大学自考4.x软件41千字)
这是一个好软件,对于我等英语差的人更是一个福音。可以的话,请向作者注册,作者提到,当中很多东西都是他亲手录入的,我们尊重他的劳动。如果经济不能承受的话,请跟我来。
所用工具:
1、UNVFP&EXE 1.6(Build 999)标准版;
2、UltraEdit 32
===========================================================
由于标准版的UNVFP&EXE不公开发布,没有的朋友请下载精简版代替。
精简版下载地址:
http://extend.hk.hi.cn/~aming/2001/software/beta160.zip
帮助文件在1.50中:
http://extend.hk.hi.cn/~aming/2001/software/vfpkill150(960).zip
============================================================
目前在国内加密VFP程序用得最多的是老王的VFP&EXE,这个的家伙要价太高了。
这个英语软件也是用它来加密的,用的不止是一种,还用了 20/20 的SoftSentry 3.0 和VFPLOCK 2.X。让我们把它的壳一层层脱掉。
1、启动UNVFP&EXE1.6,把ZK.EXE(该英语软件主程序)拖放到列表中,稍侯....成功脱掉VFP&EXE 1.85加密的壳,生成文件 “zk(已脱壳).exe”。
2、如果您使用的是标准版,脱壳前选用了“优先使用插件”的话,此时已经脱掉了SoftSentry的壳。否则需要重建VFP文件的PE头。以下是用标准版的附件DUMP下来的PE头。
3、反编译已脱壳的文件,发现注册标志。
IF NOREG=1 OR NOREG=2 则没注册,有NAG窗口提示及功能限制。
IF NOREG=0 已注册
4、以上语句对应的FOX代码。。。。
54 F7 15 00 10 FC F8 01 01 FD FE - NOREG=1
54 F7 15 00 10 FC F8 01 02 FD FE - NOREG=2
改很容易改吧。
将有有以上语句的地方改为:54 F7 15 00 10 FC F8 01 00 FD FE - NOREG=0
5、用标准版的“快速比较”可以找出以下地方需要改动:
42D43: 02 00
42E59: 01 00
42FEB: 01 00
430EA: 02 00
43146: 01 00
采用换VFP的PE头的方法,对于使用 20/20 SoftSentry、Armadillo 加密的VFP程序都有效。
附:
-----------------------------------------------------------------------------
Plindge Studio UNVFP&EXE 1.6(Build 999) Standard Version page: 001
Microsoft Visual Foxpro 6.0 EXE'S[DBG NOENC] Heard Dumped
Size:7680
Date: 2001-09-06 - 11:05 By Aming
-----------------------------------------------------------------------------
00001. | 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 | MZ.............. |
00002. | B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 | ........@....... |
00003. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00004. | 00 00 00 00 00 00 00 00 00 00 00 00 B8 00 00 00 | ................ |
00005. | 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 | ........!..L.!Th |
00006. | 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F | is program canno |
00007. | 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 | t be run in DOS |
00008. | 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 | mode....$....... |
00009. | EB 20 35 DB AF 41 5B 88 AF 41 5B 88 AF 41 5B 88 | . 5..A[..A[..A[. |
00010. | AF 41 5B 88 EE 41 5B 88 68 47 5D 88 AE 41 5B 88 | .A[..A[.hG]..A[. |
00011. | 52 69 63 68 AF 41 5B 88 00 00 00 00 00 00 00 00 | Rich.A[......... |
00012. | 00 00 00 00 00 00 00 00 50 45 00 00 4C 01 04 00 | ........PE..L... |
00013. | FA 48 9D 39 00 00 00 00 00 00 00 00 E0 00 0F 01 | .H.9............ |
00014. | 0B 01 05 0C 00 0A 00 00 00 14 00 00 00 00 00 00 | ................ |
00015. | 40 17 00 00 00 10 00 00 00 20 00 00 00 00 40 00 | @........ ....@. |
00016. | 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 | ................ |
00017. | 04 00 00 00 00 00 00 00 00 50 00 00 00 04 00 00 | .........P...... |
00018. | 00 00 00 00 02 00 00 00 00 00 10 00 00 10 00 00 | ................ |
00019. | 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 | ................ |
00020. | 00 00 00 00 00 00 00 00 C4 20 00 00 64 00 00 00 | ......... ..d... |
00021. | 00 40 00 00 E8 06 00 00 00 00 00 00 00 00 00 00 | .@.............. |
00022. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00023. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00024. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00025. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00026. | 00 20 00 00 B4 00 00 00 00 00 00 00 00 00 00 00 | . .............. |
00027. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00028. | 2E 74 65 78 74 00 00 00 4C 09 00 00 00 10 00 00 | .text...L....... |
00029. | 00 0A 00 00 00 04 00 00 00 00 00 00 00 00 00 00 | ................ |
00030. | 00 00 00 00 20 00 00 60 2E 72 64 61 74 61 00 00 | .... ..`.rdata.. |
00031. | 58 04 00 00 00 20 00 00 00 06 00 00 00 0E 00 00 | X.... .......... |
