|
|
[讨论]这个爆破手少放了一根雷管！
对于您这样的高手当然是小case啦。我们菜鸟就差远咯，您能指点一下哪个才是关键跳吗？ |
|
|
[讨论]这个爆破手少放了一根雷管！
能介绍以下破文吗？ |
|
|
[讨论]这个爆破手少放了一根雷管！
这是我在dede里面跟踪到的那个20个限制的代码部分 00646748 55 push ebp 00646749 8BEC mov ebp, esp 0064674B B978000000 mov ecx, $00000078 00646750 6A00 push $00 00646752 6A00 push $00 00646754 49 dec ecx 00646755 75F9 jnz 00646750 00646757 51 push ecx 00646758 53 push ebx 00646759 56 push esi 0064675A 57 push edi 0064675B 8955FC mov [ebp-$04], edx 0064675E 8BF0 mov esi, eax 00646760 33C0 xor eax, eax 00646762 55 push ebp 00646763 68A7846400 push $006484A7 ***** TRY | 00646768 64FF30 push dword ptr fs:[eax] 0064676B 648920 mov fs:[eax], esp 0064676E 8D55B8 lea edx, [ebp-$48] * Reference to control TForm4.Edit1 : TEdit | 00646771 8B862C030000 mov eax, [esi+$032C] * Reference to: controls.TControl.GetText(TControl):TCaption; | 00646777 E8D41EDFFF call 00438650 0064677C 837DB800 cmp dword ptr [ebp-$48], +$00 00646780 0F84F31A0000 jz 00648279 00646786 8D55EC lea edx, [ebp-$14] * Reference to control TForm4.Edit1 : TEdit | 00646789 8B862C030000 mov eax, [esi+$032C] * Reference to: controls.TControl.GetText(TControl):TCaption; | 0064678F E8BC1EDFFF call 00438650 00646794 EB1C jmp 006467B2 00646796 8B55EC mov edx, [ebp-$14] 00646799 B8C0846400 mov eax, $006484C0 * Reference to: system.@LStrPos; | 0064679E E8B9DDDBFF call 0040455C 006467A3 8BD8 mov ebx, eax 006467A5 8D45EC lea eax, [ebp-$14] * Reference to: system.UniqueString(String;String); | 006467A8 E893DCDBFF call 00404440 006467AD C64418FF0A mov byte ptr [eax+ebx-$01], $0A 006467B2 8B55EC mov edx, [ebp-$14] 006467B5 B8C0846400 mov eax, $006484C0 * Reference to: system.@LStrPos; | 006467BA E89DDDDBFF call 0040455C 006467BF 85C0 test eax, eax 006467C1 7FD3 jnle 00646796 006467C3 EB1C jmp 006467E1 006467C5 8B55EC mov edx, [ebp-$14] 006467C8 B8CC846400 mov eax, $006484CC * Reference to: system.@LStrPos; | 006467CD E88ADDDBFF call 0040455C 006467D2 8BD8 mov ebx, eax 006467D4 8D45EC lea eax, [ebp-$14] * Reference to: system.UniqueString(String;String); | 006467D7 E864DCDBFF call 00404440 006467DC C64418FF0A mov byte ptr [eax+ebx-$01], $0A 006467E1 8B55EC mov edx, [ebp-$14] 006467E4 B8CC846400 mov eax, $006484CC * Reference to: system.@LStrPos; | 006467E9 E86EDDDBFF call 0040455C 006467EE 85C0 test eax, eax 006467F0 7FD3 jnle 006467C5 006467F2 EB1C jmp 00646810 006467F4 8B55EC mov edx, [ebp-$14] 006467F7 B8D8846400 mov eax, $006484D8 * Reference to: system.