KingCopy 2.5 Beta
【破解作者】 Wind
【作者郵箱】 winddyj@163.com
【作者主頁】 winddyj.126.com
【使用工具】 OD、fi250
【破解平臺】 Win9x
【軟體名稱】 KingCopy 2.5 Beta
【下載地址】 http://www.r4cn.com
【軟體簡介】 KingCopy 是一款優越的應用於檔案複製、備份、修復的實用工具。
具有速度快、人工智慧度高特點，結合到資源管理器的右鍵選單，能大大地簡化平常的檔案複製操作。
具有較高的檔案讀取及糾錯能力，能讀取軟盤上損壞的檔案，並能對損壞的檔案進行修復，恢復重要的資料。
具有的更新檔案及重新命名檔案的功能。可跳過難讀的檔案
具有的檔案斷點續拷。
未註冊版本沒有功能或時間的限制，但每隔三天就會出現一次提示註冊的視窗。
【軟體大小】 879K
【加殼方式】 無
【破解宣告】 我是一隻小菜鳥，偶得一點心得，願與大家分享：）
--------------------------------------------------------------------------------
【破解內容】
用FI檢測，無殼，VB5編寫，開啟OD，載入程式，在檢視－－執行模組裡選中msvbvm50.dll,在搜尋－－當前模組名稱中找到__vbastrcomp下斷點。然後執行程式，程式會被攔斷三次，直接按F9帶過，之後主程式開啟，輸入使用者名稱：Wind,假碼:1980124，點註冊，程式被攔:
798B3563 > 55 PUSH EBP ------->我們來到這兒（我們將還會來到這兒）
798B3564 8BEC MOV EBP,ESP
798B3566 53 PUSH EBX
798B3567 56 PUSH ESI
798B3568 57 PUSH EDI
798B3569 837D 10 00 CMP DWORD PTR SS:[EBP+10],0 ------->檢測有沒有輸入使用者名稱（等下會在這兒檢測有沒有假碼和真碼，所以一共要來這兒三次）
798B356D BE 00000000 MOV ESI,0
798B3572 74 06 JE SHORT MSVBVM50.798B357A ------->沒有輸就飛了
798B3574 8B45 10 MOV EAX,DWORD PTR SS:[EBP+10]
798B3577 8B70 FC MOV ESI,DWORD PTR DS:[EAX-4]
798B357A 837D 0C 00 CMP DWORD PTR SS:[EBP+C],0
798B357E BF 00000000 MOV EDI,0
798B3583 74 06 JE SHORT MSVBVM50.798B358B
798B3585 8B4D 0C MOV ECX,DWORD PTR SS:[EBP+C]
798B3588 8B79 FC MOV EDI,DWORD PTR DS:[ECX-4]
798B358B 3BFE CMP EDI,ESI
798B358D 8BDF MOV EBX,EDI
798B358F 73 25 JNB SHORT MSVBVM50.798B35B6
798B3591 837D 08 00 CMP DWORD PTR SS:[EBP+8],0
798B3595 75 36 JNZ SHORT MSVBVM50.798B35CD
798B3597 85DB TEST EBX,EBX
798B3599 74 28 JE SHORT MSVBVM50.798B35C3 -------->跳到下面
798B359B 8BC3 MOV EAX,EBX
798B359D D1E8 SHR EAX,1
798B359F 50 PUSH EAX
798B35A0 FF75 0C PUSH DWORD PTR SS:[EBP+C]
798B35A3 FF75 10 PUSH DWORD PTR SS:[EBP+10]
798B35A6 E8 3FA40000 CALL MSVBVM50.798BD9EA
798B35AB 85C0 TEST EAX,EAX
798B35AD 74 0B JE SHORT MSVBVM50.798B35BA
798B35AF 5F POP EDI
798B35B0 5E POP ESI
798B35B1 5B POP EBX
798B35B2 5D POP EBP
798B35B3 C2 0C00 RETN 0C
798B35B6 8BDE MOV EBX,ESI
798B35B8 ^EB D7 JMP SHORT MSVBVM50.798B3591
798B35C3 3BF7 CMP ESI,EDI -------->跳到這了
798B35C5 76 54 JBE SHORT MSVBVM50.798B361B
798B35C7 66:B8 0100 MOV AX,1
798B35CB ^EB E2 JMP SHORT MSVBVM50.798B35AF --------->繼續跳
798B35CD D1EE SHR ESI,1
798B35CF D1EF SHR EDI,1
798B35AF 5F POP EDI ; MSVBVM50.799BC358 --------->來到這兒
798B35B0 5E POP ESI
798B35B1 5B POP EBX
798B35B2 5D POP EBP
798B35B3 C2 0C00 RETN 0C ---------->再走
798B35B6 8BDE MOV EBX,ESI
798B35B8 ^EB D7 JMP SHORT MSVBVM50.798B3591
798B35BA F6C3 01 TEST BL,1
798B35BD 0F85 CFFA0500 JNZ MSVBVM50.79913092
798CF900 E8 5E3CFEFF CALL MSVBVM50.__vbaStrComp
798CF905 0FBFC0 MOVSX EAX,AX --------->來到這兒
798CF908 C2 0800 RETN 8 ---------->再走 （在檢測完假碼後，此處將會跳到00463CF7，去計算真碼；生成正確的註冊碼後，也就是第三次，將會跳到463DE5，去進行對比）
798CF90B > 51 PUSH ECX
00463C50 . FFD6 CALL ESI ; <&MSVBVM50.__vbaStrCmp>
00463C52 . 85C0 TEST EAX,EAX --------->來到這兒
00463C54 . 0F85 92000000 JNZ YKINGCOP.00463CEC ----------->跳走
