|
发表于 2012-11-18 20:51:04
|
显示全部楼层
本帖最后由 SkyGz 于 2012-11-18 21:03 编辑
小笨蛋 发表于 2012-11-18 20:14
那你能告诉我你在哪个地方修改了吗?是程序刚运行时?还是注册对话框? ...
提示未注册字串, 前有3个 MOV XXX地址, EAX 之类的, 那EAX就是附值给这地址 , 然后判断是否注册, 你看多注册窗口提示注册失败和刚运行时提示未注册, 那几个MOV 地址, 都是一样的, 就是存放着从license.dat注册解密后成功标志, 改为MOV XXX地址, 1 即可, 因为后面是用了JNZ判断这地址数据为0, 则未注册
004037D6 . 50 PUSH EAX
004037D7 . BA 1ED35400 MOV EDX,VisualSc.0054D31E ; ASCII "License.dat" //载入注册文件,并解密判断注册码的有效性, 注册码有效将EAX附值为1, 否则为0
004037DC . 8D45 BC LEA EAX,DWORD PTR SS:[EBP-44]
004037DF . E8 08371300 CALL VisualSc.00536EEC
004037E4 . FF45 AC INC DWORD PTR SS:[EBP-54]
004037E7 . 33C0 XOR EAX,EAX
004037E9 . 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX
004037EC . 8D55 BC LEA EDX,DWORD PTR SS:[EBP-44]
004037EF . FF45 AC INC DWORD PTR SS:[EBP-54]
004037F2 . 8D4D F8 LEA ECX,DWORD PTR SS:[EBP-8]
004037F5 . 58 POP EAX
004037F6 . E8 51381300 CALL VisualSc.0053704C
004037FB . FF4D AC DEC DWORD PTR SS:[EBP-54]
004037FE . 8D45 BC LEA EAX,DWORD PTR SS:[EBP-44]
00403801 . BA 02000000 MOV EDX,2
00403806 . E8 FD371300 CALL VisualSc.00537008
0040380B . FF4D AC DEC DWORD PTR SS:[EBP-54]
0040380E . 8D45 C0 LEA EAX,DWORD PTR SS:[EBP-40]
00403811 . BA 02000000 MOV EDX,2
00403816 . E8 ED371300 CALL VisualSc.00537008
0040381B . FF4D AC DEC DWORD PTR SS:[EBP-54]
0040381E . 8D45 C4 LEA EAX,DWORD PTR SS:[EBP-3C]
00403821 . BA 02000000 MOV EDX,2
00403826 . E8 DD371300 CALL VisualSc.00537008
0040382B . 66:C745 A0 08>MOV WORD PTR SS:[EBP-60],8
00403831 . 66:C745 A0 A4>MOV WORD PTR SS:[EBP-60],0A4
00403837 . 33D2 XOR EDX,EDX
00403839 . 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0040383C . E8 FB810A00 CALL VisualSc.004ABA3C
00403841 . 8BD8 MOV EBX,EAX
00403843 . 66:C745 A0 A4>MOV WORD PTR SS:[EBP-60],0A4
00403849 . 83FB FF CMP EBX,-1
0040384C . 75 09 JNZ SHORT VisualSc.00403857
0040384E . 33C0 XOR EAX,EAX
00403850 . A3 A4015500 MOV DWORD PTR DS:[5501A4],EAX //将EAX的值附给DWORD PTR DS:[5501A4], 改为MOV DWORD PTR DS:[5501A4],1
00403855 . EB 7C JMP SHORT VisualSc.004038D3
00403857 > B9 02000000 MOV ECX,2
0040385C . 33D2 XOR EDX,EDX
0040385E . 8BC3 MOV EAX,EBX
00403860 . E8 B7820A00 CALL VisualSc.004ABB1C
00403865 . 8BF0 MOV ESI,EAX
00403867 . 33C9 XOR ECX,ECX
00403869 . 33D2 XOR EDX,EDX
0040386B . 8BC3 MOV EAX,EBX
0040386D . E8 AA820A00 CALL VisualSc.004ABB1C
00403872 . 8D55 84 LEA EDX,DWORD PTR SS:[EBP-7C]
00403875 . B9 04000000 MOV ECX,4
0040387A . 8BC3 MOV EAX,EBX
0040387C . E8 43820A00 CALL VisualSc.004ABAC4
00403881 . 3B75 84 CMP ESI,DWORD PTR SS:[EBP-7C]
00403884 . 74 09 JE SHORT VisualSc.0040388F
00403886 . 33C0 XOR EAX,EAX
00403888 . A3 A4015500 MOV DWORD PTR DS:[5501A4],EAX //将EAX的值附给DWORD PTR DS:[5501A4], 改为MOV DWORD PTR DS:[5501A4],1
0040388D . EB 44 JMP SHORT VisualSc.004038D3
0040388F > 8D95 84FEFFFF LEA EDX,DWORD PTR SS:[EBP-17C]
00403895 . B9 00010000 MOV ECX,100
0040389A . 8BC3 MOV EAX,EBX
0040389C . E8 23820A00 CALL VisualSc.004ABAC4
004038A1 . 8D95 84FDFFFF LEA EDX,DWORD PTR SS:[EBP-27C]
004038A7 . B9 00010000 MOV ECX,100
004038AC . 8BC3 MOV EAX,EBX
004038AE . E8 11820A00 CALL VisualSc.004ABAC4
004038B3 . 8D95 84FDFFFF LEA EDX,DWORD PTR SS:[EBP-27C]
004038B9 . 52 PUSH EDX
004038BA . 8D8D 84FEFFFF LEA ECX,DWORD PTR SS:[EBP-17C]
004038C0 . 51 PUSH ECX
004038C1 . E8 CA550000 CALL VisualSc.00408E90
004038C6 . 83C4 08 ADD ESP,8
004038C9 . 25 FF000000 AND EAX,0FF
004038CE . A3 A4015500 MOV DWORD PTR DS:[5501A4],EAX //将EAX的值附给DWORD PTR DS:[5501A4], 改为MOV DWORD PTR DS:[5501A4],1
004038D3 > 8BC3 MOV EAX,EBX
004038D5 . E8 86820A00 CALL VisualSc.004ABB60
004038DA . 833D A4015500>CMP DWORD PTR DS:[5501A4],0 //比较判断DWORD PTR DS:[5501A4]地址的数据为0, 则为未注册, 前面已强制改为1, 所以后面判断才会成功, 不会提示未注册
004038E1 . 75 43 JNZ SHORT VisualSc.00403926 //注册成功则跳, 不成功继续下一行
004038E3 . C705 6CF55400>MOV DWORD PTR DS:[54F56C],1
004038ED . C705 70F55400>MOV DWORD PTR DS:[54F570],2580
004038F7 . 66:C745 A0 B0>MOV WORD PTR SS:[EBP-60],0B0
004038FD . BA 2AD35400 MOV EDX,VisualSc.0054D32A ; ASCII "Software unregistered!" //提示未注册
00403902 . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48]
00403905 . E8 E2351300 CALL VisualSc.00536EEC
0040390A . FF45 AC INC DWORD PTR SS:[EBP-54]
0040390D . 8B00 MOV EAX,DWORD PTR DS:[EAX]
0040390F . E8 DC2D0F00 CALL VisualSc.004F66F0
00403914 . FF4D AC DEC DWORD PTR SS:[EBP-54]
00403917 . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48]
0040391A . BA 02000000 MOV EDX,2
0040391F . E8 E4361300 CALL VisualSc.00537008
00403924 . EB 10 JMP SHORT VisualSc.00403936 |
|