MP3 Joiner V1.0570破解
【破文标题】MP3 Joiner V1.0570破解【破文作者】playboyjin[花花公子]
【作者邮箱】[email protected]
【作者主页】http://group301.ttsite.com
【破解工具】PEID OD
【破解平台】WINXP
【软件名称】MP3 Joiner V1.0570
【软件大小】410kb
【原版下载】http://www.skycn.com/soft/25309.html
【保护方式】vc
【软件简介】 MP3 Joiner 是一款简单易用的把多个 MP3文件连接成一个大的 MP3 文件的工具：
1、 不需要重新压缩，连接速度快；
2、 支持文件拖放连接；
3、 连接的 MP3 文件必须是相同的压缩参数。
【破解声明】本人系正宗菜鸟,初学cracking,,仅作学习交流，无其它目的.
------------------------------------------------------------------------
【破解过程】1、查壳为VC。。很容易来到程序注册的入口
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
00405390/.55 PUSH EBP ;下断
00405391|.8BEC MOV EBP,ESP
00405393|.83EC 20 SUB ESP,20
00405396|.894D E0 MOV DWORD PTR SS:,ECX
00405399|.6A 01 PUSH 1
0040539B|.8B4D E0 MOV ECX,DWORD PTR SS:
0040539E|.E8 18A30100 CALL MP3Joine.0041F6BB
004053A3|.8B4D E0 MOV ECX,DWORD PTR SS:
004053A6|.83C1 70 ADD ECX,70
004053A9|.E8 F2F4FFFF CALL MP3Joine.004048A0
004053AE|.83F8 02 CMP EAX,2 ;用户名大于等于2位
004053B1|.7D 13 JGE SHORT MP3Joine.004053C6
004053B3|.6A 00 PUSH 0
004053B5|.6A 00 PUSH 0
004053B7|.68 5CC14200 PUSH MP3Joine.0042C15C ;please input correct user name!
004053BC|.E8 04FE0100 CALL MP3Joine.004251C5
004053C1|.E9 A9020000 JMP MP3Joine.0040566F
004053C6|>8B4D E0 MOV ECX,DWORD PTR SS:
004053C9|.83C1 74 ADD ECX,74
004053CC|.E8 CFF4FFFF CALL MP3Joine.004048A0
004053D1|.83F8 08 CMP EAX,8 ;注册码在大于等于8位
004053D4|.7D 13 JGE SHORT MP3Joine.004053E9
004053D6|.6A 00 PUSH 0
004053D8|.6A 00 PUSH 0
004053DA|.68 7CC14200 PUSH MP3Joine.0042C17C ;please input correct registration code!
004053DF|.E8 E1FD0100 CALL MP3Joine.004251C5
004053E4|.E9 86020000 JMP MP3Joine.0040566F
004053E9|>6A 00 PUSH 0 ; /Arg1 = 00000000
004053EB|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
004053EE|.83C1 70 ADD ECX,70 ; |
004053F1|.E8 5AEBFFFF CALL MP3Joine.00403F50 ; \取用户名第一位
004053F6|.8845 EF MOV BYTE PTR SS:,AL
004053F9|.6A 01 PUSH 1 ; /Arg1 = 00000001
004053FB|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
004053FE|.83C1 70 ADD ECX,70 ; |
00405401|.E8 4AEBFFFF CALL MP3Joine.00403F50 ; \取用户名第二位
00405406|.8845 F8 MOV BYTE PTR SS:,AL
00405409|.6A 00 PUSH 0 ; /Arg1 = 00000000
0040540B|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
0040540E|.83C1 70 ADD ECX,70 ; |
00405411|.E8 3AEBFFFF CALL MP3Joine.00403F50 ; \MP3Joine.00403F50
00405416|.8845 FF MOV BYTE PTR SS:,AL ;用户名第一位
00405419|.6A 01 PUSH 1 ; /Arg1 = 00000001
0040541B|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
0040541E|.83C1 70 ADD ECX,70 ; |
00405421|.E8 2AEBFFFF CALL MP3Joine.00403F50 ; \MP3Joine.00403F50
00405426|.8845 FA MOV BYTE PTR SS:,AL ;取用户名第二位
