破解者:HMILY[CCG][BCG]
软件名称:电脑锁(Lock) V2.1
难易程度:very
easy
该软件用aspack v2.12压缩,可以带壳调试。
0167:004854E6 8B45F8
MOV EAX,[EBP-08]
0167:004854E9 E832F2F7FF
CALL 00404720
0167:004854EE 8BD8
MOV EBX,EAX
0167:004854F0
85DB TEST EBX,EBX
0167:004854F2
7C2A JL 0048551E
0167:004854F4
43 INC EBX
0167:004854F5
33FF XOR EDI,EDI
0167:004854F7
8B45F8 MOV EAX,[EBP-08]
0167:004854FA
0FB64438FF MOVZX EAX,BYTE [EAX+EDI-01] ->依次取机器码,第一次取为空
0167:004854FF
D1E8 SHR EAX,1
->逻辑右移一位 eax=eax>>1
0167:00485501
8D0440 LEA EAX,[EAX+EAX*2]
->eax=eax+eax*2
0167:00485504 83C005
ADD EAX,BYTE +05
->eax=eax+5
0167:00485507 8D55F4
LEA EDX,[EBP-0C]
0167:0048550A E8D134F8FF
CALL 004089E0
0167:0048550F 8B55F4
MOV EDX,[EBP-0C]
0167:00485512 8D45FC
LEA EAX,[EBP-04]
0167:00485515
E80EF2F7FF CALL 00404728
0167:0048551A 47
INC EDI
0167:0048551B
4B DEC EBX
->ebx--
0167:0048551C
75D9 JNZ 004854F7
->未取完机器码继续
0167:0048551E
8D55F0 LEA EDX,[EBP-10]
0167:00485521
8B86E8030000 MOV EAX,[ESI+03E8]
0167:00485527
E848BCFBFF CALL 00441174
0167:0048552C 8B55F0
MOV EDX,[EBP-10]
->
|
真假码分别传入
0167:0048552F 8B45FC MOV
EAX,[EBP-04] ->
0167:00485532 E82DF3F7FF
CALL 00404864
0167:00485537 0F85E1000000
JNZ NEAR 0048561E ->跳就完了。
0167:0048553D
B201 MOV DL,01
->dl=1注册成功
0167:0048553F
A13C884700 MOV EAX,[0047883C]
0167:00485544
E8F333FFFF CALL 0047893C
0167:00485549 8BD8
MOV EBX,EAX
0167:0048554B
BA02000080 MOV EDX,80000002
0167:00485550
8BC3 MOV EAX,EBX
0167:00485552
E88534FFFF CALL 004789DC
0167:00485557 B101
MOV CL,01
0167:00485559
BAAC564800 MOV EDX,004856AC
0167:0048555E
8BC3 MOV EAX,EBX
0167:00485560
E8DF34FFFF CALL 00478A44
0167:00485565 84C0
TEST AL,AL
0167:00485567
740E JZ 00485577
0167:00485569
33C9 XOR ECX,ECX
0167:0048556B
BACC564800 MOV EDX,004856CC
0167:00485570
8BC3 MOV EAX,EBX
0167:00485572
E86D38FFFF CALL 00478DE4
0167:00485577 BAD8564800
MOV EDX,004856D8
0167:0048557C 8B8694040000
MOV EAX,[ESI+0494]
0167:00485582 E81DBCFBFF
CALL 004411A4
0167:00485587 BAEC564800
MOV EDX,004856EC
0167:0048558C 8B8698040000
MOV EAX,[ESI+0498]
0167:00485592 E80DBCFBFF
CALL 004411A4
0167:00485597 B201
MOV DL,01
0167:00485599
8B8690040000 MOV EAX,[ESI+0490]
0167:0048559F
E8F0BAFBFF CALL 00441094
0167:004855A4 8B86A0040000
MOV EAX,[ESI+04A0]
0167:004855AA 8B10
MOV EDX,[EAX]
0167:004855AC
FF92C0000000 CALL NEAR [EDX+C0]
0167:004855B2 BA38574800
MOV EDX,00485738
0167:004855B7 8B86CC030000
MOV EAX,[ESI+03CC]
0167:004855BD E8E2BBFBFF
CALL 004411A4
0167:004855C2 BA58574800
MOV EDX,00485758
0167:004855C7 8B86D0030000
MOV EAX,[ESI+03D0]
0167:004855CD E8D2BBFBFF
CALL 004411A4
0167:004855D2 BA84574800
MOV EDX,00485784
0167:004855D7 8B86D4030000
MOV EAX,[ESI+03D4]
0167:004855DD E8C2BBFBFF
CALL 004411A4
0167:004855E2 33D2
XOR EDX,EDX
0167:004855E4
8B86EC030000 MOV EAX,[ESI+03EC]
0167:004855EA
8B08 MOV ECX,[EAX]
0167:004855EC
FF5164 CALL NEAR [ECX+64]
0167:004855EF
BAA0574800 MOV EDX,004857A0
0167:004855F4
8B86FC030000 MOV EAX,[ESI+03FC]
0167:004855FA
E8A5BBFBFF CALL 004411A4
0167:004855FF BAB8574800
MOV EDX,004857B8
0167:00485604 8B86E8030000
MOV EAX,[ESI+03E8]
0167:0048560A E895BBFBFF
CALL 004411A4
0167:0048560F 33D2
XOR EDX,EDX
0167:00485611
8B86E8030000 MOV EAX,[ESI+03E8]
0167:00485617
8B08 MOV ECX,[EAX]
0167:00485619
FF5164 CALL NEAR [ECX+64]
0167:0048561C
EB53 JMP SHORT 00485671
0167:0048561E
C705E4AC48000500+MOV DWORD [0048ACE4],05
0167:00485628
BAD8564800 MOV EDX,004856D8
注册机源码:
//---------------------------------------------------------------------------
void
__fastcall Tform1::OKBtnClick(TObject *Sender)
{
String name,key;int
a,b=1;unsigned long e=0,f=0;
if(UEdit->Text!="")
{
name=UEdit->Text;a=UEdit->Text.Length();
while(b<=a)
{
e=name[b]>>1;
f=e+e*2+5;
key=key+f;b++;
}
CEdit->Text=CEdit->Text+'5'+key;
}
}