00463C5A . 8B1D 90D54600 MOV EBX,DWORD PTR DS:[<&MSVBVM50.__vbaVa>; MSVBVM50.__vbaVarDup
。。。。。。。。。
00463CEC > 8B4D E0 MOV ECX,DWORD PTR SS:[EBP-20] --------->來到這兒
00463CEF . 51 PUSH ECX
00463CF0 . 68 FCBD4000 PUSH YKINGCOP.0040BDFC
00463CF5 . FFD6 CALL ESI ---------->回到我們的入口，去檢測有沒有輸入註冊碼(去進行第二次對比)
00463CF7 . 85C0 TEST EAX,EAX ---------->檢測完註冊碼，會再回到這兒
00463CF9 . 0F85 CB000000 JNZ YKINGCOP.00463DCA -------------------->這兒去計算註冊碼
00463CFF . 8B3D 90D54600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaVa>; MSVBVM50.__vbaVarDup
00463DC5 . E9 A1060000 JMP YKINGCOP.0046446B
00463DCA > 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C]
00463DCD . 51 PUSH ECX
00463DCE . E8 3DBBFCFF CALL YKINGCOP.0042F910 ------------>關鍵CALL，跟入
00463DD3 . 8BD0 MOV EDX,EAX
00463DD5 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
00463DD8 . FF15 BCD54600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove
00463DDE . 8B55 E0 MOV EDX,DWORD PTR SS:[EBP-20]
00463DE1 . 50 PUSH EAX
00463DE2 . 52 PUSH EDX
00463DE3 . FFD6 CALL ESI
00463DE5 . 8B1D F8D54600 MOV EBX,DWORD PTR DS:[<&MSVBVM50.__vbaFr>; MSVBVM50.__vbaFreeStr ------------>關鍵對比（但不能用於爆破，因為軟體執行時還會對比）
00463DEB . 8BF0 MOV ESI,EAX
00463DED . F7DE NEG ESI
00463DEF . 1BF6 SBB ESI,ESI
00463DF1 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
00463DF4 . 46 INC ESI
00463DF5 . F7DE NEG ESI
00463DF7 . FFD3 CALL EBX ; <&MSVBVM50.__vbaFreeStr>
00463DF9 . 66:85F6 TEST SI,SI
00463DFC . 0F84 DE040000 JE YKINGCOP.004642E0 －－－－－－－－＞關鍵跳轉，跳就失敗
00463E02 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18]
00463E05 . 85C0 TEST EAX,EAX
00463E07 . 75 0F JNZ SHORT YKINGCOP.00463E18
00463E09 . 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18]
00463E0C . 50 PUSH EAX
00463E0D . 68 34484000 PUSH YKINGCOP.00404834
00463E12 . FF15 28D54600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaNew2>>; MSVBVM50.__vbaNew2
00463E18 > 8B4D E8 MOV ECX,DWORD PTR SS:[EBP-18]
00463E1B . 8D95 34FFFFFF LEA EDX,DWORD PTR SS:[EBP-CC]
00463E21 . 51 PUSH ECX
00463E22 . 52 PUSH EDX
00463E23 . FF15 E0D34600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSetAddref
00463E29 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00463E2F . 68 02000080 PUSH 80000002
00463E34 . 50 PUSH EAX
00463E35 . 8B08 MOV ECX,DWORD PTR DS:[EAX]
00463E37 . FF51 50 CALL DWORD PTR DS:[ECX+50]
00463E3A . 85C0 TEST EAX,EAX
00463E3C . 7D 19 JGE SHORT YKINGCOP.00463E57
00463E3E . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00463E44 . 8B35 A4D34600 MOV ESI,DWORD PTR DS:[<&MSVBVM50.__vbaHr>; MSVBVM50.__vbaHresultCheckObj
00463E4A . 6A 50 PUSH 50
00463E4C . 68 98D74000 PUSH YKINGCOP.0040D798
00463E51 . 52 PUSH EDX
00463E52 . 50 PUSH EAX
00463E53 . FFD6 CALL ESI ; <&MSVBVM50.__vbaHresultCheckObj>
00463E55 . EB 06 JMP SHORT YKINGCOP.00463E5D
00463E57 > 8B35 A4D34600 MOV ESI,DWORD PTR DS:[<&MSVBVM50.__vbaHr>; MSVBVM50.__vbaHresultCheckObj －－－－＞不跳就註冊成功
00463E5D > 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00463E63 . 68 7CDC4000 PUSH YKINGCOP.0040DC7C ; UNICODE "Software
4c cutesoftKingCopy"
00463E68 . 68 90F44000 PUSH YKINGCOP.0040F490 ; UNICODE "REG"
00463E6D . 8B38 MOV EDI,DWORD PTR DS:[EAX]
00463E6F . FF15 88D34600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat
00463E75 . 8BD0 MOV EDX,EAX
00463E77 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
00463E7A . FF15 BCD54600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove
00463E80 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00463E86 . 50 PUSH EAX
.................
004642D5 . FF15 F4D54600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj
004642DB . E9 8B010000 JMP YKINGCOP.0046446B
004642E0 > 8B1D 90D54600 MOV EBX,DWORD PTR DS:[<&MSVBVM50.__vbaVa>; MSVBVM50.__vbaVarDup －－－－－－＞註冊碼對比失敗，會來到這兒
004642E6 . B9 04000280 MOV ECX,80020004
004642EB . 894D 90 MOV DWORD PTR SS:[EBP-70],ECX
004642EE . B8 0A000000 MOV EAX,0A
004642F3 . 894D A0 MOV DWORD PTR SS:[EBP-60],ECX
004642F6 . BE 08000000 MOV ESI,8
004642FB . 8D95 68FFFFFF LEA EDX,DWORD PTR SS:[EBP-98]
00464301 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
00464304 . 8945 88 MOV DWORD PTR SS:[EBP-78],EAX
00464307 . 8945 98 MOV DWORD PTR SS:[EBP-68],EAX
0046430A . C785 70FFFFFF >MOV DWORD PTR SS:[EBP-90],YKINGCOP.00411>; UNICODE "Register"
00464314 . 89B5 68FFFFFF MOV DWORD PTR SS:[EBP-98],ESI
0046431A . FFD3 CALL EBX ; <&MSVBVM50.__vbaVarDup>
0046431C . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
00464322 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
00464325 . C745 80 3C1641>MOV DWORD PTR SS:[EBP-80],YKINGCOP.00411>
0046432C . 89B5 78FFFFFF MOV DWORD PTR SS:[EBP-88],ESI
00464332 . FFD3 CALL EBX
00464334 . 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
00464337 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
0046433A . 50 PUSH EAX
0046433B . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0046433E . 51 PUSH ECX
0046433F . 52 PUSH EDX
00464340 . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48]
00464343 . 6A 40 PUSH 40
00464345 . 50 PUSH EAX
00464346 . FF15 D0D34600 CALL DWORD PTR DS:[<&MSVBVM50.#595>] ; MSVBVM50.rtcMsgBox －－－－－－－－＞註冊碼錯誤
0046434C . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
0046434F . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
00464352 . 51 PUSH ECX
00464353 . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58]
00464356 . 52 PUSH EDX
00464357 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
----------------------------------------------------------------------------------------------------------
關鍵CALL：
0042F910 $ 55 PUSH EBP
0042F911 . 8BEC MOV EBP,ESP
0042F913 . 83EC 0C SUB ESP,0C
0042F916 . 68 762C4000 PUSH <JMP.&MSVBVM50.__vbaExceptHandler> ; SE handler installation
