Excel之具才单科成绩同级各班对照分析系统8.30破解分析

标题：【原创】Excel之具才单科成绩同级各班对照分析系统8.30破解分析
作者：KuNgBiM
时间：2005-05-18 04:22
链接：http://bbs.pediy.com/showthread.php?threadid=13791

【破文标题】：Excel之具才单科成绩同级各班对照分析系统8.30 破解分析
【破文作者】：KuNgBiM[DFCG]
【作者邮箱】：gb_1227@163.com
【软件名称】：具才单科成绩同级各班对照分析系统 8.30
【保护方式】：注册码+功能限制
【编译语言】：Excel+宏
【调试环境】：WinXP、Microsoft Office、UltraEdit

—————————————————————————————————
【破解过程】：

1.提示：作者称该软件是“基于‘Excel+宏’的小软件”，所以破解的工具也不是我们使用的普通工具，就连我们常常用到的Ollydbg也毫无用武之地啊~~~这次我使用到的工具就是UltraEdit，一款强大的文字处理编辑工具，OK，废话少说，开工！(机器上一定要有Microsoft Office哦~~~！！)

2.我们先双击运行我们的目标程序“dkdz20-1400.XLT”，选择“启用宏”，好了，我们进入了程序界面，一来就看到烦人的几个字“验证码”、“机器码”、“注册码”，点击“机器码：”按钮后，程序出现了机器码，我的注册相关信息如下：

*********************

验证码：6782312

机器码：947377460

注册码：7878787878

*********************

输入完毕后，回车后什么反应都没有。。。。再找找看有什么“惊喜”等着我们！！！

程序的开头提示我们“1.请您在白色方格中输入数据后，点击“计算”按钮。添加及格优秀标准可能需要注册。”这是关键！！

好，就从这入手！单击“添加及格优秀标准”按钮，程序提示我们是否接触限制，这里当然选“是”咯~~~

程序接着提示“注册码错误。如要使用此项功能，请短信联系陈具才13993204800，同时告知机器码和验证码。其他功能均可正常使用。”

哎~~~~作者的“基于‘Excel+宏’的小软件”这一番话让我苦恼啊~~~~软件不是一般的Win32程序啊~~~~就在这时，我想到了一个强大的文字处理工具UltraEdit，看看用这个加载后，查看得到我们找到的惊喜不！？

用查找选项查找““注册码错误”这个敏感的字眼！OK，找到了！！

0004a020h: D7 A2 B2 E1 B6 00 69 00 D7 A2 B2 E1 C2 EB B4 ED ; 注册?i.注册码错      //找到这里
0004a030h: CE F3 A1 A3 C8 E7 D2 AA CA B9 D3 C3 B4 CB CF EE ; 误。如要使用此项
0004a040h: B9 A6 C4 DC A3 AC C7 EB B6 CC D0 C5 C1 AA CF B5 ; 功能，请短信联系
0004a050h: B3 C2 BE DF B2 C5 31 33 39 39 33 32 30 34 38 30 ; 陈具才1399320480
0004a060h: 30 A3 AC CD AC CA B1 B8 E6 D6 AA BB FA C6 F7 C2 ; 0，同时告知机器?
0004a070h: EB BA CD D1 E9 D6 A4 C2 EB A1 A3 C6 E4 CB FB B9 ; 牒脱橹ぢ搿Ｆ渌
0004a080h: A6 C4 DC BE F9 BF C9 D5 FD B3 A3 CA B9 D3 C3 A1 ; δ芫烧Ｊ褂谩
0004a090h: A3 00 41 40 5C 03 01 00 D2 AA CA B1 6B 00 00 00 ; ?A@\...要时k...

