一、ollydbg1.07载入“movgear.exe”，按F9键运行，点"help"-->"Register Now..."，name填入shifeng Code填入87654321，填好后按“OK”，弹出错误"The information you have provided is invalid. Please be sure that you typed it exactly as it was given to you.",此时不要点确定，看下一步。
二、回到ollydbg窗口，在左上角CPU点右键-->search for-->All referenced text strings,打开了Text strings referenced in MOVGEAR:.text, 按Page Up键查找"The information you have provided is invalid. Please be sure that you typed it exactly as it was given to you."有两行，双击任一个， 会来到这里：
0040EE60 /$ 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4] 0040EE64 . 8B0D 68854600 MOV ECX,DWORD PTR DS:[468568] ; MOVGEAR.00400000 0040EE6A . 68 00020000 PUSH 200 ; /Count = 200 (512.) 0040EE6F . 68 40834600 PUSH MOVGEAR.00468340 ; Buffer = MOVGEAR.00468340 0040EE74 . 50 PUSH EAX ; RsrcID 0040EE75 . 51 PUSH ECX ; hInst => 00400000 0040EE76 . FF15 64844400 CALL DWORD PTR DS:[<&USER32.LoadStringA>>; \LoadStringA 0040EE7C . 85C0 TEST EAX,EAX 0040EE7E . 74 0D JE SHORT MOVGEAR.0040EE8D 0040EE80 . 3D 00020000 CMP EAX,200 0040EE85 . 7D 06 JGE SHORT MOVGEAR.0040EE8D 0040EE87 . B8 40834600 MOV EAX,MOVGEAR.00468340 ; ASCII "The information you have provided is invalid. Please be sure that you typed it exactly as it was given to you."
精品推荐