新手学破解实战之4种方法让你快速入门(3)

找到地址后，使用OD打开破解的程序，来到00402310位置下断点，F9运行程序即可来到关键位置
0040257C.8945 94mov dword ptr ss:[ebp-0x6C],eax
0040257F.894D ACmov dword ptr ss:[ebp-0x54],ecx
00402582.8945 A4mov dword ptr ss:[ebp-0x5C],eax
00402585.894D BCmov dword ptr ss:[ebp-0x44],ecx
00402588.8945 B4mov dword ptr ss:[ebp-0x4C],eax
0040258B74 58je XAfkayas_.004025E5这里直接NOP掉就完美爆破
0040258D.68 801B4000push Afkayas_.00401B80;You Get It
00402592.68 9C1B4000push Afkayas_.00401B9C;
00402597.FFD7call edi
00402599.8BD0mov edx,eax
0040259B.8D4D E8lea ecx,dword ptr ss:[ebp-0x18]
0040259E.FFD3call ebx
004025A0.50push eax
004025A1.68 A81B4000push Afkayas_.00401BA8;KeyGen It Now
004025A6.FFD7call edi
004025A8.8D4D 94lea ecx,dword ptr ss:[ebp-0x6C]
004025AB.8945 CCmov dword ptr ss:[ebp-0x34],eax
004025AE.8D55 A4lea edx,dword ptr ss:[ebp-0x5C]
004025B1.51push ecx
004025B2.8D45 B4lea eax,dword ptr ss:[ebp-0x4C]
004025B5.52push edx
004025B6.50push eax
004025B7.8D4D C4lea ecx,dword ptr ss:[ebp-0x3C]
004025BA.6A 00push 0x0
004025BC.51push ecx
004025BD.C745 C4 08000mov dword ptr ss:[ebp-0x3C],0x8
004025C4.FF15 10414000 call dword ptr ds:[MSVBVM50.#595];MSVBVM50.rtcMsgBox
004025CA.8D4D E8lea ecx,dword ptr ss:[ebp-0x18]
004025CD.FF15 80414000 call dword ptr ds:[MSVBVM50.__vbaFreeS;MSVBVM50.__vbaFreeStr
004025D3.8D55 94lea edx,dword ptr ss:[ebp-0x6C]
004025D6.8D45 A4lea eax,dword ptr ss:[ebp-0x5C]
004025D9.52push edx