00405429|.0FB645 EF MOVZX EAX,BYTE PTR SS: ;用户名第一位
0040542D|.83C8 4D OR EAX,4D
00405430|.8845 EF MOV BYTE PTR SS:,AL
00405433|.0FB64D F8 MOVZX ECX,BYTE PTR SS: ;取用户名第二位
00405437|.83C9 50 OR ECX,50
0040543A|.884D F8 MOV BYTE PTR SS:,CL
0040543D|.0FB655 FF MOVZX EDX,BYTE PTR SS: ;用户名第一位
00405441|.83CA 33 OR EDX,33
00405444|.8855 FF MOV BYTE PTR SS:,DL
00405447|.0FB645 FA MOVZX EAX,BYTE PTR SS: ;第二位
0040544B|.83C8 4A OR EAX,4A
0040544E|.8845 FA MOV BYTE PTR SS:,AL
00405451|.0FB645 EF MOVZX EAX,BYTE PTR SS:
00405455|.99 CDQ
00405456|.B9 0A000000 MOV ECX,0A
0040545B|.F7F9 IDIV ECX
0040545D|.8855 EF MOV BYTE PTR SS:,DL
00405460|.0FB645 F8 MOVZX EAX,BYTE PTR SS:
00405464|.99 CDQ
00405465|.B9 0A000000 MOV ECX,0A
0040546A|.F7F9 IDIV ECX
0040546C|.8855 F8 MOV BYTE PTR SS:,DL
0040546F|.0FB645 FF MOVZX EAX,BYTE PTR SS:
00405473|.99 CDQ
00405474|.B9 0A000000 MOV ECX,0A
00405479|.F7F9 IDIV ECX
0040547B|.8855 FF MOV BYTE PTR SS:,DL
0040547E|.0FB645 FA MOVZX EAX,BYTE PTR SS:
00405482|.99 CDQ
00405483|.B9 0A000000 MOV ECX,0A
00405488|.F7F9 IDIV ECX
0040548A|.8855 FA MOV BYTE PTR SS:,DL
0040548D|.C745 F0 00000>MOV DWORD PTR SS:,0
00405494|.C745 E8 00000>MOV DWORD PTR SS:,0
0040549B|.EB 09 JMP SHORT MP3Joine.004054A6
0040549D|>8B55 E8 /MOV EDX,DWORD PTR SS:
004054A0|.83C2 01 |ADD EDX,1 ;自加1
004054A3|.8955 E8 |MOV DWORD PTR SS:,EDX
004054A6|>8B4D E0 MOV ECX,DWORD PTR SS:
004054A9|.83C1 70 |ADD ECX,70
004054AC|.E8 EFF3FFFF |CALL MP3Joine.004048A0 ;用户名长度
004054B1|.3945 E8 |CMP DWORD PTR SS:,EAX
004054B4|.7D 1E |JGE SHORT MP3Joine.004054D4
004054B6|.8B45 E8 |MOV EAX,DWORD PTR SS:
004054B9|.50 |PUSH EAX ; /Arg1
004054BA|.8B4D E0 |MOV ECX,DWORD PTR SS: ; |
004054BD|.83C1 70 |ADD ECX,70 ; |
004054C0|.E8 8BEAFFFF |CALL MP3Joine.00403F50 ; \MP3Joine.00403F50
004054C5|.8845 E7 |MOV BYTE PTR SS:,AL ;用户名每位
004054C8|.0FB64D E7 |MOVZX ECX,BYTE PTR SS:
004054CC|.034D F0 |ADD ECX,DWORD PTR SS:
004054CF|.894D F0 |MOV DWORD PTR SS:,ECX
004054D2|.^ EB C9 \JMP SHORT MP3Joine.0040549D
004054D4|>8B45 F0 MOV EAX,DWORD PTR SS: ;用户名ASCl累加
004054D7|.99 CDQ
004054D8|.B9 0A000000 MOV ECX,0A
004054DD|.F7F9 IDIV ECX
004054DF|.8855 F4 MOV BYTE PTR SS:,DL
004054E2|.6A 00 PUSH 0 ; /Arg1 = 00000000
004054E4|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
004054E7|.83C1 74 ADD ECX,74 ; |
004054EA|.E8 61EAFFFF CALL MP3Joine.00403F50 ; \取假码每一位
004054EF|.8845 FC MOV BYTE PTR SS:,AL
004054F2|.6A 01 PUSH 1 ; /Arg1 = 00000001
004054F4|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
004054F7|.83C1 74 ADD ECX,74 ; |
004054FA|.E8 51EAFFFF CALL MP3Joine.00403F50 ; \假码第二位
004054FF|.8845 FD MOV BYTE PTR SS:,AL