我们向上向下看看又有什么新发现：（向上查看）：

00049e70h: 0A 00 20 BA EA 34 20 4D 61 63 72 6F E0 00 00 00 ; .. 宏4 Macro?..
00049e80h: 00 00 00 00 B7 00 20 00 26 02 28 00 FE 02 00 00 ; ....? .&.(.?..
00049e90h: 00 00 00 00 B7 00 20 00 26 02 28 00 00 03 00 00 ; ....? .&.(.....
00049ea0h: 00 00 00 00 B6 00 02 00 36 30 20 00 30 03 28 00 ; ....?..60 .0.(.
00049eb0h: 32 03 00 00 B6 00 07 00 36 34 34 30 32 39 32 00 ; 2...?..6440292.      //这是什么？6440292
00049ec0h: D1 00 64 03 20 00 20 02 42 40 4A 02 01 00 03 00 ; ?d. . .B@J.....
00049ed0h: 00 00 00 00 FF FF FF FF A8 00 00 00 20 00 08 03 ; ....��?.. ...
00049ee0h: 20 00 26 02 21 00 62 03 28 00 C8 02 FF FF FF FF ;  .&.!.b.(.?��
00049ef0h: 40 01 00 00 FF FF FF FF 20 00 00 00 FF FF FF FF ; @...�� ...��
00049f00h: 40 01 00 00 B6 00 02 00 38 30 20 00 30 03 28 00 ; @...?..80 .0.(.
00049f10h: 32 03 00 00 B6 00 23 00 D7 A2 B2 E1 B3 C9 B9 A6 ; 2...?#.注册成功
00049f20h: A3 AC C4 E3 BF C9 D0 DE D5 FD BC B0 B8 F1 2F D3 ; ，你可修正及格/?
00049f30h: C5 D0 E3 B1 EA D7 BC C1 CB A1 A3 00 41 40 5C 03 ; 判惚曜剂恕?A@\.
00049f40h: 01 00 C6 CA B6 00 03 00 4C 32 32 00 24 00 2C 02 ; ..剖?..L22.$.,.
00049f50h: 01 00 42 40 48 01 00 00 B5 B3 C2 BE B6 00 1A 00 ; ..B@H...党戮?..
00049f60h: 3D 52 43 5B 31 5D 2B 52 5B 2D 32 5D 43 5B 31 5D ; =RC[1]+R[-2]C[1]     //这又是什么？RC[1]+R[-2]C[1]+R[-4]C[1]
00049f70h: 2B 52 5B 2D 34 5D 43 5B 31 5D 20 00 30 03 28 00 ; +R[-4]C[1] .0.(.
00049f80h: 32 03 41 40 64 00 00 00 00 00 00 00 FF FF FF FF ; 2.A@d.......��
00049f90h: 68 01 00 00 B6 00 05 00 45 34 3A 45 35 00 24 00 ; h...?..E4:E5.$.
00049fa0h: 2C 02 01 00 42 40 48 01 00 00 00 00 B6 00 02 00 ; ,...B@H.....?..
00049fb0h: 45 35 24 00 2C 02 01 00 42 40 48 01 00 00 00 00 ; E5$.,...B@H.....
00049fc0h: 00 00 00 00 FF FF FF FF 38 01 00 00 20 00 26 02 ; ....��8... .&.
00049fd0h: 42 40 56 03 00 00 32 00 1D 00 20 00 B6 00 02 00 ; B@V...2... .?..
00049fe0h: 45 34 24 00 2C 02 01 00 42 40 48 01 00 00 0B 00 ; E4$.,...B@H.....
00049ff0h: 49 31 31 2C AC 00 16 00 AC 00 0C 00 B6 00 06 00 ; I11,?..?..?..
0004a000h: CB BE C1 EE B2 BF 24 00 90 02 01 00 25 00 80 03 ; 司令部$.?..%. .
0004a010h: 02 00 B4 00 00 00 F8 1F 5F A0 02 42 05 00 9C 00 ; ..?..?_?B..?