0042F91B . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
0042F921 . 50 PUSH EAX
0042F922 . 64:8925 000000>MOV DWORD PTR FS:[0],ESP
0042F929 . 81EC E4000000 SUB ESP,0E4
0042F92F . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8]
0042F932 . 53 PUSH EBX
0042F933 . 56 PUSH ESI
0042F934 . 57 PUSH EDI
0042F935 . 33F6 XOR ESI,ESI
0042F937 . 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20]
0042F93A . 8965 F4 MOV DWORD PTR SS:[EBP-C],ESP
0042F93D . C745 F8 701240>MOV DWORD PTR SS:[EBP-8],YKINGCOP.004012>
0042F944 . 8975 E4 MOV DWORD PTR SS:[EBP-1C],ESI
0042F947 . 8975 E0 MOV DWORD PTR SS:[EBP-20],ESI
0042F94A . 8975 DC MOV DWORD PTR SS:[EBP-24],ESI
0042F94D . 8975 D8 MOV DWORD PTR SS:[EBP-28],ESI
0042F950 . 8975 D4 MOV DWORD PTR SS:[EBP-2C],ESI
0042F953 . 8975 D0 MOV DWORD PTR SS:[EBP-30],ESI
0042F956 . 8975 CC MOV DWORD PTR SS:[EBP-34],ESI
0042F959 . 8975 C8 MOV DWORD PTR SS:[EBP-38],ESI
0042F95C . 8975 B8 MOV DWORD PTR SS:[EBP-48],ESI
0042F95F . 8975 A8 MOV DWORD PTR SS:[EBP-58],ESI
0042F962 . 8975 98 MOV DWORD PTR SS:[EBP-68],ESI
0042F965 . 8975 88 MOV DWORD PTR SS:[EBP-78],ESI
0042F968 . 89B5 78FFFFFF MOV DWORD PTR SS:[EBP-88],ESI
0042F96E . 89B5 68FFFFFF MOV DWORD PTR SS:[EBP-98],ESI
0042F974 . 89B5 58FFFFFF MOV DWORD PTR SS:[EBP-A8],ESI
0042F97A . 89B5 38FFFFFF MOV DWORD PTR SS:[EBP-C8],ESI
0042F980 . FF15 44D54600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCo>; MSVBVM50.__vbaStrCopy
0042F986 . 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20]
0042F989 . 50 PUSH EAX
0042F98A . FF15 28D44600 CALL DWORD PTR DS:[<&MSVBVM50.#527>] ; MSVBVM50.rtcUpperCaseBstr
0042F990 . 8B3D BCD54600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>; MSVBVM50.__vbaStrMove
0042F996 . 8BD0 MOV EDX,EAX
0042F998 . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
0042F99B . FFD7 CALL EDI ; <&MSVBVM50.__vbaStrMove>
0042F99D . 50 PUSH EAX
0042F99E . FF15 7CD34600 CALL DWORD PTR DS:[<&MSVBVM50.#519>] ; MSVBVM50.rtcTrimBstr
0042F9A4 . 8BD0 MOV EDX,EAX
..................省略N多程式碼
0042FBD4 > 3BB5 18FFFFFF CMP ESI,DWORD PTR SS:[EBP-E8] ----------->終於來到關鍵
0042FBDA . 0F8F B3000000 JG YKINGCOP.0042FC93
0042FBE0 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0042FBE3 . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0042FBE6 . 898D 60FFFFFF MOV DWORD PTR SS:[EBP-A0],ECX
0042FBEC . 52 PUSH EDX
0042FBED . 8D85 58FFFFFF LEA EAX,DWORD PTR SS:[EBP-A8]
0042FBF3 . 56 PUSH ESI
0042FBF4 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0042FBF7 . 50 PUSH EAX
0042FBF8 . 51 PUSH ECX
0042FBF9 . C745 C0 010000>MOV DWORD PTR SS:[EBP-40],1
0042FC00 . C745 B8 020000>MOV DWORD PTR SS:[EBP-48],2
0042FC07 . C785 58FFFFFF >MOV DWORD PTR SS:[EBP-A8],4008
0042FC11 . FF15 84D34600 CALL DWORD PTR DS:[<&MSVBVM50.#629>] ; MSVBVM50.rtcMidVar
0042FC17 . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0042FC1A . 8D45 D0 LEA EAX,DWORD PTR SS:[EBP-30]
