【破文标题】TOP Audio Converter 5.8.12算法分析
【破文作者】tianxj
【作者邮箱】tianxj_2007@126.com
【作者主页】WwW.ChiNaPYG.CoM
【破解工具】PEiD,DeDe,OD,计算器
【破解平台】Windows XP sp2
【软件名称】TOP Audio Converter 5.8.12
【软件大小】6007KB
【软件语言】英文
【软件类别】国外软件/音频转换
【软件授权】共享版
【运行环境】Winxp/vista/win7/2000/2003
【更新时间】2009-9-12
【原版下载】http://www.onlinedown.net/soft/91692.htm
【保护方式】注册码
【破解声明】我是一只小菜鸟，偶得一点心得，愿与大家分享：）
--------------------------------------------------------------
【破解内容】
--------------------------------------------------------------
**************************************************************
一、用PEiD对Audio Converter.exe查壳，为Borland Delphi 6.0 - 7.0
**************************************************************
二、用DeDe查找按钮事件为004A500C；载入OD，来到
代码:
004A500C /. 55 PUSH EBP 004A500D |. 8BEC MOV EBP, ESP 004A500F |. 6A 00 PUSH 0 004A5011 |. 6A 00 PUSH 0 004A5013 |. 6A 00 PUSH 0 004A5015 |. 6A 00 PUSH 0 004A5017 |. 53 PUSH EBX 004A5018 |. 56 PUSH ESI 004A5019 |. 8BF1 MOV ESI, ECX 004A501B |. 8BD8 MOV EBX, EAX 004A501D |. 33C0 XOR EAX, EAX 004A501F |. 55 PUSH EBP 004A5020 |. 68 A5514A00 PUSH Audio_Co.004A51A5 004A5025 |. 64:FF30 PUSH DWORD PTR FS:[EAX] 004A5028 |. 64:8920 MOV DWORD PTR FS:[EAX], ESP 004A502B |. 8D45 FC LEA EAX, DWORD PTR SS:[EBP-4] 004A502E |. E8 51FEF5FF CALL Audio_Co.00404E84 004A5033 |. 50 PUSH EAX 004A5034 |. 56 PUSH ESI 004A5035 |. 8B06 MOV EAX, DWORD PTR DS:[ESI] 004A5037 |. FF50 0C CALL NEAR DWORD PTR DS:[EAX+C] 004A503A |. 8B45 FC MOV EAX, DWORD PTR SS:[EBP-4] 004A503D |. BA B8514A00 MOV EDX, Audio_Co.004A51B8 ; UNICODE "registersoftware" 004A5042 |. E8 1900F6FF CALL Audio_Co.00405060 004A5047 |. 75 0C JNZ SHORT Audio_Co.004A5055 004A5049 |. 8BC3 MOV EAX, EBX 004A504B |. E8 FCFCFFFF CALL Audio_Co.004A4D4C ; //关键CALL 004A5050 |. E9 2D010000 JMP Audio_Co.004A5182 004A5055 |> 8B45 FC MOV EAX, DWORD PTR SS:[EBP-4] 004A5058 |. BA E0514A00 MOV EDX, Audio_Co.004A51E0 ; UNICODE "close" 004A505D |. E8 FEFFF5FF CALL Audio_Co.00405060 004A5062 |. 75 0C JNZ SHORT Audio_Co.004A5070 004A5064 |. 8BC3 MOV EAX, EBX 004A5066 |. E8 5592FDFF CALL Audio_Co.0047E2C0 004A506B |. E9 12010000 JMP Audio_Co.004A5182 004A5070 |> 8B45 FC MOV EAX, DWORD PTR SS:[EBP-4] 004A5073 |. BA F0514A00 MOV EDX, Audio_Co.004A51F0 ; UNICODE "purchase" 004A5078 |. E8 E3FFF5FF CALL Audio_Co.00405060 004A507D |. 0F85 A3000000 JNZ Audio_Co.004A5126 004A5083 |. 