trustbox文件破解

常見的破解方式，是要還原內容的二進制文件，刪除加密殼部分的對應二進制數值，而後把剩下的內容保存下來，就實現了破解的任務。 

淘寶破解連接： https://item.taobao.com/item.htm?spm=a230r.1.14.1.ebb2eb21k1iP3&id=542088499569&ns=1&abbucket=10#detail 

 

來個例子說明一下trustbox如何提取原始ppt文件吧！

 

如下是一個軟件的註冊碼比較程式，你們不要問我怎麼樣獲得了，你們只要聽下去 就能夠了。

015F:004149D2 8A06 MOV AL,[ESI] 這裏放你的輸入的註冊碼

015F:004149D4 84C0 TEST AL,AL

015F:004149D6 740D JZ 004149E5

015F:004149D8 8A11 MOV DL,[ECX] 這裏放正確的註冊碼

015F:004149DA 41 INC ECX

015F:004149DB 46 INC ESI

015F:004149DC 3AC2 CMP AL,DL

015F:004149DE 751F JNZ 004149FF

015F:004149E0 803900 CMP BYTE PTR [ECX],00

015F:004149E3 75ED JNZ 004149D2

015F:004149E5 803900 CMP BYTE PTR [ECX],00

015F:004149E8 7515 JNZ 004149FF

015F:004149EA 803E00 CMP BYTE PTR [ESI],00

015F:004149ED 7510 JNZ 004149FF

015F:004149EF B801000000 MOV EAX,00000001 最後正確就把 EAX=1

015F:004149F4 5F POP EDI

015F:004149F5 5E POP ESI

015F:004149F6 5D POP EBP

015F:004149F7 5B POP EBX

015F:004149F8 81C460030000 ADD ESP,00000360

015F:004149FE C3 RET

好了，你們在 Winsoftice 下如下的命令能夠看到：

:d esi

0167:0041F1F8 34 38 34 38 34 38 34 38-34 38 34 38 00 00 00 00 484848484848....

0167:0041F208 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................

0167:0041F218 04 0D 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................

0167:0041F228 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................

0167:0041F238 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................

0167:0041F248 00 00 00 00 00 00 00 00-00 C0 00 00 0A 04 00 00 ................

0167:0041F258 04 00 00 00 0A 00 00 00-01 00 00 00 90 03 CA 00 ................

0167:0041F268 00 00 00 00 D0 03 CA 00-00 00 00 00 00 00 00 00 ................

:d ecx

0167:0066F3E4 58 51 4D 50 5A 43 57 58-54 45 52 53 00 01 08 00 XQMPZCWXTERS....

0167:0066F3F4 9A EE 8B 17 E3 A4 00 00-10 00 E0 2C 00 00 00 01 ...........,....

0167:0066F404 00 03 00 00 00 00 00 00-80 01 AB 01 8D 01 9C 01 ................

0167:0066F414 00 00 AB 01 8D 01 00 00-80 01 9C 01 8C 01 A4 01 ................

0167:0066F424 8D 01 9C 01 8C 01 A4 01-8D 01 04 00 00 00 B6 0C ................

0167:0066F434 00 A9 52 FB 83 2A D1 78-21 88 73 DA A2 0B F0 59 ..R..*.x!.s....Y

0167:0066F444 65 CC 37 9E E6 4F B4 1D-44 ED 16 BF C7 6E 95 3C e.7..O..D....n.<

0167:0066F454 ED 44 BF 16 6E C7 3C 95-CC 65 9E 37 4F E6 1D B4 .D..n.<..e.7O...

見到了吧！那個 XQMPZCWXTERS 就是正確的註冊碼！