00405502|.6A 02 PUSH 2 ; /Arg1 = 00000002
00405504|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
00405507|.83C1 74 ADD ECX,74 ; |
0040550A|.E8 41EAFFFF CALL MP3Joine.00403F50 ; \三位
0040550F|.8845 F6 MOV BYTE PTR SS:,AL
00405512|.6A 03 PUSH 3 ; /Arg1 = 00000003
00405514|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
00405517|.83C1 74 ADD ECX,74 ; |
0040551A|.E8 31EAFFFF CALL MP3Joine.00403F50 ; \四位
0040551F|.8845 F5 MOV BYTE PTR SS:,AL
00405522|.6A 04 PUSH 4 ; /Arg1 = 00000004
00405524|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
00405527|.83C1 74 ADD ECX,74 ; |
0040552A|.E8 21EAFFFF CALL MP3Joine.00403F50 ; \MP3Joine.00403F50
0040552F|.8845 F9 MOV BYTE PTR SS:,AL
00405532|.6A 05 PUSH 5 ; /Arg1 = 00000005
00405534|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
00405537|.83C1 74 ADD ECX,74 ; |
0040553A|.E8 11EAFFFF CALL MP3Joine.00403F50 ; \MP3Joine.00403F50
0040553F|.8845 F7 MOV BYTE PTR SS:,AL
00405542|.6A 06 PUSH 6 ; /Arg1 = 00000006
00405544|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
00405547|.83C1 74 ADD ECX,74 ; |
0040554A|.E8 01EAFFFF CALL MP3Joine.00403F50 ; \MP3Joine.00403F50
0040554F|.8845 FE MOV BYTE PTR SS:,AL
00405552|.6A 07 PUSH 7 ; /Arg1 = 00000007
00405554|.8B4D E0 MOV ECX,DWORD PTR SS: ; |
00405557|.83C1 74 ADD ECX,74 ; |
0040555A|.E8 F1E9FFFF CALL MP3Joine.00403F50 ; \一共取8位
0040555F|.8845 FB MOV BYTE PTR SS:,AL
00405562|.0FB655 EF MOVZX EDX,BYTE PTR SS:
00405566|.0FB645 FC MOVZX EAX,BYTE PTR SS:
0040556A|.83E8 30 SUB EAX,30
0040556D|.3BD0 CMP EDX,EAX ;1与5比较（假码为12345678）
0040556F|.75 3C JNZ SHORT MP3Joine.004055AD
00405571|.0FB64D F8 MOVZX ECX,BYTE PTR SS:
00405575|.0FB655 FD MOVZX EDX,BYTE PTR SS:
00405579|.83EA 30 SUB EDX,30
0040557C|.3BCA CMP ECX,EDX ;2和4
0040557E|.75 2D JNZ SHORT MP3Joine.004055AD
00405580|.0FB645 FF MOVZX EAX,BYTE PTR SS:
00405584|.0FB64D F6 MOVZX ECX,BYTE PTR SS:
00405588|.83E9 30 SUB ECX,30
0040558B|.3BC1 CMP EAX,ECX ;3和5
0040558D|.75 1E JNZ SHORT MP3Joine.004055AD
0040558F|.0FB655 FA MOVZX EDX,BYTE PTR SS:
00405593|.0FB645 F5 MOVZX EAX,BYTE PTR SS:
00405597|.83E8 30 SUB EAX,30
0040559A|.3BD0 CMP EDX,EAX ;4和0
0040559C|.75 0F JNZ SHORT MP3Joine.004055AD
0040559E|.0FB64D F4 MOVZX ECX,BYTE PTR SS:
004055A2|.0FB655 F9 MOVZX EDX,BYTE PTR SS:
004055A6|.83EA 30 SUB EDX,30
004055A9|.3BCA CMP ECX,EDX ;5和9
004055AB|.74 58 JE SHORT MP3Joine.00405605 ;相等就走到注册成功；
004055AD|>0FB645 FC MOVZX EAX,BYTE PTR SS: ;不等就到下面
004055B1|.83F8 35 CMP EAX,35 ;第一位（ASCII）和35比较
004055B4|.0F85 A7000000 JNZ MP3Joine.00405661
004055BA|.0FB64D FD MOVZX ECX,BYTE PTR SS:
