好友
阅读权限10
听众
最后登录1970-1-1
|
注册吾爱破解有一段时间了，最近一直在研究，找了一个重启验证的无壳小工具试炼一下。软件介绍就不浪费论坛空间了。
官方主页http://clipdiary.com/
这是一个重启验证的软件。网上有破解，只是试用期注册表而免费使用。完全破解如下：
----------------------------
004465DB /$ 68 04010000 push 0x104 ; 可进入密码表模块
004465E0 |. B8 ECCF7100 mov eax,clipdiar.0071CFEC
004465E5 |. E8 99F62600 call clipdiar.006B5C83
004465EA |. 8BF9 mov edi,ecx
004465EC |. 33DB xor ebx,ebx
004465EE |. 53 push ebx
004465EF |. 8D4D CC lea ecx,[local.13]
004465F2 |. 89BD F8FEFFFF mov [local.66],edi
004465F8 |. 889F BE010000 mov byte ptr ds:[edi+0x1BE],bl
004465FE |. 889F BD010000 mov byte ptr ds:[edi+0x1BD],bl
00446604 |. 889F BC010000 mov byte ptr ds:[edi+0x1BC],bl
0044660A |. C745 E4 07000>mov [local.7],0x7
00446611 |. E8 20DFFBFF call clipdiar.00404536
00446616 |. 895D E8 mov [local.6],ebx
00446619 |. 895D FC mov [local.1],ebx
0044661C |. 8D5D CC lea ebx,[local.13]
0044661F |. E8 031E0000 call clipdiar.00448427
00446624 |. 8DB5 10FFFFFF lea esi,[local.60]
0044662A |. E8 4E53FEFF call clipdiar.0042B97D
0044662F |. C645 FC 01 mov byte ptr ss:[ebp-0x4],0x1
00446633 |. 8B45 D0 mov eax,[local.12]
00446636 |. 33DB xor ebx,ebx
00446638 |. 837D E4 08 cmp [local.7],0x8
0044663C |. 53 push ebx
0044663D 73 03 jnb Xclipdiar.00446642
0044663F |. 8D45 D0 lea eax,[local.12]
00446642 |> 83EC 1C sub esp,0x1C
00446645 |. 8BCC mov ecx,esp
00446647 |. 89A5 FCFEFFFF mov [local.65],esp
0044664D |. 50 push eax
0044664E |. E8 92DFFBFF call clipdiar.004045E5
00446653 |. 8D8D 10FFFFFF lea ecx,[local.60]
00446659 |. E8 A853FEFF call clipdiar.0042BA06
0044665E 3AC3 cmp al,bl
00446660 0F85 4C010000 jnz clipdiar.004467B2 ; 不能跳啊-je改jnz
00446666 |. 8D85 10FFFFFF lea eax,[local.60]
0044666C |. E8 CA8AFEFF call clipdiar.0042F13B
00446671 84C0 test al,al
00446673 0F85 39010000 jnz clipdiar.004467B2 ; 不能跳啊-je改jnz
00446679 |. 0FB645 A4 movzx eax,byte ptr ss:[ebp-0x5C]
0044667D |. 8987 C8010000 mov dword ptr ds:[edi+0x1C8],eax
00446683 |. 8D85 FCFEFFFF lea eax,[local.65]
00446689 |. 50 push eax
0044668A |. 8D4D CC lea ecx,[local.13]
0044668D |. C687 BD010000>mov byte ptr ds:[edi+0x1BD],0x1
00446694 |. C687 BC010000>mov byte ptr ds:[edi+0x1BC],0x1
0044669B |. E8 EE200000 call clipdiar.0044878E
004466A0 |. 50 push eax
004466A1 |. 8D8D 0CFFFFFF lea ecx,[local.61]
004466A7 |. C645 FC 02 mov byte ptr ss:[ebp-0x4],0x2
004466AB |. E8 83210000 call clipdiar.00448833
004466B0 |. 8D8D FCFEFFFF lea ecx,[local.65]
004466B6 |. C645 FC 04 mov byte ptr ss:[ebp-0x4],0x4
004466BA |. E8 37D9FBFF call clipdiar.00403FF6
004466BF |. 8B85 0CFFFFFF mov eax,[local.61]
004466C5 |. 8B08 mov ecx,dword ptr ds:[eax]
004466C7 |. E8 E25CFEFF call clipdiar.0042C3AE ; 进入密码表的call
004466CC |. 84C0 test al,al
004466CE 0F85 CF000000 jnz clipdiar.004467A3 ; 进入试用期call
004466D4 F645 B8 03 test byte ptr ss:[ebp-0x48],0x3
004466D8 0F85 C5000000 jnz clipdiar.004467A3 ; 不能跳啊-je改jnz
004466DE |. 385D C0 cmp byte ptr ss:[ebp-0x40],bl