（向下查看）：

0004a0a0h: 78 00 00 00 20 00 26 02 42 40 56 03 00 00 24 00 ; x... .&.B@V...$.
0004a0b0h: 2C 02 01 00 B6 00 07 00 36 34 34 30 32 39 32 00 ; ,...?..6440292.
0004a0c0h: 1D 00 20 00 20 02 42 40 22 02 01 00 B6 00 0B 00 ; .. . .B@"...?..
0004a0d0h: 4D 32 30 2C 4C 32 32 2C 4D 32 32 00 24 00 2C 02 ; M20,L22,M22.$.,.
0004a0e0h: 01 00 42 40 48 01 00 00 C2 BE DF B2 B6 00 0B 00 ; ..B@H...戮卟?..
0004a0f0h: 4D 32 30 2C 4C 32 32 2C 4D 32 32 00 24 00 2C 02 ; M20,L22,M22.$.,.
0004a100h: 01 00 42 40 48 01 00 00 33 38 36 34 FF FF FF FF ; ..B@H...3864��
0004a110h: E0 02 00 00 B6 00 03 00 6A 71 6D 00 20 00 82 02 ; ?..?..jqm. .?         //这有一个不惊异的发现“jqm”等于机器码？
0004a120h: 42 40 A6 02 01 00 00 00 00 00 00 00 B6 00 1E 00 ; B@?........?..
0004a130h: C7 EB CF C8 CA E4 C8 EB D7 A2 B2 E1 C2 EB A3 AC ; 请先输入注册码，
0004a140h: C8 BB BA F3 D6 B4 D0 D0 B1 BE C3 FC C1 EE 41 40 ; 然后执行本命令A@
0004a150h: 5C 03 01 00 FF FF FF FF F8 02 00 00 B6 00 37 00 ; \...��?..?7.
0004a160h: BD AB D2 AA BD E2 B3 FD BC B0 B8 F1 2F D3 C5 D0 ; 将要解除及格/优?
0004a170h: E3 B1 EA D7 BC B5 C4 CF DE D6 C6 A1 A3 B5 AB D5 ; 惚曜嫉南拗啤５
0004a180h: E2 D0 E8 D2 AA C4 E3 CC E1 C7 B0 CA E4 C8 EB D7 ; 庑枰闾崆笆淙胱
0004a190h: A2 B2 E1 BA C5 A1 A3 00 AC 00 0A 00 24 00 90 03 ; ⒉岷拧??..$.?
0004a1a0h: 01 00 0B 00 B6 00 16 00 D5 E6 B5 C4 D2 AA BD F8 ; ....?..真的要进
0004a1b0h: D0 D0 D5 E2 CF EE B2 D9 D7 F7 C2 F0 A3 BF 0B 00 ; 行这项操作吗？..
0004a1c0h: 20 00 88 03 11 00 20 00 88 03 11 00 20 00 8A 03 ;  .?.. .?.. .?
0004a1d0h: 11 00 20 00 8C 03 20 00 84 03 0B 00 20 00 86 03 ; .. .? .?.. .?
0004a1e0h: 24 00 5C 03 03 00 20 00 8E 03 05 00 9C 00 24 00 ; $.\... .?..?$.
0004a1f0h: 00 08 00 00 6B 00 FF FF 68 02 00 00 FF FF FF FF ; ....k.��h...��
0004a200h: 60 02 00 00 FF FF FF FF 00 00 01 47 B3 00 41 74 ; `...��...G?At
0004a210h: 74 72 69 62 75 74 00 65 20 56 42 5F 4E 61 6D 00 ; tribut.e VB_Nam.
0004a220h: 65 20 3D 20 22 C4 A3 BF 00 E9 31 33 22 0D 0A 53 ; e = "模??3"..S
