Txt2Html V2.7.2 (6千字)

標題:Txt2Html V2.7.2 (6千字)

發信人:lq7972 [發短訊息]

時間:2003-09-06 21:18:47

詳細資訊:

Software:Txt2Html V2.7.2
         將文字檔案轉換成html檔案
http://alexey-pr.pisem.net
Tools:TRW2000，微軟Win98
Cracker:lq7972[bruceyu13@sina.com]
Notes:這段時間整理敲入的TXT文字，用上這個工具，覺得不錯，順手PJ了；不知有人寫這個否？不管了，貼出來，主要還是交流、學習～

載入主程式
g
開啟About視窗，輸入使用者名稱和序列號：“1234506789”
Ctrl+N
bpx hmemcpy
g
點"註冊"按鈕，攔住
bc *
pmodule
來到TXT2HTML領空，按6次F12，按F10來到：
019F:0049B817 8B45D4           MOV      EAX,[EBP-2C]            使用者名稱
019F:0049B81A BAE0BC4900       MOV      EDX,0049BCE0
019F:0049B81F E8D893F6FF       CALL     00404BFC
019F:0049B824 0F8507020000     JNZ      NEAR 0049BA31
;。。。。。。
019F:0049BA31 8D55FC           LEA      EDX,[EBP-04]
019F:0049BA34 8B8618030000     MOV      EAX,[ESI+0318]
019F:0049BA3A E8959AFAFF       CALL     004454D4
019F:0049BA3F 8D45C8           LEA      EAX,[EBP-38]
019F:0049BA42 50               PUSH     EAX

019F:0049BA43 B902000000       MOV      ECX,02                  一次取2位
019F:0049BA48 BA02000000       MOV      EDX,02                  從第2位起取
019F:0049BA4D 8B45FC           MOV      EAX,[EBP-04]            輸入的註冊碼
019F:0049BA50 E8BB92F6FF       CALL     00404D10                取出
019F:0049BA55 8B45C8           MOV      EAX,[EBP-38]            第2、3位
019F:0049BA58 E897D5F6FF       CALL     00408FF4                把取出的字元轉為數值～a1
019F:0049BA5D 8BD8             MOV      EBX,EAX

;下面以此依次取第4、5位、第6、7位和第8、9位，並將它們轉為數值～a2、a3、a4
019F:0049BA5F 8D45C4           LEA      EAX,[EBP-3C]
019F:0049BA62 50               PUSH     EAX
019F:0049BA63 B902000000       MOV      ECX,02
019F:0049BA68 BA04000000       MOV      EDX,04
019F:0049BA6D 8B45FC           MOV      EAX,[EBP-04]
019F:0049BA70 E89B92F6FF       CALL     00404D10
019F:0049BA75 8B45C4           MOV      EAX,[EBP-3C]
019F:0049BA78 E877D5F6FF       CALL     00408FF4
019F:0049BA7D 8BF8             MOV      EDI,EAX
019F:0049BA7F 8D45C0           LEA      EAX,[EBP-40]
019F:0049BA82 50               PUSH     EAX
019F:0049BA83 B902000000       MOV      ECX,02
019F:0049BA88 BA06000000       MOV      EDX,06
019F:0049BA8D 8B45FC           MOV      EAX,[EBP-04]
019F:0049BA90 E87B92F6FF       CALL     00404D10
019F:0049BA95 8B45C0           MOV      EAX,[EBP-40]
019F:0049BA98 E857D5F6FF       CALL     00408FF4
019F:0049BA9D 8945F8           MOV      [EBP-08],EAX
019F:0049BAA0 8D45BC           LEA      EAX,[EBP-44]
019F:0049BAA3 50               PUSH     EAX
019F:0049BAA4 B902000000       MOV      ECX,02
019F:0049BAA9 BA08000000       MOV      EDX,08
019F:0049BAAE 8B45FC           MOV      EAX,[EBP-04]
019F:0049BAB1 E85A92F6FF       CALL     00404D10
019F:0049BAB6 8B45BC           MOV      EAX,[EBP-44]
019F:0049BAB9 E836D5F6FF       CALL     00408FF4
019F:0049BABE 8945F4           MOV      [EBP-0C],EAX
019F:0049BAC1 8B45FC           MOV      EAX,[EBP-04]

