📄 chap7-4.htm.primary
字号:
<font face="宋体" color="#000000">在</font> <font face="Times New Roman" color="#000000">SOFTICE</font>
<font face="宋体" color="#000000">下设断：</font> <font face="Times New Roman" color="#000000">bpx__vbastrcomp,</font>
<font face="宋体" color="#000000">按</font> <font face="Times New Roman" color="#000000">register</font>
<font face="宋体" color="#000000">，将被</font> <font face="Times New Roman" color="#000000">SOFTICE</font>
<font face="宋体" color="#000000">拦截；</font> <br>
</span><span class="p9"><font face="Times New Roman" color="#000000">Step3 </font>
<font face="宋体" color="#000000">按</font> <font face="Times New Roman" color="#000000">F10 </font>
<font face="宋体" color="#000000">向下</font> <font face="Times New Roman" color="#000000">...... </font>
<br>
</span><span class="p9"><font face="Times New Roman" color="#000000">:0F003577 MOV ESI , [EAX - 04] </font><br>
</span><span class="p9"><font face="Times New Roman" color="#000000">EAX = </font>
<font face="宋体" color="#000000">假的序列号</font> <font face="Times New Roman" color="#000000">! </font>
<br>
</span><span class="p9"><font face="Times New Roman" color="#000000">Step4 </font>
<font face="宋体" color="#000000">一直向下</font> <font face="Times New Roman" color="#000000">....... </font>
</span> <br>
<span class="p9"><font face="Times New Roman" color="#000000">:0F003588 MOV EDI , [ECX-04] </font>
</span> <br>
<span class="p9"><font face="Times New Roman" color="#000000">d ecx-04 => .r.k.h.1.o.y.i.e. (wide char<br>
</font></span><font face="Times New Roman" color="#0033CC" class="p9">注：注册成功后，你还想练习，请在CrackMe菜单FILE选择restart</font></p>
</td>
</tr>
</table>
<p> </p>
<p> </p>
</div>
<div id="KB2Parent" class="parent">
<p><span class="p9"><b>习题二</b> <a href="Exercise/chap7-02.zip">chap7-02 </a>序列号保护；难度：易。</span></p>
<p><a href="#" onClick="expandIt('KB2'); return false" class="p9"><b>习题二 </b>我想看到答案</a>
</p>
</div>
<div id="KB2Child" class="child">
<table width="100%" align="center" cellspacing="0">
<tr bgcolor="#EFEFEF">
<td height="31">
<p class="p9"> </p>
<p><span class="p9"><font face="宋体" color="#000000">名称</font> <font face="Times New Roman" color="#000000">: VB5-CrackMe 1.0 by Blaster99 [DCD]</font>
<br>
</span> <span class="p9"><font face="宋体" color="#000000">作者：</font>
<font face="Times New Roman" color="#000000">h4<span class="p9">Ck07iC<br>
翻译：看雪（译于</span></font></span><span class="p9"><span class="p8"><span class="p9"><font face="Times New Roman" color="#000000">2000/2/27</font></span></span>)<span class="p9"><font face="Times New Roman" color="#000000">
<br>
</font><font face="宋体" color="#000000">下载：</font> <font face="Times New Roman" color="#000000"><a href="crackme-vb%20-01.zip">crack-vb-001</a></font>
（在此下载）</span></span><span class="p9"> <br>
</span><span class="p9"><font face="宋体" color="#000000">工具</font> <font face="Times New Roman" color="#000000">:SmartCheck</font>
<br>
</span><span class="p9"><font face="宋体" color="#000000">难度：极易</font>
<br>
</span><span class="p9"><font face="宋体" color="#000000">目的：让新手熟悉</font>
<font face="Times New Roman" color="#000000">SmartCheck</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="宋体" color="#000000"> 本篇教学只是为初学者熟悉</font>
<font face="Times New Roman" color="#000000">SmartCheck</font> <font face="宋体" color="#000000">用法，你应该看过前一节的简单介绍，才能较好理解。</font>
</span></p>
<p> <span class="p9"><font face="宋体" color="#000000"> 首先运行</font> <font face="Times New Roman" color="#000000">SmartCheck</font>
<font face="宋体" color="#000000">，按上一节配制好，</font> </span><span class="p9"><font face="宋体" color="#000000">用</font>