0004a230h: 75 00 62 20 BA EA 34 28 29 0D 16 0A 07 A0 00 40 ; u.b 宏4()....?@
0004a240h: 2E 00 B0 44 65 73 00 63 72 69 70 74 69 6F 6E 01 ; ..癉es.cription.
0004a250h: 01 66 42 69 6C 6C 67 61 74 00 65 73 20 BC C7 C2 ; .fBillgat.es 记?
0004a260h: BC B5 00 C4 BA EA 20 32 30 30 35 60 2D 32 2D 31 ; 嫉.暮?2005`-2-1
0004a270h: 30 00 92 0E 7C 50 80 72 6F 63 44 61 74 61 01 4A ; 0.?|ProcData.J
0004a280h: 00 49 6E 76 6F 6B 65 5F 46 08 75 6E 63 01 4A 20 ; .Invoke_F.unc.J
0004a290h: 5C 6E 31 42 34 00 33 27 0D 0A 27 01 7E 20 20 4D ; \n1B4.3'..'.~  M
0004a2a0h: 61 63 72 6F 00 0C 0D 0A 02 20 00 00 49 66 20 4D ; acro..... ..If M
0004a2b0h: 73 67 00 42 6F 78 28 22 BD AB D2 00 AA BD E2 B3 ; sg.Box("将?獬
0004a2c0h: FD BC B0 B8 00 F1 2F D3 C5 D0 E3 B1 EA 02 D7 00 ; 案.?优秀标.?
0004a2d0h: 7B CF DE D6 C6 A1 A3 00 B5 AB D5 E2 D0 E8 D2 AA ; {限制。.但这需要
0004a2e0h: 00 C4 E3 CC E1 C7 B0 CA E4 00 C8 EB D7 A2 B2 E1 ; .你提前输.入注册
0004a2f0h: BA C5 00 A1 A3 22 20 2B 20 43 68 20 72 28 31 30 ; 号.。" + Ch r(10
0004a300h: 29 00 09 22 D5 08 E6 B5 C4 80 23 F8 D0 D0 D5 00 ; ).."?娴膧#姓.
0004a310h: E2 CF EE B2 D9 D7 F7 C2 00 F0 A3 BF 22 20 26 20 ; 庀畈僮髀.穑? &
0004a320h: 76 08 62 4C 66 07 03 CC E1 CA BE 82 2C 80 09 59 ; v.bLf..提示? .Y
0004a330h: 65 73 4E 6F 00 1C 40 76 62 51 75 65 73 01 80 2C ; esNo..@vbQues. ,
0004a340h: 40 20 CF B5 CD B3 29 00 5E 76 82 62 80 0E 20 54 ; @ 系统).^v俠 . T
0004a350h: 68 65 6E 03 56 80 41 70 70 6C 69 63 61 01 12 00 ; hen.V Applica...
0004a360h: 2E 52 75 6E 20 22 6A 71 06 6D 00 6D 81 63 52 61 ; .Run "jq.m.m乧Ra
0004a370h: 6E 67 65 00 28 22 4C 32 32 22 29 2E 40 53 65 6C ; nge.("L22").@Sel
0004a380h: 65 63 74 84 19 63 00 74 69 76 65 43 65 6C 6C 00 ; ect?c.tiveCell.
0004a390h: 2E 46 6F 72 6D 75 6C 61 10 52 31 43 31 81 8C 3D ; .Formula.R1C1亴=
0004a3a0h: 52 43 00 5B 31 5D 2B 52 5B 2D 32 3A 5D 85 04 34 ; RC.[1]+R[-2:]?4
0004a3b0h: 82 04 84 29 80 8D 53 68 00 65 65 74 73 28 22 CB ; ?? 峉h.eets("?