00032. | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 | ............@..@ |
00033. | 2E 64 61 74 61 00 00 00 F8 04 00 00 00 30 00 00 | .data........0.. |
00034. | 00 02 00 00 00 14 00 00 00 00 00 00 00 00 00 00 | ................ |
00035. | 00 00 00 00 40 00 00 C0 2E 72 73 72 63 00 00 00 | ....@....rsrc... |
00036. | E8 06 00 00 00 40 00 00 00 08 00 00 00 16 00 00 | .....@.......... |
00037. | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 | ............@..@ |
00038. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00039. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00040. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00041. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00042. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00043. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00044. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00045. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00046. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00047. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00048. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00049. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00050. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00051. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00052. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00053. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00054. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00055. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00056. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00057. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00058. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00059. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00060. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00061. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00062. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00063. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00064. | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ |
00065. | 8B 0D AC 31 40 00 E8 7C 00 00 00 8A 15 E0 32 40 | ...1@..|......2@ |
-----------------------------------------------------------------------------
Plindge Studio UNVFP&EXE 1.6(Build 999) Standard Version page: 002
Microsoft Visual Foxpro 6.0 EXE'S[DBG NOENC] Heard Dumped
Size:7680
-----------------------------------------------------------------------------
00066. | 00 8A 0D E6 33 40 00 84 D2 75 0C 84 C9 75 08 6A | ....3@...u...u.j |
00067. | 02 83 C9 FF 5A EB 54 83 C8 FF 84 C9 A3 C8 32 40 | ....Z.T.......2@ |
00068. | 00 74 08 6A 01 58 A3 C8 32 40 00 84 D2 74 14 83 | .t.j.X..2@...t.. |
00069. | 3D 90 31 40 00 00 75 04 84 C9 75 07 33 C0 A3 C8 | =.1@..u...u.3... |
00070. | 32 40 00 83 F8 FF 74 28 69 C0 06 01 00 00 05 E0 | 2@....t(i....... |
00071. | 32 40 00 6A 00 50 FF 15 58 20 40 00 59 85 C0 59 | 2@.j.P..X @.Y..Y |
00072. | 74 11 8B 0D C8 32 40 00 6A 02 5A E8 F8 02 00 00 | t....2@.j.Z..... |
00073. | 33 C0 C3 6A 01 58 C3 55 8B EC 81 EC 1C 01 00 00 | 3..j.X.U........ |
00074. | 53 83 65 FC 00 56 57 6A 01 5B 8B D3 8B CB E8 13 | S.e..VWj.[...... |
00075. | 02 00 00 80 3D E6 33 40 00 00 8B 3D 58 20 40 00 | ....=.3@...=X @. |
00076. | 75 3A BE E6 33 40 00 B9 18 30 40 00 8B D6 E8 BB | u:..3@...0@..... |
00077. | 00 00 00 85 C0 74 25 6A 00 56 89 5D FC FF D7 59 | .....t%j.V.]...Y |
00078. | 85 C0 59 74 17 80 25 E6 33 40 00 00 8B D3 8B CB | ..Yt..%.3@...... |
00079. | C7 45 FC 02 00 00 00 E8 CA 01 00 00 83 7D FC 02 | .E...........}.. |
00080. | 0F 84 83 00 00 00 80 3D E6 33 40 00 00 75 7A 8D | .......=.3@..uz. |
00081. | 85 E4 FE FF FF 68 04 01 00 00 50 FF 15 38 20 40 | .....h....P..8 @ |
00082. | 00 85 C0 74 52 83 C0 0C 3D 05 01 00 00 7F 48 8B | ...tR...=....H. |