004466E1 74 4C je Xclipdiar.0044672F ; 自跳转
004466E3 |. 66:0FB64D A6 movzx cx,byte ptr ss:[ebp-0x5A]
004466E8 |. 0FB645 A7 movzx eax,byte ptr ss:[ebp-0x59]
004466EC |. 53 push ebx
004466ED |. 6A 01 push 0x1
004466EF |. 6A 01 push 0x1
004466F1 |. 6A 01 push 0x1
004466F3 |. FF75 AC push [local.21]
004466F6 |. 0FB7C9 movzx ecx,cx
004466F9 |. 50 push eax
004466FA |. 51 push ecx
004466FB |. 8D8D 00FFFFFF lea ecx,[local.64]
00446701 |. 899D 00FFFFFF mov [local.64],ebx
00446707 |. 899D 04FFFFFF mov [local.63],ebx
0044670D |. E8 0E2F1400 call clipdiar.00589620
00446712 |. 8D85 F0FEFFFF lea eax,[local.68]
00446718 |. 50 push eax
00446719 |. E8 DF0DFCFF call clipdiar.004074FD
0044671E |. 59 pop ecx
0044671F |. 50 push eax
00446720 |. 8D8D 00FFFFFF lea ecx,[local.64]
00446726 |. E8 EE1F0000 call clipdiar.00448719
0044672B |. 84C0 test al,al
0044672D 75 74 jnz Xclipdiar.004467A3 ; 跳转，则进入试用期
0044672F |> 81C7 C0010000 add edi,0x1C0
00446735 |. 8DB5 10FFFFFF lea esi,[local.60]
0044673B |. E8 235DFEFF call clipdiar.0042C463
00446740 |. 84C0 test al,al
00446742 75 43 je Xclipdiar.00446787 ; 不跳
00446744 |. 53 push ebx
00446745 |. 53 push ebx
00446746 |. 53 push ebx
00446747 |. 53 push ebx
00446748 |. 68 DB070000 push 0x7DB
0044674D |. 6A 06 push 0x6
0044674F |. 6A 06 push 0x6
00446751 |. 8D8D 00FFFFFF lea ecx,[local.64]
00446757 |. 899D 00FFFFFF mov [local.64],ebx
0044675D |. 899D 04FFFFFF mov [local.63],ebx
00446763 |. E8 B82E1400 call clipdiar.00589620
00446768 |. 57 push edi
00446769 |. 8D8D 00FFFFFF lea ecx,[local.64]
0044676F |. E8 121F0000 call clipdiar.00448686
00446774 |. 84C0 test al,al
00446776 EB 0F jmp Xclipdiar.00446787 ; 改成jmp，最后一跳，注册成功
00446778 |. 8B85 F8FEFFFF mov eax,[local.66]
0044677E |. C680 BE010000>mov byte ptr ds:[eax+0x1BE],0x1
00446785 |. EB 1C jmp Xclipdiar.004467A3
00446787 |> 8B85 F8FEFFFF mov eax,[local.66]
0044678D |. 8898 BD010000 mov byte ptr ds:[eax+0x1BD],bl
00446793 |. 8998 CC010000 mov dword ptr ds:[eax+0x1CC],ebx
00446799 |. C705 78CB8300>mov dword ptr ds:[0x83CB78],clipdiar.004>
004467A3 |> 8D8D 0CFFFFFF lea ecx,[local.61] ; 只要跳到这里及以下，就是试用版
004467A9 |. C645 FC 01 mov byte ptr ss:[ebp-0x4],0x1
004467AD |. E8 44D8FBFF call clipdiar.00403FF6
004467B2 |> 8DB5 10FFFFFF lea esi,[local.60]
004467B8 |. E8 5DA3FEFF call clipdiar.00430B1A
004467BD |. 8D4D CC lea ecx,[local.13]
004467C0 |. E8 1DD9FBFF call clipdiar.004040E2
004467C5 |. E8 3CF52600 call clipdiar.006B5D06
004467CA \. C3 retn
----------------------------
about注册信息错误显示的修改
00430DFE |. 8378 18 10 cmp dword ptr ds:[eax+0x18],0x10
00430E02 72 05 jb Xclipdiar.00430E09 ;改成跳转，jb改jmp
00430E04 |. 8B70 04 mov esi,dword ptr ds:[eax+0x4]
00430E07 |. EB 03 jmp Xclipdiar.00430E0C
00430E09 |> 8D70 04 lea esi,dword ptr ds:[eax+0x4]
00430E0C |> E8 3351FDFF call clipdiar.00405F44
----------------------------
不愿自己修改的，可免费下载现成的
http://115.com/file/dpd7rxrz# |
|
发表于 2012-3-18 14:39