0004a3c0h: BE 30 C1 EE B2 BF 00 2D 01 24 73 28 40 32 32 2C ; ?令部.-.$s(@22,
0004a3d0h: 20 31 32 01 51 39 4D 06 00 23 08 54 83 54 20 22 ;  12.Q9M..#.T僒 "
0004a3e0h: C1 48 B3 00 C9 B9 A6 A3 AC C4 E3 BF 90 C9 D0 DE ; 罤?晒Γ憧惿修
0004a3f0h: D5 0B 57 C1 CB 80 4F 43 83 29 C4 2F 4D 32 30 2C ; ?W了 OC??M20,
0004a400h: C0 30 2C 0E 4D CE 31 C3 34 C0 87 2E 43 6C 65 00 ; ?,.M??绹.Cle.
0004a410h: 61 72 43 6F 6E 74 65 6E 0C 74 73 09 39 02 2B 2E ; arConten.ts.9.+.
0004a420h: 55 6E 70 08 72 6F 74 C0 3F 20 28 22 36 60 34 34 ; Unp.rot? ("6`44
0004a430h: 30 32 39 80 44 0A 19 45 30 34 3A 45 35 8C 49 87 ; 029 D..E04:E5孖?
0004a440h: 17 4C 6F 10 63 6B 65 64 00 48 46 61 6C 1C 73 65 ; .Lo.cked.HFal.se
0004a450h: 03 0E 47 07 C4 50 48 69 64 2C 64 65 81 AA 12 09 ; ..G.腜Hid,de仾..
0004a460h: 49 C0 26 72 69 00 6F 72 2E 43 6F 6C 6F 72 20 49 ; I?ri.or.Color I
0004a470h: 6E 64 65 78 C0 13 78 6C B8 4E 6F 6E 04 14 84 3B ; ndex?xl窷on..?
0004a480h: 8E 21 41 56 6B 66 36 01 BE 48 7A 45 34 4C 30 97 ; ?AVkf6.綡zE4L0?
0004a490h: 0E 38 1F 85 0E 83 08 83 49 80 CC 02 49 50 61 73 ; .8.??僆 ?IPas
0004a4a0h: 80 73 77 6F 72 64 3A 3D 46 4B 0D C3 3C 45 46 3F ;  sword:=FK.?EF?
0004a4b0h: 49 73 C2 EB B4 ED 00 CE F3 A1 A3 C8 E7 D2 AA 00 ; Is码错.误。如要.
0004a4c0h: CA B9 D3 C3 B4 CB CF EE 00 B9 A6 C4 DC A3 AC C7 ; 使用此项.功能，?
0004a4d0h: EB 00 B6 CC D0 C5 C1 AA CF B5 00 B3 C2 BE DF B2 ; ?短信联系.陈具?
0004a4e0h: C5 31 33 00 39 39 33 32 30 34 38 30 00 30 A3 AC ; ?3.99320480.0，
0004a4f0h: CD AC CA B1 B8 00 E6 D6 AA BB FA C6 F7 C2 00 EB ; 同时?嬷髀.?
0004a500h: BA CD D1 E9 D6 A4 C2 80 EB A1 A3 C6 E4 CB FB C1 ; 和验证聙搿Ｆ渌
0004a510h: 07 00 BE F9 BF C9 D5 FD B3 A3 87 41 0A 66 42 E5 ; ..均可正常嘇.fB?
0004a520h: 0E C7 EB CF C8 25 6E 00 C2 EB A3 AC C8 BB BA F3 ; .请先%n.码，然后
0004a530h: 00 D6 B4 D0 D0 B1 BE C3 FC 2C C1 EE 0B 60 1F 48 ; .执行本命,令.`.H
0004a540h: 6E 11 48 45 6E F0 64 20 49 66 04 1F 64 01 61 02 ; n.HEn餯 If..d.a.

