Abstract
Software system application coverage face is more and more broad, the software engineering field has meaning and has challenge to be that safety and weight structure building a brand-new software system , how to protecting the now available software become a software engineering both and these having system at the same time no longer only important direction, software reverse project even if come true software protection and heavy structure now that have system basis. At present, the software backing project draws the engineering gets hitherto unknown space for development again , project importance to hit the target becoming the software engineering field studies the software backing project sum again problem, have significant practical or immediate significance and economic value. Software estate promptness develops and passes network fleetness propagation and the software need escalation, safe software product problem catches more and more attention , the security coming to raise a software analysing and designing good method has importance to software copyright protection. Key technology in studying the software is safe, the aspect developing the enterprise benefit and protecting user's benefit all has importance to protecting the software intellectual property rights , to defending a software. Besides, systematic increasing by of inheritance has also brought about new problem for software promotion and upkeep, since there exists technology obsolescence , system structure chaos , document vacancy become estranged defending cost advanced problem in inheritance system , more and more enterprise and organization adopt new technique to will leave over system the project arrives at the new software or hardware platform again, to improve systematic reliability , put in an important position , upkeep sex and to run a function. It still belongs to a field not having developed sufficiently although the project go into already has quite a few again in the late years to software backing project sum, does not have software backing project theory and method forming the unification's , systematization's , scientification's , has necessary go along to study in a deepgoing way therefore very much. The main body of a book is listed in in the basis having referred to home and abroad large amount of document data , is is tied in wedlock author's backing project experience, many key technologies in having set forth the software backing project detailedly , the mock exam system having studied some money working in Win32 platform is commercial. The main job has: Make use of spying the programming language measuring implement PEID having analysed if that software add shell and be a software's turn; Draw support from IDA analysing an implement having carried out static state analysis on that software, the development reverse analytical development software implement OllyDbg has been carried out debugs, the force analysing out that software has been broken solving position , has white out the document patch, the force having realized a software successfully breaks a solution; Have analysed document completeness checking process , have analysed the logon process owing software machine yard coming into being process and the software , have white out logon machine; Project theory prepares the software the at last is made use of again developing a technology two time to have increased a menu to plain system , the simplicity having been in progress to software function expands. The software force breaks 1, a solution untying degree of difficulty if defending against wanting to raise a software is broken , first, breaking needing to grasp a software solves method , achieve knowing both ourselves and our adversaries, ability is broken in defending against solving technology aspect achieving accomplishing a task with ease. The author takes that software as the process coming to explain that force breaks a solution's the example. Use PEiD to spy to software go along first measure, check if software have adding shell wait for protection , classics is checked discovering that software not adding shell, breaking having reduced a software unties degree of difficulty; Spying the main file measuring out a software at the same time has been to use VB6.0 to compile and compose , development catenate warehouse relevant to the logon has been 6.0 writes' with VC , has known the software programming language can accelerate reverse analytical speed. Use IDA static state to analyse a software carrying out analysis on mock exam system and then , seek the possibility on the contrary assembly relevant to the logon code , interpose breaking point , track procedure work process in OllyDbg development debugging software to rtcMsgBox, seek to the code place transferring the development catenate warehouse middle checkRegister ) (function temporarily for a specific task, modification register value (function return value) or direct modification becomes JMP springing to rotate instruction being OK to realize force breaking a solution. For the as said or narrated above broken solution being finally reserved down, require that primitive document to the software carries out modification, the author has adopt document patch method. And then use hexadecimal editor implement to seek the location that the plain document needs to revise and the hexadecimal form revising the queen code first, the form with character reduce expenditure carries out modification on plain document with C language writer. The queen copy the C language document is compiled and translated assembles a catalogue to the software , carry out the queen being OK to break a solution have an exam system. Problem is supplemented: 2, software logon process analysis software logon technological process can know software protection way, machine yard's generate process and principle , also be able to know the logon algorithm and logon technological process that the software adopts, to the logon protecting a software , raise a software opposing the broken solution the intensity is all-important. The author runs mock exam system first , knows the software logon way , adopt method of integration of static state analysis with development debugging to track software implementation process and then. Run a software arrive at logon location , discover a software adopt two kinds logon way: Network register and offline logon. System has generated a 90 length alphabetic string at the same time being the machine yard , has required that the consumer imports the consumer , the password , logon code three terms content can register regularly just now. According to analytical result of static state, from force breaks the location untying a later tracking a software carrying out technological process, discover a software being adopted to judge that the document guards against a document coming the completeness method by illegal modification. Concrete process as follows: The value and software having calculated development catenate warehouse document Register.dll MD5 announce a front MD5 value comparison, if the document judging the interlinkage warehouse be revised; Some bytes in fetching a main file in development interlinkage, does if be sentenced to read main file be revised. Software system generates and then alphabetic string according to the computer host stiff serial number , C set logic sequence information such as number , date , the code carrying out BASE64 on alphabetic string changes and , uses MD5 and RSA to encrypt again , forms the machine yard ultimately. According to the analysis to logon technological process,use VB6.0 to have compiled and composed logon machine , import the consumer and the password being OK to generate the logon code.
补充:
2, software logon process analysis software logon technological process can know software protection way, machine yard's generating process and principle, also is able to know the logon algorithm and logon technological process that the software adopts , the intensity is all-important to protecting the software logon , raising a software opposing the broken solution. The author runs mock exam system first , knows the software logon way , adopt method of integration of static state analysis with development debugging to track software implementation process and then. Run a software arrive at logon location , discover a software adopt two kinds logon way: Network register and offline logon. System has generated a 90 length alphabetic string at the same time being the machine yard , has required that the consumer imports the consumer , the password , logon code three terms content can register regularly just now. According to analytical result of static state, from force breaks the location untying a later tracking a software carrying out technological process, discover a software being adopted to judge that the document guards against a document coming the completeness method by illegal modification. Concrete process as follows: The value and software having calculated development catenate warehouse document Register.dll MD5 announce a front MD5 value comparison, if the document judging the interlinkage warehouse be revised; Some bytes in fetching a main file in development interlinkage, does if be sentenced to read main file be revised. Software system generates and then alphabetic string according to the computer host stiff serial number , C set logic sequence information such as number , date , the code carrying out BASE64 on alphabetic string changes and , uses MD5 and RSA to encrypt again , forms the machine yard ultimately. According to the analysis to logon technological process,use VB6.0 to have compiled and composed logon machine , import the consumer and the password being OK to generate the logon code.