<font face="Times New Roman" color="#000000">SmartCheck</font> <font face="宋体" color="#000000">装载该程序，（如</font>
<font face="Times New Roman" color="#000000">setting</font> <font face="宋体" color="#000000">中</font>
<font face="Times New Roman" color="#000000">Error Detection</font>
<font face="宋体" color="#000000">的</font> <font face="Times New Roman" color="#000000"> "Report error immediately"</font>
<font face="宋体" color="#000000">选上，将出现错误报告，此时按</font> <font face="Times New Roman" color="#000000">acknowledge</font>
<font face="宋体" color="#000000">即可，建议不要选）；点击</font> <font face="Times New Roman" color="#000000">Registrieren</font>
<font face="宋体" color="#000000">，你将被告知注册出错（对话框中不知是哪国鸟语</font> <font face="Times New Roman" color="#000000">^-^</font>
<font face="宋体" color="#000000">）。</font> </span></p>
<p> <span class="p9"><font face="宋体" color="#000000">好了，你现在停止此程序。</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="宋体" color="#000000"> 在</font> <font face="Times New Roman" color="#000000">SmartCheck</font>
<font face="宋体" color="#000000">主窗口下，点击</font> <font face="Times New Roman" color="#000000">Commang1_Click </font>
<font face="宋体" color="#000000">中的“＋”号，将出现</font> <font face="Times New Roman" color="#000000">3</font>
<font face="宋体" color="#000000">行：</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">Text1.Text</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">Text1.Text</font>
</span></p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">MsgBox(VARIANT:String:"Error!..."...)...</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="宋体" color="#000000">再也没有多余的信息了，看</font>
<font face="Times New Roman" color="#000000">Text1.tex</font> <font face="宋体" color="#000000">这一行右边窗口空空如也，该如何办呢？</font>
</span></p>
<p> <span class="p9"><font face="宋体" color="#000000">光标点击选中第一行的</font>
<font face="Times New Roman" color="#000000">Text1.tex</font> <font face="宋体" color="#000000">，在</font>
<font face="Times New Roman" color="#000000">SmartCheck</font> <font face="宋体" color="#000000">菜单中</font>
<font face="Times New Roman" color="#000000">"View" </font>
<font face="宋体" color="#000000">→</font> <font face="Times New Roman" color="#000000"> "Show All Events"</font>
</span></p>
<p> <span class="p9"><font face="宋体" color="#000000">现在你将看到许多信息，如果没有，说明你的</font>
<font face="Times New Roman" color="#000000">SmartCheck</font> <font face="宋体" color="#000000">配制有问题，重新配制一下。</font>
</span></p>
<p> <span class="p9"><font face="宋体" color="#000000">立即把光标移到</font> <font face="Times New Roman" color="#000000">Text1.Text</font>
<font face="宋体" color="#000000">的下一行，你将看到我上节提到的：</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="Times New Roman" color="#000000">__vbaStrCmpreturns... </font>
<font face="宋体" color="#000000">在右窗口：</font> <font face="Times New Roman" color="#000000"> String:"2G83G35H...",String:"12345678..."</font>
</span></p>
<p> </p>
<p> <span class="p9"><font face="宋体" color="#000000">哇，找到了，这就是你找的：</font>
<font face="Times New Roman" color="#000000">2G83G35Hs2</font> </span></p>
<p> </p>
<p> <span class="p9"><font face="宋体" color="#000000">如果你读过我前面的文章，你将理解</font>
<font face="Times New Roman" color="#000000">__vbaStrCmp </font>
<font face="宋体" color="#000000">是个非常普通的断点函数。</font> </span></p>
<p> </p>
<p> </p>
<p> <span class="p9"><font face="宋体" color="#000000">另外：在</font> <font face="Times New Roman" color="#000000">SOFTICE</font>
<font face="宋体" color="#000000">下，你可设断</font> <font face="Times New Roman" color="#000000">:<br>
