Crack MP3 music manager

Comments: Use SoftICE and SmartCheck to work with this VB6 program. The registration number is very easy to find. Set a breakpoint with rtcMsgBox or MultiByteToWideChar and see the following judgment: 0167: 004C546D 50 push eax 0167: 004C546E FF1568104000 CALL [00401068] Use SoftICE and SmartCheck to work with this VB6 program.
The registration number is very easy to find. Use rtcMsgBox or MultiByteToWideChar to set a breakpoint,
See the following judgment:
0167: 004C546D 50 PUSH EAX
0167: 004C546E FF1568104000 CALL [00401068]
0167: 004C5474 8B45E4 mov eax, [EBP-1C]
0167: 004C5477 50 PUSH EAX
0167: 004C5478 FF1550104000 CALL [00401050]
0167: 004C547E 8B3DB4114000 mov edi, [004011B4]
0167: 004C5484 8BD0 mov edx, EAX
0167: 004C5486 8D4DE8 lea ecx, [EBP-18]
0167: 004C5489 FFD7 CALL EDI
0167: 004C548B 8D4DE4 lea ecx, [EBP-1C]
0167: 004C548E FF15FC114000 CALL [004011FC]
0167: 004C5494 8D4DD8 lea ecx, [EBP-28]
0167: 004C5497 FF15F8114000 CALL [004011F8]
0167: 004C549D E85EF5FFFF CALL 004C4A00
0167: 004C54A2 8B4DE8 mov ecx, [EBP-18]
0167: 004C54A5 8B1528704C00 mov edx, [004C7028]
0167: 004C54AB 51 push ecx // incorrect registration code
0167: 004C54AC 52 push edx // correct registration code
0167: 004C54AD ff15d00004000 CALL [004010D4] // compare the registration code
0167: 004C54B3 85C0 test eax, EAX
0167: 004C54B5 0F85C5010000 JNZ 004C5680

This software must be written to the registration machine. It should be followed by SoftICE. After a long tracking, it is found that it will multiply the k character of your software number by (k 1) below ).

0167: 004C4B29 DB856CFFFFFF fild dword ptr [EBP-0094]
0167: 004C4B2F C745A805000000 mov dword ptr [EBP-58], 00000005
0167: 004C4B36 DD9D64FFFFFF FSTP REAL8 PTR [EBP-009C]
0167: 004C4B3C DC8D64FFFFFF FMUL REAL8 PTR [EBP-009C] // multiply
0167: 004C4B42 DD5DB0 FSTP REAL8 PTR [EBP-50]
0167: 004C4B45 DFE0 FSTSW AX
0167: 004C4B47 A80D test al, 0D
0167: 004C4B49 0F85A0020000 JNZ 004C4DEF

For example, if my software number is 174078570, it adds 0 to the front and changes to 0174078570, then there will be:
0 multiplied by 1 = 0
1 multiplied by 2 = 2
7x3 = 21
4 multiplied by 4 = 16
0 multiplied by 5 = 0
7x6 = 42
8 multiplied by 7 = 56
5x8 = 40
7 multiplied by 9 = 63
0 multiplied by 10 = 0

After that, SoftICE is lost. Use SmartCheck to find that it Concatenates the product above into a string "0221160425640630 ",
Take the first nine characters of the string "022116042" and convert the string to the corresponding decimal number 22116042. The hexadecimal number is represented as 15176CA, then, the registration number H15176CAP is obtained by adding the software author's name H and P to the front and back of the hexadecimal representation.

Registration machine:

# Include <stdio. h>
# Include <string. h>

Void main (void)
{

Char buf [128] = "0 ";
Char SerialStr [2, 128], CodeStr [2, 128];
Int k;
Long RegCode;

Printf ("Enter your software number :");
Gets (SerialStr );

Strcat (buf, SerialStr );
CodeStr [0] = '\ 0 ';
For (k = 0; k <strlen (buf); k)
{
Sprintf (SerialStr, "% d", (buf [k]-'0') * (k 1) & 0xFF );
Strcat (CodeStr, SerialStr );
}

CodeStr [9] = '\ 0 ';
Sscanf (CodeStr, "% lu", & RegCode );

Printf ("your registration number is :");
Printf ("H % lXP \ n", RegCode );
}