菜鸟破解实录(五)之 EditPlus v2.01
软件名称:EditPlus -->(30天试用)
版 本:v2.01
简 介: 一套功能强大,可取代记事本的文字编辑器,拥有无限制的Undo/Redo、英文拼字检查、自动换行、列数标记、搜寻取代、同时编辑多文件、全屏幕浏览功能。而它还有一个好用的功能,就是它有监视剪贴簿的功能,能够同步于剪贴簿自动将文字贴进EditPlus的编辑窗口中,让你省去做贴上的步骤。另外它也是一个好用的HTML编辑器,除了可以颜色标记HTMLTag(同时支持C/C++、Perl、Java)外,还内建完整的HTML和CSS1指令功能,对于习惯用记事本编辑网页的朋友,它可帮你节省一半以上的网页制作时间,若你有安装IE3.0以上版本,它还会结合IE浏览器于EditPlus窗口中,让你可以直接预览编辑好的网页(若没安装IE,也可指定浏览器路径)。
作 者:xiA Qin
级 别:刚学不久
解密日前:2000年7月30日
解密工具:Trw2000 1.22
破解目的:学习注册码的破解。(简单)
说 明:
本文是在我的软件破解记录上整理出来的。如若有纰漏,请各位大侠多指教!
首先运行EditPlus
输入注册信息
name: xiA Qin
&任意输入
register key: 9876543210 &任意输入
下指令bpx hmemcpy //下中断点
按F5回到程序,按确定,这时会被Trw2000拦截到。
下指令bd * //屏障中断点
下指令pmodule //直接跳到程序的领空
按F10来到下面指令
...............
015F:00462070 LEA ECX,[EDI+5C]
015F:00462073 PUSH EDX
015F:00462074 CALL 0049FE4D
015F:00462079 MOV AL,[ESI]
015F:0046207B CMP AL,20
015F:0046207D JZ 00462083
015F:0046207F CMP AL,09
015F:00462081 JNZ 00462086
015F:00462083 INC ESI
015F:00462084 JMP 00462079
015F:00462086 PUSH ESI
015F:00462087 CALL [004CD278]
015F:0046208D TEST EAX,EAX
015F:0046208F JLE 004620A4
015F:00462091 MOV CL,[EAX+ESI-01]
015F:00462095 CMP CL,20
015F:00462098 JZ 0046209F
015F:0046209A CMP CL,09
015F:0046209D JNZ 004620A4
015F:0046209F DEC EAX
015F:004620A0 TEST EAX,EAX
015F:004620A2 JG 00462091
015F:004620A4 TEST EAX,EAX
015F:004620A6 MOV BYTE PTR [ESI+EAX],00
015F:004620AA JZ 0046219E
015F:004620B0 MOV EAX,[ESP+08]
015F:004620B4 MOV ECX,[EAX-08]
015F:004620B7 TEST ECX,ECX
015F:004620B9 JZ 0046219E
015F:004620BF LEA ECX,[ESP+08]
015F:004620C3 CALL 004A3D99
015F:004620C8 MOV ECX,[ESP+08]
015F:004620CC PUSH ECX
015F:004620CD PUSH ESI
015F:004620CE CALL 00462280
//有问题,按F8进入子程序。
015F:004620D3 ADD ESP,08
015F:004620D6 TEST EAX,EAX
015F:004620D8 JNZ 004620ED
//这里可以跳过失败对话框。
................................
015F:00462280 83EC0C SUB
ESP,0C
015F:00462283 53
PUSH EBX
015F:00462284 8B1D78D24C00 MOV
EBX,[004CD278]
015F:0046228A 56
PUSH ESI
015F:0046228B 57
PUSH EDI
015F:0046228C 8B7C241C MOV
EDI,[ESP+1C]
015F:00462290 57
PUSH EDI
015F:00462291 FFD3
CALL EBX
015F:00462293 8BF0
MOV ESI,EAX
015F:00462295 85F6
TEST ESI,ESI
015F:00462297 7507
JNZ 004622A0 //修改这里,变成任意注册版
015F:00462299 5F
POP EDI
015F:0046229A 5E
POP ESI
015F:0046229B 5B
POP EBX
015F:0046229C 83C40C ADD
ESP,0C
015F:0046229F C3
RET
015F:004622A0 E83BFFFFFF CALL
004621E0
015F:004622A5 56
PUSH ESI
015F:004622A6 57
PUSH EDI
015F:004622A7 6A00
PUSH 00
015F:004622A9 E882FFFFFF CALL
00462230
015F:004622AE 25FFFF0000 AND
EAX,0000FFFF
015F:004622B3 50
PUSH EAX
015F:004622B4 8D44241C LEA
EAX,[ESP+1C]
015F:004622B8 6814624F00 PUSH
004F6214
015F:004622BD 50
PUSH EAX
015F:004622BE E8CDD60200 CALL
0048F990
015F:004622C3 8B742438 MOV
ESI,[ESP+38]
015F:004622C7 8A442424 MOV
AL,[ESP+24]
015F:004622CB 83C418 ADD
ESP,18
015F:004622CE 8A4E02 MOV
CL,[ESI+02]
015F:004622D1 8D7E02 LEA
EDI,[ESI+02]
015F:004622D4 3AC8
CMP CL,AL
015F:004622D6 7409
JZ 004622E1
015F:004622D8 5F
POP EDI
015F:004622D9 5E
POP ESI
015F:004622DA 33C0
XOR EAX,EAX
015F:004622DC 5B
POP EBX
015F:004622DD 83C40C ADD
ESP,0C
015F:004622E0 C3
RET
015F:004622E1 8A5603 MOV
DL,[ESI+03]
015F:004622E4 8A44240D MOV
AL,[ESP+0D]
015F:004622E8 3AD0
CMP DL,AL
015F:004622EA 7409
JZ 004622F5
015F:004622EC 5F
POP EDI
015F:004622ED 5E
POP ESI
015F:004622EE 33C0
XOR EAX,EAX
015F:004622F0 5B
POP EBX
015F:004622F1 83C40C ADD
ESP,0C
015F:004622F4 C3
RET
015F:004622F5 56
PUSH ESI
015F:004622F6 FFD3
CALL EBX
015F:004622F8 83E802 SUB
EAX,02
015F:004622FB 50
PUSH EAX
015F:004622FC 57
PUSH EDI
015F:004622FD 6A00
PUSH 00
015F:004622FF E82CFFFFFF CALL
00462230
015F:00462304 25FFFF0000 AND
EAX,0000FFFF
015F:00462309 50
PUSH EAX
015F:0046230A 8D44241C LEA
EAX,[ESP+1C]
015F:0046230E 6814624F00 PUSH
004F6214
015F:00462313 50
PUSH EAX
015F:00462314 E877D60200 CALL
0048F990
015F:00462319 8A0E
MOV CL,[ESI]
015F:0046231B 8A442424 MOV
AL,[ESP+24]
015F:0046231F 83C418 ADD
ESP,18
015F:00462322 3AC8
CMP CL,AL
015F:00462324 7409
JZ 0046232F
015F:00462326 5F
POP EDI
015F:00462327 5E
POP ESI
015F:00462328 33C0
XOR EAX,EAX
015F:0046232A 5B
POP EBX
015F:0046232B 83C40C ADD
ESP,0C
015F:0046232E C3
RET
............................
015F:004620DA PUSH FF
015F:004620DC PUSH 10
015F:004620DE PUSH 00005F81
015F:004620E3 CALL 004AB493
//注册失败对话框
015F:004620E8 JMP 004621A6
015F:004620ED MOV EAX,[EDI+000000D4]
015F:004620F3 TEST EAX,EAX
015F:004620F5 JNZ 0046214C
015F:004620F7 MOV EDX,[004F7750]
015F:004620FD MOV [ESP+0C],EDX
015F:00462101 MOV EAX,[ESP+08]
015F:00462105 LEA ECX,[ESP+0C]
015F:00462109 PUSH EAX
015F:0046210A PUSH ESI
015F:0046210B PUSH 000053D7
015F:00462110 PUSH ECX
015F:00462111 MOV BYTE PTR [ESP+0000021C],01
015F:00462119 CALL 0049CB8A
015F:0046211E MOV EDX,[ESP+1C]
015F:00462122 ADD ESP,10
015F:00462125 PUSH 00
015F:00462127 PUSH 24
从上面可以看出.
将00462297 7507
JNZ 004622A0
改00462297 7407
JZ 004622A0
就可以注册。
整里一下,用Ultraedt打开EditPlus
找到75 07 5f 5e 5b 83 c4 0c
改成74 07 5f 5e 5b 83 c4 0c
保存修改文件,重新运行
输入注册信息 ,现在是想输入什么都可以。
name: China
&任意输入
register key: 1949101 &任意输入
保存修改程序,重新运行试一试。
- 标 题:菜鸟破解实录(五)之 EditPlus v2.01 (7千字)
- 作 者:xiA Qin
- 时 间:2000-8-1 16:49:16
- 链 接:http://bbs.pediy.com