本文适合于破解能够正常阅读,但是因为主口令限制了打印、复制、修改等等功能的文件。
破解后打开文件直接设置为“无安全设置”保存即可。
版本:Acrobat 5.0.1 2001-03-27, Acrobat 5.0.5 2001-10-26
================ Wed Mar 05 15:09:53 2003
:u 4bd017 l 1000
001B:004BD017 MOV EAX,00708870
001B:004BD01C CALL 00470044
001B:004BD021 SUB ESP,28
001B:004BD024 PUSH EBX
001B:004BD025 PUSH ESI
001B:004BD026 PUSH EDI
001B:004BD027 XOR ESI,ESI
001B:004BD029 MOV [EBP-10],ESP
001B:004BD02C PUSH ESI
001B:004BD02D PUSH DWORD PTR [EBP+10]
001B:004BD030 MOV [EBP-1C],ESI
001B:004BD033 MOV [EBP-14],ESI
001B:004BD036 PUSH DWORD PTR [EBP+0C]
001B:004BD039 PUSH DWORD PTR [EBP+08]
001B:004BD03C CALL 0053F7A7
001B:004BD041 ADD ESP,10
001B:004BD044 CMP AX,SI
001B:004BD047 MOV [EBP-18],EAX
001B:004BD04A JNZ 004BD054
001B:004BD04C XOR AX,AX
001B:004BD04F JMP 004BD14C
001B:004BD054 PUSH 007912E4
001B:004BD059 CALL 0060964A
001B:004BD05E PUSH DWORD PTR [EBP+08]
001B:004BD061 CALL 00542B47
001B:004BD066 PUSH EAX
001B:004BD067 CALL 006036AC
001B:004BD06C PUSH EAX
001B:004BD06D CALL 006034F2
001B:004BD072 ADD ESP,10
001B:004BD075 MOV [EBP-20],ESI
001B:004BD078 CMP DWORD PTR [EBP-20],03 //重复输入密码3次?
001B:004BD07C JGE 004BD148
001B:004BD082 CMP [EBP-18],SI //主口令正确?
001B:004BD086 JZ 004BD148
001B:004BD08C CMP [EBP-1C],SI
001B:004BD090 JNZ 004BD148
001B:004BD096 LEA EAX,[EBP-14]
001B:004BD099 PUSH EAX
001B:004BD09A PUSH DWORD PTR [EBP+10]
001B:004BD09D PUSH DWORD PTR [EBP+0C]
001B:004BD0A0 PUSH DWORD PTR [EBP+08]
001B:004BD0A3 CALL 0053F71F
001B:004BD0A8 ADD ESP,10
001B:004BD0AB TEST AX,AX
001B:004BD0AE JZ 004BD115
001B:004BD0B0 MOV [EBP-04],ESI
001B:004BD0B3 CALL 0060A24B
001B:004BD0B8 MOV [EBP-2C],EAX
001B:004BD0BB MOV ECX,[EAX]
001B:004BD0BD MOV [EBP-34],ECX
001B:004BD0C0 LEA ECX,[EBP-34]
001B:004BD0C3 MOV [EAX],ECX
001B:004BD0C5 MOV DWORD PTR [EBP-30],0060A22C
001B:004BD0CC PUSH DWORD PTR [EBP-14]
001B:004BD0CF MOV BYTE PTR [EBP-04],01
001B:004BD0D3 PUSH DWORD PTR [EBP+10]
001B:004BD0D6 PUSH DWORD PTR [EBP+0C]
001B:004BD0D9 PUSH DWORD PTR [EBP+08]
001B:004BD0DC CALL 0053F7A7 //主口令比较,详见下一篇!
001B:004BD0E1 MOV ECX,[EBP-34]
001B:004BD0E4 MOV [EBP-18],EAX
001B:004BD0E7 MOV EAX,[EBP-2C]
001B:004BD0EA ADD ESP,10
001B:004BD0ED MOV [EAX],ECX
001B:004BD0EF JMP 004BD10F
001B:004BD0F1 PUSH DWORD PTR [EBP-14]
001B:004BD0F4 PUSH DWORD PTR [EBP+08]
001B:004BD0F7 CALL 0053EA8F
001B:004BD0FC PUSH DWORD PTR [EBP-28]
001B:004BD0FF CALL 0060A2D9
001B:004BD104 ADD ESP,0C
001B:004BD107 MOV EAX,004BD10D
001B:004BD10C RET
001B:004BD10D XOR ESI,ESI
001B:004BD10F OR DWORD PTR [EBP-04],-01
001B:004BD113 JMP 004BD11C
001B:004BD115 MOV DWORD PTR [EBP-1C],00000001
001B:004BD11C PUSH DWORD PTR [EBP-14]
001B:004BD11F PUSH DWORD PTR [EBP+08]
001B:004BD122 CALL 0053EA8F
001B:004BD127 CMP [EBP-18],SI
001B:004BD12B POP ECX
001B:004BD12C POP ECX
001B:004BD12D MOV [EBP-14],ESI
001B:004BD130 JZ 004BD140
001B:004BD132 CMP [EBP-1C],SI
001B:004BD136 JNZ 004BD140
001B:004BD138 PUSH 2A
001B:004BD13A CALL 00480D05
001B:004BD13F POP ECX
001B:004BD140 INC DWORD PTR [EBP-20] //重复次数加一。
001B:004BD143 JMP 004BD078
001B:004BD148 MOV AX,[EBP-18]
001B:004BD14C MOV ECX,[EBP-0C]
001B:004BD14F POP EDI
001B:004BD150 POP ESI
001B:004BD151 MOV FS:[00000000],ECX
001B:004BD158 POP EBX
001B:004BD159 LEAVE
001B:004BD15A RET