菜鳥破解實錄(16)之 CD Box Labeler Pro
軟體名稱：CD Box Labeler Pro
版 本：v1.4.1.806
簡 介：
相當簡單的CD外盒標籤的製作軟體，內建一個製作精靈，可一步步輕而易舉的完成製作，您只需選好圖片，打入文字、調調文字的顏色及大小，立即完成一個漂亮的CD外盒標籤，且可將它列印出來使用。
作 者：xiA Qin
級 別：很菜....很菜....
解密日前：2000年8月2日
解密工具：Trw2000 1.22
破解目的：學習註冊碼的破解。（簡單）
說 明：
本文是在我的軟體破解記錄上整理出來的。如若有紕漏，請各位大俠多指教！
首先執行CD Box Labeler Pro
輸入註冊資訊
name: xiA Qin
&任意輸入
Serial Number: 9876543210 &任意輸入
下指令bpx hmemcpy //下中斷點
按F5回到程式，按確定，這時會被Trw2000攔截到。
下指令bd * //屏障中斷點
下指令pmodule //直接跳到程式的領空
按F10來到下面指令
.................................
015F:00522E0D MOV EAX,[EBP-04]
015F:00522E10 CALL 00404128
015F:00522E15 XOR ESI,ESI
015F:00522E17 MOV EBX,EAX
015F:00522E19 TEST EBX,EBX
015F:00522E1B JLE 00522E3E
015F:00522E1D INC ESI
015F:00522E1E LEA EAX,[EBP-08]
015F:00522E21 PUSH EAX
015F:00522E22 MOV ECX,00000001
015F:00522E27 MOV EDX,ESI
015F:00522E29 MOV EAX,[EBP-04]
015F:00522E2C CALL 00404330
015F:00522E31 LEA EDX,[EBP-08]
015F:00522E34 MOV EAX,EDI
015F:00522E36 CALL 00522490
015F:00522E3B DEC EBX
015F:00522E3C JNZ 00522E1D
015F:00522E3E MOV EAX,[005C3F08]
015F:00522E43 IMUL EBX,[EAX],0000037D
015F:00522E49 MOV EAX,[005C3F08]
015F:00522E4E IMUL ESI,[EAX],000005B3
015F:00522E54 PUSH 00523084
015F:00522E59 LEA EDX,[EBP-24]
015F:00522E5C MOV EAX,EBX
015F:00522E5E CALL 00409170
//生成註冊碼的中間部分:260756
015F:00522E63 PUSH DWORD PTR [EBP-24]
015F:00522E66 PUSH 00523094
015F:00522E6B LEA EDX,[EBP-28]
015F:00522E6E MOV EAX,ESI
015F:00522E70 CALL 00409170
//生成註冊碼的後面部分:426028
015F:00522E75 PUSH DWORD PTR [EBP-28]
015F:00522E78 LEA EAX,[EBP-10]
015F:00522E7B MOV EDX,00000004
015F:00522E80 CALL 004041E8
<-註冊碼的組合。
015F:00522E85 MOV EAX,[EBP-0C]
//輸入的註冊碼 D EAX
015F:00522E88 MOV EDX,[EBP-10]
//正確的註冊碼 D EDX
015F:00522E8B CALL 00404238
//比較註冊碼。
015F:00522E90 JNZ 00522F3E
//跳到00522F3E,就死定了。
015F:00522E96 MOV DL,01
015F:00522E98 MOV EAX,[00474C00]
015F:00522E9D CALL 00474E1C
015F:00522EA2 MOV [EBP-14],EAX
015F:00522EA5 XOR EAX,EAX
015F:00522EA7 PUSH EBP
015F:00522EA8 PUSH 00522EF8
015F:00522EAD PUSH DWORD PTR FS:[EAX]
015F:00522EB0 MOV FS:[EAX],ESP
015F:00522EB3 MOV CL,01
015F:00522EB5 MOV EDX,005230A0
015F:00522EBA MOV EAX,[EBP-14]
015F:00522EBD CALL 0047503C
015F:00522EC2 MOV ECX,[EBP-04]
015F:00522EC5 MOV EDX,005230E8
015F:00522ECA MOV EAX,[EBP-14]
015F:00522ECD CALL 0047558C
015F:00522ED2 MOV ECX,[EBP-0C]
015F:00522ED5 MOV EDX,005230F4
015F:00522EDA MOV EAX,[EBP-14]
015F:00522EDD CALL 0047558C
015F:00522EE2 XOR EAX,EAX
015F:00522EE4 POP EDX
015F:00522EE5 POP ECX
015F:00522EE6 POP ECX
015F:00522EE7 MOV FS:[EAX],EDX
015F:00522EEA PUSH 00522EFF
015F:00522EEF MOV EAX,[EBP-14]
015F:00522EF2 CALL 00403180
015F:00522EF7 RET
015F:00522EF8 JMP 004038A0
015F:00522EFD JMP 00522EEF
015F:00522EFF MOV EAX,[005C4208]
015F:00522F04 MOV EDX,[EBP-04]
015F:00522F07 CALL 00403EFC
015F:00522F0C MOV EAX,[005C3FC4]
015F:00522F11 MOV BYTE PTR [EAX],01
015F:00522F14 PUSH 00
015F:00522F16 MOV EAX,[005C421C]
015F:00522F1B MOV EAX,[EAX]
015F:00522F1D MOV CX,[005230F8]
015F:00522F24 MOV DL,02
015F:00522F26 CALL 00459AF4
015F:00522F2B MOV EAX,[005C4108]
015F:00522F30 MOV EAX,[EAX]
015F:00522F32 MOV DWORD PTR [EAX+00000234],00000001
015F:00522F3C JMP 00522F5D
015F:00522F3E MOV EAX,[005C3FC4]
015F:00522F43 MOV BYTE PTR [EAX],00
015F:00522F46 PUSH 00
015F:00522F48 MOV EAX,[005C4004]
015F:00522F4D MOV EAX,[EAX]
015F:00522F4F MOV CX,[005230F8]
015F:00522F56 MOV DL,01
015F:00522F58 CALL 00459AF4
//失敗對話方塊
..............................
整理一下,輸入註冊資訊。
Name: xiA Qin
Serial Number: GPS-260756-426028
註冊資訊在登錄檔中
[HKEY_CURRENT_USER\Software\Green Point Software UK\CD Box Labeler Pro\Properties]
"RG"="xiA Qin"
"SN"="GPS-260756-426028"