首页
论坛
课程
招聘

[原创]winhotkey V1.0破解方法

2011-10-20 14:35 6544

[原创]winhotkey V1.0破解方法

2011-10-20 14:35
6544
winhotkey是个很不错的快捷键程序,适合喜欢快捷简约风格的人使用。

从Ollydbg中找到了软件在注册表中写入的安装日期。把此日期删除后,设置此项进制写入和读取,这个软件就没有时间限制了。

注册表中的这个项是HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7292FB08-129E-483C-8803-C39A80A66F43}下的date,当注册成功后,name和key都会写到这下面。

破解了好几天了,没弄成功。开始时编写程序删除这个项,因为我自己编写的程序每天都运行,常驻后台(还有其他功能),后来干脆限制这个项不可读写,这下搞定了。

现在上传安装程序。欢迎大家使用。

[推荐]看雪企服平台,提供项目众包、渗透测试、安全分析、定制项目开发、APP等级保护等安全服务!

上传的附件:
最新回复 (9)
柳州小林 2 2011-10-20 20:28
2
0
这种破解贴请楼主转到别的区吧
---------------------------------
脱壳后在45A3B8下断!
0045A3E6  |.  33C9          xor     ecx, ecx
0045A3E8  |.  33D2          xor     edx, edx
0045A3EA  |.  8B45 FC       mov     eax, dword ptr [ebp-4]           ;  name
0045A3ED  |.  E8 A2F7FFFF   call    00459B94                         ;  name->U1

以上为用户名运算生成注册码,返回明码.但不知道为何注册码输入框无法输入,直接填写到注册表,重起软件OK,算法待试!
wangnj 2011-10-20 20:32
3
0
谢谢柳州小林 我试试啊 呵呵
柳州小林 2 2011-10-21 11:35
4
0
// WinhotkeyReg.cpp : Defines the entry point for the console application.
//

#include "stdafx.h"
#include <wtypes.h>
#include <iostream.h>
#include <stdlib.h>