68 0C524A00 PUSH Audio_Co.004A520C 004A5088 |. 8D45 F8 LEA EAX, DWORD PTR SS:[EBP-8] 004A508B |. 50 PUSH EAX 004A508C |. 8D45 F0 LEA EAX, DWORD PTR SS:[EBP-10] 004A508F |. 50 PUSH EAX 004A5090 |. A1 D8C04D00 MOV EAX, DWORD PTR DS:[4DC0D8] 004A5095 |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A5097 |. E8 9CF9F5FF CALL Audio_Co.00404A38 004A509C |. 8BC8 MOV ECX, EAX 004A509E |. 83E9 04 SUB ECX, 4 004A50A1 |. A1 D8C04D00 MOV EAX, DWORD PTR DS:[4DC0D8] 004A50A6 |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A50A8 |. BA 01000000 MOV EDX, 1 004A50AD |. E8 E6FBF5FF CALL Audio_Co.00404C98 004A50B2 |. 8B4D F0 MOV ECX, DWORD PTR SS:[EBP-10] 004A50B5 |. 8D45 F4 LEA EAX, DWORD PTR SS:[EBP-C] 004A50B8 |. BA 18524A00 MOV EDX, Audio_Co.004A5218 ; ASCII "Top " 004A50BD |. E8 C2F9F5FF CALL Audio_Co.00404A84 004A50C2 |. 8B4D F4 MOV ECX, DWORD PTR SS:[EBP-C] 004A50C5 |. A1 8CBD4D00 MOV EAX, DWORD PTR DS:[4DBD8C] 004A50CA |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A50CC |. BA 28524A00 MOV EDX, Audio_Co.004A5228 ; ASCII "Top Software Online" 004A50D1 |. E8 46350300 CALL Audio_Co.004D861C 004A50D6 |. 8B55 F8 MOV EDX, DWORD PTR SS:[EBP-8] 004A50D9 |. A1 48BD4D00 MOV EAX, DWORD PTR DS:[4DBD48] 004A50DE |. E8 E9F6F5FF CALL Audio_Co.004047CC 004A50E3 |. A1 48BD4D00 MOV EAX, DWORD PTR DS:[4DBD48] 004A50E8 |. 8338 00 CMP DWORD PTR DS:[EAX], 0 004A50EB |. 75 12 JNZ SHORT Audio_Co.004A50FF 004A50ED |. A1 48BD4D00 MOV EAX, DWORD PTR DS:[4DBD48] 004A50F2 |. 8B15 B4C04D00 MOV EDX, DWORD PTR DS:[4DC0B4] ; Audio_Co.004DDF70 004A50F8 |. 8B12 MOV EDX, DWORD PTR DS:[EDX] 004A50FA |. E8 CDF6F5FF CALL Audio_Co.004047CC 004A50FF |> 6A 01 PUSH 1 004A5101 |. 6A 00 PUSH 0 004A5103 |. 6A 00 PUSH 0 004A5105 |. A1 48BD4D00 MOV EAX, DWORD PTR DS:[4DBD48] 004A510A |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A510C |. E8 27FBF5FF CALL Audio_Co.00404C38 004A5111 |. 50 PUSH EAX 004A5112 |. 68 3C524A00 PUSH Audio_Co.004A523C ; ASCII "open" 004A5117 |. 8BC3 MOV EAX, EBX 004A5119 |. E8 8234FCFF CALL Audio_Co.004685A0 004A511E |. 50 PUSH EAX ; |hWnd 004A511F |. E8 D8F0F8FF CALL <JMP.&shell32.ShellExecuteA> ; \ShellExecuteA 004A5124 |. EB 5C JMP SHORT Audio_Co.004A5182 004A5126 |> 8B45 FC MOV EAX, DWORD PTR SS:[EBP-4] 004A5129 |. BA 48524A00 MOV EDX, Audio_Co.004A5248 ; UNICODE "visit" 004A512E |. E8 2DFFF5FF CALL Audio_Co.00405060 004A5133 |. 