首页
社区
课程
招聘
问答 CTF 排行榜 知识库 工具下载 峰会 看雪商城 证书查询
  1. 社区
  2. 软件逆向
    3. 发新帖
6
[原创]AutoBookmark 4.8 爆破
发表于: 2013-3-31 22:56 15615

[原创]AutoBookmark 4.8 爆破

rlyt 活跃值
2013-3-31 22:56
15615

标题：AutoBookmark 4.8 爆破
作者：rlyt/litel
地址：http://bbs.pediy.com/showthread.php?p=1160238

软件性质：插件/辅助类
软件名：AutoBookmark Plug-in
版本：4.8
官方网站：https://evermap.com
下载地址：http://evermap.com/download/SetupAutoBookmarkDemo.exe

使用工具：Universal Extractor \ Winhex \ IDA \ Ollydbg
破解性质：爆破

前言：
最近研究犀牛5.0，然后官方有个PDF的教程。
这个PDF教程200多页却没有书签，看得太累了，不能忍。
于是上网搜到了这个自动创建书签的插件，AutoBookmark
网上有2.2的keygen，上官网翻了下，最新的是4.8。
看了下 Standard 和 Professional 的区别就是多了个批处理：“Includes batch processing support.”无所谓了。
试试能不能用2.2的lic注册，果然不行。
发现错误提示很友好：

