这是一个很小的宝宝拼图识字软件,拼完一张选下一张时让注册,填入注册码重启程序验证,我找了提示前下断点,可是没有注册码比对,哪位大虾帮我分析下。::004CAA5A:: 51 PUSH ECX
::004CAA5B:: 68 340D4B00 PUSH 4B0D34 \->: \
::004CAA60:: FF15 40104000 CALL NEAR DWORD PTR [401040] >>>: MSVBVM60.DLL:__vbaStrCat
::004CAA66:: 8BD0 MOV EDX, EAX
::004CAA68:: 8D4D 88 LEA ECX, DWORD PTR [EBP-78]
::004CAA6B:: FF15 A8114000 CALL NEAR DWORD PTR [4011A8] >>>: MSVBVM60.DLL:__vbaStrMove
::004CAA71:: 50 PUSH EAX
::004CAA72:: 68 CC0D4B00 PUSH 4B0DCC \->: pt.ini
::004CAA77:: FF15 40104000 CALL NEAR DWORD PTR [401040] >>>: MSVBVM60.DLL:__vbaStrCat
::004CAA7D:: 8BD0 MOV EDX, EAX
::004CAA7F:: 8D4D 84 LEA ECX, DWORD PTR [EBP-7C]
::004CAA82:: FF15 A8114000 CALL NEAR DWORD PTR [4011A8] >>>: MSVBVM60.DLL:__vbaStrMove
::004CAA88:: 50 PUSH EAX
::004CAA89:: 6A 01 PUSH 1
::004CAA8B:: 6A FF PUSH -1
::004CAA8D:: 6A 02 PUSH 2
::004CAA8F:: FF15 48114000 CALL NEAR DWORD PTR [401148] >>>: MSVBVM60.DLL:__vbaFileOpen
::004CAA95:: 8D55 84 LEA EDX, DWORD PTR [EBP-7C]
::004CAA98:: 52 PUSH EDX
::004CAA99:: 8D45 88 LEA EAX, DWORD PTR [EBP-78]
::004CAA9C:: 50 PUSH EAX
::004CAA9D:: 8D4D 8C LEA ECX, DWORD PTR [EBP-74]
::004CAAA0:: 51 PUSH ECX
::004CAAA1:: 6A 03 PUSH 3
::004CAAA3:: FF15 68114000 CALL NEAR DWORD PTR [401168] >>>: MSVBVM60.DLL:__vbaFreeStrList
::004CAAA9:: 83C4 10 ADD ESP, 10
::004CAAAC:: 8D4D 80 LEA ECX, DWORD PTR [EBP-80]
::004CAAAF:: FF15 D0114000 CALL NEAR DWORD PTR [4011D0] >>>: MSVBVM60.DLL:__vbaFreeObj
::004CAAB5:: C745 FC 3E000000 MOV DWORD PTR [EBP-4], 3E
::004CAABC:: 8D55 BC LEA EDX, DWORD PTR [EBP-44]
::004CAABF:: 52 PUSH EDX
::004CAAC0:: 6A 01 PUSH 1
::004CAAC2:: 68 941B4B00 PUSH 4B1B94 \->: \x01?
::004CAAC7:: FF15 04114000 CALL NEAR DWORD PTR [401104] >>>: MSVBVM60.DLL:__vbaPrintFile
::004CAACD:: 83C4 0C ADD ESP, C
::004CAAD0:: C745 FC 3F000000 MOV DWORD PTR [EBP-4], 3F
::004CAAD7:: 6A 01 PUSH 1
::004CAAD9:: FF15 AC104000 CALL NEAR DWORD PTR [4010AC] >>>: MSVBVM60.DLL:__vbaFileClose
::004CAADF:: C745 FC 40000000 MOV DWORD PTR [EBP-4], 40
::004CAAE6:: C785 48FFFFFF 04000280 MOV DWORD PTR [EBP-B8], 80020004
::004CAAF0:: C785 40FFFFFF 0A000000 MOV DWORD PTR [EBP-C0], A
::004CAAFA:: C785 58FFFFFF 04000280 MOV DWORD PTR [EBP-A8], 80020004
::004CAB04:: C785 50FFFFFF 0A000000 MOV DWORD PTR [EBP-B0], A
::004CAB0E:: C785 08FFFFFF B8144B00 MOV DWORD PTR [EBP-F8], 4B14B8 \->: 提示
::004CAB18:: C785 00FFFFFF 08000000 MOV DWORD PTR [EBP-100], 8
::004CAB22:: 8D95 00FFFFFF LEA EDX, DWORD PTR [EBP-100]
::004CAB28:: 8D8D 60FFFFFF LEA ECX, DWORD PTR [EBP-A0]
::004CAB2E:: FF15 8C114000 CALL NEAR DWORD PTR [40118C] >>>: MSVBVM60.DLL:__vbaVarDup
::004CAB34:: C785 18FFFFFF 9C1B4B00 MOV DWORD PTR [EBP-E8], 4B1B9C \->:
请重新打开程序。以便注册码生效!::004CAB3E:: C785 10FFFFFF 08000000 MOV DWORD PTR [EBP-F0], 8
::004CAB48:: 8D95 10FFFFFF LEA EDX, DWORD PTR [EBP-F0]
::004CAB4E:: 8D8D 70FFFFFF LEA ECX, DWORD PTR [EBP-90]
::004CAB54:: FF15 8C114000 CALL NEAR DWORD PTR [40118C] >>>: MSVBVM60.DLL:__vbaVarDup
::004CAB5A:: 8D85 40FFFFFF LEA EAX, DWORD PTR [EBP-C0]
::004CAB60:: 50 PUSH EAX
[培训]科锐逆向工程师培训第53期2025年7月8日开班!