小结：

以上我们发现了3处可疑点：00049eb0h、00049f60h以及0004a110h

估计一：6440292 是什么密码/固定码之类的
估计二：RC[1]+R[-2]C[1]+R[-4]C[1] 是指Excel中的什么计算公式的
估计三：jqm 是指机器码的

好我们就一个一个再查一次：在找jqm中找到了多处，不过最有用的一处被发现了：

0004f9f0h: D7 60 01 00 00 02 03 00 00 00 6A 71 6D 05 00 00 ; 譧........jqm...
0004fa00h: 01 10 00 00 00 49 00 6E 00 74 00 65 00 72 00 69 ; .....I.n.t.e.r.i
0004fa10h: 00 6F 00 72 00 06 00 00 01 14 00 00 00 43 00 6F ; .o.r.........C.o
0004fa20h: 00 6C 00 6F 00 72 00 49 00 6E 00 64 00 65 00 78 ; .l.o.r.I.n.d.e.x
0004fa30h: 00 05 00 00 0B 0E 00 00 00 37 00 38 00 39 00 34 ; .........7.8.9.4      //这是什么？7894279
0004fa40h: 00 32 00 37 00 39 00 03 00 00 0B 04 00 00 00 8F ; .2.7.9.........?
0004fa50h: 5B 31 00 05 00 00 0B 0E 00 00 00 31 00 30 00 31 ; [1.........1.0.1
0004fa60h: 00 30 00 31 00 31 00 30 00 05 00 00 0B 0C 00 00 ; .0.1.1.0........
0004fa70h: 00 32 00 3A 00 31 00 34 00 30 00 31 00 03 00 00 ; .2.:.1.4.0.1....
0004fa80h: 0B 04 00 00 00 42 00 32 00 03 00 00 01 08 00 00 ; .....B.2........
0004fa90h: 00 4B 00 65 00 79 00 31 00 04 00 00 01 0C 00 00 ; .K.e.y.1........      //Key1
0004faa0h: 00 4F 00 72 00 64 00 65 00 72 00 31 00 03 00 00 ; .O.r.d.e.r.1....      //Order1
0004fab0h: 01 08 00 00 00 4B 00 65 00 79 00 32 00 04 00 00 ; .....K.e.y.2....      //Key2
0004fac0h: 01 0C 00 00 00 4F 00 72 00 64 00 65 00 72 00 32 ; .....O.r.d.e.r.2      //Order2
0004fad0h: 00 04 00 00 01 0C 00 00 00 48 00 65 00 61 00 64 ; .........H.e.a.d
0004fae0h: 00 65 00 72 00 06 00 00 01 16 00 00 00 4F 00 72 ; .e.r.........O.r
0004faf0h: 00 64 00 65 00 72 00 43 00 75 00 73 00 74 00 6F ; .d.e.r.C.u.s.t.o
0004fb00h: 00 6D 00 05 00 00 01 12 00 00 00 4D 00 61 00 74 ; .m.........M.a.t
0004fb10h: 00 63 00 68 00 43 00 61 00 73 00 65 00 06 00 00 ; .c.h.C.a.s.e....
0004fb20h: 01 16 00 00 00 4F 00 72 00 69 00 65 00 6E 00 74 ; .....O.r.i.e.n.t
0004fb30h: 00 61 00 74 00 69 00 6F 00 6E 00 06 00 00 01 14 ; .a.t.i.o.n......
0004fb40h: 00 00 00 53 00 6F 00 72 00 74 00 4D 00 65 00 74 ; ...S.o.r.t.M.e.t
0004fb50h: 00 68 00 6F 00 64 00 03 00 00 01 08 00 00 00 53 ; .h.o.d.........S
0004fb60h: 00 6F 00 72 00 74 00 03 00 00 0B 04 00 00 00 43 ; .o.r.t.........C
0004fb70h: 00 33 00 05 00 00 01 10 00 00 00 50 00 61 00 73 ; .3.........P.a.s      //Password
0004fb80h: 00 73 00 77 00 6F 00 72 00 64 00 03 00 00 0B 04 ; .s.w.o.r.d......
0004fb90h: 00 00 00 8F 5B 32 00 03 00 00 0B 04 00 00 00 45 ; ...廩2.........E
0004fba0h: 00 32 00 03 00 00 0B 04 00 00 00 46 00 32 00 03 ; .2.........F.2..
0004fbb0h: 00 00 0B 04 00 00 00 46 00 33 00 05 00 00 0B 0E ; .......F.3......
0004fbc0h: 00 00 00 36 00 34 00 34 00 30 00 32 00 39 00 32 ; ...6.4.4.0.2.9.2      //刚刚找到的6440292
0004fbd0h: 00 02 00 00 7F 04 00 00 0B 0A 00 00 00 45 00 34 ; .... ........E.4
0004fbe0h: 00 3A 00 45 00 35 00 04 00 00 03 6F B7 BD 82 86 ; .:.E.5.....o方倖
0004fbf0h: CD A1 48 90 58 EC 46 4E C4 50 05 0D 00 00 02 32 ; 汀H怷霧N腜.....2
0004fc00h: 00 00 00 44 3A 5C 44 4F 43 55 4D 45 7E 31 5C 63 ; ...D:\DOCUME~1\c