1
License Conflict: License file does not match software version.
1
SetupAutoBookmarkDemo.exe
1
2
3
4
5
6
7
8
9
10
11
12
13
14
#Archive D:\Downloads\SetupAutoBookmarkDemo\SetupAutoBookmarkDemo.zip
embedded
embedded\CompiledCode.bin
embedded\default.isl
embedded\License.txt
embedded\WizardImage.bmp
embedded\WizardSmallImage.bmp
install_script.iss
{app}
{app}\AutoBookmark.api
{app}\AutoBookmark.chm
{app}\AutoBookmark.LIC
{app}\AutoBookmarkIntro.pdf
{app}\LanguageTable.lan
1
2
3
4
5
{app}\AutoBookmark.api
{app}\AutoBookmark.chm
{app}\AutoBookmark.LIC
{app}\AutoBookmarkIntro.pdf
{app}\LanguageTable.lan
1
2
3
4
5
\Acrobat 11.0\Acrobat\plug_ins\AutoBookmark\AutoBookmark.api
\Acrobat 11.0\Acrobat\plug_ins\AutoBookmark\AutoBookmark.chm
\Acrobat 11.0\Acrobat\plug_ins\AutoBookmark\AutoBookmark.LIC
\Acrobat 11.0\Acrobat\plug_ins\AutoBookmark\AutoBookmarkIntro.pdf
\Acrobat 11.0\Acrobat\plug_ins\AutoBookmark\LanguageTable.lan
1
License Conflict: License file does not match software version.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
.text:100A4220 ; =============== S U B R O U T I N E =======================================
.text:100A4220
.text:100A4220
.text:100A4220 ; int __stdcall sub_100A4220(int, int, DWORD FileSystemFlags, int, int)
.text:100A4220 sub_100A4220    proc near               ; CODE XREF: sub_100A44C0+2A p
.text:100A4220
.text:100A4220 var_30          = dword ptr -30h
.text:100A4220 var_2C          = dword ptr -2Ch
.text:100A4220 var_28          = dword ptr -28h
.text:100A4220 var_24          = byte ptr -24h
.text:100A4220 var_1C          = byte ptr -1Ch
.text:100A4220 var_C           = dword ptr -0Ch
.text:100A4220 var_4           = dword ptr -4
.text:100A4220 arg_0           = dword ptr  4
.text:100A4220 arg_4           = dword ptr  8
.text:100A4220 FileSystemFlags = dword ptr  0Ch
.text:100A4220 arg_C           = dword ptr  10h
.text:100A4220 arg_10          = dword ptr  14h
.text:100A4220
.text:100A4220                 push    0FFFFFFFFh
.text:100A4222                 push    offset loc_10135888
.text:100A4227                 mov     eax, large fs:0
.text:100A422D                 push    eax
.text:100A422E                 sub     esp, 24h
.text:100A4231                 push    ebx
.text:100A4232                 push    esi
.text:100A4233                 push    edi
.text:100A4234                 mov     eax, dword_1018F824
.text:100A4239                 xor     eax, esp
.text:100A423B                 push    eax
.text:100A423C                 lea     eax, [esp+40h+var_C]
.text:100A4240                 mov     large fs:0, eax
.text:100A4246                 mov     esi, ecx
.text:100A4248                 lea     ecx, [esi+38h]
.text:100A424B                 call    ?RemoveAll@CMapStringToString@@QAEXXZ ; CMapStringToString::RemoveAll(void)
.text:100A4250                 lea     ecx, [esp+40h+var_1C]
.text:100A4254                 call    ??0CFile@@QAE@XZ ; CFile::CFile(void)
.text:100A4259                 mov     eax, [esp+40h+arg_C]
.text:100A425D                 mov     edi, [esp+40h+arg_0]
.text:100A4261                 push    0
.text:100A4263                 push    40h
.text:100A4265                 mov     byte ptr [eax], 0
.text:100A4268                 push    edi
.text:100A4269                 lea     ecx, [esp+4Ch+var_1C]
.text:100A426D                 mov     [esp+4Ch+var_4], 0
.text:100A4275                 mov     byte_101A8CBA, 0
.text:100A427C                 call    ?Open@CFile@@UAEHPBDIPAVCFileException@@@Z ; CFile::Open(char const *,uint,CFileException *)
.text:100A4281                 test    eax, eax
.text:100A4283                 jnz     short loc_100A42C0
.text:100A4285                 mov     ecx, [esp+40h+arg_10]
.text:100A4289                 push    edi
1
.text:100A428A                 push    offset aLicenseFileSIs ; "License file %s is missing."
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
.text:100A428F                 push    ecx
.text:100A4290                 call    sub_10005800
.text:100A4295                 add     esp, 0Ch
.text:100A4298
.text:100A4298 loc_100A4298:                           ; CODE XREF: sub_100A4220+C2 j
.text:100A4298                                         ; sub_100A4220+E4 j ...
.text:100A4298                 lea     ecx, [esp+40h+var_1C]
.text:100A429C                 mov     [esp+40h+var_4], 0FFFFFFFFh
.text:100A42A4                 call    sub_100F4809
.text:100A42A9                 xor     al, al
.text:100A42AB                 mov     ecx, [esp+40h+var_C]
.text:100A42AF                 mov     large fs:0, ecx
.text:100A42B6                 pop     ecx
.text:100A42B7                 pop     edi
.text:100A42B8                 pop     esi
.text:100A42B9                 pop     ebx
.text:100A42BA                 add     esp, 30h
.text:100A42BD                 retn    14h
.text:100A42C0 ; ---------------------------------------------------------------------------
.text:100A42C0
.text:100A42C0 loc_100A42C0:                           ; CODE XREF: sub_100A4220+63 j
.text:100A42C0                 lea     edx, [esp+40h+var_1C]
.text:100A42C4                 push    edx
.text:100A42C5                 mov     ecx, esi
.text:100A42C7                 mov     bl, 1
.text:100A42C9                 call    sub_100A4170
.text:100A42CE                 test    al, al
.text:100A42D0                 jnz     short loc_100A42E4
.text:100A42D2                 mov     ecx, [esp+40h+arg_10]
.text:100A42D6                 push    18h
1
.text:100A42D8                 push    offset aLicenseFileIsI ; "License file is invalid."
1
2
3
4
5
6
7
8
9
10
.text:100A42DD                 call    ?SetString@?$CSimpleStringT@D$0A@@ATL@@QAEXPBDH@Z ; ATL::CSimpleStringT<char,0>::SetString(char const *,int)
.text:100A42E2                 jmp     short loc_100A4298
.text:100A42E4 ; ---------------------------------------------------------------------------
.text:100A42E4
.text:100A42E4 loc_100A42E4:                           ; CODE XREF: sub_100A4220+B0 j
.text:100A42E4                 lea     ecx, [esp+40h+var_1C]
.text:100A42E8                 call    ?Close@CFile@@UAEXXZ ; CFile::Close(void)
.text:100A42ED                 cmp     dword ptr [esi+8], 3B20121h
.text:100A42F4                 jz      short loc_100A4306