0042FC1D . 52 PUSH EDX
0042FC1E . 50 PUSH EAX
0042FC1F . FF15 E0D44600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrVa>; MSVBVM50.__vbaStrVarVal
0042FC25 . 50 PUSH EAX
0042FC26 . FF15 30D34600 CALL DWORD PTR DS:[<&MSVBVM50.#693>] ; MSVBVM50.rtcByteValueBstr －－－－－＞在這個CALL裡計算每個使用者名稱對應的註冊碼
0042FC2C . 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C]
0042FC2F . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
0042FC32 . 51 PUSH ECX
0042FC33 . 52 PUSH EDX
0042FC34 . 8845 A0 MOV BYTE PTR SS:[EBP-60],AL －－－－－－－＞AL裡的數值為每個使用者名稱對應的註冊碼
0042FC37 . C745 98 110000>MOV DWORD PTR SS:[EBP-68],11
0042FC3E . FF15 3CD54600 CALL DWORD PTR DS:[<&MSVBVM50.#572>] ; MSVBVM50.rtcHexBstrFromVar
0042FC44 . 8BD0 MOV EDX,EAX －－－－－－－＞每次取完後都放入EDX
0042FC46 . 8D4D CC LEA ECX,DWORD PTR SS:[EBP-34]
0042FC49 . FFD7 CALL EDI
0042FC4B . 50 PUSH EAX
0042FC4C . FF15 88D34600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat
0042FC52 . 8BD0 MOV EDX,EAX
0042FC54 . 8D4D E4 LEA ECX,DWORD PTR SS:[EBP-1C]
0042FC57 . FFD7 CALL EDI
0042FC59 . 8D45 CC LEA EAX,DWORD PTR SS:[EBP-34]
0042FC5C . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
0042FC5F . 50 PUSH EAX
0042FC60 . 51 PUSH ECX
0042FC61 . 6A 02 PUSH 2
0042FC63 . FF15 54D54600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList
0042FC69 . 83C4 0C ADD ESP,0C
0042FC6C . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
0042FC6F . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58]
0042FC72 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
0042FC75 . 52 PUSH EDX
0042FC76 . 50 PUSH EAX
0042FC77 . 51 PUSH ECX
0042FC78 . 6A 03 PUSH 3
0042FC7A . FFD3 CALL EBX
0042FC7C . B8 01000000 MOV EAX,1
0042FC81 . 83C4 10 ADD ESP,10
0042FC84 . 03C6 ADD EAX,ESI
0042FC86 . 0F80 BE000000 JO YKINGCOP.0042FD4A －－－－－－－－＞沒計算完？繼續取
0042FC8C . 8BF0 MOV ESI,EAX
0042FC8E .^E9 41FFFFFF JMP YKINGCOP.0042FBD4
0042FC93 > 8B55 E4 MOV EDX,DWORD PTR SS:[EBP-1C]
0042FC96 . 68 24D04000 PUSH YKINGCOP.0040D024 ; UNICODE "KC25-" －－－－－－－－－＞在算出的註冊碼前加"KC25-"
0042FC9B . 6A 14 PUSH 14
0042FC9D . 52 PUSH EDX
0042FC9E . FF15 A4D54600 CALL DWORD PTR DS:[<&MSVBVM50.#616>] ; MSVBVM50.rtcLeftCharBstr
0042FCA4 . 8BD0 MOV EDX,EAX －－－－－－－－－＞計算完後，在這兒可以看到正確的註冊碼
0042FCA6 . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
0042FCA9 . FFD7 CALL EDI
0042FCAB . 50 PUSH EAX
0042FCAC . FF15 88D34600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat
0042FCB2 . 8BD0 MOV EDX,EAX
0042FCB4 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0042FCB7 . FFD7 CALL EDI
0042FCB9 . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30]
0042FCBC . FF15 F8D54600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr
0042FCC2 . 68 34FD4200 PUSH YKINGCOP.0042FD34
0042FCC7 . EB 50 JMP SHORT YKINGCOP.0042FD19 －－－－－－－－－＞跳走
0042FCC9 . F645 FC 04 TEST BYTE PTR SS:[EBP-4],4
..............................