019F:0049BAC4 E8EF8FF6FF       CALL     00404AB8                輸入的註冊碼長度
019F:0049BAC9 83F80A           CMP      EAX,BYTE +0A            若小於10，
019F:0049BACC 0F857C010000     JNZ      NEAR 0049BC4E           就GameOver
019F:0049BAD2 83C30D           ADD      EBX,BYTE +0D            a1+Dh
019F:0049BAD5 7105             JNO      0049BADC                不溢位就跳
019F:0049BAD7 E8F87EF6FF       CALL     004039D4
019F:0049BADC 83C709           ADD      EDI,BYTE +09            a2+9h
019F:0049BADF 7105             JNO      0049BAE6
019F:0049BAE1 E8EE7EF6FF       CALL     004039D4
019F:0049BAE6 3BDF             CMP      EBX,EDI                 二者若不相等，
019F:0049BAE8 0F8560010000     JNZ      NEAR 0049BC4E           就GameOver
019F:0049BAEE 8B45F8           MOV      EAX,[EBP-08]            a3
019F:0049BAF1 83C015           ADD      EAX,BYTE +15            a3+15h
019F:0049BAF4 7105             JNO      0049BAFB
019F:0049BAF6 E8D97EF6FF       CALL     004039D4
019F:0049BAFB 8B55F4           MOV      EDX,[EBP-0C]            a4
019F:0049BAFE 83C205           ADD      EDX,BYTE +05            a4+5h
019F:0049BB01 7105             JNO      0049BB08
019F:0049BB03 E8CC7EF6FF       CALL     004039D4
019F:0049BB08 3BC2             CMP      EAX,EDX                 二者若不相等，
019F:0049BB0A 0F853E010000     JNZ      NEAR 0049BC4E           就GameOver
019F:0049BB10 B201             MOV      DL,01
;下面寫註冊資訊
;。。。。。。
019F:0049BB7C B8CCBD4900       MOV      EAX,0049BDCC
019F:0049BB81 E87628FAFF       CALL     0043E3FC                成功註冊
;。。。。。。
019F:0049BC4C EB2F             JMP      SHORT 0049BC7D
019F:0049BC4E 6A00             PUSH     BYTE +00
019F:0049BC50 668B0DC0BD4900   MOV      CX,[0049BDC0]
019F:0049BC57 B202             MOV      DL,02
019F:0049BC59 B830BE4900       MOV      EAX,0049BE30
019F:0049BC5E E89927FAFF       CALL     0043E3FC                註冊失敗
019F:0049BC63 33D2             XOR      EDX,EDX
019F:0049BC65 8B8614030000     MOV      EAX,[ESI+0314]
019F:0049BC6B E89498FAFF       CALL     00445504
019F:0049BC70 33D2             XOR      EDX,EDX
019F:0049BC72 8B8618030000     MOV      EAX,[ESI+0318]
019F:0049BC78 E88798FAFF       CALL     00445504
019F:0049BC7D 33C0             XOR      EAX,EAX
019F:0049BC7F 5A               POP      EDX
019F:0049BC80 59               POP      ECX
019F:0049BC81 59               POP      ECX
019F:0049BC82 648910           MOV      [FS:EAX],EDX
;。。。。。。

【總結】
註冊演算法還是比較簡單。下面給出序號產生器(Delphi)
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
//The KeyGen by lq7972,with Delphi
//E-mail:bruceyu13@sina.com

procedure TForm1.Button1Click(Sender: TObject);
var
  S,S1,S2,S3,S4:String;
begin
  S1:=IntToStr(Random(9))+IntToStr(Random(9));
  S2:=IntToStr(StrToInt(S1)+$D-$9);
  S3:=IntToStr(Random(9))+IntToStr(Random(9));
  S4:=IntToStr(StrToInt(S3)+$15-$5);
  If Length(S2) < 2 then
    S2:='0'+S2;
  S:=S1+S2+S3+S4;

  Edit1.text:=IntToStr(Random(9))+S+IntToStr(Random(9));
end;
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Txt2Html V2.7.2 (6千字)

相關文章