到这里，不会了 求助
软件下载地址:软件试用30天 注册失败提示 ＂注册信息有误＂用PEID检查 Microsoft Visual C++ 7.0
打开OD载入
没发现可疑的
下断点 messageBoxExW
来到这里
后面没有头绪了 请指教一下 谢谢
[ 本帖最后由 ku365 于 2008-3-28 19:03 编辑 ] 用f8试试可以回到程序吗 F8后来到这里 /:L 想拿来试一下80+M 算了 /:L /:L 试试吧/:L /:012 有人指导下吗 学习屑呀... 111F8F93 FF15 848C3711 CALL DWORD PTR DS:[<&USER32.GetCapture>] ; USER32.GetCapture
111F8F99 8945 A4 MOV DWORD PTR SS:,EAX
111F8F9C 837D A4 00 CMP DWORD PTR SS:,0
111F8FA0 74 10 JE SHORT PBVM100.111F8FB2
111F8FA2 6A 00 PUSH 0
111F8FA4 6A 00 PUSH 0
111F8FA6 6A 1F PUSH 1F
111F8FA8 8B55 A4 MOV EDX,DWORD PTR SS:
111F8FAB 52 PUSH EDX
111F8FAC FF15 488E3711 CALL DWORD PTR DS:[<&USER32.SendMessageW>] ; USER32.SendMessageW
111F8FB2 FF15 AC813711 CALL DWORD PTR DS:[<&KERNEL32.GetCurrentThreadId>] ; kernel32.GetCurrentThreadId
111F8FB8 8945 F0 MOV DWORD PTR SS:,EAX
111F8FBB A1 B0A73E11 MOV EAX,DWORD PTR DS:
111F8FC0 3B45 F0 CMP EAX,DWORD PTR SS:
111F8FC3 0F84 A8000000 JE PBVM100.111F9071
111F8FC9 FF15 848C3711 CALL DWORD PTR DS:[<&USER32.GetCapture>] ; USER32.GetCapture
111F8FCF 85C0 TEST EAX,EAX
111F8FD1 0F85 9A000000 JNZ PBVM100.111F9071
111F8FD7 8B4D F0 MOV ECX,DWORD PTR SS:
111F8FDA 890D B0A73E11 MOV DWORD PTR DS:,ECX
111F8FE0 6A 01 PUSH 1
111F8FE2 6A 12 PUSH 12
111F8FE4 6A 12 PUSH 12
111F8FE6 6A 00 PUSH 0
111F8FE8 8D55 C0 LEA EDX,DWORD PTR SS:
111F8FEB 52 PUSH EDX
111F8FEC FF15 B08D3711 CALL DWORD PTR DS:[<&USER32.PeekMessageW>] ; USER32.PeekMessageW
111F8FF2 8945 F4 MOV DWORD PTR SS:,EAX
111F8FF5 8B45 9C MOV EAX,DWORD PTR SS:
111F8FF8 8B48 38 MOV ECX,DWORD PTR DS:
111F8FFB 894D AC MOV DWORD PTR SS:,ECX
111F8FFE 8B55 AC MOV EDX,DWORD PTR SS:
111F9001 52 PUSH EDX
111F9002 FF15 3C8E3711 CALL DWORD PTR DS:[<&USER32.IsWindow>] ; USER32.IsWindow
111F9008 85C0 TEST EAX,EAX
111F900A 74 0E JE SHORT PBVM100.111F901A
111F900C 8B45 AC MOV EAX,DWORD PTR SS:
111F900F 50 PUSH EAX
111F9010 FF15 F48B3711 CALL DWORD PTR DS:[<&USER32.IsWindowVisible>] ; USER32.IsWindowVisible
111F9016 85C0 TEST EAX,EAX
111F9018 75 07 JNZ SHORT PBVM100.111F9021
111F901A C745 AC 0000000>MOV DWORD PTR SS:,0
111F9021 8B4D 9C MOV ECX,DWORD PTR SS:
111F9024 8379 14 00 CMP DWORD PTR DS:,0
111F9028 75 07 JNZ SHORT PBVM100.111F9031
111F902A C745 AC 0000000>MOV DWORD PTR SS:,0
111F9031 8B55 B4 MOV EDX,DWORD PTR SS:
111F9034 52 PUSH EDX
111F9035 8B45 98 MOV EAX,DWORD PTR SS:
111F9038 50 PUSH EAX
111F9039 8B4D DC MOV ECX,DWORD PTR SS:
111F903C 51 PUSH ECX
111F903D 8B55 AC MOV EDX,DWORD PTR SS:
111F9040 52 PUSH EDX