0042FD15 . 83C4 1C ADD ESP,1C
0042FD18 . C3 RETN
0042FD19 > 8B35 F8D54600 MOV ESI,DWORD PTR DS:[<&MSVBVM50.__vbaFr>; MSVBVM50.__vbaFreeStr －－－－－－－－＞跳到這兒
0042FD1F . 8D4D E4 LEA ECX,DWORD PTR SS:[EBP-1C]
0042FD22 . FFD6 CALL ESI ; <&MSVBVM50.__vbaFreeStr> －－－－－－＞又回到入口點,進行第三次對比
0042FD24 . 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20]
0042FD27 . FFD6 CALL ESI
0042FD29 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0042FD2C . FFD6 CALL ESI
0042FD2E . 8D4D D4 LEA ECX,DWORD PTR SS:[EBP-2C]
0042FD31 . FFE6 JMP ESI
0042FD33 . C3 RETN
0042FD34 . 8B4D EC MOV ECX,DWORD PTR SS:[EBP-14]
--------------------------------------------------------------------------------
【使用者名稱、密碼】
一組可用的註冊碼：
Name=Wind
Code=KC25-7149944
--------------------------------------------------------------------------------
【註冊碼存放位置】
[HKEY_LOCAL_MACHINESoftware 4c cutesoftKingCopyReg]
"Date"="03-12-14"
"Name"="Wind"
"Code"="KC25-7149944"
--------------------------------------------------------------------------------
【版權宣告】 本文純屬技術交流, 轉載請註明作者並保持文章的完整, 謝謝!
相關文章
- 拷貝王KingCopy 2.5 Beta (簡單) (6千字)2001-07-04GC
- Gmail走出Beta2009-07-22AI
- 2.5G PHY 晶片2024-08-10晶片
- CatGPT beta22024-10-19GPT
- Alpha-Beta 剪枝2024-09-06
- 2.5 Overview of Tablespaces and Database Files in a CDB2020-03-16ViewDatabase
- PM2.5查詢網2019-05-11
- WallPaper Changer 2.5 for Windows 98/NT2000-07-04Windows
- 2.5（學號：3025）2024-10-27
- jdon2.5安裝問題2005-01-05
- Fedora 31 Beta 釋出2019-09-30
- 試駕 Citus 11.0 beta2022-05-17
- React 18 Beta來了2021-11-21React
- Chrome 57 Beta 新特性2017-02-21Chrome
- iOS10beta32016-07-20iOS
- EntityFramework 6.1.2-beta22014-12-07Framework
- Codeforces Beta Round #322013-08-18
- Codeforces Beta Round #232013-08-14
- Beta會議總結2024-06-17
- iOS9.3.3beta5更新方法 iOS9.3.3beta5好用嗎2016-07-08iOS
- 2.5 指定資料庫建立語句2020-03-03資料庫
- C++學習 2.5 string類2020-10-05C++
- ECSHOP v2.5資料庫字典2013-07-22資料庫
- CoffeeScript攻略2.5：鏈式呼叫物件2011-11-19物件
- 推箱子V2.5完美破解法2015-11-15
- PostgreSQL 12.0 Beta 釋出2019-06-12SQL
- Flutter beta3 使用感受2018-05-17Flutter
- Beta版總結會議2024-06-12
- 從Autoencoder to Beta-VAE2024-07-15
- 安卓7.0 Beta5更新發布 附安卓7.0 Beta5升級方法2016-07-20安卓
- 蘋果ios10beta3按鍵音變回beta1版本2016-07-20蘋果iOS
- 安卓7.0 Beta5更新發布 安卓7.0 Beta5升級方法詳解2016-07-19安卓
- 蘋果ios10 beta3按鍵音變回beta1版本2016-07-19蘋果iOS
- Vue 2.5釋出在即 將全面支援TypeScript2019-03-01VueTypeScript
- Vue2.5從0開發貓眼2019-03-04Vue
- 2.5D立體字型 html+css2020-12-21HTMLCSS
- OCP2.5版本釋出啦！2021-01-13
- PostgreSQL11.2+PostGIS2.5部署2021-12-08SQL