int main(int argc, char* argv[])
{
	BYTE machine[]={0x96, 0x30, 0x07, 0x77, 0x2C, 0x61, 0x0E, 0xEE,
					0xBA, 0x51, 0x09, 0x99, 0x19, 0xC4, 0x6D, 0x07,
					0x8F, 0xF4, 0x6A, 0x70, 0x35, 0xA5, 0x63, 0xE9,
					0xA3, 0x95, 0x64, 0x9E, 0x32, 0x88, 0xDB, 0x0E,
					0xA4, 0xB8, 0xDC, 0x79, 0x1E, 0xE9, 0xD5, 0xE0,
					0x88, 0xD9, 0xD2, 0x97, 0x2B, 0x4C, 0xB6, 0x09,
					0xBD, 0x7C, 0xB1, 0x7E, 0x07, 0x2D, 0xB8, 0xE7,
					0x91, 0x1D, 0xBF, 0x90, 0x64, 0x10, 0xB7, 0x1D,
					0xF2, 0x20, 0xB0, 0x6A, 0x48, 0x71, 0xB9, 0xF3,
					0xDE, 0x41, 0xBE, 0x84, 0x7D, 0xD4, 0xDA, 0x1A,
					0xEB, 0xE4, 0xDD, 0x6D, 0x51, 0xB5, 0xD4, 0xF4,
					0xC7, 0x85, 0xD3, 0x83, 0x56, 0x98, 0x6C, 0x13,
					0xC0, 0xA8, 0x6B, 0x64, 0x7A, 0xF9, 0x62, 0xFD,
					0xEC, 0xC9, 0x65, 0x8A, 0x4F, 0x5C, 0x01, 0x14,
					0xD9, 0x6C, 0x06, 0x63, 0x63, 0x3D, 0x0F, 0xFA,
					0xF5, 0x0D, 0x08, 0x8D, 0xC8, 0x20, 0x6E, 0x3B,
					0x5E, 0x10, 0x69, 0x4C, 0xE4, 0x41, 0x60, 0xD5,
					0x72, 0x71, 0x67, 0xA2, 0xD1, 0xE4, 0x03, 0x3C,
					0x47, 0xD4, 0x04, 0x4B, 0xFD, 0x85, 0x0D, 0xD2,
					0x6B, 0xB5, 0x0A, 0xA5, 0xFA, 0xA8, 0xB5, 0x35,
					0x6C, 0x98, 0xB2, 0x42, 0xD6, 0xC9, 0xBB, 0xDB,
					0x40, 0xF9, 0xBC, 0xAC, 0xE3, 0x6C, 0xD8, 0x32,
					0x75, 0x5C, 0xDF, 0x45, 0xCF, 0x0D, 0xD6, 0xDC,
					0x59, 0x3D, 0xD1, 0xAB, 0xAC, 0x30, 0xD9, 0x26,
					0x3A, 0x00, 0xDE, 0x51, 0x80, 0x51, 0xD7, 0xC8,
					0x16, 0x61, 0xD0, 0xBF, 0xB5, 0xF4, 0xB4, 0x21,
					0x23, 0xC4, 0xB3, 0x56, 0x99, 0x95, 0xBA, 0xCF,
					0x0F, 0xA5, 0xBD, 0xB8, 0x9E, 0xB8, 0x02, 0x28,
					0x08, 0x88, 0x05, 0x5F, 0xB2, 0xD9, 0x0C, 0xC6,
					0x24, 0xE9, 0x0B, 0xB1, 0x87, 0x7C, 0x6F, 0x2F,
					0x11, 0x4C, 0x68, 0x58, 0xAB, 0x1D, 0x61, 0xC1,
					0x3D, 0x2D, 0x66, 0xB6, 0x90, 0x41, 0xDC, 0x76,
					0x06, 0x71, 0xDB, 0x01, 0xBC, 0x20, 0xD2, 0x98,
					0x2A, 0x10, 0xD5, 0xEF, 0x89, 0x85, 0xB1, 0x71,
					0x1F, 0xB5, 0xB6, 0x06, 0xA5, 0xE4, 0xBF, 0x9F,
					0x33, 0xD4, 0xB8, 0xE8, 0xA2, 0xC9, 0x07, 0x78,
					0x34, 0xF9, 0x00, 0x0F, 0x8E, 0xA8, 0x09, 0x96,
					0x18, 0x98, 0x0E, 0xE1, 0xBB, 0x0D, 0x6A, 0x7F,
					0x2D, 0x3D, 0x6D, 0x08, 0x97, 0x6C, 0x64, 0x91,
					0x01, 0x5C, 0x63, 0xE6, 0xF4, 0x51, 0x6B, 0x6B,
					0x62, 0x61, 0x6C, 0x1C, 0xD8, 0x30, 0x65, 0x85,
					0x4E, 0x00, 0x62, 0xF2, 0xED, 0x95, 0x06, 0x6C,
					0x7B, 0xA5, 0x01, 0x1B, 0xC1, 0xF4, 0x08, 0x82,
					0x57, 0xC4, 0x0F, 0xF5, 0xC6, 0xD9, 0xB0, 0x65,
					0x50, 0xE9, 0xB7, 0x12, 0xEA, 0xB8, 0xBE, 0x8B,
					0x7C, 0x88, 0xB9, 0xFC, 0xDF, 0x1D, 0xDD, 0x62,
					0x49, 0x2D, 0xDA, 0x15, 0xF3, 0x7C, 0xD3, 0x8C,
					0x65, 0x4C, 0xD4, 0xFB, 0x58, 0x61, 0xB2, 0x4D,
					0xCE, 0x51, 0xB5, 0x3A, 0x74, 0x00, 0xBC, 0xA3,
					0xE2, 0x30, 0xBB, 0xD4, 0x41, 0xA5, 0xDF, 0x4A,
					0xD7, 0x95, 0xD8, 0x3D, 0x6D, 0xC4, 0xD1, 0xA4,
					0xFB, 0xF4, 0xD6, 0xD3, 0x6A, 0xE9, 0x69, 0x43,
					0xFC, 0xD9, 0x6E, 0x34, 0x46, 0x88, 0x67, 0xAD,
					0xD0, 0xB8, 0x60, 0xDA, 0x73, 0x2D, 0x04, 0x44,
					0xE5, 0x1D, 0x03, 0x33, 0x5F, 0x4C, 0x0A, 0xAA,
					0xC9, 0x7C, 0x0D, 0xDD, 0x3C, 0x71, 0x05, 0x50,
					0xAA, 0x41, 0x02, 0x27, 0x10, 0x10, 0x0B, 0xBE,
					0x86, 0x20, 0x0C, 0xC9, 0x25, 0xB5, 0x68, 0x57,
					0xB3, 0x85, 0x6F, 0x20, 0x09, 0xD4, 0x66, 0xB9,
					0x9F, 0xE4, 0x61, 0xCE, 0x0E, 0xF9, 0xDE, 0x5E,
					0x98, 0xC9, 0xD9, 0x29, 0x22, 0x98, 0xD0, 0xB0,
					0xB4, 0xA8, 0xD7, 0xC7, 0x17, 0x3D, 0xB3, 0x59,
					0x81, 0x0D, 0xB4, 0x2E, 0x3B, 0x5C, 0xBD, 0xB7,
					0xAD, 0x6C, 0xBA, 0xC0, 0x20, 0x83, 0xB8, 0xED,