@LStrPos; | 006467FC E85BDDDBFF call 0040455C 00646801 8BD8 mov ebx, eax 00646803 8D45EC lea eax, [ebp-$14] * Reference to: system.UniqueString(String;String); | 00646806 E835DCDBFF call 00404440 0064680B C64418FF0A mov byte ptr [eax+ebx-$01], $0A 00646810 8B55EC mov edx, [ebp-$14] 00646813 B8D8846400 mov eax, $006484D8 * Reference to: system.@LStrPos; | 00646818 E83FDDDBFF call 0040455C 0064681D 85C0 test eax, eax 0064681F 7FD3 jnle 006467F4 00646821 EB1C jmp 0064683F 00646823 8B55EC mov edx, [ebp-$14] 00646826 B8E4846400 mov eax, $006484E4 * Reference to: system.@LStrPos; | 0064682B E82CDDDBFF call 0040455C 00646830 8BD8 mov ebx, eax 00646832 8D45EC lea eax, [ebp-$14] * Reference to: system.UniqueString(String;String); | 00646835 E806DCDBFF call 00404440 0064683A C64418FF0A mov byte ptr [eax+ebx-$01], $0A 0064683F 8B55EC mov edx, [ebp-$14] 00646842 B8E4846400 mov eax, $006484E4 * Reference to: system.@LStrPos; | 00646847 E810DDDBFF call 0040455C 0064684C 85C0 test eax, eax 0064684E 7FD3 jnle 00646823 00646850 B201 mov dl, $01 * Reference to class TStringList | 00646852 A168194100 mov eax, dword ptr [$00411968] * Reference to: system.TObject.Create(TObject;Boolean); | 00646857 E820C9DBFF call 0040317C 0064685C 8945E8 mov [ebp-$18], eax 0064685F 8B55EC mov edx, [ebp-$14] 00646862 8B45E8 mov eax, [ebp-$18] 00646865 8B08 mov ecx, [eax] * Reference to method TStringList.SetTextStr(string) | 00646867 FF512C call dword ptr [ecx+$2C] * Reference to: Unit_004D60C0.Proc_004EB020 | 0064686A E8B147EAFF call 004EB020 0064686F 40 inc eax 00646870 7417 jz 00646889 * Reference to pointer to GlobalVar_00728F98 | 00646872 A10C6E7200 mov eax, dword ptr [$00726E0C] * Reference to field GlobalVar_00728F98.OFFS_0044 | 00646877 8B4044 mov eax, [eax+$44] * Reference to pointer to GlobalVar_00728F98 | 0064687A 8B150C6E7200 mov edx, [$00726E0C] * Reference to field GlobalVar_00728F98.OFFS_004C | 00646880 3B424C cmp eax, [edx+$4C] 00646883 0F8E3D010000 jle 006469C6 * Reference to TDM1 instance | 00646889 A13C707200 mov eax, dword ptr [$0072703C] 0064688E 8B00 mov eax, [eax] * Reference to control TDM1.QPhXH : TQuery | 00646890 8B98E0190000 mov ebx, [eax+$19E0] 00646896 8BC3 mov eax, ebx * Reference to: db.TDataSet.Close(TDataSet); | 00646898 E8332AE3FF call 004792D0 * Possible String Reference to: 'WHERE (lb=' | 0064689D 68F0846400 push $006484F0 * Reference to pointer to GlobalVar_00728F98 | 006468A2 A10C6E7200 mov eax, dword ptr [$00726E0C] 006468A7 FF700C push dword ptr [eax+$0C] 006468AA 6804856400 push $00648504 006468AF 8D45B4 lea eax, [ebp-$4C] 006468B2 BA03000000 mov edx, $00000003 * Reference to: system.@LStrCatN; | 006468B7 E874DADBFF call 00404330 006468BC 8B4DB4 mov ecx, [ebp-$4C] * Reference to field TQuery.SQL : TStrings | 006468BF 8B8338020000 mov eax, [ebx+$0238] 006468C5 BA02000000 mov edx, $00000002 006468CA 8B38 mov edi, [eax] * Reference to method TStrings.Put(Integer,string) | 006468CC FF5720 call dword ptr [edi+$20] 006468CF 8BC3 mov eax, ebx * Reference to: db.TDataSet.Open(TDataSet); | 006468D1 E8EE29E3FF call 004792C4 006468D6 8B45E8 mov eax, [ebp-$18] 006468D9 8B10 mov edx, [eax] * Reference to method TStringList.GetCount() | 006468DB FF5214 call dword ptr [edx+$14] 006468DE 48 dec eax 006468DF 85C0 test eax, eax 006468E1 0F8CDF000000 jl 006469C6 006468E7 40 inc eax 006468E8 8945D0 mov [ebp-$30], eax 006468EB 33DB xor ebx, ebx * Reference to TDM1 instance | 006468ED A13C707200 mov eax, dword ptr [$0072703C] 006468F2 8B00 mov eax, [eax] * Reference to control TDM1.QPhXH : TQuery | 006468F4 8B80E0190000 mov eax, [eax+$19E0] 006468FA 8945CC mov [ebp-$34], eax * Reference to DM1 | 006468FD 8B45CC mov eax, [ebp-$34] * Reference to: db.TDataSet.First(TDataSet); | or: db.TDataSet.Last(TDataSet); | 00646900 E8434AE3FF call 0047B348 00646905 33C0 xor eax, eax 00646907 8945F4 mov [ebp-$0C], eax 0064690A E99D000000 jmp 006469AC 0064690F FF45F4 inc dword ptr [ebp-$0C] 00646912 8D4DB0 lea ecx, [ebp-$50] 00646915 8BD3 mov edx, ebx 00646917 8B45E8 mov eax, [ebp-$18] 0064691A 8B38 mov edi, [eax] * Reference to method TStringList.Get(Integer) | 0064691C FF570C call dword ptr [edi+$0C] 0064691F 8B45B0 mov eax, [ebp-$50] 00646922 50 push eax * Possible String Reference to: 'ph' | 00646923 BA10856400 mov edx, $00648510 * Reference to DM1 | 00646928 8B45CC mov eax, [ebp-$34] * Reference to: db.TDataSet.FieldByName(TDataSet;AnsiString):TField; | 0064692B E85C37E3FF call 0047A08C 00646930 8D55AC lea edx, [ebp-$54] 00646933 8B08 mov ecx, [eax] * Reference to method TQuery.PSGetUpdateException(Exception,EUpdateError) | 00646935 FF5158 call dword ptr [ecx+$58] 00646938 8B55AC mov edx, [ebp-$54] 0064693B 58 pop eax * Reference to: system.@LStrCmp; <-------------- 关键的比较 | 0064693C E83FDADBFF call 00404380 00646941 7561 jnz 006469A4 <---关键跳？？ 00646943 837DF414 cmp dword ptr [ebp-$0C], +$14 00646947 7C5B jl 006469A4 <---关键跳？？ 00646949 6A00 push $00 * Possible String Reference to: '提示:牌号[' | 0064694B 681C856400 push $0064851C 00646950 8D4DA4 lea ecx, [ebp-$5C] 00646953 8BD3 mov edx, ebx 00646955 8B45E8 mov eax, [ebp-$18] 00646958 8B18 mov ebx, [eax] * Reference to method TStringList.Get(Integer) <-----取号牌个数 | 0064695A FF530C call dword ptr [ebx+$0C] 0064695D FF75A4 push dword ptr [ebp-$5C] * Possible String Reference to: ']超出使用范围.' | 00646960 6830856400 push $00648530 00646965 6848856400 push $00648548 * Possible String Reference to: '说明:未注册版本牌号只能登记前20个牌 | 号。' | 0064696A 6854856400 push $00648554 0064696F 6848856400 push $00648548 * Possible String Reference to: ' 请注册后继续使用!' | 00646974 6884856400 push $00648584 00646979 8D45A8 lea eax, [ebp-$58] 0064697C BA07000000 mov edx, $00000007 －－－－－－－－－－－－－－－－－－－－－－－－－－－－－－ 跟进call 00404380 －－－－－－－－－－－－－－－－－－－－－－－－－－－－－－ 00404380 53 push ebx 00404381 56 push esi 00404382 57 push edi 00404383 89C6 mov esi, eax 00404385 89D7 mov edi, edx 00404387 39D0 cmp eax, edx 00404389 0F848F000000 jz 0040441E 0040438F 85F6 test esi, esi 00404391 7468 jz 004043FB 00404393 85FF test edi, edi 00404395 746B jz 00404402 00404397 8B46FC mov eax, [esi-$04] 0040439A 8B57FC mov edx, [edi-$04] 0040439D 29D0 sub eax, edx 0040439F 7702 jnbe 004043A3 004043A1 01C2 add edx, eax 004043A3 52 push edx 004043A4 C1EA02 shr edx, $02 004043A7 7426 jz 004043CF 004043A9 8B0E mov ecx, [esi] 004043AB 8B1F mov ebx, [edi] 004043AD 39D9 cmp ecx, ebx 004043AF 7558 jnz 00404409 004043B1 4A dec edx 004043B2 7415 jz 004043C9 004043B4 8B4E04 mov ecx, [esi+$04] 004043B7 8B5F04 mov ebx, [edi+$04] 004043BA 39D9 cmp ecx, ebx 004043BC 754B jnz 00404409 004043BE 83C608 add esi, +$08 004043C1 83C708 add edi, +$08 004043C4 4A dec edx 004043C5 75E2 jnz 004043A9 004043C7 EB06 jmp 004043CF 004043C9 83C604 add esi, +$04 004043CC 83C704 add edi, +$04 004043CF 5A pop edx 004043D0 83E203 and edx, +$03 004043D3 7422 jz 004043F7 004043D5 8B0E mov ecx, [esi] 004043D7 8B1F mov ebx, [edi] 004043D9 38D9 cmp cl, bl 004043DB 7541 jnz 0040441E 004043DD 4A dec edx 004043DE 7417 jz 004043F7 004043E0 38FD cmp ch, bh 004043E2 753A jnz 0040441E 004043E4 4A dec edx 004043E5 7410 jz 004043F7 004043E7 81E30000FF00 and ebx, $00FF0000 004043ED 81E10000FF00 and ecx, $00FF0000 004043F3 39D9 cmp ecx, ebx 004043F5 7527 jnz 0040441E 004043F7 01C0 add eax, eax 004043F9 EB23 jmp 0040441E 004043FB 8B57FC mov edx, [edi-$04] 004043FE 29D0 sub eax, edx 00404400 EB1C jmp 0040441E 00404402 8B46FC mov eax, [esi-$04] 00404405 29D0 sub eax, edx 00404407 EB15 jmp 0040441E 00404409 5A pop edx 0040440A 38D9 cmp cl, bl 0040440C 7510 jnz 0040441E 0040440E 38FD cmp ch, bh 00404410 750C jnz 0040441E 00404412 C1E910 shr ecx, $10 00404415 C1EB10 shr ebx, $10 00404418 38D9 cmp cl, bl 0040441A 7502 jnz 0040441E 0040441C 38FD cmp ch, bh 0040441E 5F pop edi 0040441F 5E pop esi 00404420 5B pop ebx 00404421 C3 ret －－－－－－－－－－－－－－－－－－－－－－－－－－－ 又跳来跳去的，我又迷糊了！ 
|
|
|
|
|
|
|
|
|
[讨论]又见"刘键英"同志活跃在破解前线。
那是个什么动物？好像是老鼠。不过个头大了不少 |
|
|
[讨论]这个爆破手少放了一根雷管！
00404380 53 push ebx 00404381 56 push esi 00404382 57 push edi 00404383 89C6 mov esi, eax 00404385 89D7 mov edi, edx 00404387 39D0 cmp eax, edx 00404389 0F848F000000 jz 0040441E 0040438F 85F6 test esi, esi 00404391 7468 jz 004043FB 00404393 85FF test edi, edi 00404395 746B jz 00404402 00404397 8B46FC mov eax, [esi-$04] 0040439A 8B57FC mov edx, [edi-$04] 0040439D 29D0 sub eax, edx 0040439F 7702 jnbe 004043A3 004043A1 01C2 add edx, eax 004043A3 52 push edx 004043A4 C1EA02 shr edx, $02 004043A7 7426 jz 004043CF 004043A9 8B0E mov ecx, [esi] 004043AB 8B1F mov ebx, [edi] 004043AD 39D9 cmp ecx, ebx 004043AF 7558 jnz 00404409 004043B1 4A dec edx 004043B2 7415 jz 004043C9 004043B4 8B4E04 mov ecx, [esi+$04] 004043B7 8B5F04 mov ebx, [edi+$04] 004043BA 39D9 cmp ecx, ebx 004043BC 754B jnz 00404409 004043BE 83C608 add esi, +$08 004043C1 83C708 add edi, +$08 004043C4 4A dec edx 004043C5 75E2 jnz 004043A9 004043C7 EB06 jmp 004043CF 004043C9 83C604 add esi, +$04 004043CC 83C704 add edi, +$04 004043CF 5A pop edx 004043D0 83E203 and edx, +$03 004043D3 7422 jz 004043F7 004043D5 8B0E mov ecx, [esi] 004043D7 8B1F mov ebx, [edi] 004043D9 38D9 cmp cl, bl 004043DB 7541 jnz 0040441E 004043DD 4A dec edx 004043DE 7417 jz 004043F7 004043E0 38FD cmp ch, bh 004043E2 753A jnz 0040441E 004043E4 4A dec edx 004043E5 7410 jz 004043F7 004043E7 81E30000FF00 and ebx, $00FF0000 004043ED 81E10000FF00 and ecx, $00FF0000 004043F3 39D9 cmp ecx, ebx 004043F5 7527 jnz 0040441E 004043F7 01C0 add eax, eax 004043F9 EB23 jmp 0040441E 004043FB 8B57FC mov edx, [edi-$04] 004043FE 29D0 sub eax, edx 00404400 EB1C jmp 0040441E 00404402 8B46FC mov eax, [esi-$04] 00404405 29D0 sub eax, edx 00404407 EB15 jmp 0040441E 00404409 5A pop edx 0040440A 38D9 cmp cl, bl 0040440C 7510 jnz 0040441E 0040440E 38FD cmp ch, bh 00404410 750C jnz 0040441E 00404412 C1E910 shr ecx, $10 00404415 C1EB10 shr ebx, $10 00404418 38D9 cmp cl, bl 0040441A 7502 jnz 0040441E 0040441C 38FD cmp ch, bh 0040441E 5F pop edi 0040441F 5E pop esi 00404420 5B pop ebx 00404421 C3 ret 这是我认为的关键call：call 00404380，看不太明白，老是跳来跳去的 |
|
|
[讨论]这个爆破手少放了一根雷管！
桑拿洗浴管理软件 |
|
|
PB资源属性修改(已自行解决）
请教一下楼主的解决方法 |
|
|
[原创]无狗破解**市政资料制作与管理系统(入门级)
我这里还有个5000多大洋的白痴加密狗软件呢！比这个稍微强一点，不过人家是vfp做的，也不能完全怪人家，毕竟俺看的是源代码！嘿嘿 |
|
|
[原创]无狗破解VFP软件
补充一下，这个需要vc运行库，mfc*.dll |
|
|
|
|
|
手工解除联众对softice的限制
支持一下！ |
|
|
某报价预算软件(PB9程序) Ver 5.1 注册验证分析
是关于一个PB9编写的工程软件的注册机！好东西 |
|
|
|
|
|
某报价预算软件(PB9程序) Ver 5.1 注册验证分析
我最近也在调试一个pb软件,不过我的注册机是用pb写的,我懒,所以直接把pbkiller里面的代码复制过来了 |
|
|
|
|
|
[原创]无狗破解VFP软件
请跟我qq联系595372 |
|
|
[原创]无狗破解VFP软件
FOXTOOLS反编译到一半就出错的原因是什么呢？ |
厉害厉害，佩服佩服！
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号：
{{ honorary_title }}
勋章
兑换勋章
证书
证书查询 >
能力值
