Hands Off!破解笔记
wx 31C0FFC0C390 @0x1000037a1
wx 0F85 @0x1000038be
Demo注册码：
HDOF4-00416E746F3274E65204D6973736F2018-01B2674DAC6F2D5CA1529B318C3014E36D331CA45458DA92-8E090D1B5E105F716CF0A2A44EE05F261E45C80C257E8C86
注册码前缀：
HDOF1 HDOF2 HDOF3 HDOF4
int sub_100009973(int arg0, int arg1, int arg2, int arg3) {
rbx = arg3;
r15 = arg2;
r12 = arg1;
r14 = arg0;
if (((arg2 != 0x0) && (rbx != 0x0)) && ([rbx isEqual:@"User-Agent"] != 0x0)) {
rax = [NSDictionary dictionaryWithContentsOfFile:@"/Library/Handsoff/Preferences.plist"];
if (rax != 0x0) {
rax = [rax objectForKey:@"a_serials"];
if (rax != 0x0) {
r13 = rax;
if ([rax count] != 0x0) {
var_50 = rbx;
var_48 = r14;
rax = [r13 objectAtIndex:0x0];
r13 = rax;
rax = [rax rangeOfString:@"HDOF1-"];
if (rax == 0x7fffffffffffffff) {
rax = [r13 rangeOfString:@"HDOF2-"];
if (rax == 0x7fffffffffffffff) {
rax = [r13 rangeOfString:@"HDOF3-"];
if (rax == 0x7fffffffffffffff) {
rax = [r13 rangeOfString:@"HDOF4-"];
if (rax != 0x7fffffffffffffff) {
r14 = [r13 substringFromIndex:rax + 0x6];
rdx = [NSCharacterSet whitespaceCharacterSet];
rax = [r14 stringByTrimmingCharactersInSet:rdx];
r14 = rax;
if ([rax length] != 0x0) {
var_58 = r12;
rax = [r14 UTF8String];
var_40 = intrinsic_movaps(var_40, 0x0);
CC_MD5(rax, strlen(rax), &var_40);
rax = [NSMutableString stringWithString:r15];
r15 = rax;
[rax appendString:@" ["];
r12 = 0x0;
do {
[r15 appendFormat:@"%02X", *(int8_t *)(rbp + (r12 - 0x40)) & 0xff];
r12 = r12 + 0x1;
} while (r12 != 0x10);
[r15 appendString:@"]"];
r12 = var_58;
}
}
}
else {
r14 = [r13 substringFromIndex:rax + 0x6];
rdx = [NSCharacterSet whitespaceCharacterSet];
rax = [r14 stringByTrimmingCharactersInSet:rdx];
r14 = rax;
if ([rax length] != 0x0) {
var_58 = r12;
rax = [r14 UTF8String];
var_40 = intrinsic_movaps(var_40, 0x0);
CC_MD5(rax, strlen(rax), &var_40);
rax = [NSMutableString stringWithString:r15];
r15 = rax;
[rax appendString:@" ["];
r12 = 0x0;
do {
[r15 appendFormat:@"%02X", *(int8_t *)(rbp + (r12 - 0x40)) & 0xff];
r12 = r12 + 0x1;
} while (r12 != 0x10);
[r15 appendString:@"]"];
r12 = var_58;
}
}
}
else {
r14 = [r13 substringFromIndex:rax + 0x6];
rdx = [NSCharacterSet whitespaceCharacterSet];
rax = [r14 stringByTrimmingCharactersInSet:rdx];
r14 = rax;
if ([rax length] != 0x0) {
var_58 = r12;
rax = [r14 UTF8String];
var_40 = intrinsic_movaps(var_40, 0x0);
CC_MD5(rax, strlen(rax), &var_40);
rax = [NSMutableString stringWithString:r15];
r15 = rax;
[rax appendString:@" ["];
r12 = 0x0;
do {
[r15 appendFormat:@"%02X", *(int8_t *)(rbp + (r12 - 0x40)) & 0xff];
r12 = r12 + 0x1;
} while (r12 != 0x10);
[r15 appendString:@"]"];
r12 = var_58;
}
}
}
else {
r14 = [r13 substringFromIndex:rax + 0x6];
rdx = [NSCharacterSet whitespaceCharacterSet];
rax = [r14 stringByTrimmingCharactersInSet:rdx];
r14 = rax;
if ([rax length] != 0x0) {
var_58 = r12;
