文章标题】: ***语音输入软件的明码比较
【文章作者】: wenxinoooo
【软件名称】: **语音输入
【下载地址】: 自己搜索下载
【加壳方式】: 无
【保护方式】: 看看就知道
【编写语言】: 不要紧
【使用工具】: OD+PEID
【操作平台】: 盗版非标准XPsp2
【软件介绍】: 您可以在QQ、MSN、Word、记事本、写字板等所有可以进行文字输入的软件中通过麦克风进行语音输入.
【作者声明】: 只是感兴趣，没有其他目的。失误之处敬请诸位大侠赐教!
--------------------------------------------------------------------------------
【详细过程】
PEID查壳 无壳
OD载入
查找超级字串参考
找到 地址=004A1A7C 您好，注册码错误，注册失败！
双击来到
004A193D |. 55 PUSH EBP
004A193E |. 68 061B4A00 PUSH ***.004A1B06
004A1943 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
004A1946 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
004A1949 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
004A194C |. 8B86 00030000 MOV EAX,DWORD PTR DS:[ESI+300]
004A1952 |. E8 61DCF9FF CALL ***.0043F5B8
004A1957 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]
004A195A |. 8D55 F8 LEA EDX,DWORD PTR SS:[EBP-8]
004A195D |. E8 E26AF6FF CALL ***.00408444
004A1962 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
004A1965 |. 50 PUSH EAX
004A1966 |. 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14]
004A1969 |. 8B86 0C030000 MOV EAX,DWORD PTR DS:[ESI+30C]
004A196F |. E8 44DCF9FF CALL ***.0043F5B8
004A1974 |. 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
004A1977 |. 8D4D F0 LEA ECX,DWORD PTR SS:[EBP-10]
004A197A |. BA 1C1B4A00 MOV EDX,***.004A1B1C ; 5u6u8 -----参与计算的关键码
004A197F |. E8 8CFAFFFF CALL ***.004A1410---------------------算法CALL
004A1984 |. 8B55 F0 MOV EDX,DWORD PTR SS:[EBP-10]
004A1987 |. 58 POP EAX
004A1988 |. E8 072BF6FF CALL ***.00404494----------------------关键CALL,原来是明码比较
004A198D |. 0F85 E2000000 JNZ ***.004A1A75-----------------------关键跳
004A1993 |. A1 B47D4A00 MOV EAX,DWORD PTR DS:[4A7DB4]
004A1998 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
004A199A |. 8B80 88030000 MOV EAX,DWORD PTR DS:[EAX+388]
004A19A0 |. 33D2 XOR EDX,EDX
004A19A2 |. E8 F1E2F8FF CALL ***.0042FC98
004A19A7 |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
004A19AA |. 8B86 00030000 MOV EAX,DWORD PTR DS:[ESI+300]
004A19B0 |. E8 03DCF9FF CALL ***.0043F5B8
004A19B5 |. 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C]
004A19B8 |. 8D55 E8 LEA EDX,DWORD PTR SS:[EBP-18]
004A19BB |. E8 846AF6FF CALL ***.00408444
004A19C0 |. 8B55 E8 MOV EDX,DWORD PTR SS:[EBP-18]
004A19C3 |. A1 B47D4A00 MOV EAX,DWORD PTR DS:[4A7DB4]
004A19C8 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
004A19CA |. 8B80 94030000 MOV EAX,DWORD PTR DS:[EAX+394]
004A19D0 |. E8 13DCF9FF CALL ***.0043F5E8
004A19D5 |. 8D55 DC LEA EDX,DWORD PTR SS:[EBP-24]
004A19D8 |. A1 C87D4A00 MOV EAX,DWORD PTR DS:[4A7DC8]
004A19DD |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
004A19DF |. E8 70DFFBFF CALL ***.0045F954
004A19E4 |. 8B45 DC MOV EAX,DWORD PTR SS:[EBP-24]
004A19E7 |. 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
004A19EA |. E8 8D73F6FF CALL ***.00408D7C
004A19EF |. 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20]
004A19F2 |. 8D55 FC LEA EDX,DWORD PTR SS:[EBP-4]
004A19F5 |. E8 3668F6FF CALL ***.00408230
004A19FA |. 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
004A19FD |. 33D2 XOR EDX,EDX
004A19FF |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
004A1A02 |. E8 8D72F6FF CALL ***.00408C94
004A1A07 |. 8B55 D8 MOV EDX,DWORD PTR SS:[EBP-28]
004A1A0A |. 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
004A1A0D |. E8 0E27F6FF CALL ***.00404120
004A1A12 |. A1 B47D4A00 MOV EAX,DWORD PTR DS:[4A7DB4]
004A1A17 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
004A1A19 |. FFB0 B4030000 PUSH DWORD PTR DS:[EAX+3B4]
004A1A1F |. 68 2C1B4A00 PUSH ***.004A1B2C ; \
004A1A24 |. FF75 FC PUSH DWORD PTR SS:[EBP-4]
004A1A27 |. 68 381B4A00 PUSH ***.004A1B38 ; .dll
004A1A2C |. 8D45 D4 LEA EAX,DWORD PTR SS:[EBP-2C]