75 24 JNZ SHORT Audio_Co.004A5159 004A5135 |. 6A 03 PUSH 3 004A5137 |. 6A 00 PUSH 0 004A5139 |. 6A 00 PUSH 0 004A513B |. A1 88C04D00 MOV EAX, DWORD PTR DS:[4DC088] 004A5140 |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A5142 |. E8 F1FAF5FF CALL Audio_Co.00404C38 004A5147 |. 50 PUSH EAX 004A5148 |. 6A 00 PUSH 0 004A514A |. 8BC3 MOV EAX, EBX 004A514C |. E8 4F34FCFF CALL Audio_Co.004685A0 004A5151 |. 50 PUSH EAX ; |hWnd 004A5152 |. E8 A5F0F8FF CALL <JMP.&shell32.ShellExecuteA> ; \ShellExecuteA 004A5157 |. EB 29 JMP SHORT Audio_Co.004A5182 004A5159 |> 8B45 FC MOV EAX, DWORD PTR SS:[EBP-4] 004A515C |. BA 58524A00 MOV EDX, Audio_Co.004A5258 ; UNICODE "email" 004A5161 |. E8 FAFEF5FF CALL Audio_Co.00405060 004A5166 |. 75 1A JNZ SHORT Audio_Co.004A5182 004A5168 |. 6A 03 PUSH 3 004A516A |. 6A 00 PUSH 0 004A516C |. 6A 00 PUSH 0 004A516E |. 68 64524A00 PUSH Audio_Co.004A5264 ; ASCII "mailto:support@topsoftwareol.com" 004A5173 |. 6A 00 PUSH 0 004A5175 |. 8BC3 MOV EAX, EBX 004A5177 |. E8 2434FCFF CALL Audio_Co.004685A0 004A517C |. 50 PUSH EAX ; |hWnd 004A517D |. E8 7AF0F8FF CALL <JMP.&shell32.ShellExecuteA> ; \ShellExecuteA 004A5182 |> 33C0 XOR EAX, EAX 004A5184 |. 5A POP EDX 004A5185 |. 59 POP ECX 004A5186 |. 59 POP ECX 004A5187 |. 64:8910 MOV DWORD PTR FS:[EAX], EDX 004A518A |. 68 AC514A00 PUSH Audio_Co.004A51AC 004A518F |> 8D45 F0 LEA EAX, DWORD PTR SS:[EBP-10] 004A5192 |. BA 03000000 MOV EDX, 3 004A5197 |. E8 00F6F5FF CALL Audio_Co.0040479C 004A519C |. 8D45 FC LEA EAX, DWORD PTR SS:[EBP-4] 004A519F |. E8 E0FCF5FF CALL Audio_Co.00404E84 004A51A4 \. C3 RETN 004A51A5 .^ E9 4EEFF5FF JMP Audio_Co.004040F8 004A51AA .^ EB E3 JMP SHORT Audio_Co.004A518F 004A51AC . 5E POP ESI 004A51AD . 5B POP EBX 004A51AE . 8BE5 MOV ESP, EBP 004A51B0 . 5D POP EBP 004A51B1 . C3 RETN
跟进关键CALL
代码:
004A4D4C /$ 55 PUSH EBP 004A4D4D |. 8BEC MOV EBP, ESP 004A4D4F |. B9 08000000 MOV ECX, 8 004A4D54 |> 6A 00 /PUSH 0 004A4D56 |. 6A 00 |PUSH 0 004A4D58 |. 49 |DEC ECX 004A4D59 |.^ 75 F9 \JNZ SHORT Audio_Co.004A4D54 004A4D5B |. 53 PUSH EBX 004A4D5C |. 8BD8 MOV EBX, EAX 004A4D5E |. 33C0 XOR EAX, EAX 004A4D60 |. 55 PUSH EBP 004A4D61 |. 68 FB4F4A00 PUSH Audio_Co.004A4FFB 004A4D66 |. 64:FF30 PUSH DWORD PTR FS:[EAX] 004A4D69 |. 64:8920 MOV DWORD PTR FS:[EAX], ESP 004A4D6C |. C605 C4DD4D00>MOV BYTE PTR DS:[4DDDC4], 1 004A4D73 |. 8D55 DC LEA EDX, DWORD PTR SS:[EBP-24] 004A4D76 |. 8B83 F8020000 MOV EAX, DWORD PTR DS:[EBX+2F8] 004A4D7C |. E8 FFCFFBFF CALL Audio_Co.00461D80 004A4D81 |. 8B45 DC MOV EAX, DWORD PTR SS:[EBP-24] ; //用户名 004A4D84 |. 8D55 F8 LEA EDX, DWORD PTR SS:[EBP-8] 004A4D87 |. E8 A440F6FF CALL Audio_Co.00408E30 004A4D8C |. 8D55 D8 LEA EDX, DWORD PTR SS:[EBP-28] 004A4D8F |. 8B45 F8 MOV EAX, DWORD PTR SS:[EBP-8] 004A4D92 |. E8 CD40F6FF CALL Audio_Co.00408E64 004A4D97 |. 8B55 D8 MOV EDX, DWORD PTR SS:[EBP-28] 004A4D9A |. 8D45 F8 LEA EAX, DWORD PTR SS:[EBP-8] 004A4D9D |. E8 6EFAF5FF CALL Audio_Co.00404810 004A4DA2 |. 8D55 D4 LEA EDX, DWORD PTR SS:[EBP-2C] 004A4DA5 |. 8B83 FC020000 MOV EAX, DWORD PTR DS:[EBX+2FC] 004A4DAB |. E8 D0CFFBFF CALL Audio_Co.00461D80 004A4DB0 |. 8B45 D4 MOV EAX, DWORD PTR SS:[EBP-2C] ; //试炼码 004A4DB3 |. 8D55 F4 LEA EDX, DWORD PTR SS:[EBP-C] 004A4DB6 |. E8 7540F6FF CALL Audio_Co.00408E30 004A4DBB |. 8D55 D0 LEA EDX, DWORD PTR SS:[EBP-30] 004A4DBE |. 8B45 F4 MOV EAX, DWORD PTR SS:[EBP-C] 004A4DC1 |. E8 9E40F6FF CALL Audio_Co.00408E64 004A4DC6 |. 8B55 D0 MOV EDX, DWORD PTR SS:[EBP-30] 004A4DC9 |. 8D45 F4 LEA EAX, DWORD PTR SS:[EBP-C] 004A4DCC |. E8 3FFAF5FF CALL Audio_Co.00404810 004A4DD1 |. 837D F8 00 CMP DWORD PTR SS:[EBP-8], 0 004A4DD5 |. 74 06 JE SHORT Audio_Co.004A4DDD ; //检测用户名是否为空 004A4DD7 |. 837D F4 00 CMP DWORD PTR SS:[EBP-C], 0 004A4DDB |. 75 2C JNZ SHORT Audio_Co.004A4E09 ; //检测试炼码是否为空 004A4DDD |> 6A 00 PUSH 0 004A4DDF |. 8D4D CC LEA ECX, DWORD PTR SS:[EBP-34] 004A4DE2 |. A1 8CBD4D00 MOV EAX, DWORD PTR DS:[4DBD8C] 004A4DE7 |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A4DE9 |. BA 23000000 MOV EDX, 23 004A4DEE |. E8 11120300 CALL Audio_Co.004D6004 004A4DF3 |. 8B45 CC MOV EAX, DWORD PTR SS:[EBP-34] 004A4DF6 |. 66:8B0D 08504>MOV CX, WORD PTR DS:[4A5008] 004A4DFD |. B2 02 MOV DL, 2 004A4DFF |. E8 E816F9FF CALL Audio_Co.004364EC 004A4E04 |. E9 B2010000 JMP Audio_Co.004A4FBB 004A4E09 |> 8B45 F4 MOV EAX, DWORD PTR SS:[EBP-C] 004A4E0C |. E8 27FCF5FF CALL Audio_Co.00404A38 004A4E11 |. 8BC8 MOV ECX, EAX 004A4E13 |. 85C9 TEST ECX, ECX 004A4E15 |. 7E 47 JLE SHORT Audio_Co.004A4E5E 004A4E17 |. B8 01000000 MOV EAX, 1 004A4E1C |> 8B55 F4 /MOV EDX, DWORD PTR SS:[EBP-C] 004A4E1F |. 0FB65402 FF |MOVZX EDX, BYTE PTR DS:[EDX+EAX-1] 004A4E24 |. 83FA 30 |CMP EDX, 30 004A4E27 |. 7C 05 |JL SHORT Audio_Co.004A4E2E 004A4E29 |. 