111F9041 FF15 908E3711 CALL DWORD PTR DS:[<&USER32.MessageBoxW>] ; USER32.MessageBoxW
111F9047 8945 A8 MOV DWORD PTR SS:,EAX
111F904A 837D F4 00 CMP DWORD PTR SS:,0
111F904E 75 15 JNZ SHORT PBVM100.111F9065
111F9050 8B45 08 MOV EAX,DWORD PTR SS:
111F9053 50 PUSH EAX
111F9054 6A 00 PUSH 0
111F9056 6A 12 PUSH 12
111F9058 FF15 AC813711 CALL DWORD PTR DS:[<&KERNEL32.GetCurrentThreadId>] ; kernel32.GetCurrentThreadId
111F905E 50 PUSH EAX
111F905F FF15 6C8C3711 CALL DWORD PTR DS:[<&USER32.PostThreadMessageW>] ; USER32.PostThreadMessageW
111F9065 C705 B0A73E11 0>MOV DWORD PTR DS:,0
111F906F EB 07 JMP SHORT PBVM100.111F9078
111F9071 C745 A8 FFFFFFF>MOV DWORD PTR SS:,-1
111F9078 C745 F8 0100000>MOV DWORD PTR SS:,1
111F907F 8B4D A8 MOV ECX,DWORD PTR SS:
111F9082 898D 78FFFFFF MOV DWORD PTR SS:,ECX
111F9088 8B95 78FFFFFF MOV EDX,DWORD PTR SS:
111F908E 83C2 01 ADD EDX,1
111F9091 8995 78FFFFFF MOV DWORD PTR SS:,EDX
111F9097 83BD 78FFFFFF 0>CMP DWORD PTR SS:,8
111F909E 77 53 JA SHORT PBVM100.111F90F3
111F90A0 8B85 78FFFFFF MOV EAX,DWORD PTR SS:
111F90A6 FF2485 B4911F11 JMP DWORD PTR DS:
111F90AD 837D 90 01 CMP DWORD PTR SS:,1
111F90B1 74 06 JE SHORT PBVM100.111F90B9
111F90B3 837D 90 02 CMP DWORD PTR SS:,2
111F90B7 75 09 JNZ SHORT PBVM100.111F90C2
111F90B9 C745 F8 0200000>MOV DWORD PTR SS:,2
111F90C0 EB 07 JMP SHORT PBVM100.111F90C9
111F90C2 C745 F8 0300000>MOV DWORD PTR SS:,3
111F90C9 EB 28 JMP SHORT PBVM100.111F90F3
111F90CB 837D 90 03 CMP DWORD PTR SS:,3
111F90CF 75 07 JNZ SHORT PBVM100.111F90D8
111F90D1 C745 F8 0200000>MOV DWORD PTR SS:,2
111F90D8 EB 19 JMP SHORT PBVM100.111F90F3
111F90DA C745 F8 0300000>MOV DWORD PTR SS:,3
111F90E1 EB 10 JMP SHORT PBVM100.111F90F3
111F90E3 C745 F8 0200000>MOV DWORD PTR SS:,2
111F90EA EB 07 JMP SHORT PBVM100.111F90F3
111F90EC C745 F8 FFFFFFF>MOV DWORD PTR SS:,-1
111F90F3 837D 98 00 CMP DWORD PTR SS:,0
111F90F7 74 10 JE SHORT PBVM100.111F9109
111F90F9 8B4D 98 MOV ECX,DWORD PTR SS:
111F90FC 51 PUSH ECX
111F90FD 8B55 08 MOV EDX,DWORD PTR SS:
111F9100 8B42 10 MOV EAX,DWORD PTR DS:
111F9103 50 PUSH EAX
111F9104 E8 FF2C1600 CALL <JMP.&PBSHR100.#6_pbstg_fee>
111F9109 837D DC 00 CMP DWORD PTR SS:,0
111F910D 74 10 JE SHORT PBVM100.111F911F
111F910F 8B4D DC MOV ECX,DWORD PTR SS:
111F9112 51 PUSH ECX
111F9113 8B55 08 MOV EDX,DWORD PTR SS:
111F9116 8B42 10 MOV EAX,DWORD PTR DS:
111F9119 50 PUSH EAX
111F911A E8 E92C1600 CALL <JMP.&PBSHR100.#6_pbstg_fee>
111F911F 66:8B4D F8 MOV CX,WORD PTR SS:
