首页
社区
课程
招聘
[旧帖] [求助]帮我看下这个断点下哪能追出注册码 0.00雪花
发表于: 2007-5-20 14:08 4505

[旧帖] [求助]帮我看下这个断点下哪能追出注册码 0.00雪花

2007-5-20 14:08
4505
这是一个很小的宝宝拼图识字软件,拼完一张选下一张时让注册,填入注册码重启程序验证,我找了提示前下断点,可是没有注册码比对,哪位大虾帮我分析下。

::004CAA5A::  51                       PUSH ECX                                
::004CAA5B::  68 340D4B00              PUSH 4B0D34                                 \->: \
::004CAA60::  FF15 40104000            CALL NEAR DWORD PTR [401040]                >>>: MSVBVM60.DLL:__vbaStrCat
::004CAA66::  8BD0                     MOV EDX, EAX                            
::004CAA68::  8D4D 88                  LEA ECX, DWORD PTR [EBP-78]             
::004CAA6B::  FF15 A8114000            CALL NEAR DWORD PTR [4011A8]                >>>: MSVBVM60.DLL:__vbaStrMove
::004CAA71::  50                       PUSH EAX                                
::004CAA72::  68 CC0D4B00              PUSH 4B0DCC                                 \->: pt.ini
::004CAA77::  FF15 40104000            CALL NEAR DWORD PTR [401040]                >>>: MSVBVM60.DLL:__vbaStrCat
::004CAA7D::  8BD0                     MOV EDX, EAX                            
::004CAA7F::  8D4D 84                  LEA ECX, DWORD PTR [EBP-7C]             
::004CAA82::  FF15 A8114000            CALL NEAR DWORD PTR [4011A8]                >>>: MSVBVM60.DLL:__vbaStrMove
::004CAA88::  50                       PUSH EAX                                
::004CAA89::  6A 01                    PUSH 1                                  
::004CAA8B::  6A FF                    PUSH -1                                 
::004CAA8D::  6A 02                    PUSH 2                                  
::004CAA8F::  FF15 48114000            CALL NEAR DWORD PTR [401148]                >>>: MSVBVM60.DLL:__vbaFileOpen
::004CAA95::  8D55 84                  LEA EDX, DWORD PTR [EBP-7C]             
::004CAA98::  52                       PUSH EDX                                
::004CAA99::  8D45 88                  LEA EAX, DWORD PTR [EBP-78]             
::004CAA9C::  50                       PUSH EAX                                
::004CAA9D::  8D4D 8C                  LEA ECX, DWORD PTR [EBP-74]             
::004CAAA0::  51                       PUSH ECX                                
::004CAAA1::  6A 03                    PUSH 3                                  
::004CAAA3::  FF15 68114000            CALL NEAR DWORD PTR [401168]                >>>: MSVBVM60.DLL:__vbaFreeStrList
::004CAAA9::  83C4 10                  ADD ESP, 10                             
::004CAAAC::  8D4D 80                  LEA ECX, DWORD PTR [EBP-80]             
::004CAAAF::  FF15 D0114000            CALL NEAR DWORD PTR [4011D0]                >>>: MSVBVM60.DLL:__vbaFreeObj
::004CAAB5::  C745 FC 3E000000         MOV DWORD PTR [EBP-4], 3E               
::004CAABC::  8D55 BC                  LEA EDX, DWORD PTR [EBP-44]             
::004CAABF::  52                       PUSH EDX                                
::004CAAC0::  6A 01                    PUSH 1                                  
::004CAAC2::  68 941B4B00              PUSH 4B1B94                                 \->: \x01? 
::004CAAC7::  FF15 04114000            CALL NEAR DWORD PTR [401104]                >>>: MSVBVM60.DLL:__vbaPrintFile
::004CAACD::  83C4 0C                  ADD ESP, C                              
::004CAAD0::  C745 FC 3F000000         MOV DWORD PTR [EBP-4], 3F               
::004CAAD7::  6A 01                    PUSH 1                                  
::004CAAD9::  FF15 AC104000            CALL NEAR DWORD PTR [4010AC]                >>>: MSVBVM60.DLL:__vbaFileClose
::004CAADF::  C745 FC 40000000         MOV DWORD PTR [EBP-4], 40               
::004CAAE6::  C785 48FFFFFF 04000280   MOV DWORD PTR [EBP-B8], 80020004        
::004CAAF0::  C785 40FFFFFF 0A000000   MOV DWORD PTR [EBP-C0], A               
::004CAAFA::  C785 58FFFFFF 04000280   MOV DWORD PTR [EBP-A8], 80020004        
::004CAB04::  C785 50FFFFFF 0A000000   MOV DWORD PTR [EBP-B0], A               
::004CAB0E::  C785 08FFFFFF B8144B00   MOV DWORD PTR [EBP-F8], 4B14B8              \->: 提示
::004CAB18::  C785 00FFFFFF 08000000   MOV DWORD PTR [EBP-100], 8              
::004CAB22::  8D95 00FFFFFF            LEA EDX, DWORD PTR [EBP-100]            
::004CAB28::  8D8D 60FFFFFF            LEA ECX, DWORD PTR [EBP-A0]             
::004CAB2E::  FF15 8C114000            CALL NEAR DWORD PTR [40118C]                >>>: MSVBVM60.DLL:__vbaVarDup
::004CAB34::  C785 18FFFFFF 9C1B4B00   MOV DWORD PTR [EBP-E8], 4B1B9C              \->: 请重新打开程序。以便注册码生效!::004CAB3E::  C785 10FFFFFF 08000000   MOV DWORD PTR [EBP-F0], 8               
::004CAB48::  8D95 10FFFFFF            LEA EDX, DWORD PTR [EBP-F0]             
::004CAB4E::  8D8D 70FFFFFF            LEA ECX, DWORD PTR [EBP-90]             
::004CAB54::  FF15 8C114000            CALL NEAR DWORD PTR [40118C]                >>>: MSVBVM60.DLL:__vbaVarDup
::004CAB5A::  8D85 40FFFFFF            LEA EAX, DWORD PTR [EBP-C0]             
::004CAB60::  50                       PUSH EAX

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

收藏
免费 0
支持
分享
最新回复 (2)
雪    币: 370
活跃值: (15)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
2
你找的不是地方,既然知道是
重启程序验证
,看你贴代码:
写你填的注册码到文件
关闭文件
提示要重启程序验证

你可以下MSVBVM60.DLL:__vbaFileOpen断点,跟踪注册码处理过程
2007-5-20 14:18
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
感谢楼上,我再试试
2007-5-20 14:45
0
游客
登录 | 注册 方可回帖
返回