0004fc10h: 6A 63 5C 4C 4F 43 41 4C 53 7E 31 5C 54 65 6D 70 ; jc\LOCALS~1\Temp
0004fc20h: 5C 45 78 63 65 6C 38 2E 30 5C 4D 53 46 6F 72 6D ; \Excel8.0\MSForm
0004fc30h: 73 2E 65 78 64 0A 00 00 0A 31 1C 00 00 00 00 00 ; s.exd....1......
0004fc40h: 00 D1 06 00 00 00 00 00 00 02 00 00 00 00 00 00 ; .?.............
0004fc50h: 00 59 1C 00 00 00 00 00 00 39 07 00 00 00 00 00 ; .Y.......9......
0004fc60h: 00 B0 02 00 00 00 00 00 00 02 00 00 00 02 00 02 ; .?.............
0004fc70h: 00 00 02 06 00 00 00 C4 A3 BF E9 31 34 0F 00 00 ; .......模块14...
0004fc80h: 0B 34 00 00 00 53 00 63 00 72 00 69 00 70 00 74 ; .4...S.c.r.i.p.t
0004fc90h: 00 69 00 6E 00 67 00 2E 00 46 00 69 00 6C 00 65 ; .i.n.g...F.i.l.e
0004fca0h: 00 53 00 79 00 73 00 74 00 65 00 6D 00 4F 00 62 ; .S.y.s.t.e.m.O.b
0004fcb0h: 00 6A 00 65 00 63 00 74 00 0A 00 00 01 26 00 00 ; .j.e.c.t.....&..
0004fcc0h: 00 47 00 65 00 74 00 41 00 62 00 73 00 6F 00 6C ; .G.e.t.A.b.s.o.l
0004fcd0h: 00 75 00 74 00 65 00 50 00 61 00 74 00 68 00 4E ; .u.t.e.P.a.t.h.N
0004fce0h: 00 61 00 6D 00 65 00 07 00 00 01 18 00 00 00 47 ; .a.m.e.........G
0004fcf0h: 00 65 00 74 00 44 00 72 00 69 00 76 00 65 00 4E ; .e.t.D.r.i.v.e.N
0004fd00h: 00 61 00 6D 00 65 00 05 00 00 01 10 00 00 00 47 ; .a.m.e.........G
0004fd10h: 00 65 00 74 00 44 00 72 00 69 00 76 00 65 00 07 ; .e.t.D.r.i.v.e..
0004fd20h: 00 00 01 18 00 00 00 53 00 65 00 72 00 69 00 61 ; .......S.e.r.i.a
0004fd30h: 00 6C 00 4E 00 75 00 6D 00 62 00 65 00 72 00 03 ; .l.N.u.m.b.e.r..
0004fd40h: 00 00 0B 06 00 00 00 4D 00 32 00 30 00 0D 00 00 ; .......M.2.0....
0004fd50h: 07 E9 14 00 00 00 00 00 00 FF FF FF FF CC 02 0B ; .?......��?.
0004fd60h: 00 D8 02 00 00 00 00 00 00 03 00 00 0B 06 00 00 ; .?.............
0004fd70h: 00 4C 00 31 00 32 00 0F 00 00 0B 34 00 00 00 3D ; .L.1.2.....4...=
0004fd80h: 00 52 00 43 00 5B 00 31 00 5D 00 2B 00 52 00 5B ; .R.C.[.1.].+.R.[      //RC[1]+R[-2]C[1]+R[-4]C[1]
0004fd90h: 00 2D 00 32 00 5D 00 43 00 5B 00 31 00 5D 00 2B ; .-.2.].C.[.1.].+
0004fda0h: 00 52 00 5B 00 2D 00 34 00 5D 00 43 00 5B 00 31 ; .R.[.-.4.].C.[.1
0004fdb0h: 00 5D 00 02 00 00 7F 03 00 00 01 0A 00 00 00 43 ; .].... ........C
0004fdc0h: 00 65 00 6C 00 6C 00 73 00 0B 00 00 0B 24 00    ; .e.l.l.s.....$.

小节：

我们又再次发现了调用“6440292”、“RC[1]+R[-2]C[1]+R[-4]C[1]”以及新加的“7894279”，而它们的位置又写在“Password”的旁边，这下可以肯定了我们的估计是没错的，好，关掉UltraEdit，再次重新启动程序，找密码之类的提示框，试着填写这些“密码”这下有惊人的发现对照如下：

保护工作簿密码：7894279

工作表保护密码：6440292

注册码计算中间公式：RC[1]+R[-2]C[1]+R[-4]C[1]

好，大功告成！

-------------------------------------------------------------------------------------------------------------------------
【算法总结】

注册验证非常简单，用Excel计算就行了RC[1]+R[-2]C[1]+R[-4]C[1]

--------------------------------------------------------------------------

（本文完）

版权所有（C）2005 KuNgBiM[DFCG]         Copyright (C) 2005 KuNgBiM[DFCG]

--------------------------------------------------------------------------
          Cracked BY KuNgBiM[DFCG]

                2005-05-18

               04:24:18 PM