bpx __vbaStrCmp </font> </span></p>
<p class="p9">拦截后，跟进去，进去两三个CALL后，你会看到一个 RCMP....比较指令，在这里，下指令：</p>
<p class="p9">D EDI</p>
<p class="p9">你将在内存里看到序列号，<span class="p9"><font face="宋体" color="#000000">它是</font>
<font face="Times New Roman" color="#000000">widechar</font> <font face="宋体" color="#000000">格式：</font><font face="Times New Roman" color="#000000">2.G.8.3.G.3.5.H.s.2</font>
</span></p>
<p><span class="p9"><font face="宋体" color="#000000"><span class="p8">=====================================================================================================</span></font></span></p>
</td>
</tr>
</table>
</div>
<div id="KB3Parent" class="parent"> <span class="p9"><b>习题三 </b><a href="Exercise/chap7-03.zip">chap7-03</a>
Name/Code保护；难度：易</span>
<p><a href="#" onClick="expandIt('KB3'); return false" class="p9"><b>习题三</b>
我要看答案</a> </p>
</div>
<div id="KB3Child" class="child">
<table width="100%" align="center" cellspacing="0">
<tr bgcolor="#EFEFEF">
<td height="28">
<p class="p9">1、这是VB5程序，保护很简单；<br>
2、<span class="p9"><font face="Times New Roman" color="#000000">这程序是用__vbaStrCmp比较序列号；<br>
3、因此用习题2我教的方法来开刀<br>
</font></span>下bpx hmemcpy<br>
按F10或F12回到VB5的领空，下 ：<br>
<span class="p9"><font face="Times New Roman" color="#000000">s 0 l ffffffff 56,57,8B,7C,24,10,8B,74,24,0C,8B,4C,24,14,33,C0,F3,66,A7<br>
</font></span>当然在我们配制好的SOFTICE下 ，按alt+F4,即可；<br>
bpx xxxxxxx（在刚拦截地址处设断）<br>
<span class="p9"><font face="宋体" color="#000000">下</font> <font face="Times New Roman" color="#000000">d esi </font>
<font face="宋体" color="#000000">你输入的序列号；下</font> <font face="Times New Roman" color="#000000">d edi </font>
<font face="宋体" color="#000000">看到正确的序列号。</font></span> <br>
<font color="#0000FF">用SmartCheck也很简单对付。</font></p>
</td>
</tr>
</table>
</div>
<div id="KB4Parent" class="parent">
<p><b><span class="p9">习题四</span></b><span class="p9"><a href="Exercise/chap7-04.zip">chap7-04</a>
Code保护；难度：中</span> </p>
<p><span class="p9"><a href="#" onClick="expandIt('KB4'); return false"><b>习题四</b>
我要看答案</a> </span></p>
</div>
<div id="KB4Child" class="child">
<table width="100%" align="center" cellspacing="0">
<tr bgcolor="#EFEFEF">
<td height="28">
<p> <font face="Times New Roman" color="#000000"><span class="p9">这是<span class="p9">VB6</span></span></font><span class="p9">程序
<br>
</span><span class="p9"><font face="宋体" color="#000000">这个程序用</font>
<font face="Times New Roman" color="#000000">SmartCheck</font> <font face="宋体" color="#000000">好象查不出什么名堂，只好用</font>
<font face="Times New Roman" color="#000000">SOFTICE</font> <font face="宋体" color="#000000">了。</font>
</span><span class="p9"><font face="宋体" color="#000000">但是</font> <font face="Times New Roman" color="#000000">SmartCheck</font>
<font face="宋体" color="#000000">还是给了我们点线索：</font> <br>
</span><span class="p9"><font face="Times New Roman" color="#000000">- register_Click InputBox ;</font>
<font face="宋体" color="#000000">较有趣</font> <font face="Times New Roman" color="#000000">...</font>
<br>
</span><span class="p9"><font face="Times New Roman" color="#000000">Label1.Caption <- "NEIN" (String)</font>
<br>
</span><span class="p9"><font face="Times New Roman" color="#000000">MsgBox returns Integer:1 ;N?Probier's nochmal</font>
</span> <br>
<span class="p9"><font face="宋体" color="#000000">因此我们以警告窗口函数设断</font>
<font face="Times New Roman" color="#000000">: rtcmsgbox</font>
<font face="宋体" color="#000000">；也可用</font> <font face="Times New Roman" color="#000000">rtcInputBox</font>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -