能力值：
( LV2，RANK：10 )
|
-
-
26 楼
弄成这样了！！没仔细找他的OK！！ 说成功-，-！！
|
能力值：
( LV2，RANK：10 )
|
-
-
27 楼
貌似很久以前的帖子了……
闲的无聊搞一下，我完全看不懂算法
写了个注册机，发现我的代码编译完以后比原来的算法打了很多，写的比较臭…… 
|
能力值：
( LV4，RANK：50 )
|
-
-
28 楼
点击按钮后停到这里：
004017F0 /. 56 PUSH ESI ; CrackMe.00403440
004017F1 |. 8BF1 MOV ESI,ECX
004017F3 |. E8 F8FEFFFF CALL 004016F0 ； 取注册码比较
004017F8 |. 85C0 TEST EAX,EAX
004017FA |. 8BCE MOV ECX,ESI
004017FC 75 0C JNZ SHORT 0040180A ； 爆破关键部分：
004017FE |. 68 3C384000 PUSH 0040383C ; ASCII "ActivationTest - Authorization State : Success"
00401803 |. E8 16030000 CALL <JMP.&MFC71.#6067_?SetW>
00401808 |. 5E POP ESI
00401809 |. C3 RET
0040180A |> 68 10384000 PUSH 00403810 ; ASCII "ActivationTest - Authorization State : Fail"
0040180F |. E8 0A030000 CALL <JMP.&MFC71.#6067_?SetW>
00401814 |. 6A 00 PUSH 0
00401816 |. 68 08384000 PUSH 00403808 ; ASCII "Test"
0040181B |. 68 EC374000 PUSH 004037EC ; ASCII "Authorization Code invalid!"
00401820 |. 8BCE MOV ECX,ESI
00401822 |. E8 09030000 CALL <JMP.&MFC71.#4104_?Mess>
00401827 |. 5E POP ESI
00401828 \. C3 RET
取注册码比较：
004016F0 /$ 6A FF PUSH -1
004016F2 |. 68 FB214000 PUSH 004021FB ; SE handler installation
004016F7 |. 64:A1 0000000>MOV EAX,FS:[0]
004016FD |. 50 PUSH EAX
004016FE |. 64:8925 00000>MOV FS:[0],ESP
00401705 |. 83EC 0C SUB ESP,0C
00401708 |. 56 PUSH ESI
00401709 |. 8BF1 MOV ESI,ECX
0040170B |. 8D4C24 0C LEA ECX,[ESP+C]
0040170F |. FF15 94314000 CALL [<&MFC71.#310_??0?$CStr>; MFC71.7C173199
00401715 |. 8D4C24 08 LEA ECX,[ESP+8]
00401719 |. C74424 18 000>MOV DWORD PTR [ESP+18],0
00401721 |. FF15 94314000 CALL [<&MFC71.#310_??0?$CStr>; MFC71.7C173199
00401727 |. 8D4C24 04 LEA ECX,[ESP+4]
0040172B |. FF15 94314000 CALL [<&MFC71.#310_??0?$CStr>; MFC71.7C173199
00401731 |. 8D4424 08 LEA EAX,[ESP+8]
00401735 |. 50 PUSH EAX
00401736 |. 68 E8030000 PUSH 3E8
0040173B |. 8BCE MOV ECX,ESI
0040173D |. C64424 20 02 MOV BYTE PTR [ESP+20],2
00401742 |. E8 DD030000 CALL <JMP.&MFC71.#2657_?GetD>
00401747 |. 8BC8 MOV ECX,EAX
00401749 |. E8 DC030000 CALL <JMP.&MFC71.#3761_?GetW>
0040174E |. 8D4C24 04 LEA ECX,[ESP+4]
00401752 |. 51 PUSH ECX
00401753 |. 68 E9030000 PUSH 3E9
00401758 |. 8BCE MOV ECX,ESI
0040175A |. E8 C5030000 CALL <JMP.&MFC71.#2657_?GetD>
0040175F |. 8BC8 MOV ECX,EAX
00401761 |. E8 C4030000 CALL <JMP.&MFC71.#3761_?GetW>
00401766 |. 8D4C24 04 LEA ECX,[ESP+4]
0040176A |. FF15 CC314000 CALL [<&MFC71.#2902_?GetLeng>; MFC71.7C146AB0
00401770 |. 50 PUSH EAX
00401771 |. 8D4C24 08 LEA ECX,[ESP+8]
00401775 |. FF15 9C314000 CALL [<&MFC71.#876_??B?$CSim>; MFC71.7C158BCD
0040177B |. 50 PUSH EAX
0040177C |. 8BCE MOV ECX,ESI
0040177E |. E8 9DFAFFFF CALL 00401220
00401783 |. 50 PUSH EAX
00401784 |. 8D5424 10 LEA EDX,[ESP+10]
00401788 |. 68 E8374000 PUSH 004037E8 ; ASCII "%x"
0040178D |. 52 PUSH EDX
0040178E |. FF15 90314000 CALL [<&MFC71.#2322_?Format@>; MFC71.7C146A9D
00401794 |. 83C4 0C ADD ESP,0C
00401797 |. 8D4C24 0C LEA ECX,[ESP+C] ；明码
0040179B |. FF15 9C314000 CALL [<&MFC71.#876_??B?$CSim>; MFC71.7C158BCD
004017A1 |. 50 PUSH EAX
004017A2 |. 8D4C24 0C LEA ECX,[ESP+C]
004017A6 |. FF15 98314000 CALL [<&MFC71.#1482_?Compare>; MFC71.7C144DAE
004017AC |. 8BF0 MOV ESI,EAX
004017AE |. F7DE NEG ESI
004017B0 |. 1BF6 SBB ESI,ESI
004017B2 |. 8D4C24 04 LEA ECX,[ESP+4]
004017B6 |. 81E6 FF000000 AND ESI,0FF
004017BC |. FF15 88314000 CALL [<&MFC71.#578_??1?$CStr>; MFC71.7C1771B1
004017C2 |. 8D4C24 08 LEA ECX,[ESP+8]
004017C6 |. FF15 88314000 CALL [<&MFC71.#578_??1?$CStr>; MFC71.7C1771B1
004017CC |. 8D4C24 0C LEA ECX,[ESP+C]
004017D0 |. FF15 88314000 CALL [<&MFC71.#578_??1?$CStr>; MFC71.7C1771B1
004017D6 |. 8B4C24 10 MOV ECX,[ESP+10]
004017DA |. 8BC6 MOV EAX,ESI
004017DC |. 5E POP ESI
004017DD |. 64:890D 00000>MOV FS:[0],ECX
004017E4 |. 83C4 18 ADD ESP,18
004017E7 \. C3 RET
|
能力值：
( LV3，RANK：30 )
|
-
-
29 楼
user code:43d9d7d7e7a44cc1b1e24669935a7632
Authorization code: d69e7ed
|
