我先用w32反汇编,再用ultraedit改偏移地址!以下是我截的关键代码(我加了注释有####的地方),大家帮我看看啊!下面是我改注册成功上面第一个跳转的情况!我改注册出错提示上面的第一个跳转也没成功!
哪位大侠帮帮忙啊!急死我了!!!!
:00468783 E84296F9FF Call 00401DCA
:00468788 83C410 add esp, 00000010
:0046878B 8B45D0 mov eax, dword ptr [ebp-30]
:0046878E 89853CFFFFFF mov dword ptr [ebp+FFFFFF3C], eax
:00468794 C78534FFFFFF08000000 mov dword ptr [ebp+FFFFFF34], 00000008
:0046879E C7851CFFFFFF01000000 mov dword ptr [ebp+FFFFFF1C], 00000001
:004687A8 C78514FFFFFF02000000 mov dword ptr [ebp+FFFFFF14], 00000002
:004687B2 833D24C0480000 cmp dword ptr [0048C024], 00000000
:004687B9 751B jne 004687D6 ####这应该是关键跳转吧!!!我修改为9090不行,741b或eb1b也不行!
:004687BB 6824C04800 push 0048C024
:004687C0 68F06C4000 push 00406CF0
* Reference To: MSVBVM60.__vbaNew2, Ord:0000h
|
:004687C5 E84E96F9FF Call 00401E18
:004687CA C7855CFEFFFF24C04800 mov dword ptr [ebp+FFFFFE5C], 0048C024
:004687D4 EB0A jmp 004687E0
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004687B9(C)
|
:004687D6 C7855CFEFFFF24C04800 mov dword ptr [ebp+FFFFFE5C], 0048C024
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004687D4(U)
|
:004687E0 6A10 push 00000010
:004687E2 58 pop eax
* Reference To: MSVBVM60.__vbaChkstk, Ord:0000h
|
:004687E3 E8F894F9FF Call 00401CE0
:004687E8 8DB534FFFFFF lea esi, dword ptr [ebp+FFFFFF34]
:004687EE 8BFC mov edi, esp
:004687F0 A5 movsd
:004687F1 A5 movsd
:004687F2 A5 movsd
:004687F3 A5 movsd
:004687F4 6A10 push 00000010
:004687F6 58 pop eax
* Reference To: MSVBVM60.__vbaChkstk, Ord:0000h
|
:004687F7 E8E494F9FF Call 00401CE0
:004687FC 8DB514FFFFFF lea esi, dword ptr [ebp+FFFFFF14]
:00468802 8BFC mov edi, esp
:00468804 A5 movsd
:00468805 A5 movsd
:00468806 A5 movsd
:00468807 A5 movsd
:00468808 6A02 push 00000002
:0046880A 6A16 push 00000016
:0046880C 8B855CFEFFFF mov eax, dword ptr [ebp+FFFFFE5C]
:00468812 8B00 mov eax, dword ptr [eax]
:00468814 8B8D5CFEFFFF mov ecx, dword ptr [ebp+FFFFFE5C]
:0046881A 8B09 mov ecx, dword ptr [ecx]
:0046881C 8B09 mov ecx, dword ptr [ecx]
:0046881E 50 push eax
:0046881F FF9168030000 call dword ptr [ecx+00000368]
:00468825 50 push eax
:00468826 8D458C lea eax, dword ptr [ebp-74]
:00468829 50 push eax
* Reference To: MSVBVM60.__vbaObjSet, Ord:0000h
|
:0046882A E8C595F9FF Call 00401DF4
:0046882F 50 push eax
* Reference To: MSVBVM60.__vbaLateIdCall, Ord:0000h
|
:00468830 E86B95F9FF Call 00401DA0
:00468835 83C42C add esp, 0000002C
:00468838 8D4D8C lea ecx, dword ptr [ebp-74]
* Reference To: MSVBVM60.__vbaFreeObj, Ord:0000h
|
:0046883B E8C695F9FF Call 00401E06
:00468840 C7854CFFFFFF04000280 mov dword ptr [ebp+FFFFFF4C], 80020004
:0046884A C78544FFFFFF0A000000 mov dword ptr [ebp+FFFFFF44], 0000000A
:00468854 C7855CFFFFFF04000280 mov dword ptr [ebp+FFFFFF5C], 80020004
:0046885E C78554FFFFFF0A000000 mov dword ptr [ebp+FFFFFF54], 0000000A
:00468868 C7856CFFFFFF04000280 mov dword ptr [ebp+FFFFFF6C], 80020004
:00468872 C78564FFFFFF0A000000 mov dword ptr [ebp+FFFFFF64], 0000000A
* Possible StringData Ref from Code Obj ->"RRegisted successfully. You can "
->"use DietMP3 unlimited"
|
:0046887C C7853CFFFFFF08A74000 mov dword ptr [ebp+FFFFFF3C], 0040A708 #######双击串式参考来到这!!!
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
