vTuner Plus 3.0 在线注册的破解方法二：在线注册篇 (4千字)
-->(续上篇)vTuner Plus 3.0 在线注册的破解方法二：在线注册篇
[上网验证]：
随便输入注册码，点击Confirm Number按钮， 上网后不久， 出错窗口就跳了出来：
"Invalid vTuner Plus Serial Number. If you have any problems press the help button
in the upper right hand corner or e-mail us at support@vtuner.com."
好，就看TRW的了....
点击OK按钮的同时并Ctrl+D 后，会来到TRW的领空, pmodule 返回后可以找到那个验证出错的CALL。
在这个CALL处设端点。重新在线注册一次， 会来到--->>>>>
* Reference To: MSVBVM50.__vbaFreeObj, Ord:0000h
|
:006240F4 FF15A8C67D00 Call dword ptr [007DC6A8]
:006240FA 0FBF4584 movsx eax, word ptr [ebp-7C]
:006240FE 85C0 test eax, eax
:00624100 0F845E0F0000 je 00625064
:00624106 C745FC0C000000 mov [ebp-04], 0000000C
|
....(很长的验证代码，略)...
* Possible StringData Ref from Code Obj ->"CCool"
|
:00624384 6828E54500 push 0045E528 <-----作者是说"要是能来到这里， 你就很Cool的了" ^_^
* Reference To: MSVBVM50.__vbaStrCmp, Ord:0000h
|
:00624389 FF15CCC47D00 Call dword ptr [007DC4CC]
:0062438F 85C0 test eax, eax
:00624391 0F85C9090000 jne 00624D60
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00624100(U)
|
:00624397 C745FC15000000 mov [ebp-04], 00000015 <-----这里呢， 就Cool呆了！
:0062439E 8B4508 mov eax, dword ptr [ebp+08]
:006243A1 8B08 mov ecx, dword ptr [eax]
:006243A3 8B5508 mov edx, dword ptr [ebp+08]
:006243A6 52 push edx
:006243A7 FF9120030000 call dword ptr [ecx+00000320]
:006243AD 50 push eax
:006243AE 8D45BC lea eax, dword ptr [ebp-44]
:006243B1 50 push eax
* Reference To: MSVBVM50.__vbaObjSet, Ord:0000h
|
:006243B2 FF1558C47D00 Call dword ptr [007DC458]
:006243B8 89458C mov dword ptr [ebp-74], eax
* Possible StringData Ref from Code Obj ->"SSerial Number Confirmed" <-----我喜欢这个字符串 ：-
|
:006243BB 6890EA4500 push 0045EA90
:006243C0 8B4D8C mov ecx, dword ptr [ebp-74]
:006243C3 8B11 mov edx, dword ptr [ecx]
:006243C5 8B458C mov eax, dword ptr [ebp-74]
:006243C8 50 push eax
:006243C9 FF5254 call [edx+54]
:006243CC 894588 mov dword ptr [ebp-78], eax
:006243CF 837D8800 cmp dword ptr [ebp-78], 00000000
:006243D3 7D1D jge 006243F2
:006243D5 6A54 push 00000054
...............
* Reference To: MSVBVM50.__vbaObjSet, Ord:0000h
|
:00624420 FF1558C47D00 Call dword ptr [007DC458]
:00624426 89458C mov dword ptr [ebp-74], eax
* Possible StringData Ref from Code Obj ->"vvTuner Plus Serial Number Confirmed. "
->"Downloading vTuner Plus please "
->"wait. This should take a few minutes."
|
:00624429 6810EB4500 push 0045EB10
:0062442E 8B4D8C mov ecx, dword ptr [ebp-74]
............
可见， 要是强迫跳到00624397是否就大功告成了???
动手试试运气----
将00624100处改jmp 624397，重新再注册一遍：
WooOOO!!! 成功啦。。。
接下来，就是程序提示自动更新注册表和文件。。。从此，vTuner Plus就是注册版了！！
出于好奇, 用System Mechanic 全面的比较了一下注册前后的变化, 结果如下:
--------------------------------*
FILES CHANGED: (7)
REGISTRY KEYS ADDED: (2)
REGISTRY KEY VALUES CHANGED: (16)
REGISTRY KEY VALUES ADDED: (5)
看来, 要想不上网就完美注册它的话, 其难度可想而知!
*-----------------------------------
--------------------*
{注释}
(I)此方法适用于vTuner Plus 最新版 4.0;
(II)但是并非总好使! 为了安全起见, 尤其不要在国产软件上使用;
{后记}
在线验证的软件真是越来越多了. 写此破解的目的是为了"抛砖引玉".
望高手们能把自己的经验贴出来交流:-)
---------------------*
moonlite 写于 2002-6-15