					0xB6, 0xB3, 0xBF, 0x9A, 0x0C, 0xE2, 0xB6, 0x03,
					0x9A, 0xD2, 0xB1, 0x74, 0x39, 0x47, 0xD5, 0xEA,
					0xAF, 0x77, 0xD2, 0x9D, 0x15, 0x26, 0xDB, 0x04,
					0x83, 0x16, 0xDC, 0x73, 0x12, 0x0B, 0x63, 0xE3,
					0x84, 0x3B, 0x64, 0x94, 0x3E, 0x6A, 0x6D, 0x0D,
					0xA8, 0x5A, 0x6A, 0x7A, 0x0B, 0xCF, 0x0E, 0xE4,
					0x9D, 0xFF, 0x09, 0x93, 0x27, 0xAE, 0x00, 0x0A,
					0xB1, 0x9E, 0x07, 0x7D, 0x44, 0x93, 0x0F, 0xF0,
					0xD2, 0xA3, 0x08, 0x87, 0x68, 0xF2, 0x01, 0x1E,
					0xFE, 0xC2, 0x06, 0x69, 0x5D, 0x57, 0x62, 0xF7,
					0xCB, 0x67, 0x65, 0x80, 0x71, 0x36, 0x6C, 0x19,
					0xE7, 0x06, 0x6B, 0x6E, 0x76, 0x1B, 0xD4, 0xFE,
					0xE0, 0x2B, 0xD3, 0x89, 0x5A, 0x7A, 0xDA, 0x10,
					0xCC, 0x4A, 0xDD, 0x67, 0x6F, 0xDF, 0xB9, 0xF9,
					0xF9, 0xEF, 0xBE, 0x8E, 0x43, 0xBE, 0xB7, 0x17,
					0xD5, 0x8E, 0xB0, 0x60, 0xE8, 0xA3, 0xD6, 0xD6,
					0x7E, 0x93, 0xD1, 0xA1, 0xC4, 0xC2, 0xD8, 0x38,
					0x52, 0xF2, 0xDF, 0x4F, 0xF1, 0x67, 0xBB, 0xD1,
					0x67, 0x57, 0xBC, 0xA6, 0xDD, 0x06, 0xB5, 0x3F,
					0x4B, 0x36, 0xB2, 0x48, 0xDA, 0x2B, 0x0D, 0xD8,
					0x4C, 0x1B, 0x0A, 0xAF, 0xF6, 0x4A, 0x03, 0x36,
					0x60, 0x7A, 0x04, 0x41, 0xC3, 0xEF, 0x60, 0xDF,
					0x55, 0xDF, 0x67, 0xA8, 0xEF, 0x8E, 0x6E, 0x31,
					0x79, 0xBE, 0x69, 0x46, 0x8C, 0xB3, 0x61, 0xCB,
					0x1A, 0x83, 0x66, 0xBC, 0xA0, 0xD2, 0x6F, 0x25,
					0x36, 0xE2, 0x68, 0x52, 0x95, 0x77, 0x0C, 0xCC,
					0x03, 0x47, 0x0B, 0xBB, 0xB9, 0x16, 0x02, 0x22,
					0x2F, 0x26, 0x05, 0x55, 0xBE, 0x3B, 0xBA, 0xC5,
					0x28, 0x0B, 0xBD, 0xB2, 0x92, 0x5A, 0xB4, 0x2B,
					0x04, 0x6A, 0xB3, 0x5C, 0xA7, 0xFF, 0xD7, 0xC2,
					0x31, 0xCF, 0xD0, 0xB5, 0x8B, 0x9E, 0xD9, 0x2C,
					0x1D, 0xAE, 0xDE, 0x5B, 0xB0, 0xC2, 0x64, 0x9B,
					0x26, 0xF2, 0x63, 0xEC, 0x9C, 0xA3, 0x6A, 0x75,
					0x0A, 0x93, 0x6D, 0x02, 0xA9, 0x06, 0x09, 0x9C,
					0x3F, 0x36, 0x0E, 0xEB, 0x85, 0x67, 0x07, 0x72,
					0x13, 0x57, 0x00, 0x05, 0x82, 0x4A, 0xBF, 0x95,
					0x14, 0x7A, 0xB8, 0xE2, 0xAE, 0x2B, 0xB1, 0x7B,
					0x38, 0x1B, 0xB6, 0x0C, 0x9B, 0x8E, 0xD2, 0x92,
					0x0D, 0xBE, 0xD5, 0xE5, 0xB7, 0xEF, 0xDC, 0x7C,
					0x21, 0xDF, 0xDB, 0x0B, 0xD4, 0xD2, 0xD3, 0x86,
					0x42, 0xE2, 0xD4, 0xF1, 0xF8, 0xB3, 0xDD, 0x68,
					0x6E, 0x83, 0xDA, 0x1F, 0xCD, 0x16, 0xBE, 0x81,
					0x5B, 0x26, 0xB9, 0xF6, 0xE1, 0x77, 0xB0, 0x6F,
					0x77, 0x47, 0xB7, 0x18, 0xE6, 0x5A, 0x08, 0x88,
					0x70, 0x6A, 0x0F, 0xFF, 0xCA, 0x3B, 0x06, 0x66,
					0x5C, 0x0B, 0x01, 0x11, 0xFF, 0x9E, 0x65, 0x8F,
					0x69, 0xAE, 0x62, 0xF8, 0xD3, 0xFF, 0x6B, 0x61,
					0x45, 0xCF, 0x6C, 0x16, 0x78, 0xE2, 0x0A, 0xA0,
					0xEE, 0xD2, 0x0D, 0xD7, 0x54, 0x83, 0x04, 0x4E,
					0xC2, 0xB3, 0x03, 0x39, 0x61, 0x26, 0x67, 0xA7,
					0xF7, 0x16, 0x60, 0xD0, 0x4D, 0x47, 0x69, 0x49,
					0xDB, 0x77, 0x6E, 0x3E, 0x4A, 0x6A, 0xD1, 0xAE,
					0xDC, 0x5A, 0xD6, 0xD9, 0x66, 0x0B, 0xDF, 0x40,
					0xF0, 0x3B, 0xD8, 0x37, 0x53, 0xAE, 0xBC, 0xA9,
					0xC5, 0x9E, 0xBB, 0xDE, 0x7F, 0xCF, 0xB2, 0x47,
					0xE9, 0xFF, 0xB5, 0x30, 0x1C, 0xF2, 0xBD, 0xBD,
					0x8A, 0xC2, 0xBA, 0xCA, 0x30, 0x93, 0xB3, 0x53,
					0xA6, 0xA3, 0xB4, 0x24, 0x05, 0x36, 0xD0, 0xBA,
					0x93, 0x06, 0xD7, 0xCD, 0x29, 0x57, 0xDE, 0x54,
					0xBF, 0x67, 0xD9, 0x23, 0x2E, 0x7A, 0x66, 0xB3,
					0xB8, 0x4A, 0x61, 0xC4, 0x02, 0x1B, 0x68, 0x5D,
					0x94, 0x2B, 0x6F, 0x2A, 0x37, 0xBE, 0x0B, 0xB4,
					0xA1, 0x8E, 0x0C, 0xC3, 0x1B, 0xDF, 0x05, 0x5A,
					0x8D, 0xEF, 0x02, 0x2D};
	BYTE *p=machine;
	char name[20],code[20],sn[]="-----------";
	int namelen=0;

