Txt2Html V2.7.2

[psac]

Software:Txt2Html V2.7.2
將文本文件轉換成html文件
http://alexey-pr.pisem.net
Tools:TRW2000，微軟Win98
Cracker:lq7972[bruceyu13@sina.com]
Notes:這段時間整理敲入的TXT文本，用上這個工具，覺得不錯，順手PJ了；不知有人寫這個否？不管了，貼出來，主要還是交流、學習∼

載入主程序
g
開啟About視窗，輸入用戶名和序列號：「1234506789」
Ctrl+N
bpx hmemcpy
g
點"註冊"按鈕，攔住
bc *
pmodule
來到TXT2HTML領空，按6次F12，按F10來到：
019F:0049B817 8B45D4 MOV EAX,[EBP-2C] ;用戶名
019F:0049B81A BAE0BC4900 MOV EDX,0049BCE0
019F:0049B81F E8D893F6FF CALL 00404BFC
019F:0049B824 0F8507020000 JNZ NEAR 0049BA31
;。。。。。。
019F:0049BA31 8D55FC LEA EDX,[EBP-04]
019F:0049BA34 8B8618030000 MOV EAX,[ESI+0318]
019F:0049BA3A E8959AFAFF CALL 004454D4
019F:0049BA3F 8D45C8 LEA EAX,[EBP-38]
019F:0049BA42 50 PUSH EAX

019F:0049BA43 B902000000 MOV ECX,02 ;一次取2位
019F:0049BA48 BA02000000 MOV EDX,02 ;從第2位起取
019F:0049BA4D 8B45FC MOV EAX,[EBP-04] ;輸入的註冊碼
019F:0049BA50 E8BB92F6FF CALL 00404D10 ;取出
019F:0049BA55 8B45C8 MOV EAX,[EBP-38] ;第2、3位
019F:0049BA58 E897D5F6FF CALL 00408FF4 ;把取出的字串轉為數值∼a1
019F:0049BA5D 8BD8 MOV EBX,EAX

;下面以此依次取第4、5位、第6、7位和第8、9位，並將它們轉為數值∼a2、a3、a4
019F:0049BA5F 8D45C4 LEA EAX,[EBP-3C]
019F:0049BA62 50 PUSH EAX
019F:0049BA63 B902000000 MOV ECX,02
019F:0049BA68 BA04000000 MOV EDX,04
019F:0049BA6D 8B45FC MOV EAX,[EBP-04]
019F:0049BA70 E89B92F6FF CALL 00404D10
019F:0049BA75 8B45C4 MOV EAX,[EBP-3C]
019F:0049BA78 E877D5F6FF CALL 00408FF4
019F:0049BA7D 8BF8 MOV EDI,EAX
019F:0049BA7F 8D45C0 LEA EAX,[EBP-40]
019F:0049BA82 50 PUSH EAX
019F:0049BA83 B902000000 MOV ECX,02
019F:0049BA88 BA06000000 MOV EDX,06
019F:0049BA8D 8B45FC MOV EAX,[EBP-04]
019F:0049BA90 E87B92F6FF CALL 00404D10
019F:0049BA95 8B45C0 MOV EAX,[EBP-40]
019F:0049BA98 E857D5F6FF CALL 00408FF4
019F:0049BA9D 8945F8 MOV [EBP-08],EAX
019F:0049BAA0 8D45BC LEA EAX,[EBP-44]
019F:0049BAA3 50 PUSH EAX
019F:0049BAA4 B902000000 MOV ECX,02
019F:0049BAA9 BA08000000 MOV EDX,08
019F:0049BAAE 8B45FC MOV EAX,[EBP-04]
019F:0049BAB1 E85A92F6FF CALL 00404D10
019F:0049BAB6 8B45BC MOV EAX,[EBP-44]
019F:0049BAB9 E836D5F6FF CALL 00408FF4
019F:0049BABE 8945F4 MOV [EBP-0C],EAX
019F:0049BAC1 8B45FC MOV EAX,[EBP-04]