83FA 39 |CMP EDX, 39 004A4E2C |. 7E 2C |JLE SHORT Audio_Co.004A4E5A 004A4E2E |> 6A 00 |PUSH 0 004A4E30 |. 8D4D C8 |LEA ECX, DWORD PTR SS:[EBP-38] 004A4E33 |. A1 8CBD4D00 |MOV EAX, DWORD PTR DS:[4DBD8C] 004A4E38 |. 8B00 |MOV EAX, DWORD PTR DS:[EAX] 004A4E3A |. BA 23000000 |MOV EDX, 23 004A4E3F |. E8 C0110300 |CALL Audio_Co.004D6004 004A4E44 |. 8B45 C8 |MOV EAX, DWORD PTR SS:[EBP-38] 004A4E47 |. 66:8B0D 08504>|MOV CX, WORD PTR DS:[4A5008] 004A4E4E |. B2 02 |MOV DL, 2 004A4E50 |. E8 9716F9FF |CALL Audio_Co.004364EC 004A4E55 |. E9 61010000 |JMP Audio_Co.004A4FBB 004A4E5A |> 40 |INC EAX 004A4E5B |. 49 |DEC ECX 004A4E5C |.^ 75 BE \JNZ SHORT Audio_Co.004A4E1C ; //循环,检测试炼码是否为纯数字 004A4E5E |> C745 E0 00000>MOV DWORD PTR SS:[EBP-20], 0 004A4E65 |. C745 E4 00000>MOV DWORD PTR SS:[EBP-1C], 0 004A4E6C |. 8B45 F8 MOV EAX, DWORD PTR SS:[EBP-8] ; //用户名 004A4E6F |. E8 C4FBF5FF CALL Audio_Co.00404A38 ; //取用户名长度 004A4E74 |. 8BC8 MOV ECX, EAX 004A4E76 |. 85C9 TEST ECX, ECX 004A4E78 |. 7E 1E JLE SHORT Audio_Co.004A4E98 004A4E7A |. BB 01000000 MOV EBX, 1 004A4E7F |> 8B45 F8 /MOV EAX, DWORD PTR SS:[EBP-8] 004A4E82 |. 0FB64418 FF |MOVZX EAX, BYTE PTR DS:[EAX+EBX-1] 004A4E87 |. 99 |CDQ 004A4E88 |. 0345 E0 |ADD EAX, DWORD PTR SS:[EBP-20] 004A4E8B |. 1355 E4 |ADC EDX, DWORD PTR SS:[EBP-1C] 004A4E8E |. 8945 E0 |MOV DWORD PTR SS:[EBP-20], EAX 004A4E91 |. 8955 E4 |MOV DWORD PTR SS:[EBP-1C], EDX 004A4E94 |. 43 |INC EBX 004A4E95 |. 49 |DEC ECX 004A4E96 |.^ 75 E7 \JNZ SHORT Audio_Co.004A4E7F ; //循环,累加用户名ASCII值至[EBP-1C] 004A4E98 |> 8D45 FC LEA EAX, DWORD PTR SS:[EBP-4] 004A4E9B |. 50 PUSH EAX 004A4E9C |. A1 D8C04D00 MOV EAX, DWORD PTR DS:[4DC0D8] 004A4EA1 |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A4EA3 |. E8 90FBF5FF CALL Audio_Co.00404A38 004A4EA8 |. 8BC8 MOV ECX, EAX 004A4EAA |. 83E9 04 SUB ECX, 4 004A4EAD |. A1 D8C04D00 MOV EAX, DWORD PTR DS:[4DC0D8] 004A4EB2 |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A4EB4 |. BA 01000000 MOV EDX, 1 004A4EB9 |. E8 DAFDF5FF CALL Audio_Co.00404C98 004A4EBE |. C745 E8 00000>MOV DWORD PTR SS:[EBP-18], 0 004A4EC5 |. C745 EC 00000>MOV DWORD PTR SS:[EBP-14], 0 004A4ECC |. 8B45 FC MOV EAX, DWORD PTR SS:[EBP-4] ; //软件名"Audio Converter" 004A4ECF |. E8 64FBF5FF CALL Audio_Co.00404A38 ; //取软件名长度 004A4ED4 |. 8BC8 MOV ECX, EAX 004A4ED6 |. 85C9 TEST ECX, ECX 004A4ED8 |. 