		cout<<"请输入用户名:";
		cin>>name;
		namelen=strlen(name);
		__asm
		{		
				mov		eax,namelen
				xor		esi,esi
				xor		ebx,ebx
				WinHotke:			
				mov     dl, byte ptr [name+esi]
				xor     dl, bl
				and     edx, 0xFF                    ; 只保留dl
				mov     edx, dword ptr [edx*4+p] ; edx不大过FF
				shr     ebx, 0x8
				and     ebx, 0x0FFFFFF
				xor     edx, ebx
				mov     ebx, edx
				inc     esi
				dec     eax
				jnz     WinHotke
				mov		namelen,ebx
		}
		itoa(namelen,code,16);
		strupr(code);
		sn[0]=code[0];
		sn[1]=code[1];
		sn[3]=code[2];
		sn[4]=code[3];
		sn[6]=code[4];
		sn[7]=code[5];
		sn[9]=code[6];
		sn[10]=code[7];
		printf("注册码为:%s\n",sn);
		HKEY key;
		::RegCreateKey(HKEY_CLASSES_ROOT,"CLSID\\{7292FB08-129E-483C-8803-C39A80A66F43}",&key) ;
		::RegSetValueEx(key,"key",0,REG_EXPAND_SZ,(LPBYTE)sn,strlen(sn)+1);
		::RegSetValueEx(key,"name",0,REG_EXPAND_SZ,(LPBYTE)name,strlen(name)+1);
	return 0;
}


