📄 chap9-3-1.htm.primary
字号:
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">015f:0045793d 1ac9 sbb cl,cl</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">015f:0045793f 80e120 and cl,20</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">015f:00457942 02c1 add al,cl</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">015f:00457944 0441 add al,41</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">015f:00457946 38e0 cmp al,ah</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">015f:00457948 74d2 jz 0045791c</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="宋体" color="#000000">我们在</font>
<font face="Times New Roman" color="#000000">winsoftice</font> <font face="宋体" color="#000000">中下以下的命令：</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">:d ds:esi</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">0167:0047D958 34 38 34 38 34 38 34 38-34 38 00 00 00 00 00 00 4848484848......</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">0167:0047D968 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">0167:0047D978 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">:d ds:edi</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">0167:0072F41C 43 39 36 32 30 35 45 42-00 00 01 00 00 00 0A 00 C96205EB........</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">0167:0072F42C D0 00 36 18 DA F4 0C 00-2C 20 0C 00 CE 1F 1A 84 ..6....., ......</font>
</span></span></p>
<p> <span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">0167:0072F43C 3F 19 5C 84 97 0F 47 04-00 00 0A 00 00 00 0A 00 ?.\...G.........</font></span></span><span class="p9">
</span></p>
<p> <span class="p9"><font face="宋体" color="#000000">看到了吗？那</font> <font face="Times New Roman" color="#000000">ds:edi</font>
<font face="宋体" color="#000000">放的就是你要的东西啊！</font> </span></p>
<p> <span class="p9"><font face="宋体" color="#000000">好了，我们先试一试用普通模式</font> <font face="Times New Roman" color="#000000">0</font>
<font face="宋体" color="#000000">来写注册机吧！</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">[Options]</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">CommandLine=winzip32.exe </font>
<font face="宋体" color="#000000">这是被取注册码的</font> <font face="Times New Roman" color="#000000">EXE</font>
<font face="宋体" color="#000000">文件名</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">Mode=0 </font>
<font face="宋体" color="#000000">采用模式</font> <font face="Times New Roman" color="#000000">1</font>
<font face="宋体" color="#000000">读取注册码</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">First_Break_Address=457923 </font>
<font face="宋体" color="#000000">程式的中断地址，它和</font> <font face="Times New Roman" color="#000000">ICE</font>
<font face="宋体" color="#000000">中见到的是一样的</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">First_Break_Address_Code=8A </font>
<font face="宋体" color="#000000">中断程式的</font> <font face="Times New Roman" color="#000000">1 Byte</font>
<font face="宋体" color="#000000">代码，这个</font> <font face="Times New Roman" color="#000000">3B</font>
<font face="宋体" color="#000000">就是</font> <font face="Times New Roman" color="#000000">015f:00460765</font>
<font face="宋体" color="#000000">的</font> <font face="Times New Roman" color="#000000">3B</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">First_Break_Address_Code_Lenth=2 </font>
<font face="宋体" color="#000000">中断行代码的长度（单位：</font> <font face="Times New Roman" color="#000000">byte</font>
<font face="宋体" color="#000000">）</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">Save_Code_Address=EDI </font>
<font face="宋体" color="#000000">存放注册码的内存地址</font> </span></p>
<p> </p>
<span class="p9"><font face="宋体" color="#000000">生成后保存为</font> <font face="Times New Roman" color="#000000">CRACKCODE.INI</font>
<font face="宋体" color="#000000">文件，把</font> <font face="Times New Roman" color="#000000">CRACKCODE.EXE</font>
<font face="宋体" color="#000000">和</font> <font face="Times New Roman" color="#000000">CRACKCODE.INI</font>
<font face="宋体" color="#000000">一起</font> <font face="Times New Roman" color="#000000">copy</font>
<font face="宋体" color="#000000">到被注册的</font> </span> <span class="p9"><font face="宋体" color="#000000">软件的安装目录下，运行</font>
<font face="Times New Roman" color="#000000">CRACKCODE.EXE</font> <font face="宋体" color="#000000">。哦！</font>
<font face="Times New Roman" color="#000000">winzip</font> <font face="宋体" color="#000000">会说很多的</font>
<font face="Times New Roman" color="#000000">dll</font> <font face="宋体" color="#000000">找不到，不能正常运行。</font>
</span>
<p> </p>
<span class="p9"><font face="宋体" color="#000000">哦！发生了什么事啊！好我们用</font> <font face="Times New Roman" color="#000000">winsoftice</font>
<font face="宋体" color="#000000">在那</font> <font face="Times New Roman" color="#000000">cs:457923</font>
<font face="宋体" color="#000000">下一个断点，重新运行</font> <font face="Times New Roman" color="#000000">winzip</font>
<font face="宋体" color="#000000">，</font> </span> <span class="p9"><font face="宋体" color="#000000">哦！我们的</font>
<font face="Times New Roman" color="#000000">winsoftice</font> <font face="宋体" color="#000000">不断地中断，原来</font>
<font face="Times New Roman" color="#000000">winzip</font> <font face="宋体" color="#000000">的设计很特殊性，它会用比较注册码的程</font></span><span class="p9"><font face="宋体" color="#000000">式来加载其它的</font>
<font face="Times New Roman" color="#000000">dll</font> <font face="宋体" color="#000000">，所以</font>
<font face="Times New Roman" color="#000000">CrackCode</font> <font face="宋体" color="#000000">的跟踪就不能正常地进行下去了。</font>
</span>
<p> </p>
<p> <span class="p9"><font face="宋体" color="#000000">好吧！我们再看一看程式吧！经过分析我们知道，上面的比较程式是由下面的程式调用去</font>
</span></p>
<p> <span class="p9"><font face="宋体" color="#000000">做比较注册码的工作的。</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c14 50 push eax</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c15 57 push edi</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c16 e8ab000000 call 00407cc6 </font>
<font face="宋体" color="#000000">带过这个</font> <font face="Times New Roman" color="#000000">Call</font>
<font face="宋体" color="#000000">在上面的</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c1b 59 pop ecx 0167:0072F41C</font>
<font face="宋体" color="#000000">址中注册</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c1c be58d94700 mov esi,0047d958 </font>
<font face="宋体" color="#000000">码就出来了。</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c21 59 pop ecx</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c22 8d85c0feffff lea eax,[ebp-0140]</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c28 56 push esi</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c29 50 push eax</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c2a e8d1fc0400 call 00457900 </font>
<font face="宋体" color="#000000">这个</font> <font face="Times New Roman" color="#000000">Call</font>
<font face="宋体" color="#000000">就是调用比较</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">015f:00407c2f f7d8 neg eax </font>
<font face="宋体" color="#0000⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -