注册码破解加密狗破解系列教程某数控钻铣软件去除加密狗分析全过程

注册码加密狗破解系列教程 某数控钻铣软件破解分析全过程 标签 tag:私仁定制 软件破解 P2P破解 分析注册机 注册码 使用日期 软件限制 序列号 加密狗 去除注册码 去除使用日期 去除软件限制 去除序列号 去除加密狗 去除限制功能 去除功能限制 增加用户写狗的KEY时 0045B030 /$ 83C4 F0 ADD ESP,-10 0045B033 |. C70424 2E613A42 MOV DWORD PTR SS:[ESP],423A612E 0045B03A |. C74424 04 958C3A42 MOV DWORD PTR SS:[ESP+4],423A8C95 0045B042 |. C74424 08 5CC27484 MOV DWORD PTR SS:[ESP+8],8474C25C 0045B04A |. C74424 0C C3ED7484 MOV DWORD PTR SS:[ESP+C],8474EDC3 0045B052 |. E8 45EBFFFF CALL 0045B057 |. 66:A3 0EEC4500 MOV WORD PTR DS:[45EC0E],AX 0045B05D |. 66:A1 0CEC4500 MOV AX,WORD PTR DS:[45EC0C] 0045B063 |. 50 PUSH EAX 0045B064 |. E8 6BEBFFFF CALL 0045B069 |. 66:8B15 0CEC4500 MOV DX,WORD PTR DS:[45EC0C] 0045B070 |. 52 PUSH EDX 0045B071 |. 50 PUSH EAX 0045B072 |. 8D4424 08 LEA EAX,DWORD PTR SS:[ESP+8] 0045B076 |. 50 PUSH EAX 0045B077 |. 68 A3B20000 PUSH 0B2A3 0045B07C |. E8 73EBFFFF CALL 0045B081 |. E8 1EEBFFFF CALL 0045B086 |. 66:A3 0EEC4500 MOV WORD PTR DS:[45EC0E],AX 0045B08C |. 83C4 10 ADD ESP,10 0045B08F \. C3 RETN 程序XTEA运行时： 0045B0B1 |. C745 F8 D2029649 MOV DWORD PTR SS:[EBP-8],499602D2 0045B0B8 |. C745 FC D2029649 MOV DWORD PTR SS:[EBP-4],499602D2 0045B0BF |. C703 2E613A42 MOV DWORD PTR DS:[EBX],423A612E 0045B0C5 |. C743 04 958C3A42 MOV DWORD PTR DS:[EBX+4],423A8C95 0045B0CC |. C743 08 5CC27484 MOV DWORD PTR DS:[EBX+8],8474C25C 0045B0D3 |. C743 0C C3ED7484 MOV DWORD PTR DS:[EBX+C],8474EDC3 ====================================================================================== 读数据时 1000735B |. 50 |PUSH EAX ; /Arg5 还在自己破解软件？OUT了!这么难啃的骨头，交给专业人士吧。 1000735C |. 56 |PUSH ESI ; |Arg4 1000735D |. FF75 FC |PUSH DWORD PTR SS:[EBP-4] ; |Arg3 10007360 |. 6A 00 |PUSH 0 ; |Arg2 = 00000000 10007362 |. 6A 4E |PUSH 4E ; |Arg1 = 0000004E 10007364 |. FF15 28760110 |CALL DWORD PTR DS:[10017628] ; \Matrix32.10008DF3 0012F178 0000004E |Arg1 = 0000004E 0012F17C 00000000 |Arg2 = 00000000 0012F180 ******** |Arg3 = 00000004 0012F184 0000000C |Arg4 = 0000000C 0012F188 0012F198 \Arg5 = 0012F198 写狗时： 1000769F |. 50 |PUSH EAX ; /Arg5 100076A0 |. 57 |PUSH EDI ; |Arg4 100076A1 |. FF75 08 |PUSH DWORD PTR SS:[EBP+8] ; |Arg3 100076A4 |. 6A 00 |PUSH 0 ; |Arg2 = 00000000 100076A6 |. 6A 4E |PUSH 4E ; |Arg1 = 0000004E 100076A8 |. FF15 28760110 |CALL DWORD PTR DS:[10017628] ; \matrix32.10008DF3 0012F178 0000004E |Arg1 = 0000004E 0012F17C 00000000 |Arg2 = 00000000 0012F180 ******** |Arg3 = 00000004 0012F184 0000000C |Arg4 = 0000000C 0012F188 0012F198 \Arg5 = 0012F198 读狗号时： 10007AB2 |. 50 PUSH EAX ; /Arg5 10007AB3 |. 6A 04 PUSH 4 ; |Arg4 = 00000004 10007AB5 |. 53 PUSH EBX ; |Arg3 10007AB6 |. 53 PUSH EBX ; |Arg2 10007AB7 6A 52 PUSH 52 10007AB9 |. FF15 28760110 CALL DWORD PTR DS:[10017628] ; \Matrix32.10008DF3 0012F5C8 00000052 |Arg1 = 00000052 0012F5CC 00000000 |Arg2 = 00000000 0012F5D0 00000000 |Arg3 = 00000000 0012F5D4 00000004 |Arg4 = 00000004 0012F5D8 0012F5FC \Arg5 = 0012F5FC 、、、、、/////////////////////////////////////////////////////////////////// 100074A6 |> \FF75 E6 PUSH DWORD PTR SS:[EBP-1A] ; /Arg3 100074A9 |. 8945 10 MOV DWORD PTR SS:[EBP+10],EAX ; | 100074AC |. FF75 E5 PUSH DWORD PTR SS:[EBP-1B] ; |Arg2 100074AF |. FF75 08 PUSH DWORD PTR SS:[EBP+8] ; |Arg1 100074B2 |. E8 11FAFFFF CALL matrix32.10006EC8 ; \matrix32.10006EC8 0012F5B0 0000B2A3 |Arg1 = 0000B2A3 0012F5B4 396019DF |Arg2 = 396019DF 0012F5B8 E6396019 \Arg3 = E6396019 0012F180 0000B2A3 |Arg1 = 0000B2A3 0012F184 D6604EFB |Arg2 = D6604EFB 0012F188 B2D6604E \Arg3 = B2D6604E 0012F180 0000B2A3 |Arg1 = 0000B2A3 0012F184 D6609D06 |Arg2 = D6609D06 0012F188 B2D6609D \Arg3 = B2D6609D 操作狗的地方主： 0044F39F |. 52 PUSH EDX ; /Arg4 0044F3A0 |. 8D4D 90 LEA ECX,DWORD PTR SS:[EBP-70] ; | 0044F3A3 |. FFB5 78FFFFFF PUSH DWORD PTR SS:[EBP-88] ; |Arg3 0044F3A9 |. 51 PUSH ECX ; |Arg2 0044F3AA |. FF73 0A PUSH DWORD PTR DS:[EBX+A] ; |Arg1 0044F3AD |. E8 B8FEFFFF CALL bst1k.0044F26A ; \bst1k.0044F26A 0044F3B2 |. 83C4 10 ADD ESP,10 0044F3B5 |> 8D85 08FFFFFF LEA EAX,DWORD PTR SS:[EBP-F8] 0044F3BB |. 50 PUSH EAX ; /Arg2 0044F3BC |. 8D95 70FFFFFF LEA EDX,DWORD PTR SS:[EBP-90] ; | 0044F3C2 |. 52 PUSH EDX ; |Arg1