📄 lesson1512.htm
字号:
</span><span class="p9"><font face="Times New Roman" color="#000000">VB40032.dll</font>
<font face="宋体" color="#000000">中部分比较核心源代码如下:</font> </span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000"> </font>
</span><span class="p9"><font face="Times New Roman" color="#000000">:0F79B348 56 push esi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B349 57 push edi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B34A 8B7C2410 mov edi, [esp + 10] ; es:edi -></font>
<font face="宋体" color="#000000">你输入密码</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B34E 8B74240C mov esi, [esp + 0C] ; esi -> </font>
<font face="宋体" color="#000000">正确密码</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B352 8B4C2414 mov ecx, [esp + 14]</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B356 33C0 xor eax, eax</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B358 F366A7 repz cmpsw ; </font>
<font face="宋体" color="#000000">比较它们</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B35B 7405 je 0F79B362</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B35D 1BC0 sbb eax, eax</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B35F 83D8FF sbb eax, FFFFFFFF</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B362 5F pop edi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B363 5E pop esi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B364 C20C00 ret 000C ;</font>
<font face="宋体" color="#000000">函数调用结束</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B367 57 push edi ; </font>
<font face="宋体" color="#000000">以下代码不重用,但</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B368 8B7C2408 mov edi, [esp + 08] ; </font>
<font face="宋体" color="#000000">我们需要内存其空间</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B36C 8B4C2410 mov ecx, [esp + 10] ; </font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B370 8B44240C mov eax, [esp + 0C]</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B374 0BE4 or esp, esp</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B376 F266AF repnz scasw</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B379 B800000000 mov eax, 00000000</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B37E 7503 jne 0F79B383</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B380 8D47FE lea eax, [edi-02]</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B383 5F pop edi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B384 C20C00 ret 000C</font>
</span></p>
<p> </p>
<p> </p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000"> The code is located at offset 7a748 in the vb40032.dll file. So, to</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">make a general crack make a patch that turns the above code into:</font>
</span></p>
<p> </p>
<p> </p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B348 56 push esi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B349 57 push edi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B34a 8B7C2410 mov edi, [esp + 10] ;es:edi --> text you enter</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B34E 8B74240C mov esi, [esp + 0C] ;esi --> correct pw</font>
</span></p>
<p> </p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B352 813F70006300 cmp dword ptr [edi], 00630070 ;edi -> 'PC" ?</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B358 7527 jne 0F79B381 ;if not - leave</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B35A 803E00 cmp byte ptr [esi], 00 |<- these lines</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B35D 7410 je 0F79B36F | put spaces</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B35F 83C601 add esi, 00000001 | between the chars</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B362 C60620 mov byte ptr [esi], 20 |</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B365 EB03 jmp 0F79B36A |<--skip the ret</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B367 C20C00 ret 000C ;<-- this to prevent crash</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B36A 83C601 add esi, 00000001 |</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B36D EBEB jmp 0F79B35A |<- back to the start</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B36F 8B3DDCC47B0F mov edi, [0F7BC4DC] *<-- these lines</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B375 8B74240C mov esi, [esp + 0C] * call the</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B379 6A00 push 00000000 * MessageBoxA</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B37B 56 push esi * function to show</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B37C 56 push esi * the correct</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B37D 6A00 push 00000000 * password</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B37F FFD7 call edi *</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B381 5F pop edi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B382 5E pop esi</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B383 90 nop</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">:0F79B384 C20C00 ret 000C</font>
</span></p>
<p> </p>
<p> </p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">Comments:</font>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -