-
-
[旧帖] [求助]易语言的相关问题(已经到关键部分,需要高手赐教谢谢) 0.00雪花
-
发表于: 2007-4-4 11:47
-
【编写语言】: 易语言
【使用工具】: OD
【操作平台】: 盗版中的原装版xp sp2
【软件介绍】: 本人测试的一款模板转换软件
注册窗口
硬件码-920322587
用户名
注册码
到了真正的OEP后查询字符
发现2个关键字符.
本人试过跳过,不过发现没用.
还有用OD加载的时候,运行时会自动关闭.所以我想就是设了断点,应该也没什么用,因为无法出现软件,就没办法跟踪正确的注册码
0041A7AD 68 AA364000 push 004036AA ; 注册窗口(正式版)
0041A7B2 6A FF push -1
0041A7B4 6A 08 push 8
0041A7B6 68 98020106 push 6010298
0041A7BB 68 99020152 push 52010299
0041A7C0 E8 501E0100 call 0042C615
0041A7C5 83C4 18 add esp, 18
0041A7C8 6A 00 push 0
0041A7CA FF35 20229B00 push dword ptr [9B2220]
0041A7D0 6A FF push -1
0041A7D2 6A 08 push 8
0041A7D4 68 A9020116 push 160102A9
0041A7D9 68 99020152 push 52010299
0041A7DE E8 321E0100 call 0042C615
0041A7E3 83C4 18 add esp, 18
0041A7E6 6A 00 push 0
0041A7E8 FF35 24229B00 push dword ptr [9B2224]
0041A7EE 6A FF push -1
0041A7F0 6A 08 push 8
0041A7F2 68 AA020116 push 160102AA
0041A7F7 68 99020152 push 52010299
0041A7FC E8 141E0100 call 0042C615
0041A801 83C4 18 add esp, 18
0041A804 6A 00 push 0
0041A806 68 01000000 push 1
0041A80B 6A FF push -1
0041A80D 6A 06 push 6
0041A80F 68 AC020116 push 160102AC
0041A814 68 99020152 push 52010299
0041A819 E8 F71D0100 call 0042C615
0041A81E 83C4 18 add esp, 18
0041A821 8BE5 mov esp, ebp
0041A823 5D pop ebp
0041A824 C3 retn
0041A825 55 push ebp
0041A826 8BEC mov ebp, esp
0041A828 81EC 10000000 sub esp, 10
0041A82E E8 23F1FFFF call 00419956
0041A833 6A 00 push 0
0041A835 6A 00 push 0
0041A837 6A 00 push 0
0041A839 68 04000080 push 80000004
0041A83E 6A 00 push 0
0041A840 68 BB364000 push 004036BB ; software\foxzf\code
0041A845 68 01030080 push 80000301
0041A84A 6A 00 push 0
0041A84C 68 03000000 push 3
0041A851 68 03000000 push 3
0041A856 BB 98060000 mov ebx, 698
0041A85B E8 A91D0100 call 0042C609
0041A860 83C4 28 add esp, 28
0041A863 8945 FC mov dword ptr [ebp-4], eax
0041A866 8B45 FC mov eax, dword ptr [ebp-4]
0041A869 50 push eax
0041A86A 8B1D 24229B00 mov ebx, dword ptr [9B2224]
0041A870 85DB test ebx, ebx
0041A872 74 09 je short 0041A87D
0041A874 53 push ebx
0041A875 E8 7D1D0100 call 0042C5F7
0041A87A 83C4 04 add esp, 4
0041A87D 58 pop eax
0041A87E A3 24229B00 mov dword ptr [9B2224], eax
0041A883 6A 00 push 0
0041A885 6A 00 push 0
0041A887 6A 00 push 0
0041A889 68 04000080 push 80000004
0041A88E 6A 00 push 0
0041A890 68 CF364000 push 004036CF ; software\foxzf\name
00428B46 68 01030080 push 80000301
00428B4B 6A 00 push 0
00428B4D 68 03000000 push 3
00428B52 68 03000000 push 3
00428B57 BB A4060000 mov ebx, 6A4
00428B5C E8 A83A0000 call 0042C609
00428B61 83C4 28 add esp, 28
00428B64 8B5D FC mov ebx, dword ptr [ebp-4]
00428B67 85DB test ebx, ebx
00428B69 74 09 je short 00428B74
00428B6B 53 push ebx
00428B6C E8 863A0000 call 0042C5F7
00428B71 83C4 04 add esp, 4
00428B74 6A 00 push 0
00428B76 6A 00 push 0
00428B78 6A 00 push 0
00428B7A 68 01030080 push 80000301
00428B7F 6A 00 push 0
00428B81 68 00000000 push 0
00428B86 68 04000080 push 80000004
00428B8B 6A 00 push 0
00428B8D 68 3D3D4000 push 00403D3D ; 感谢注册，请重启验证
小弟刚刚学这个,以上应该有很多笑话的地方,我希望能交一两个交流的朋友QQ群16453454
希望兄弟们指点一下.我在这里先感谢了.
