📄 a-3-30.htm
字号:
<html><head><title>饮水思源精华区</title><Content-type: text/html; charset=gb2312><link rel=stylesheet type=text/css href="bbsdl.css"></head><table cellspacing=0 class=title width=90%><th class=title align=left width=20%>饮水思源站</th><th class=title align=center width=60%>文章阅读</th><th class=title align=right width=20%>精华区离线浏览</th></tr></table><hr><table align=center cellspacing=1 class=doc><tr><td>发信人: handsomeboy (handsome), 信区: DSP<br>标 题: Re: ccs1.2怎么解?<br>发信站: 饮水思源站 (Sun Dec 17 15:16:05 2000), 转信<br><br>------------------------------------------------------------------------<br> 关于TI Code Composer Studio Evaluation 1.1/1.2 for C5000/C6000的破解<br> ===========================================================================<br>==<br> Ken, Jun. 6th, 2000<br> 说明<br> ======<br> 本破解仅供学习和研究之用,请不要用于任何商业用途,否则后果自负 ;)<br> 步骤<br>=========<br> 请先将Softice相应目录下中的winice.dat文件打开,将<br> ;exp=user.dll行中的;号去掉.<br> ;exp=kernel32.dll行中的;号也去掉。 <br> 1.运行cc_app.exe ,在弹出license信息的时候,敲回车,出现输入注册码窗口.<br> 2.输入12345678901234567890123456 (数字可以任意,26个就行)<br> 3.^d 呼出SoftIce ,设断点 bpx getdlgitemtexta ,^d 回到windows下.<br> 4.点击确定,SoftIce将截到断点,并弹出.<br> 5.bc *,清楚所有断点.OK ,Let's GO !<br> 6.此时能看见下面代码.<br>USER32!GetDlgItemTextA<br>001B:77E84E2A PUSH EBP //一路F10运行下去<br><br>001B:77E84E2B MOV EBP,ESP<br>001B:77E84E2D PUSH DWORD PTR [ESP+0C]<br>001B:77E84E31 PUSH DWORD PTR [EBP+08]<br>001B:77E84E34 CALL USER32!GetDlgItem<br>001B:77E84E39 TEST EAX,EAX<br>001B:77E84E3B JZ 77E84E4D<br>:u<br>001B:77E84E3D PUSH DWORD PTR [EBP+14]<br>001B:77E84E40 PUSH DWORD PTR [EBP+10]<br>001B:77E84E43 PUSH EAX<br>001B:77E84E44 CALL USER32!GetWindowTextA<br>001B:77E84E49 POP EBP<br>001B:77E84E4A RET 0010<br>001B:77E84E4D CMP DWORD PTR [EBP+14],00<br>001B:77E84E51 JZ 77E84E59<br>001B:00B729ED CALL USER32!GetDlgItemTextA<br>001B:00B729F2 CMP BYTE PTR [EBP-38],00<br>001B:00B729F6 JNZ 00B72A1F<br>001B:00B729F8 PUSH 00<br>001B:00B729FA PUSH 00B8BA87<br>001B:00B729FF PUSH 00007F04<br>001B:00B72A04 PUSH 00<br>001B:00B72A06 CALL USER32!LoadIconA<br>:u<br>001B:00B72A0B PUSH EAX<br>001B:00B72A0C PUSH 00B8BA78<br>001B:00B72A11 MOV ECX,[EBP+08]<br>001B:00B72A14 PUSH ECX<br>001B:00B72A15 CALL 00B758E8<br>001B:00B72A1A JMP 00B72AA4<br>001B:00B72A1F PUSH 00007F02<br>001B:00B72A24 PUSH 00<br>:u<br>001B:00B72A26 CALL USER32!LoadCursorA<br>001B:00B72A2B PUSH EAX<br>001B:00B72A2C CALL USER32!SetCursor<br>001B:00B72A31 LEA EAX,[EBP-38]<br>001B:00B72A34 PUSH EAX<br>001B:00B72A35 CALL 00B8428C <-------一直按F10,到此后,F8跟进去<br>.<br>001B:00B72A3A POP ECX<br>001B:00B72A3B MOV [EBP-04],EAX<br>001B:00B729F6 JNZ 00B72A1F<br> 9.Call 00B8428C 为以下代码.<br>001B:00B8428C PUSH EBP<br>001B:00B8428D MOV EBP,ESP<br>001B:00B8428F PUSH DWORD PTR [EBP+08]<br>001B:00B84292 CALL 00B8548A <-----------F8跟进去<br>001B:00B84297 POP ECX<br>001B:00B84298 POP EBP<br>001B:00B84299 RET<br> 10.激动人心的时候要到了.<br>001B:00B8548A PUSH EBP<br>001B:00B8548B MOV EBP,ESP<br>001B:00B8548D ADD ESP,FFFFFE30<br>001B:00B85493 PUSH EBX<br>001B:00B85494 PUSH ESI<br>001B:00B85495 PUSH EDI<br>001B:00B85496 MOV EBX,[EBP+08]<br>001B:00B85499 CMP DWORD PTR [00B95970],00<br>:u<br>001B:00B854A0 JNZ 00B854AC //此处一定要跳转,如果你的三十<br>天期限没到<br>001B:00B854A2 MOV EAX,FFFFFF98 //这里是不需要任何操作的。<br>001B:00B854A7 JMP 00B857F4 //改变跳转与否的方法我一般用 <br>r fl=z<br>001B:00B854AC CMP DWORD PTR [00B95970],01<br>001B:00B854B3 JLE 00B854F9 //此处一定要跳转,如果你的三十<br>天期限没到<br>001B:00B854B5 PUSH 00B95E01 //这里是不需要任何操作的。<br>001B:00B854BA PUSH DWORD PTR [00B9596C]<br>001B:00B854C0 CALL KERNEL32!GetProcAddress<br>:u<br>001B:00B854C5 MOV ESI,EAX<br>001B:00B854C7 TEST ESI,ESI<br>001B:00B854C9 JNZ 00B854D5<br>001B:00B854CB MOV EAX,FFFFFF97<br>001B:00B854D0 JMP 00B857F4<br>001B:00B854D5 CALL 00B88944<br>001B:00B854DA TEST EAX,EAX<br>001B:00B854DC JZ 00B854E8<br>:u<br>001B:00B854DE MOV EAX,FFFFFF93<br>001B:00B854E3 JMP 00B857F4<br>001B:00B854E8 PUSH EBX<br>001B:00B854E9 CALL ESI<br>001B:00B854EB MOV EBX,EAX<br>001B:00B854ED CALL 00B88A93<br>001B:00B854F2 MOV EAX,EBX<br>001B:00B854F4 JMP 00B857F4<br>:u<br>001B:00B854F9 PUSH 00B95E0F<br>001B:00B854FE CALL 00B89EEC<br>001B:00B85503 POP ECX<br>001B:00B85504 PUSH EBX<br>001B:00B85505 CALL 00B891FD<br>001B:00B8550A POP ECX<br>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -