charles授權分析與破解

localContainer.add(this.bCancel, "tag cancel,split 2,span,center");
localContainer.add(this.bRegister, "tag ok");
this.bCancel.addActionListener(new WTzz(this));
this.bRegister.addActionListener(new HgWa(this));

public final void actionPerformed(ActionEvent paramActionEvent)
{
// 獲取 輸入框內容
paramActionEvent = RegisterFrame.lcJx(this.lcJx).getText().trim();
String str = RegisterFrame.KcPF(this.lcJx).getText().trim();
if ((paramActionEvent.length() > 0) && (str.length() > 0))
{
Object localObject;
//關鍵if
if ((localObject = kKPk.lcJx(paramActionEvent, str)) != null)
{
ExtendedJOptionPane.lcJx(this.lcJx, localObject, "Charles Registration", 2);
return;
}
//授權成功的提示
ExtendedJOptionPane.lcJx(this.lcJx, "Thank you for registering. Charles will now close. Please start Charles again to continue.", "Charles Registration", 1);
}
}

//line 7
private static String lcJx = "Thanks for looking at the source. Please register Charles if you use it.";

//構造方法
if (!this.lcJx(this.KcPF(replaceAll, s, n2)) && (replaceAll.equals(ynvb) || !this.lcJx(this.KcPF(ynvb, s, n2)))) {
throw new LicenseException(this.lcJx(2));
}

public class Test {
public static void main(String[] args) {
try {
//該檔案需要新增一個Artifacts，build後生成
ClassLoader classLoader = ClassLoaderUtil.loadJarFile(new File("out/artifacts/charles_crack_jar/charles-crack.jar"));
String name = "wrbug";
String key = "ss";
Class<?> kKpk = classLoader.loadClass("com.xk72.charles.kKPk");
Constructor<?> declaredConstructor = kKpk.getDeclaredConstructor(String.class, String.class);
declaredConstructor.setAccessible(true);
Object obj = declaredConstructor.newInstance(name, key);
System.out.println("破解成功");

public class Crack {
public static void main(String[] args) throws Throwable {
ClassPool classPool = ClassPool.getDefault();
CtClass ctClass = classPool.get("com.xk72.charles.kKPk");
//修改 lcJx 方法返回true
CtClass[] param = new CtClass[1];
param[0] = classPool.get("long");
CtMethod method = ctClass.getDeclaredMethod("lcJx", param);
method.setBody("return true;");

//修改KcPF 返回為任意long
param = new CtClass[3];
param[0] = classPool.get(String.class.getName());
param[1] = classPool.get(String.class.getName());
param[2] = classPool.get("int");
method = ctClass.getDeclaredMethod("KcPF", param);
method.setBody("return 0L;");

//靜態方法 lcJx 方法返回true
method = ctClass.getDeclaredMethod("lcJx", null);
method.setBody("return true;");

//這裡返回Registered Name， 可以自行修改
method = ctClass.getDeclaredMethod("JZlU", null);
method.setBody("return \"wrbug\";");

// 將class檔案寫入到 output目錄
ctClass.writeFile("output");

}
}

private boolean lcJx(long var1) {
return true;
}
public static boolean lcJx() {
return true;
}
private long KcPF(String var1, String var2, int var3) {
return 0L;
}

public static String JZlU() {
return "wrbug";
}