wangnj 2011-10-22 08:00
5
0
小林的代码被我同学在xp系统做成注册机后放到我的win7不能运行,装了vc++运行库也不行,后来自己又运行了一遍OD,找到了注册码,明文的,以前也找到过,只不过不能输入到注册框里,程序可能有问题,只允许输入两位,所以一度认为自己找到的是错误的。按照小林的说法,直接写到注册表中去,搞定了。花费了一周时间,有点笨啊,没办法,初学者。

把我弄到的注册码发布一下:
key:ss
name:CD-1E-0A-B3

谢谢小林, 我是初学者,还有很长的路要走。
BlueT 2 2011-10-22 10:24
6
0
用这个替换对应文件即可正常注册(软件属试用版,限制输入)。
HotKeyCfg.rar

四楼的数组定义是自寻烦恼,不应该搞成BYTE型数据的。

上传的附件:
dewar 8 2011-10-22 10:47
7
0
好久没来了,今日得空,见到好文
wangnj 2011-10-23 12:58
8
0
BlueT的修改的程序有错误提示
Exception EReadError in module HotKeyCfg.exe at 0001D277.
Error reading ImageList1.Bitmap: Access violation at address 77198FFF in module 'user32.dll'. Write of address B9F2E088.
|Exception EReadError in module HotKeyCfg.exe at 0001D277.
Error reading ImageList1.Bitmap: Access violation at address 77198FFF in module 'user32.dll'. Write of address B9F2E088.
BlueT 2 2011-10-23 13:06
9
0
那个似乎不是我的问题,我这里也是这样的(未修改前),我只是修改了文本框允许输入的最大长度设置。
柳州小林 2 2011-10-25 17:16
10
0
我也是WIN7+VC6
可能 你的WIN7不是管理员
游客
登录 | 注册 方可回帖
返回