00083. | 35 3C 20 40 00 8D 85 E4 FE FF FF 68 14 30 40 00 | 5< @.......h.0@. |
00084. | 50 FF D6 8B CB E8 55 01 00 00 50 8D 85 E4 FE FF | P.....U...P..... |
00085. | FF 50 FF D6 8D 85 E4 FE FF FF 6A 00 50 FF D7 59 | .P........j.P..Y |
00086. | 85 C0 59 75 12 8D 85 E4 FE FF FF 50 68 E6 33 40 | ..Yu.......Ph.3@ |
00087. | 00 FF 15 40 20 40 00 80 3D E6 33 40 00 00 75 09 | ...@ @..=.3@..u. |
00088. | 8B D3 8B CB E8 3D 01 00 00 5F 5E 5B C9 C3 55 8B | .....=..._^[..U. |
00089. | EC 81 EC 10 02 00 00 56 8D 45 FC 57 50 6A 00 89 | .......V.E.WPj.. |
00090. | 55 F4 8B F1 68 00 00 00 80 FF 15 04 20 40 00 85 | U...h....... @.. |
00091. | C0 75 51 8D 85 F0 FE FF FF 56 50 FF 15 40 20 40 | .uQ......VP..@ @ |
00092. | 00 8D 85 F0 FE FF FF 68 30 30 40 00 50 FF 15 3C | .......h00@.P..< |
00093. | 20 40 00 8D 45 F0 C7 45 F0 05 01 00 00 50 8D 85 | @..E..E.....P.. |
00094. | F0 FD FF FF 50 8D 85 F0 FE FF FF 50 FF 75 FC FF | ....P......P.u.. |
00095. | 15 00 20 40 00 8B F0 FF 75 FC FF 15 08 20 40 00 | .. @....u.... @. |
00096. | 85 F6 74 07 33 C0 E9 90 00 00 00 80 BD F0 FD FF | ..t.3........... |
00097. | FF 00 8B 3D 94 20 40 00 8D B5 F0 FD FF FF 74 31 | ...=. @.......t1 |
00098. | A1 98 20 40 00 83 38 01 7E 0C 0F BE 06 6A 08 50 | .. @..8.~....j.P |
00099. | FF D7 59 59 EB 11 8B 0D 90 20 40 00 0F BE 06 8B | ..YY..... @..... |
00100. | 09 8A 04 41 83 E0 08 85 C0 74 06 46 80 3E 00 75 | ...A.....t.F.>.u |
00101. | CF 89 75 F8 8A 06 84 C0 74 2F 8B 0D 98 20 40 00 | ..u.....t/... @. |
00102. | 83 39 01 7E 0C 0F BE C0 6A 08 50 FF D7 59 59 EB | .9.~....j.P..YY. |
00103. | 11 8B 0D 90 20 40 00 0F BE C0 8B 09 8A 04 41 83 | .... @........A. |
00104. | E0 08 85 C0 75 03 46 EB CB FF 75 F8 80 26 00 FF | ....u.F...u..&.. |
00105. | 75 F4 FF 15 40 20 40 00 6A 01 58 5F 5E C9 C3 56 | u...@ @.j.X_^..V |
00106. | BE 90 30 40 00 68 00 01 00 00 56 51 FF 35 AC 31 | ..0@.h....VQ.5.1 |
00107. | 40 00 FF 15 AC 20 40 00 85 C0 75 06 20 05 90 30 | @.... @...u. ..0 |
00108. | 40 00 8B C6 5E C3 55 8B EC 81 EC 1C 01 00 00 69 | @...^.U........i |
00109. | C9 06 01 00 00 80 B9 E0 32 40 00 00 53 8D 99 E0 | ........2@..S... |
00110. | 32 40 00 56 57 89 55 FC 0F 85 95 00 00 00 BE C0 | 2@.VW.U......... |
00111. | 31 40 00 6A 5C 56 FF 15 88 20 40 00 8B F8 59 85 | 1@.j\V... @...Y. |
00112. | FF 59 75 14 8D 85 E4 FE FF FF 50 68 04 01 00 00 | .Yu.......Ph.... |
00113. | FF 15 34 20 40 00 EB 22 8B C7 2B C6 50 8D 85 E4 | ..4 @.."..+.P... |
00114. | FE FF FF 56 50 FF 15 8C 20 40 00 8D 85 E4 FE FF | ...VP... @...... |
00115. | FF 83 C4 0C 2B C6 80 24 38 00 8B 35 3C 20 40 00 | ....+..$8..5< @. |
00116. | 8D 85 E4 FE FF FF 68 14 30 40 00 50 FF D6 8B 4D | ......h.0@.P...M |
00117. | FC E8 49 FF FF FF 50 8D 85 E4 FE FF FF 50 FF D6 | ..I...P......P.. |
00118. | 8D 85 E4 FE FF FF 6A 00 50 FF 15 58 20 40 00 59 | ......j.P..X @.Y |
00119. | 85 C0 59 75 0E 8D 85 E4 FE FF FF 50 53 FF 15 40 | ..Yu.......PS..@ |
00120. | 20 40 00 5F 5E 5B C9 C3 55 8B EC 81 EC 00 05 00 | @._^[..U....... |
00121. | 00 57 8B FA 85 FF 8B C1 0F 84 BF 00 00 00 56 8B | .W............V. |
00122. | 35 40 20 40 00 83 E8 00 74 11 48 74 09 80 A5 00 | 5@ @....t.Ht.... |
00123. | FF FF FF 00 EB 16 6A 01 59 EB 02 33 C9 E8 DD FE | ......j.Y..3.... |
00124. | FF FF 50 8D 85 00 FF FF FF 50 FF D6 83 FF 02 72 | ..P......P.....r |
00125. | 50 83 FF 03 76 37 83 FF 0B 74 10 81 FF BF 00 00 | P...v7...t...... |
00126. | 00 76 3E 81 FF C1 00 00 00 77 36 8D 85 00 FF FF | .v>......w6..... |
00127. | FF 50 6A 05 59 E8 A5 FE FF FF 50 8D 85 00 FB FF | .Pj.Y.....P..... |
00128. | FF 50 FF 15 A4 20 40 00 83 C4 0C EB 35 6A 04 59 | .P... @.....5j.Y |
00129. | E8 8A FE FF FF 50 8D 85 00 FB FF FF 50 FF D6 EB | .....P......P... |
00130. | 21 8D 85 00 FF FF FF 57 50 6A 06 59 E8 6E FE FF | !......WPj.Y.n.. |
-----------------------------------------------------------------------------