111F9123 66:894D 88 MOV WORD PTR SS:,CX
111F9127 66:C745 8C 0005 MOV WORD PTR SS:,500
111F912D 66:C745 8E 0100 MOV WORD PTR SS:,1
111F9133 837D B0 00 CMP DWORD PTR SS:,0
111F9137 75 24 JNZ SHORT PBVM100.111F915D
111F9139 837D FC 00 CMP DWORD PTR SS:,0
111F913D 75 1E JNZ SHORT PBVM100.111F915D
111F913F 837D EC 00 CMP DWORD PTR SS:,0
111F9143 75 18 JNZ SHORT PBVM100.111F915D
111F9145 837D 94 00 CMP DWORD PTR SS:,0
111F9149 75 12 JNZ SHORT PBVM100.111F915D
111F914B 837D E8 00 CMP DWORD PTR SS:,0
111F914F 75 0C JNZ SHORT PBVM100.111F915D
111F9151 C785 74FFFFFF 0>MOV DWORD PTR SS:,0
111F915B EB 0A JMP SHORT PBVM100.111F9167
111F915D C785 74FFFFFF 0>MOV DWORD PTR SS:,1
111F9167 0FB755 8C MOVZX EDX,WORD PTR SS:
111F916B 83E2 FE AND EDX,FFFFFFFE
111F916E 0B95 74FFFFFF OR EDX,DWORD PTR SS:
111F9174 66:8955 8C MOV WORD PTR SS:,DX
111F9178 8D45 88 LEA EAX,DWORD PTR SS:
111F917B 50 PUSH EAX
111F917C 8B4D BC MOV ECX,DWORD PTR SS:
111F917F 51 PUSH ECX
111F9180 E8 BB630C00 CALL PBVM100.ot_set_return_val
111F9185 B8 01000000 MOV EAX,1
111F918A 8BE5 MOV ESP,EBP
111F918C 5D POP EBP
111F918D C2 0800 RETN 8
111F9190^ 7E 8E JLE SHORT PBVM100.111F9120
111F9192 1F POP DS ; 段寄存器更改
111F9193 1189 8E1F1194 ADC DWORD PTR DS:,ECX
111F9199 8E1F MOV DS,WORD PTR DS: ; 段寄存器更改
111F919B 119F 8E1F11C9 ADC DWORD PTR DS:,EBX
111F91A1 8E1F MOV DS,WORD PTR DS: ; 段寄存器更改
111F91A3 11D4 ADC ESP,EDX
111F91A5 8E1F MOV DS,WORD PTR DS: ; 段寄存器更改
111F91A7 11DF ADC EDI,EBX
111F91A9 8E1F MOV DS,WORD PTR DS: ; 段寄存器更改
111F91AB 11EA ADC EDX,EBP
111F91AD 8E1F MOV DS,WORD PTR DS: ; 段寄存器更改
111F91AF 11F5 ADC EBP,ESI
111F91B1 8E1F MOV DS,WORD PTR DS: ; 段寄存器更改
111F91B3 11EC ADC ESP,EBP
111F91B5 90 NOP
111F91B6 1F POP DS ; 段寄存器更改
111F91B7 11F3 ADC EBX,ESI
111F91B9 90 NOP
111F91BA 1F POP DS ; 段寄存器更改
111F91BB 11F3 ADC EBX,ESI
111F91BD 90 NOP
111F91BE 1F POP DS ; 段寄存器更改
111F91BF 11AD 901F11F3 ADC DWORD PTR SS:,EBP
111F91C5 90 NOP
111F91C6 1F POP DS ; 段寄存器更改
111F91C7 11CB ADC EBX,ECX
111F91C9 90 NOP
111F91CA 1F POP DS ; 段寄存器更改
111F91CB 11DA ADC EDX,EBX
111F91CD 90 NOP
111F91CE 1F POP DS ; 段寄存器更改
111F91CF 11F3 ADC EBX,ESI
111F91D1 90 NOP
111F91D2 1F POP DS ; 段寄存器更改
111F91D3 11E3 ADC EBX,ESP
111F91D5 90 NOP
111F91D6 1F POP DS ; 段寄存器更改
111F91D7 11CC ADC ESP,ECX
111F91D9 CC INT3
111F91DA CC INT3
111F91DB CC INT3
111F91DC CC INT3
111F91DD CC INT3
111F91DE CC INT3
111F91DF CC INT3
111F91E0 >55 PUSH EBP
111F91E1 8BEC MOV EBP,ESP
111F91E3 8B45 08 MOV EAX,DWORD PTR SS:
111F91E6 8B48 04 MOV ECX,DWORD PTR DS:
