VB Pcode破解方法及例項
破解工具:exdec.exe(vb pcode反編譯工具) http://guodong.home.sohu.com/exdec.zip
破解物件:風飄雪crackme001 (下載http://duba.126.com)
exdec反編譯
Email josephco_@hotmail.com with any errors or problems
This program doesn't have executable code right after it loads
Proc: 402870
40276C: f5 LitI4:
0x0 0 (....)
402771: 71 FStR4
local_0098
402774: f5 LitI4:
0x0 0 (....)
402779: 71 FStR4
local_009C
40277C: 04 FLdRfVar local_00A4
40277F: 21 FLdPrThis
402780: 0f VCallAd 7b3fc360
402783: 19 FStAdFunc local_00A0
402786: 08 FLdPr
local_00A0
402789: 0d VCallHresult 7b3fbe88
40278E: 3e FLdZeroAd local_00A4
402791: 31 FStStr
local_0090
402794: 1a FFree1Ad local_00A0
402797: 04 FLdRfVar local_00A4
40279A: 21 FLdPrThis
40279B: 0f VCallAd 7b3fc358
40279E: 19 FStAdFunc local_00A0
4027A1: 08 FLdPr
local_00A0
4027A4: 0d VCallHresult 7b3fbe88
4027A9: 3e FLdZeroAd local_00A4
4027AC: 31 FStStr
local_0094
4027AF: 1a FFree1Ad local_00A0
4027B2: 6c ILdRf
local_0090
4027B5: 4a FnLenStr
====取輸入姓名長度(0090)
4027B6: f5 LitI4:
0x9 9 (....)
4027BB: d1 LtI4
4027BC: 6c ILdRf
local_0090
4027BF: 4a FnLenStr
4027C0: f5 LitI4:
0xb 11 (....)
4027C5: db GtI4
4027C6: c4 AndI4
=====姓名長度要求9-11
4027C7: 6c ILdRf
local_0094
4027CA: 4a FnLenStr
====取輸入註冊碼長度(0094)
4027CB: f5 LitI4:
0x9 9 (....)
4027D0: d1 LtI4
4027D1: c5 OrI4
=====註冊碼長度要求大於等於9
4027D2: 1c BranchF: 4027DA
4027D5: 10 ThisVCallHresult 0
4027DA: f4 LitI2_Byte: 0x1 1
(.) ===步長1(I2)
4027DC: 04 FLdRfVar local_008A
4027DF: 6c ILdRf
local_0090 ====讀入姓名(0090)
4027E2: 4a FnLenStr
4027E3: e4 CI2I4
4027E4: Lead3/63 ForI2: (when done)
402829
4027EA: 27 LitVar_Missing
==============迴圈
4027ED: 6b FLdI2
local_008A
4027F0: e7 CI4UI1
4027F1: 6c ILdRf
local_0090
4027F4: 0b ImpAdCallI2
4027F9: 23 FStStrNoPop local_00A4
4027FC: 0b ImpAdCallI2
402801: e7 CI4UI1
402802: 71 FStR4
local_0088
402805: 2f FFree1Str local_00A4
402808: 35 FFree1Var local_00C8
40280B: 6c ILdRf
local_0098
40280E: 6c ILdRf
local_0088
402811: f5 LitI4:
0x4 4 (....)
402816: b2 MulI4
=====ascii碼值乘4
402817: aa AddI4
402818: f5 LitI4:
0x12 18 (....)
40281D: aa AddI4
======加18
40281E: 71 FStR4
local_0098
402821: 04 FLdRfVar local_008A
402824: 64 NextI2: (continue)
4027EA==========迴圈(I2)
402829: 6c ILdRf
local_0098
40282C: f5 LitI4:
0x817fdb0 135790000 (....)
402831: aa AddI4
======加135790000
402832: 71 FStR4
local_0098
402835: 6c ILdRf
local_0094 =====讀入註冊碼
402838: 0a ImpAdCallFPR4:
40283D: f4 LitI2_Byte: 0x18 24
(.)
40283F: eb CR8I2
402840: ab AddR8
=======加24
402841: e8 CI4R8
402842: 71 FStR4
local_009C
402845: 6c ILdRf
local_0098
402848: 6c ILdRf
local_009C
40284B: c7 EqI4
====相等則真
40284C: 1c BranchF: 402867
40284F: 1b LitStr: http://duba.126.com
====正確註冊結果
402852: 21 FLdPrThis
402853: 0f VCallAd 7b3fc348
402856: 19 FStAdFunc local_00A0
402859: 08 FLdPr
local_00A0
40285C: 0d VCallHresult 7b3fbdf0
402861: 1a FFree1Ad local_00A0
402864: 1e Branch: 40286c
402867: 10 ThisVCallHresult 0
40286C: 13 ExitProcHresult
Proc: 40272c
402700: 27 LitVar_Missing
402703: 27 LitVar_Missing
402706: 27 LitVar_Missing
402709: f5 LitI4:
0x0 0 (....)
40270E: 3a LitVarStr: ( local_0094
)
402713: 4e FStVarCopyObj local_00A4
402716: 04 FLdRfVar local_00A4
402719: 0a ImpAdCallFPR4:
40271E: 36 FFreeVar
402729: Lead1/c8 End
40272B: 13 ExitProcHresult
Successfully went through the program!
Now it's up to you to decipher it hehe!
Email josephco_@hotmail.com with any problems or errors