天天卫星网络电视 5.23
天天卫星网络电视 5.23【加密方式】 序列号
【破解工具】 FlyOD V1.10、
【软件限制】 功能限制
【下载地址】 http://www.shareware.cn/
【破解平台】 Microsoft Windows XP SP2
vc++编写。
此文章由下向上看
打开W32DASM载入程序,在“串是式数据参考”找到“经典语句！”
00405EE9 |.8D4D CC lea ecx,dword ptr ss:
00405EEC |.6A 0A push 0A ; /radix = A (10.)
00405EEE |.51 push ecx ; |string
00405EEF |.52 push edx ; |value
00405EF0 |.FF15 E0C34000 call dword ptr ds:[<&MSVCRT._itoa>>; \_itoa
00405EF6 |.8B45 DC mov eax,dword ptr ss:
Stack ss:=35591ED6
eax=0013E64C, (ASCII "895033046")--------------------------我的序列号
00405EF9 |.8D4D C0 lea ecx,dword ptr ss:
堆栈地址=0013E640
ecx=0013E650, (ASCII "33046")
00405EFC |.05 C674AC05 add eax,5AC74C6
eax=35591ED6
00405F01 |.6A 0A push 0A ;
00405F03 |.51 push ecx ;
00405F04 |.50 push eax ;
00405F05 |.8945 DC mov dword ptr ss:,eax ;
00405F08 |.FF15 F0C34000 call dword ptr ds:[<&MSVCRT._ultoa>;
00405F0E |.83C4 18 add esp,18
00405F11 |.8D4D E4 lea ecx,dword ptr ss:
ecx=0013E644, (ASCII "21212")
00405F14 |.50 push eax
eax=0013E640, (ASCII "990221212")
00405F15 |.E8 B43A0000 call <jmp.&MFC42.#537>
00405F1A |.8B55 E4 mov edx,dword ptr ss:
Stack ss:=0003DAB0, (ASCII "990221212")
edx=00000001
00405F1D |.8D4D E4 lea ecx,dword ptr ss:
00405F20 |.8975 FC mov dword ptr ss:,esi
00405F23 |.8B42 F8 mov eax,dword ptr ds:
00405F26 |.50 push eax
00405F27 |.56 push esi
00405F28 |.E8 873C0000 call <jmp.&MFC42.#2915>
00405F2D |.50 push eax
eax=0003DAB0, (ASCII "990221212")
00405F2E |.8D45 EC lea eax,dword ptr ss:
00405F31 |.50 push eax
00405F32 |.E8 A92B0000 call 天天电视.00408AE0
00405F37 |.83C4 0C add esp,0C
00405F3A |.50 push eax
00405F3B |.8D4D E4 lea ecx,dword ptr ss:
00405F3E |.C645 FC 01 mov byte ptr ss:,1
00405F42 |.E8 9F3A0000 call <jmp.&MFC42.#858>
00405F47 |.8D4D EC lea ecx,dword ptr ss:
00405F4A |.C645 FC 00 mov byte ptr ss:,0
00405F4E |.E8 4B3A0000 call <jmp.&MFC42.#800>
00405F53 |.8B4D E4 mov ecx,dword ptr ss:
Stack ss:=0003DB50, (ASCII "da253cd106ae2b454ecdf127e267f899")
00405F56 |.8B83 78010000 mov eax,dword ptr ds:
Stack ds:=0003DA60, (ASCII "987654321")------------伪码
eax=00000001
00405F5C |.51 push ecx
ecx=0003DB50, (ASCII "da253cd106ae2b454ecdf127e267f899")-----------真码
; /s2
00405F5D |.50 push eax
eax=0003DA60, (ASCII "987654321")
; |s1
00405F5E |.FF15 ECC34000 call dword ptr ds:[<&MSVCRT._mbscm>;
00405F64 |.83C4 08 add esp,8
00405F67 |.85C0 test eax,eax
00405F69 |.56 push esi
00405F6A |.74 16 je short 天天电视.00405F82--------------关键跳在这
------------断点尽量向上找，要完整的过程，逐步的向上推。
"天天电视 - 未注册！
00405F6C |.68 14074100 push 天天电视.00410714
"提示：无效『普通版』注册码！---------------------------------找到经典语句向上看
00405F71 |.68 C0064100 push 天天电视.004106C0
00405F76 |.8BCB mov ecx,ebx
00405F78 |.E8 313C0000 call <jmp.&MFC42.#4224>
00405F7D |.E9 AB030000 jmp 天天电视.0040632D
00405F82 |>68 AC064100 push 天天电视.004106AC
提示：恭喜您，『普通版』注册成功！-----------------------------找到经典语句
00405F87 |.68 50064100 push 天天电视.00410650
00405F8C |.8BCB mov ecx,ebx
00405F8E |.E8 1B3C0000 call <jmp.&MFC42.#4224>
00405F93 |.8975 E8 mov dword ptr ss:,esi
00405F96 |.8D55 80 lea edx,dword ptr ss:
00405F99 |.52 push edx
00405F9A |.FF15 30C44000 call dword ptr ds:[<&OLEAUT32.#8>] ;OLEAUT32.VariantInit
00405FA0 |.8D4D D8 lea ecx,dword ptr ss:
00405FA3 |.C645 FC 03 mov byte ptr ss:,3
00405FA7 |.E8 FE390000 call <jmp.&MFC42.#540>
00405FAC |.68 60034100 push 天天电视.00410360
00405FB1 |.8D4D D8 lea ecx,dword ptr ss:
00405FB4 |.C645 FC 04 mov byte ptr ss:,4
00405FB8 |.E8 B93A0000 call <jmp.&MFC42.#860>
00405FBD |.B8 50034100 mov eax,天天电视.00410350 ;ASCII "ADODB.Recordset"
00405FC2 |.C645 FC 05 mov byte ptr ss:,5
00405FC6 |.85C0 test eax,eax
00405FC8 |.0F84 13030000 je 天天电视.004062E1
00405FCE |.50 push eax ; /String => "ADODB.Recordset"
00405FCF |.FF15 60C04000 call dword ptr ds:[<&KERNEL32.lstr>; \lstrlenA
00405FD5 |.8BF0 mov esi,eax
[ 本帖最后由 tigerisme 于 2006-8-27 08:44 编辑 ] 先谢谢不过很可惜，这些对于我来说还是难了一点儿的
页:
[1]