.text:100A42F6                 mov     ecx, [esp+40h+arg_10]
1
.text:100A42FA                 push    offset aIncorrectLicen ; "Incorrect license file supplied."
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
.text:100A42FF                 call    sub_10003740
.text:100A4304                 jmp     short loc_100A4298
.text:100A4306 ; ---------------------------------------------------------------------------
.text:100A4306
.text:100A4306 loc_100A4306:                           ; CODE XREF: sub_100A4220+D4 j
.text:100A4306                 lea     ecx, [esi+4]
.text:100A4309                 mov     [esp+40h+var_30], ecx
.text:100A430D                 call    sub_100A3660
.text:100A4312                 cmp     eax, [esi+30h]
.text:100A4315                 jz      short loc_100A432A
.text:100A4317                 mov     ecx, [esp+40h+arg_10]
.text:100A431B                 push    offset aInvalidOrTampe ; "Invalid or tampered license file suppli"...
.text:100A4320                 call    sub_10003740
.text:100A4325                 jmp     loc_100A4298
.text:100A432A ; ---------------------------------------------------------------------------
.text:100A432A
.text:100A432A loc_100A432A:                           ; CODE XREF: sub_100A4220+F5 j
.text:100A432A                 mov     eax, [esp+40h+arg_4]
.text:100A432E                 cmp     [esi+10h], eax
.text:100A4331                 jz      short loc_100A4346
.text:100A4333                 mov     ecx, [esp+40h+arg_10]
1
.text:100A4337                 push    offset aLicenseFileDoe ; "License file does not match software pr"...
1
2
3
4
5
6
7
8
9
10
11
.text:100A433C                 call    sub_10003740
.text:100A4341                 jmp     loc_100A4298
.text:100A4346 ; ---------------------------------------------------------------------------
.text:100A4346
.text:100A4346 loc_100A4346:                           ; CODE XREF: sub_100A4220+111 j
.text:100A4346                 mov     eax, [esp+40h+FileSystemFlags]
.text:100A434A                 cmp     [esi+18h], eax
.text:100A434D                 jge     short loc_100A4362
.text:100A434F
.text:100A434F loc_100A434F:                           ; CODE XREF: sub_100A4220+145 j
.text:100A434F                 mov     ecx, [esp+40h+arg_10]
1
.text:100A4353                 push    offset aLicenseFileD_0 ; "License file does not match software ve"...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
.text:100A4358                 call    sub_10003740
.text:100A435D                 jmp     loc_100A4298
.text:100A4362 ; ---------------------------------------------------------------------------
.text:100A4362
.text:100A4362 loc_100A4362:                           ; CODE XREF: sub_100A4220+12D j
.text:100A4362                 cmp     [esi+14h], eax
.text:100A4365                 jg      short loc_100A434F
.text:100A4367                 cmp     dword ptr [esi+20h], 1
.text:100A436B                 mov     edi, [esp+40h+arg_10]
.text:100A436F                 jnz     short loc_100A43BD
.text:100A4371                 lea     ecx, [esp+40h+var_24]
.text:100A4375                 push    ecx
.text:100A4376                 call    sub_1002A8B0
.text:100A437B                 mov     edx, [esi+24h]
.text:100A437E                 mov     eax, [esi+28h]
.text:100A4381                 mov     ecx, [esi+2Ch]
.text:100A4384                 push    0FFFFFFFFh
.text:100A4386                 push    0
.text:100A4388                 push    0
.text:100A438A                 push    6
.text:100A438C                 push    edx
.text:100A438D                 push    eax
.text:100A438E                 push    ecx
.text:100A438F                 lea     ecx, [esp+5Ch+var_2C]
.text:100A4393                 call    sub_100A1EA0
.text:100A4398                 mov     edx, [esp+40h+var_28]
.text:100A439C                 mov     eax, [esp+40h+var_2C]
.text:100A43A0                 push    edx
.text:100A43A1                 push    eax
.text:100A43A2                 lea     ecx, [esp+48h+var_24]
.text:100A43A6                 call    sub_100A3610
.text:100A43AB                 test    al, al
.text:100A43AD                 jz      short loc_100A43BD
1
.text:100A43AF                 push    offset aLicenseHasBeen ; "License has been expired."
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
.text:100A43B4                 mov     ecx, edi
.text:100A43B6                 xor     bl, bl
.text:100A43B8                 call    sub_10003740
.text:100A43BD
.text:100A43BD loc_100A43BD:                           ; CODE XREF: sub_100A4220+14F j
.text:100A43BD                                         ; sub_100A4220+18D j
.text:100A43BD                 cmp     dword ptr [esi+0Ch], 1E77h
.text:100A43C4                 jz      loc_100A4482
.text:100A43CA                 lea     ecx, [esp+40h+FileSystemFlags]
.text:100A43CE                 push    ecx             ; FileSystemFlags
.text:100A43CF                 call    sub_100A3750
.text:100A43D4                 add     esp, 4
.text:100A43D7                 lea     ecx, [esp+40h+arg_10]
.text:100A43DB                 call    sub_1005ED20
.text:100A43E0                 lea     edx, [esp+40h+arg_10]
.text:100A43E4                 push    edx
.text:100A43E5                 mov     ecx, esi
.text:100A43E7                 mov     byte ptr [esp+44h+var_4], 1
.text:100A43EC                 call    sub_100A3980
.text:100A43F1                 test    al, al
.text:100A43F3                 jnz     short loc_100A4416
1
.text:100A43F5                 push    offset aSoftwareIsNotA ; "Software is not authorized to run on th"...

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课

上传的附件：
收藏
免费 ・6
支持
分享
赞赏记录
参与人
雪币
留言
时间
伟叔叔
为你点赞~
2024-5-31 07:30
心游尘世外
为你点赞~
2024-5-31 04:24
QinBeast
为你点赞~
2024-5-31 04:16
飘零丶
为你点赞~
2024-4-3 00:10
shinratensei
为你点赞~
2024-2-5 02:34
PLEBFE
为你点赞~
2023-3-7 00:35
最新回复 (2)
yookia
雪    币： 0
活跃值： (10)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
2 楼
高手啊!
小弟外行一个, 就是想用一下您这个爆破版的AutoBookmark 4.8, 您能告诉我咋用吗?
不胜感激啊!
2013-6-25 17:03
0
塰鵤潕涙
雪    币： 181
活跃值： (10)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
3 楼
真不错，加油
2013-7-11 09:22
0
游客
登录 | 注册 方可回帖
回帖 表情 雪币赚取及消费
高级回复
返回

账号登录
验证码登录

忘记密码？
没有账号？立即免费注册
我已同意 《看雪服务条款》 《看雪课程免责声明》 《看雪隐私政策》