7E 1E JLE SHORT Audio_Co.004A4EF8 004A4EDA |. BB 01000000 MOV EBX, 1 004A4EDF |> 8B45 FC /MOV EAX, DWORD PTR SS:[EBP-4] 004A4EE2 |. 0FB64418 FF |MOVZX EAX, BYTE PTR DS:[EAX+EBX-1] 004A4EE7 |. 99 |CDQ 004A4EE8 |. 0345 E8 |ADD EAX, DWORD PTR SS:[EBP-18] 004A4EEB |. 1355 EC |ADC EDX, DWORD PTR SS:[EBP-14] 004A4EEE |. 8945 E8 |MOV DWORD PTR SS:[EBP-18], EAX 004A4EF1 |. 8955 EC |MOV DWORD PTR SS:[EBP-14], EDX 004A4EF4 |. 43 |INC EBX 004A4EF5 |. 49 |DEC ECX 004A4EF6 |.^ 75 E7 \JNZ SHORT Audio_Co.004A4EDF ; //循环,累加软件名ASCII值至[EBP-18] 004A4EF8 |> FF75 EC PUSH DWORD PTR SS:[EBP-14] 004A4EFB |. FF75 E8 PUSH DWORD PTR SS:[EBP-18] ; //软件名ASCII累加值 004A4EFE |. FF75 E4 PUSH DWORD PTR SS:[EBP-1C] 004A4F01 |. FF75 E0 PUSH DWORD PTR SS:[EBP-20] ; //用户名ASCII累加值 004A4F04 |. 8B45 E8 MOV EAX, DWORD PTR SS:[EBP-18] 004A4F07 |. 8B55 EC MOV EDX, DWORD PTR SS:[EBP-14] 004A4F0A |. E8 9908F6FF CALL Audio_Co.004057A8 ; //软件名ASCII累加值乘以用户名ASCII累加值 004A4F0F |. 83C0 20 ADD EAX, 20 ; //乘积加上20 004A4F12 |. 83D2 00 ADC EDX, 0 004A4F15 |. E8 8E08F6FF CALL Audio_Co.004057A8 ; //和乘以软件名ASCII累加值即为注册码16进制 004A4F1A |. 8945 E0 MOV DWORD PTR SS:[EBP-20], EAX 004A4F1D |. 8955 E4 MOV DWORD PTR SS:[EBP-1C], EDX 004A4F20 |. 8B45 F4 MOV EAX, DWORD PTR SS:[EBP-C] 004A4F23 |. E8 D041F6FF CALL Audio_Co.004090F8 004A4F28 |. 3B55 E4 CMP EDX, DWORD PTR SS:[EBP-1C] 004A4F2B |. 75 67 JNZ SHORT Audio_Co.004A4F94 004A4F2D |. 3B45 E0 CMP EAX, DWORD PTR SS:[EBP-20] ; //真假注册码比较 004A4F30 |. 75 62 JNZ SHORT Audio_Co.004A4F94 004A4F32 |. 6A 00 PUSH 0 004A4F34 |. 8D4D C4 LEA ECX, DWORD PTR SS:[EBP-3C] 004A4F37 |. A1 8CBD4D00 MOV EAX, DWORD PTR DS:[4DBD8C] 004A4F3C |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A4F3E |. BA 24000000 MOV EDX, 24 004A4F43 |. E8 BC100300 CALL Audio_Co.004D6004 004A4F48 |. 8B45 C4 MOV EAX, DWORD PTR SS:[EBP-3C] 004A4F4B |. 66:8B0D 08504>MOV CX, WORD PTR DS:[4A5008] 004A4F52 |. B2 02 MOV DL, 2 004A4F54 |. E8 9315F9FF CALL Audio_Co.004364EC 004A4F59 |. A1 38BE4D00 MOV EAX, DWORD PTR DS:[4DBE38] 004A4F5E |. C600 01 MOV BYTE PTR DS:[EAX], 1 004A4F61 |. A1 58BF4D00 MOV EAX, DWORD PTR DS:[4DBF58] 004A4F66 |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A4F68 |. 33C9 XOR ECX, ECX 004A4F6A |. 33D2 XOR EDX, EDX 004A4F6C |. 8B18 MOV EBX, DWORD PTR DS:[EAX] 004A4F6E |. FF53 14 CALL NEAR DWORD PTR DS:[EBX+14] 004A4F71 |. 