptr ds:
0048DCF0 |.8B00 mov eax,dword ptr ds:
0048DCF2 |.E8 0195FDFF call WMAMP3Co.004671F8
0048DCF7 |.8B45 F0 mov eax,dword ptr ss:
0048DCFA |.E8 916EF7FF call WMAMP3Co.00404B90
0048DCFF |.50 push eax ; |Title
0048DD00 |.68 A4DD4800 push WMAMP3Co.0048DDA4 ; |Text = "Registration
success, Thanks for your registration."
0048DD05 |.A1 ECEF4B00 mov eax,dword ptr ds: ; |
0048DD0A |.8B00 mov eax,dword ptr ds: ; |
0048DD0C |.8B40 30 mov eax,dword ptr ds: ; |
0048DD0F |.50 push eax ; |hOwner
0048DD10 |.E8 4399F7FF call <jmp.&user32.MessageBoxA> ; \MessageBoxA
0048DD15 |.EB 2F jmp short WMAMP3Co.0048DD46
0048DD17 |>6A 10 push 10-------------------------再向上看来自48DCD1
0048DD19 |.8D55 EC lea edx,dword ptr ss:
0048DD1C |.A1 ECEF4B00 mov eax,dword ptr ds:
0048DD21 |.8B00 mov eax,dword ptr ds:
0048DD23 |.E8 D094FDFF call WMAMP3Co.004671F8
0048DD28 |.8B45 EC mov eax,dword ptr ss:
0048DD2B |.E8 606EF7FF call WMAMP3Co.00404B90
0048DD30 |.50 push eax ; |Title
0048DD31 |.68 D8DD4800 push WMAMP3Co.0048DDD8 ; |Text = "Invalid
Registration Code!
Please enter an available Registration Code."---------------这是错误提示，向上看来自48dd17
0048DD36 |.A1 ECEF4B00 mov eax,dword ptr ds: ; |
0048DD3B |.8B00 mov eax,dword ptr ds: ; |
0048DD3D |.8B40 30 mov eax,dword ptr ds: ; |
0048DD40 |.50 push eax ; |hOwner
0048DD41 |.E8 1299F7FF call <jmp.&user32.MessageBoxA> ; \MessageBoxA
[ 本帖最后由 tigerisme 于 2006-8-27 08:44 编辑 ] 学习收藏了。学习收藏了。 学习了。谢谢分享
页:
[1]