** 熟悉软件逆向工程的进来看看这个软件怎么分析。。。
闲的没事干，找了个CRACKME学习，通过分析，修改了一处跳转，哈哈，现在无论输入什么注册码，都提示注册成功，功能也正常，但是关闭程序再打开，仍然有注册的提示对话框，随便输入注册码，仍然提示注册成功，并可正常使用，我想完全去掉这个提示，大家看看应该修改哪处跳转呢。。 附DEDE反编译这个注册对话框的代码
0045E294 55 push ebp
0045E295 8BEC mov ebp, esp
0045E297 6A00 push $00
0045E299 6A00 push $00
0045E29B 6A00 push $00
0045E29D 53 push ebx
0045E29E 56 push esi
0045E29F 8BD8 mov ebx, eax
0045E2A1 33C0 xor eax, eax
0045E2A3 55 push ebp
* Possible String Reference to: '閿]?腚^[嬪]?*'
|
0045E2A4 6857E34500 push $0045E357
***** TRY
|
0045E2A9 64FF30 push dword ptr fs:[eax]
0045E2AC 648920 mov fs:[eax], esp
0045E2AF B201 mov dl, $01
* Reference to class TSoftReg
|
0045E2B1 A1FCCC4500 mov eax, dword ptr [$0045CCFC]
* Reference to: Unit_0045CCFC.Proc_0045D690
|
0045E2B6 E8D5F3FFFF call 0045D690
0045E2BB 8BF0 mov esi, eax
* Reference to field TfrmRegister.OFFS_0328
|
0045E2BD 89B328030000 mov [ebx+$0328], esi
0045E2C3 8BC6 mov eax, esi
* Reference to: Unit_0045CCFC.Proc_0045DAB4
|
0045E2C5 E8EAF7FFFF call 0045DAB4
0045E2CA 8BF0 mov esi, eax
0045E2CC 85F6 test esi, esi
0045E2CE 7D15 jnl 0045E2E5
* Reference to field TfrmRegister.OFFS_0324 : Byte
|
0045E2D0 C6832403000001 mov byte ptr [ebx+$0324], $01
* Possible String Reference to: '软件注册----试用次数已到，注册后才?
| 苁褂茫?
|
0045E2D7 BA6CE34500 mov edx, $0045E36C
0045E2DC 8BC3 mov eax, ebx
* Reference to : TControl.SetText(TControl;TCaption);()
|
0045E2DE E8AD23FDFF call 00430690
0045E2E3 EB2B jmp 0045E310
* Reference to field TfrmRegister.OFFS_0324 : Byte
|
0045E2E5 C6832403000000 mov byte ptr [ebx+$0324], $00
0045E2EC 8D55F8 lea edx, [ebp-$08]
0045E2EF 8BC6 mov eax, esi
* Reference to: Unit_00407928.Proc_00408874
|
0045E2F1 E87EA5FAFF call 00408874
0045E2F6 8B4DF8 mov ecx, [ebp-$08]
0045E2F9 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: '软件注册----剩余试用次数：'
|
0045E2FC BAA0E34500 mov edx, $0045E3A0
* Reference to : TObject.System.@LStrCat3;()
|
0045E301 E8C666FAFF call 004049CC
0045E306 8B55FC mov edx, [ebp-$04]
0045E309 8BC3 mov eax, ebx
* Reference to : TControl.SetText(TControl;TCaption);()
|
0045E30B E88023FDFF call 00430690
0045E310 8D55F4 lea edx, [ebp-$0C]
* Reference to field TfrmRegister.OFFS_0328
|
0045E313 8B8328030000 mov eax, [ebx+$0328]
* Reference to: Unit_0045CCFC.Proc_0045D8D0
|
0045E319 E8B2F5FFFF call 0045D8D0
0045E31E 8B55F4 mov edx, [ebp-$0C]
0045E321 8B83FC020000 mov eax, [ebx+$02FC]
* Reference to : TControl.SetText(TControl;TCaption);()
|
0045E327 E86423FDFF call 00430690
* Possible String Reference to: '注册电话:0592-8581633/0595-22169825
| 远虹科技'
|
0045E32C BAC4E34500 mov edx, $0045E3C4
0045E331 8B8320030000 mov eax, [ebx+$0320]
* Reference to : TControl.SetText(TControl;TCaption);()
|
0045E337 E85423FDFF call 00430690
0045E33C 33C0 xor eax, eax
0045E33E 5A pop edx
0045E33F 59 pop ecx
0045E340 59 pop ecx
0045E341 648910 mov fs:[eax], edx
****** FINALLY
|
* Possible String Reference to: '^[嬪]?*'
|
0045E344 685EE34500 push $0045E35E
0045E349 8D45F4 lea eax, [ebp-$0C]
0045E34C BA03000000 mov edx, $00000003
* Reference to : TObject.System.@LStrArrayClr(void;void;Integer);()
|
0045E351 E89663FAFF call 004046EC
0045E356 C3 ret
* Reference to : TObject.System.@HandleFinally;()
|
0045E357 E9945DFAFF jmp 004040F0
0045E35C EBEB jmp 0045E349
****** END
|
0045E35E 5E pop esi
0045E35F 5B pop ebx
0045E360 8BE5 mov esp, ebp
0045E362 5D pop ebp
0045E363 C3 ret
问题点数：50、回复次数：4Top
1 楼dawndu（东南飞）回复于 2005-09-11 00:10:04 得分 0
问错地方了，去汇编版吧
Top
2 楼msvcp60（HOOK）回复于 2005-09-11 15:25:57 得分 0
自己YUP一下Top
3 楼FantasyNES（）回复于 2005-09-11 17:11:58 得分 50
反汇编这个有啥用?
关键是哪儿调用这个的......Top
4 楼gwly（给我留言）回复于 2005-09-12 09:04:41 得分 0
UPTop