019F:0049BAC4 E8EF8FF6FF CALL 00404AB8 ;輸入的註冊碼長度
019F:0049BAC9 83F80A CMP EAX,BYTE +0A ;若小於10，
019F:0049BACC 0F857C010000 JNZ NEAR 0049BC4E ;就GameOver
019F:0049BAD2 83C30D ADD EBX,BYTE +0D ;a1+Dh
019F:0049BAD5 7105 JNO 0049BADC ;不溢出就跳
019F:0049BAD7 E8F87EF6FF CALL 004039D4
019F:0049BADC 83C709 ADD EDI,BYTE +09 ;a2+9h
019F:0049BADF 7105 JNO 0049BAE6
019F:0049BAE1 E8EE7EF6FF CALL 004039D4
019F:0049BAE6 3BDF CMP EBX,EDI ;二者若不相等，
019F:0049BAE8 0F8560010000 JNZ NEAR 0049BC4E ;就GameOver
019F:0049BAEE 8B45F8 MOV EAX,[EBP-08] ;a3
019F:0049BAF1 83C015 ADD EAX,BYTE +15 ;a3+15h
019F:0049BAF4 7105 JNO 0049BAFB
019F:0049BAF6 E8D97EF6FF CALL 004039D4
019F:0049BAFB 8B55F4 MOV EDX,[EBP-0C] ;a4
019F:0049BAFE 83C205 ADD EDX,BYTE +05 ;a4+5h
019F:0049BB01 7105 JNO 0049BB08
019F:0049BB03 E8CC7EF6FF CALL 004039D4
019F:0049BB08 3BC2 CMP EAX,EDX ;二者若不相等，
019F:0049BB0A 0F853E010000 JNZ NEAR 0049BC4E ;就GameOver
019F:0049BB10 B201 MOV DL,01
;下面寫註冊信息
;。。。。。。
019F:0049BB7C B8CCBD4900 MOV EAX,0049BDCC
019F:0049BB81 E87628FAFF CALL 0043E3FC ;成功註冊
;。。。。。。
019F:0049BC4C EB2F JMP SHORT 0049BC7D
019F:0049BC4E 6A00 PUSH BYTE +00
019F:0049BC50 668B0DC0BD4900 MOV CX,[0049BDC0]
019F:0049BC57 B202 MOV DL,02
019F:0049BC59 B830BE4900 MOV EAX,0049BE30
019F:0049BC5E E89927FAFF CALL 0043E3FC ;註冊失敗
019F:0049BC63 33D2 XOR EDX,EDX
019F:0049BC65 8B8614030000 MOV EAX,[ESI+0314]
019F:0049BC6B E89498FAFF CALL 00445504
019F:0049BC70 33D2 XOR EDX,EDX
019F:0049BC72 8B8618030000 MOV EAX,[ESI+0318]
019F:0049BC78 E88798FAFF CALL 00445504
019F:0049BC7D 33C0 XOR EAX,EAX
019F:0049BC7F 5A POP EDX
019F:0049BC80 59 POP ECX
019F:0049BC81 59 POP ECX
019F:0049BC82 648910 MOV [FS:EAX],EDX
;。。。。。。

【總結】
註冊算法還是比較簡單。下面給出註冊機(Delphi)
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
//The KeyGen by lq7972,with Delphi
//E-mail:bruceyu13@sina.com

procedure TForm1.Button1Click(Sender: TObject);
var
S,S1,S2,S3,S4:String;
begin
S1:=IntToStr(Random(9))+IntToStr(Random(9));
S2:=IntToStr(StrToInt(S1)+$D-$9);
S3:=IntToStr(Random(9))+IntToStr(Random(9));
S4:=IntToStr(StrToInt(S3)+$15-$5);
If Length(S2) < 2 then
S2:='0'+S2;
S:=S1+S2+S3+S4;

Edit1.text:=IntToStr(Random(9))+S+IntToStr(Random(9));
end;
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>