rax = [r14 UTF8String];
var_40 = intrinsic_movaps(var_40, 0x0);
CC_MD5(rax, strlen(rax), &var_40);
rax = [NSMutableString stringWithString:r15];
r15 = rax;
[rax appendString:@" ["];
r12 = 0x0;
do {
[r15 appendFormat:@"%02X", *(int8_t *)(rbp + (r12 - 0x40)) & 0xff];
r12 = r12 + 0x1;
} while (r12 != 0x10);
[r15 appendString:@"]"];
r12 = var_58;
}
}
r14 = var_48;
rbx = var_50;
}
}
}
}
var_30 = **___stack_chk_guard;
(*qword_100055570)(r14, r12, r15, rbx);
rax = *___stack_chk_guard;
rax = *rax;
if (rax != var_30) {
rax = __stack_chk_fail();
}
return rax;
}
__int64 __fastcall sub_100009973(__int64 a1, __int64 a2, void *a3, void *a4)
{
void *v4; // rbx
void *v5; // r15
__int64 v6; // r12
__int64 v7; // r14
void *v8; // rax
void *v9; // rax
void *v10; // r13
void *v11; // rax
void *v12; // r13
char *v13; // rax
void *v14; // r14
void *v15; // rax
void *v16; // r14
const char *v17; // rax
__int64 v18; // r14
unsigned int v19; // eax
__int64 v20; // r12
__int128 v22; // [rsp+20h] [rbp-40h]
v4 = a4;
v5 = a3;
v6 = a2;
v7 = a1;
if ( a3 )
{
if ( a4 )
{
if ( (unsigned __int8)objc_msgSend(a4, "isEqual:", CFSTR("User-Agent")) )
{
v8 = objc_msgSend(
&OBJC_CLASS___NSDictionary,
"dictionaryWithContentsOfFile:",
CFSTR("/Library/Handsoff/Preferences.plist"));
if ( v8 )
{
v9 = objc_msgSend(v8, "objectForKey:", CFSTR("a_serials"));
if ( v9 )
{
v10 = v9;
if ( objc_msgSend(v9, "count") )
{
v11 = objc_msgSend(v10, "objectAtIndex:", 0LL);
v12 = v11;
v13 = (char *)objc_msgSend(v11, "rangeOfString:", CFSTR("HDOF1-")); //序列号以HDOF1-，HDOF2-，HDOF3-，HDOF4-开头
if ( v13 != (char *)0x7FFFFFFFFFFFFFFFLL
|| (v13 = (char *)objc_msgSend(v12, "rangeOfString:", CFSTR("HDOF2-")),
v13 != (char *)0x7FFFFFFFFFFFFFFFLL)
|| (v13 = (char *)objc_msgSend(v12, "rangeOfString:", CFSTR("HDOF3-")),
v13 != (char *)0x7FFFFFFFFFFFFFFFLL)
|| (v13 = (char *)objc_msgSend(v12, "rangeOfString:", CFSTR("HDOF4-")),
v13 != (char *)0x7FFFFFFFFFFFFFFFLL) )
{
v14 = objc_msgSend(v12, "substringFromIndex:", v13 + 6); //从序列号第六位开始取字符串值赋值给v14
v15 = objc_msgSend(&OBJC_CLASS___NSCharacterSet, "whitespaceCharacterSet");
v16 = objc_msgSend(v14, "stringByTrimmingCharactersInSet:", v15); //去掉字符串中除数字以外的字符赋值给v16
if ( objc_msgSend(v16, "length") ) //取v16的长度
{
v17 = (const char *)objc_msgSend(v16, "UTF8String"); //将v16的unicode值赋值给v17
v18 = (__int64)v17; //将v17转换成整形
v22 = 0LL;
v19 = strlen(v17); //取v17的长度
CC_MD5(v18, v19, (__int64)&v22); //CC_MD5(v18,v19,0)
v5 = objc_msgSend(&OBJC_CLASS___NSMutableString, "stringWithString:", v5);
objc_msgSend(v5, "appendString:", CFSTR(" ["));
v20 = 0LL;
do
objc_msgSend(v5, "appendFormat:", CFSTR("%02X"), *((unsigned __int8 *)&v22 + v20++));
while ( v20 != 16 );
objc_msgSend(v5, "appendString:", CFSTR("]"));
v6 = a2;
}
}
v7 = a1;
}
}
}
}
}
}
qword_100055570(v7, v6, v5, v4);
return __stack_chk_guard;
}
wx 90 @0x10000b49a
wx eb59 @0x10000A01B