004055BE|.83F9 35 CMP ECX,35 ;第二位与35比较
004055C1|.0F85 9A000000 JNZ MP3Joine.00405661
004055C7|.0FB655 F6 MOVZX EDX,BYTE PTR SS:
004055CB|.83FA 38 CMP EDX,38 ;第三位与38
004055CE|.0F85 8D000000 JNZ MP3Joine.00405661
004055D4|.0FB645 F5 MOVZX EAX,BYTE PTR SS:
004055D8|.83F8 35 CMP EAX,35 ;第四位与35
004055DB|.0F85 80000000 JNZ MP3Joine.00405661
004055E1|.0FB64D F9 MOVZX ECX,BYTE PTR SS:
004055E5|.83F9 36 CMP ECX,36 ;第五位与36
004055E8|.75 77 JNZ SHORT MP3Joine.00405661
004055EA|.0FB655 F7 MOVZX EDX,BYTE PTR SS:
004055EE|.83FA 37 CMP EDX,37 ;第六位与37
004055F1|.75 6E JNZ SHORT MP3Joine.00405661
004055F3|.0FB645 FE MOVZX EAX,BYTE PTR SS:
004055F7|.83F8 36 CMP EAX,36 ;第七与36
004055FA|.75 65 JNZ SHORT MP3Joine.00405661
004055FC|.0FB64D FB MOVZX ECX,BYTE PTR SS:
00405600|.83F9 35 CMP ECX,35 ;第8位与35
00405603|.75 5C JNZ SHORT MP3Joine.00405661 ;不跳就注册成功
00405605|>6A 00 PUSH 0
00405607|.6A 00 PUSH 0
00405609|.68 A4C14200 PUSH MP3Joine.0042C1A4 ;registration has succeeded!
0040560E|.E8 B2FB0100 CALL MP3Joine.004251C5
00405613|.8B4D E0 MOV ECX,DWORD PTR SS:
00405616|.83C1 70 ADD ECX,70
00405619|.E8 A2F6FFFF CALL MP3Joine.00404CC0
0040561E|.50 PUSH EAX ;用户名
0040561F|.68 C0C14200 PUSH MP3Joine.0042C1C0 ;username
00405624|.68 CCC14200 PUSH MP3Joine.0042C1CC ;option
00405629|.E8 02EDFFFF CALL MP3Joine.00404330
0040562E|.8BC8 MOV ECX,EAX ; |
00405630|.E8 CCFC0100 CALL MP3Joine.00425301 ; \MP3Joine.00425301
00405635|.8B4D E0 MOV ECX,DWORD PTR SS:
00405638|.83C1 74 ADD ECX,74
0040563B|.E8 80F6FFFF CALL MP3Joine.00404CC0
00405640|.50 PUSH EAX
00405641|.68 D4C14200 PUSH MP3Joine.0042C1D4 ;registration_code
00405646|.68 E8C14200 PUSH MP3Joine.0042C1E8 ;option
0040564B|.E8 E0ECFFFF CALL MP3Joine.00404330
00405650|.8BC8 MOV ECX,EAX ; |
00405652|.E8 AAFC0100 CALL MP3Joine.00425301 ; \MP3Joine.00425301
00405657|.8B4D E0 MOV ECX,DWORD PTR SS:
0040565A|.E8 108A0100 CALL MP3Joine.0041E06F
0040565F|.EB 0E JMP SHORT MP3Joine.0040566F
00405661|>6A 00 PUSH 0
00405663|.6A 00 PUSH 0
00405665|.68 F0C14200 PUSH MP3Joine.0042C1F0 ;registration failed!
0040566A|.E8 56FB0100 CALL MP3Joine.004251C5
0040566F|>8BE5 MOV ESP,EBP
00405671|.5D POP EBP
00405672\.C3 RETN
------------------------------------------------------------------------
【破解总结】用户名长度大于2，注册码长度大于等于8（因为取前8位）
提供二个可用的注册码：55856765 5450988888（用户名为playboyjin）<---也就这两组···所以我就有了个问题～为什么注册成功后每一次启动时还会提示注册～～难道有暗桩？～～找了好久也没有找到啊。不知道是不是作者的意思？哪位大侠帮看看吖～～
------------------------------------------------------------------------
【版权声明】本破文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!天道酬勤！
[ 本帖最后由 playboyjin 于 2007-3-7 16:25 编辑 ] 这个应该发表到算法里面哒 这个还算不上什么算法吧？？？？
页:
[1]