004A1A2F |. BA 04000000 MOV EDX,4
004A1A34 |. E8 CF29F6FF CALL ***.00404408
004A1A39 |. 8B55 D4 MOV EDX,DWORD PTR SS:[EBP-2C]
004A1A3C |. A1 B47D4A00 MOV EAX,DWORD PTR DS:[4A7DB4]
004A1A41 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
004A1A43 |. 8B80 94030000 MOV EAX,DWORD PTR DS:[EAX+394]
004A1A49 |. 8B80 20020000 MOV EAX,DWORD PTR DS:[EAX+220]
004A1A4F |. 8B08 MOV ECX,DWORD PTR DS:[EAX]
004A1A51 |. FF51 74 CALL DWORD PTR DS:[ECX+74]
004A1A54 |. 6A 40 PUSH 40
004A1A56 |. B9 401B4A00 MOV ECX,***.004A1B40 ; 提示
004A1A5B |. BA 481B4A00 MOV EDX,***.004A1B48 ; 恭喜您，注册成功！
004A1A60 |. A1 C87D4A00 MOV EAX,DWORD PTR DS:[4A7DC8]
004A1A65 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
004A1A67 |. E8 68DAFBFF CALL ***.0045F4D4
004A1A6C |. 8BC6 MOV EAX,ESI
004A1A6E |. E8 85A1FBFF CALL ***.0045BBF8
004A1A73 |. EB 41 JMP SHORT ***.004A1AB6
004A1A75 |> 6A 10 PUSH 10
004A1A77 |. B9 401B4A00 MOV ECX,***.004A1B40 ; 提示
004A1A7C |. BA 5C1B4A00 MOV EDX,***.004A1B5C ; 您好，注册码错误，注册失败！\n\n----------------------------------\n\n想获取正确注册码，请点[到网站注册]。
跟进算法CALL
004A1410 /$ 55 PUSH EBP
004A1411 |. 8BEC MOV EBP,ESP
004A1413 |. 51 PUSH ECX
004A1414 |. B9 07000000 MOV ECX,7
004A1419 |> 6A 00 /PUSH 0
004A141B |. 6A 00 |PUSH 0
004A141D |. 49 |DEC ECX
004A141E |.^ 75 F9 \JNZ SHORT ***.004A1419
004A1420 |. 874D FC XCHG DWORD PTR SS:[EBP-4],ECX
004A1423 |. 53 PUSH EBX
004A1424 |. 56 PUSH ESI
004A1425 |. 57 PUSH EDI
004A1426 |. 894D F8 MOV DWORD PTR SS:[EBP-8],ECX
004A1429 |. 8955 FC MOV DWORD PTR SS:[EBP-4],EDX
004A142C |. 8BD8 MOV EBX,EAX
004A142E |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
004A1431 |. E8 0231F6FF CALL ***.00404538
004A1436 |. 33C0 XOR EAX,EAX
004A1438 |. 55 PUSH EBP
004A1439 |. 68 12164A00 PUSH ***.004A1612
004A143E |. 64:FF30 PUSH DWORD PTR FS:[EAX]
004A1441 |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
004A1444 |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
004A1447 |. 8BC3 MOV EAX,EBX
004A1449 |. E8 26FFFFFF CALL ***.004A1374
004A144E |. 8D55 F0 LEA EDX,DWORD PTR SS:[EBP-10]
004A1451 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
004A1454 |. E8 1BFFFFFF CALL ***.004A1374
004A1459 |. 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14]
004A145C |. 8B55 F4 MOV EDX,DWORD PTR SS:[EBP-C]-----------将机器码转换成16进制
004A145F |. E8 BC2CF6FF CALL ***.00404120
004A1464 |. 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10]----------关键码5u6u8转换成16进制3575367538
004A1467 |. E8 DC2EF6FF CALL ***.00404348-------------------以下是计算的过程,本想还要认真的学习一下研究算法,但是填入了真码注册后,不知怎样删除注册表的值,就此作罢
004A146C |. D1F8 SAR EAX,1
004A146E |. 79 03 JNS SHORT ***.004A1473
004A1470 |. 83D0 00 ADC EAX,0
004A1473 |> 85C0 TEST EAX,EAX
004A1475 |. 0F8E 54010000 JLE ***.004A15CF
004A147B |. 8945 E0 MOV DWORD PTR SS:[EBP-20],EAX
004A147E |. BE 01000000 MOV ESI,1
004A1483 |> 83FE 01 /CMP ESI,1
004A1486 |. 74 0B |JE SHORT ***.004A1493
004A1488 |. 8D45 EC |LEA EAX,DWORD PTR SS:[EBP-14]
004A148B |. 8B55 E8 |MOV EDX,DWORD PTR SS:[EBP-18]
004A148E |. E8 8D2CF6FF |CALL ***.00404120
004A1493 |> 8D45 E8 |LEA EAX,DWORD PTR SS:[EBP-18]
004A1496 |. E8 ED2BF6FF |CALL ***.00404088
004A149B |. 8B45 EC |MOV EAX,DWORD PTR SS:[EBP-14]
004A149E |. E8 A52EF6FF |CALL ***.00404348
004A14A3 |. 8BF8 |MOV EDI,EAX
004A14A5 |. D1FF |SAR EDI,1
004A14A7 |. 79 03 |JNS SHORT ***.004A14AC
004A14A9 |. 83D7 00 |ADC EDI,0
004A14AC |> 85FF |TEST EDI,EDI
004A14AE |. 0F8E 11010000 |JLE ***.004A15C5
-------------------------------------------------------------------------------
【经验总结】
没什么总结的,还差的远!!!
--------------------------------------------------------------------------------
【版权声明】: 本文原创于看雪技术论坛, 转载请注明作者并保持文章的完整, 谢谢!
2007年07月18日 20:59:14
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
