WinBowl Version 3.2 PJ小记(3)

* Possible Reference to String Resource ID=00001: "Do you want to save the game in progress first?"
                                  |
:0040D5F8 B801000000              mov eax, 00000001<--设置注册标记
:0040D5FD 7402                    je 0040D601<--------完全相等则跳

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D5EB(C)
|
:0040D5FF 33C0                    xor eax, eax<-------不等则清除注册标记

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D5FD(C)
|
:0040D601 5F                      pop edi
:0040D602 5E                      pop esi
:0040D603 C3                      ret


算法小结：
======================================================================
  int z[]=0x30,0x32,0x62,0x77; //定义4个常量
  int i=0;x=0x1EAF; //赋初值
for(i=0;i<注册名长度;i++) //处理
  x= 地址43BC10处偏移((取name第i+1位 xor x)的低8位的值*4+1)位的值 xor x高8位的值; //计算
for(i=0;i<4;i++) //再处理
  x= (x的低8位的值 xor z[i]) xor x的高8位的值; //再计算
最终X的值的十进制数为真注册码!

附地址43BC10＝"0000C1C081C1400101C3C003800241C201C6C006800741C70005C1
C581C4400401CCC00C800D41CD000FC1CF81CE400E000AC1CA81CB400B01C9C009800841
C801D8C018801941D9001BC1DB81DA401A001EC1DE81DF401F01DDC01D801C41DC0014
C1D481D5401501D7C017801641D601D2C012801341D30011C1D181D0401001F0
C030803141F10033C1F381F240320036C1F681F7403701F5C035803441F4003
CC1FC81FD403D01FFC03F803E41FE01FAC03A803B41FB0039C1F981F840380028
C1E881E9402901EBC02B802A41EA01EEC02E802F41EF002DC1ED81EC402C01E4
C024802541E50027C1E781E640260022C1E281E3402301E1C021802041E001A0
C060806141A10063C1A381A240620066C1A681A7406701A5C065806441A4006
CC1AC81AD406D01AFC06F806E41AE01AAC06A806B41AB0069C1A981A840680078
C1B881B9407901BBC07B807A41BA01BEC07E807F41BF007DC1BD81BC407C01B4
C074807541B50077C1B781B640760072C1B281B3407301B1C071807041B00050
C190819140510193C053805241920196C056805741970055C19581944054019
CC05C805D419D005FC19F819E405E005AC19A819B405B0199C059805841980188
C04880494189004BC18B818A404A004EC18E818F404F018DC04D804C418C0044
C184818540450187C047804641860182C042804341830041C18181804040"


注册机：
======================================================================
内存注册机：
中断地址：40D5D9
次数：1
指令：66
长度：6
保存寄存器方式EAX十进制为注册码

算法注册机下载地址：
http://fcg.5599.net/master/WinBowl.rar
欢迎测试!

================================END==========================

在VB中实现移动一个没有标题栏的窗口：【上一篇】
WinBowl Version 3.2 PJ小记(2)：【下一篇】