111F91E9 83B9 D4010000 0>CMP DWORD PTR DS:,0
111F91F0 74 1D JE SHORT PBVM100.111F920F
111F91F2 68 48A23811 PUSH PBVM100.1138A248 ; UNICODE "Post"
111F91F7 68 59500000 PUSH 5059
111F91FC 8B55 08 MOV EDX,DWORD PTR SS:
111F91FF 8B42 04 MOV EAX,DWORD PTR DS:
111F9202 50 PUSH EAX
111F9203 E8 385C0D00 CALL PBVM100._rt_formatted_error
111F9208 83C4 0C ADD ESP,0C
111F920B 33C0 XOR EAX,EAX
111F920D EB 12 JMP SHORT PBVM100.111F9221
111F920F 6A 00 PUSH 0
111F9211 8B4D 0C MOV ECX,DWORD PTR SS:
111F9214 51 PUSH ECX
111F9215 8B55 08 MOV EDX,DWORD PTR SS:
111F9218 52 PUSH EDX
111F9219 E8 22260000 CALL PBVM100.111FB840
111F921E 83C4 0C ADD ESP,0C
111F9221 5D POP EBP
111F9222 C2 0800 RETN 8
111F9225 CC INT3
111F9226 CC INT3
111F9227 CC INT3
111F9228 CC INT3
111F9229 CC INT3
111F922A CC INT3
111F922B CC INT3
111F922C CC INT3
111F922D CC INT3
111F922E CC INT3
111F922F CC INT3
111F9230 >55 PUSH EBP
111F9231 8BEC MOV EBP,ESP
111F9233 83EC 0C SUB ESP,0C
111F9236 8B45 08 MOV EAX,DWORD PTR SS:
111F9239 8B48 52 MOV ECX,DWORD PTR DS:
111F923C 894D FC MOV DWORD PTR SS:,ECX
111F923F 8B55 08 MOV EDX,DWORD PTR SS:
111F9242 C742 38 0100000>MOV DWORD PTR DS:,1
111F9249 8B45 FC MOV EAX,DWORD PTR SS:
111F924C C740 10 0100000>MOV DWORD PTR DS:,1
111F9253 6A 01 PUSH 1
111F9255 8B4D 08 MOV ECX,DWORD PTR SS:
111F9258 51 PUSH ECX
111F9259 E8 22580300 CALL PBVM100.1122EA80
111F925E 83C4 08 ADD ESP,8
111F9261 66:C745 F4 0100 MOV WORD PTR SS:,1
111F9267 66:C745 F8 0005 MOV WORD PTR SS:,500
111F926D 66:C745 FA 0100 MOV WORD PTR SS:,1
111F9273 0FB755 F8 MOVZX EDX,WORD PTR SS:
111F9277 83E2 FE AND EDX,FFFFFFFE
111F927A 66:8955 F8 MOV WORD PTR SS:,DX
111F927E 8D45 F4 LEA EAX,DWORD PTR SS:
111F9281 50 PUSH EAX
111F9282 8B4D 08 MOV ECX,DWORD PTR SS:
111F9285 8B51 04 MOV EDX,DWORD PTR DS:
111F9288 52 PUSH EDX
111F9289 E8 B2620C00 CALL PBVM100.ot_set_return_val
111F928E B8 01000000 MOV EAX,1
111F9293 8BE5 MOV ESP,EBP
111F9295 5D POP EBP
111F9296 C2 0800 RETN 8
111F9299 CC INT3
111F929A CC INT3
111F929B CC INT3
111F929C CC INT3
111F929D CC INT3
111F929E CC INT3
111F929F CC INT3
111F92A0 >55 PUSH EBP
111F92A1 8BEC MOV EBP,ESP
111F92A3 83EC 28 SUB ESP,28
111F92A6 C745 E8 0000000>MOV DWORD PTR SS:,0
111F92AD 8D45 F8 LEA EAX,DWORD PTR SS:
111F92B0 50 PUSH EAX
111F92B1 8B4D 08 MOV ECX,DWORD PTR SS:
111F92B4 8B51 04 MOV EDX,DWORD PTR DS:
111F92B7 52 PUSH EDX
111F92B8 E8 73700C00 CALL PBVM100.ot_get_intarg
111F92BD 8945 FC MOV DWORD PTR SS:,EAX