【使用工具】: OD
【操作平台】: 盗版中的原装版xp sp2
【软件介绍】: 本人测试的一款模板转换软件
注册窗口
硬件码-920322587
用户名
注册码
到了真正的OEP后查询字符
发现2个关键字符.
本人试过跳过,不过发现没用.
还有用OD加载的时候,运行时会自动关闭.所以我想就是设了断点,应该也没什么用,因为无法出现软件,就没办法跟踪正确的注册码
0041A7AD 68 AA364000 push 004036AA ; 注册窗口(正式版)
0041A7B2 6A FF push -1
0041A7B4 6A 08 push 8
0041A7B6 68 98020106 push 6010298
0041A7BB 68 99020152 push 52010299
0041A7C0 E8 501E0100 call 0042C615
0041A7C5 83C4 18 add esp, 18
0041A7C8 6A 00 push 0
0041A7CA FF35 20229B00 push dword ptr [9B2220]
0041A7D0 6A FF push -1
0041A7D2 6A 08 push 8
0041A7D4 68 A9020116 push 160102A9
0041A7D9 68 99020152 push 52010299
0041A7DE E8 321E0100 call 0042C615
0041A7E3 83C4 18 add esp, 18
0041A7E6 6A 00 push 0
0041A7E8 FF35 24229B00 push dword ptr [9B2224]
0041A7EE 6A FF push -1
0041A7F0 6A 08 push 8
0041A7F2 68 AA020116 push 160102AA
0041A7F7 68 99020152 push 52010299
0041A7FC E8 141E0100 call 0042C615
0041A801 83C4 18 add esp, 18
0041A804 6A 00 push 0
0041A806 68 01000000 push 1
0041A80B 6A FF push -1
0041A80D 6A 06 push 6
0041A80F 68 AC020116 push 160102AC
0041A814 68 99020152 push 52010299
0041A819 E8 F71D0100 call 0042C615
0041A81E 83C4 18 add esp, 18
0041A821 8BE5 mov esp, ebp
0041A823 5D pop ebp
0041A824 C3 retn
0041A825 55 push ebp
0041A826 8BEC mov ebp, esp
0041A828 81EC 10000000 sub esp, 10
0041A82E E8 23F1FFFF call 00419956
0041A833 6A 00 push 0
0041A835 6A 00 push 0
0041A837 6A 00 push 0
0041A839 68 04000080 push 80000004
0041A83E 6A 00 push 0
0041A840 68 BB364000 push 004036BB ; software\foxzf\code
0041A845 68 01030080 push 80000301
0041A84A 6A 00 push 0
0041A84C 68 03000000 push 3
0041A851 68 03000000 push 3
0041A856 BB 98060000 mov ebx, 698
0041A85B E8 A91D0100 call 0042C609
0041A860 83C4 28 add esp, 28
0041A863 8945 FC mov dword ptr [ebp-4], eax
0041A866 8B45 FC mov eax, dword ptr [ebp-4]
0041A869 50 push eax
0041A86A 8B1D 24229B00 mov ebx, dword ptr [9B2224]
0041A870 85DB test ebx, ebx
0041A872 74 09 je short 0041A87D
0041A874 53 push ebx
0041A875 E8 7D1D0100 call 0042C5F7
0041A87A 83C4 04 add esp, 4
0041A87D 58 pop eax
0041A87E A3 24229B00 mov dword ptr [9B2224], eax
0041A883 6A 00 push 0
0041A885 6A 00 push 0
0041A887 6A 00 push 0
0041A889 68 04000080 push 80000004
0041A88E 6A 00 push 0
0041A890 68 CF364000 push 004036CF ; software\foxzf\name
00428B46 68 01030080 push 80000301
00428B4B 6A 00 push 0
00428B4D 68 03000000 push 3
00428B52 68 03000000 push 3
00428B57 BB A4060000 mov ebx, 6A4
00428B5C E8 A83A0000 call 0042C609
00428B61 83C4 28 add esp, 28
00428B64 8B5D FC mov ebx, dword ptr [ebp-4]
00428B67 85DB test ebx, ebx
00428B69 74 09 je short 00428B74
00428B6B 53 push ebx
00428B6C E8 863A0000 call 0042C5F7
00428B71 83C4 04 add esp, 4
00428B74 6A 00 push 0
00428B76 6A 00 push 0
00428B78 6A 00 push 0
00428B7A 68 01030080 push 80000301
00428B7F 6A 00 push 0
00428B81 68 00000000 push 0
00428B86 68 04000080 push 80000004
00428B8B 6A 00 push 0
00428B8D 68 3D3D4000 push 00403D3D ; 感谢注册，请重启验证
小弟刚刚学这个,以上应该有很多笑话的地方,我希望能交一两个交流的朋友QQ群16453454
希望兄弟们指点一下.我在这里先感谢了.
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