8B15 38BE4D00 MOV EDX, DWORD PTR DS:[4DBE38] ; Audio_Co.004DDECF 004A4F77 |. A1 58BF4D00 MOV EAX, DWORD PTR DS:[4DBF58] 004A4F7C |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A4F7E |. B9 01000000 MOV ECX, 1 004A4F83 |. E8 54A2F7FF CALL Audio_Co.0041F1DC 004A4F88 |. A1 C0DD4D00 MOV EAX, DWORD PTR DS:[4DDDC0] 004A4F8D |. E8 2E93FDFF CALL Audio_Co.0047E2C0 004A4F92 |. EB 27 JMP SHORT Audio_Co.004A4FBB 004A4F94 |> 6A 00 PUSH 0 004A4F96 |. 8D4D C0 LEA ECX, DWORD PTR SS:[EBP-40] 004A4F99 |. A1 8CBD4D00 MOV EAX, DWORD PTR DS:[4DBD8C] 004A4F9E |. 8B00 MOV EAX, DWORD PTR DS:[EAX] 004A4FA0 |. BA 23000000 MOV EDX, 23 004A4FA5 |. E8 5A100300 CALL Audio_Co.004D6004 004A4FAA |. 8B45 C0 MOV EAX, DWORD PTR SS:[EBP-40] 004A4FAD |. 66:8B0D 08504>MOV CX, WORD PTR DS:[4A5008] 004A4FB4 |. B2 02 MOV DL, 2 004A4FB6 |. E8 3115F9FF CALL Audio_Co.004364EC 004A4FBB |> 33C0 XOR EAX, EAX 004A4FBD |. 5A POP EDX 004A4FBE |. 59 POP ECX 004A4FBF |. 59 POP ECX 004A4FC0 |. 64:8910 MOV DWORD PTR FS:[EAX], EDX 004A4FC3 |. 68 02504A00 PUSH Audio_Co.004A5002 004A4FC8 |> 8D45 C0 LEA EAX, DWORD PTR SS:[EBP-40] 004A4FCB |. BA 05000000 MOV EDX, 5 004A4FD0 |. E8 C7F7F5FF CALL Audio_Co.0040479C 004A4FD5 |. 8D45 D4 LEA EAX, DWORD PTR SS:[EBP-2C] 004A4FD8 |. E8 9BF7F5FF CALL Audio_Co.00404778 004A4FDD |. 8D45 D8 LEA EAX, DWORD PTR SS:[EBP-28] 004A4FE0 |. E8 93F7F5FF CALL Audio_Co.00404778 004A4FE5 |. 8D45 DC LEA EAX, DWORD PTR SS:[EBP-24] 004A4FE8 |. E8 8BF7F5FF CALL Audio_Co.00404778 004A4FED |. 8D45 F4 LEA EAX, DWORD PTR SS:[EBP-C] 004A4FF0 |. BA 03000000 MOV EDX, 3 004A4FF5 |. E8 A2F7F5FF CALL Audio_Co.0040479C 004A4FFA \. C3 RETN 004A4FFB .^ E9 F8F0F5FF JMP Audio_Co.004040F8 004A5000 .^ EB C6 JMP SHORT Audio_Co.004A4FC8 004A5002 . 5B POP EBX 004A5003 . 8BE5 MOV ESP, EBP 004A5005 . 5D POP EBP 004A5006 . C3 RETN
【破解总结】
--------------------------------------------------------------
【算法总结】
软件名"Audio Converter"ASCII累加值乘以用户名ASCII累加值加上20之后，再乘以软件名ASCII累加值转10进制即为注册码
以"tianxj"为例1.软件名"Audio Converter"ASCII累加值为5CA
2.用户名"tianxj"ASCII累加值为28E
3.计算(5CA*28E+20)*5CA=559E62B8转10进制为1436443320即注册码
简单不，算法注册机就不写了。
--------------------------------------------------------------
感谢飘云老大、猫老大、Nisy老大以及很多前辈们的学习教程以及所有帮助过我的论坛兄弟姐妹们！谢谢
--------------------------------------------------------------
【版权声明】破文是学习的手记，兴趣是成功的源泉；本破文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!
温馨提示：庆祝祖国60华诞！！祝大家国庆节仲秋节快乐^_^