111F92C0 8D45 F0 LEA EAX,DWORD PTR SS:
111F92C3 50 PUSH EAX
111F92C4 8B4D 08 MOV ECX,DWORD PTR SS:
111F92C7 8B51 04 MOV EDX,DWORD PTR DS:
111F92CA 52 PUSH EDX
111F92CB E8 60700C00 CALL PBVM100.ot_get_intarg
111F92D0 8945 EC MOV DWORD PTR SS:,EAX
111F92D3 8D45 F4 LEA EAX,DWORD PTR SS:
111F92D6 50 PUSH EAX
111F92D7 8B4D 08 MOV ECX,DWORD PTR SS:
111F92DA 8B51 04 MOV EDX,DWORD PTR DS:
111F92DD 52 PUSH EDX
111F92DE E8 4D700C00 CALL PBVM100.ot_get_intarg
111F92E3 8945 E4 MOV DWORD PTR SS:,EAX
111F92E6 837D F8 00 CMP DWORD PTR SS:,0
111F92EA 75 25 JNZ SHORT PBVM100.111F9311
111F92EC 837D F0 00 CMP DWORD PTR SS:,0
111F92F0 75 1F JNZ SHORT PBVM100.111F9311
111F92F2 837D F4 00 CMP DWORD PTR SS:,0
111F92F6 75 19 JNZ SHORT PBVM100.111F9311
111F92F8 0FB645 FC MOVZX EAX,BYTE PTR SS:
111F92FC 0FB64D EC MOVZX ECX,BYTE PTR SS:
111F9300 C1E1 08 SHL ECX,8
111F9303 0BC1 OR EAX,ECX
111F9305 0FB655 E4 MOVZX EDX,BYTE PTR SS:
111F9309 C1E2 10 SHL EDX,10
111F930C 0BC2 OR EAX,EDX
111F930E 8945 E8 MOV DWORD PTR SS:,EAX
111F9311 8B45 E8 MOV EAX,DWORD PTR SS:
111F9314 8945 DC MOV DWORD PTR SS:,EAX
111F9317 66:C745 E0 001D MOV WORD PTR SS:,1D00
111F931D 66:C745 E2 0200 MOV WORD PTR SS:,2
111F9323 837D F8 00 CMP DWORD PTR SS:,0
111F9327 75 15 JNZ SHORT PBVM100.111F933E
111F9329 837D F0 00 CMP DWORD PTR SS:,0
111F932D 75 0F JNZ SHORT PBVM100.111F933E
111F932F 837D F4 00 CMP DWORD PTR SS:,0
111F9333 75 09 JNZ SHORT PBVM100.111F933E
111F9335 C745 D8 0000000>MOV DWORD PTR SS:,0
111F933C EB 07 JMP SHORT PBVM100.111F9345
111F933E C745 D8 0100000>MOV DWORD PTR SS:,1
111F9345 0FB74D E0 MOVZX ECX,WORD PTR SS:
111F9349 83E1 FE AND ECX,FFFFFFFE
111F934C 0B4D D8 OR ECX,DWORD PTR SS:
111F934F 66:894D E0 MOV WORD PTR SS:,CX
111F9353 8D55 DC LEA EDX,DWORD PTR SS:
111F9356 52 PUSH EDX
111F9357 8B45 08 MOV EAX,DWORD PTR SS:
111F935A 8B48 04 MOV ECX,DWORD PTR DS:
111F935D 51 PUSH ECX
111F935E E8 DD610C00 CALL PBVM100.ot_set_return_val
111F9363 B8 01000000 MOV EAX,1
111F9368 8BE5 MOV ESP,EBP
111F936A 5D POP EBP
111F936B C2 0800 RETN 8
111F936E CC INT3
111F936F CC INT3
111F9370 >55 PUSH EBP
111F9371 8BEC MOV EBP,ESP
111F9373 81EC 80000000 SUB ESP,80
111F9379 57 PUSH EDI
111F937A C745 F0 FFFFFFF>MOV DWORD PTR SS:,-1
111F9381 8B45 08 MOV EAX,DWORD PTR SS:
111F9384 8B48 04 MOV ECX,DWORD PTR DS:
111F9387 83B9 D4010000 0>CMP DWORD PTR DS:,0
111F938E 74 21 JE SHORT PBVM100.111F93B1
111F9390 68 54A23811 PUSH PBVM100.1138A254 ; UNICODE "Run" 111F9041 /:L 沉了/:L /:L /:L
页:
[1]