电脑锁(Lock) V2.1 算法分析 -pc6资讯

您的位置：首页 → 精文荟萃 → 破解文章 → 电脑锁(Lock) V2.1 算法分析

电脑锁(Lock) V2.1 算法分析 时间：2004/10/15 0:54:00来源：本站整理作者：蓝点我要评论(0): 　

破解者：HMILY[CCG][BCG]
软件名称：电脑锁(Lock) V2.1
难易程度：very easy
该软件用aspack v2.12压缩，可以带壳调试。
0167:004854E6 8B45F8 MOV EAX,[EBP-08]
0167:004854E9 E832F2F7FF CALL 00404720
0167:004854EE 8BD8 MOV EBX,EAX
0167:004854F0 85DB TEST EBX,EBX
0167:004854F2 7C2A JL 0048551E
0167:004854F4 43 INC EBX
0167:004854F5 33FF XOR EDI,EDI
0167:004854F7 8B45F8 MOV EAX,[EBP-08]
0167:004854FA 0FB64438FF MOVZX EAX,BYTE [EAX+EDI-01] ->依次取机器码，第一次取为空
0167:004854FF D1E8 SHR EAX,1 ->逻辑右移一位 eax=eax>>1
0167:00485501 8D0440 LEA EAX,[EAX+EAX*2] ->eax=eax+eax*2
0167:00485504 83C005 ADD EAX,BYTE +05 ->eax=eax+5
0167:00485507 8D55F4 LEA EDX,[EBP-0C]
0167:0048550A E8D134F8FF CALL 004089E0
0167:0048550F 8B55F4 MOV EDX,[EBP-0C]
0167:00485512 8D45FC LEA EAX,[EBP-04]
0167:00485515 E80EF2F7FF CALL 00404728
0167:0048551A 47 INC EDI
0167:0048551B 4B DEC EBX ->ebx--
0167:0048551C 75D9 JNZ 004854F7 ->未取完机器码继续
0167:0048551E 8D55F0 LEA EDX,[EBP-10]
0167:00485521 8B86E8030000 MOV EAX,[ESI+03E8]
0167:00485527 E848BCFBFF CALL 00441174
0167:0048552C 8B55F0 MOV EDX,[EBP-10] ->
| 真假码分别传入
0167:0048552F 8B45FC MOV EAX,[EBP-04] ->
0167:00485532 E82DF3F7FF CALL 00404864
0167:00485537 0F85E1000000 JNZ NEAR 0048561E ->跳就完了。
0167:0048553D B201 MOV DL,01 ->dl=1注册成功
0167:0048553F A13C884700 MOV EAX,[0047883C]
0167:00485544 E8F333FFFF CALL 0047893C
0167:00485549 8BD8 MOV EBX,EAX
0167:0048554B BA02000080 MOV EDX,80000002
0167:00485550 8BC3 MOV EAX,EBX
0167:00485552 E88534FFFF CALL 004789DC
0167:00485557 B101 MOV CL,01
0167:00485559 BAAC564800 MOV EDX,004856AC
0167:0048555E 8BC3 MOV EAX,EBX
0167:00485560 E8DF34FFFF CALL 00478A44
0167:00485565 84C0 TEST AL,AL
0167:00485567 740E JZ 00485577
0167:00485569 33C9 XOR ECX,ECX
0167:0048556B BACC564800 MOV EDX,004856CC
0167:00485570 8BC3 MOV EAX,EBX
0167:00485572 E86D38FFFF CALL 00478DE4
0167:00485577 BAD8564800 MOV EDX,004856D8
0167:0048557C 8B8694040000 MOV EAX,[ESI+0494]
0167:00485582 E81DBCFBFF CALL 004411A4
0167:00485587 BAEC564800 MOV EDX,004856EC
0167:0048558C 8B8698040000 MOV EAX,[ESI+0498]
0167:00485592 E80DBCFBFF CALL 004411A4
0167:00485597 B201 MOV DL,01
0167:00485599 8B8690040000 MOV EAX,[ESI+0490]
0167:0048559F E8F0BAFBFF CALL 00441094
0167:004855A4 8B86A0040000 MOV EAX,[ESI+04A0]
0167:004855AA 8B10 MOV EDX,[EAX]
0167:004855AC FF92C0000000 CALL NEAR [EDX+C0]
0167:004855B2 BA38574800 MOV EDX,00485738
0167:004855B7 8B86CC030000 MOV EAX,[ESI+03CC]
0167:004855BD E8E2BBFBFF CALL 004411A4
0167:004855C2 BA58574800 MOV EDX,00485758
0167:004855C7 8B86D0030000 MOV EAX,[ESI+03D0]
0167:004855CD E8D2BBFBFF CALL 004411A4
0167:004855D2 BA84574800 MOV EDX,00485784
0167:004855D7 8B86D4030000 MOV EAX,[ESI+03D4]
0167:004855DD E8C2BBFBFF CALL 004411A4
0167:004855E2 33D2 XOR EDX,EDX
0167:004855E4 8B86EC030000 MOV EAX,[ESI+03EC]
0167:004855EA 8B08 MOV ECX,[EAX]
0167:004855EC FF5164 CALL NEAR [ECX+64]
0167:004855EF BAA0574800 MOV EDX,004857A0
0167:004855F4 8B86FC030000 MOV EAX,[ESI+03FC]
0167:004855FA E8A5BBFBFF CALL 004411A4
0167:004855FF BAB8574800 MOV EDX,004857B8
0167:00485604 8B86E8030000 MOV EAX,[ESI+03E8]
0167:0048560A E895BBFBFF CALL 004411A4
0167:0048560F 33D2 XOR EDX,EDX
0167:00485611 8B86E8030000 MOV EAX,[ESI+03E8]
0167:00485617 8B08 MOV ECX,[EAX]
0167:00485619 FF5164 CALL NEAR [ECX+64]
0167:0048561C EB53 JMP SHORT 00485671
0167:0048561E C705E4AC48000500+MOV DWORD [0048ACE4],05
0167:00485628 BAD8564800 MOV EDX,004856D8

注册机源码：
//---------------------------------------------------------------------------
void __fastcall Tform1::OKBtnClick(TObject *Sender)
{
String name,key;int a,b=1;unsigned long e=0,f=0;
if(UEdit->Text!="")
{
name=UEdit->Text;a=UEdit->Text.Length();
while(b<=a)
{
e=name[b]>>1;
f=e+e*2+5;
key=key+f;b++;
}
CEdit->Text=CEdit->Text+'5'+key;
}
}

文章评论

查看所有0条评论>>

热门文章 去除winrar注册框方法