求助
本帖最后由 wudichao 于 2021-3-20 08:20 编辑今天老师上课用了个软件，今天回家想试一下，但是要付费，尝试破解了一下，用od爆破的方法，但是每次打开都要验证一次，很麻烦，想求大佬点拨一下验证call或注册码在哪，就不用每次都要重新注册一遍了
破解前：
00884FA7|.0F85 8A090000 jnz 中学电路.00885937 ;关键跳
00884FAD|.8B5D F8 mov ebx,
00884FB0|.E8 3BC1B7FF call 中学电路.004010F0
00884FB5|.53 push ebx
00884FB6|.51 push ecx ;中学电路.<ModuleEntryPoint>
00884FB7|.8B45 EC mov eax,
00884FBA|.48 dec eax
00884FBB|.79 17 jns short 中学电路.00884FD4
00884FBD|.68 470F0000 push 0xF47
00884FC2|.68 482C0104 push 0x4012C48
00884FC7|.68 04000000 push 0x4
00884FCC|.E8 DE5D0500 call 中学电路.008DADAF
00884FD1|.83C4 0C add esp,0xC
00884FD4|>59 pop ecx ;kernel32.76B5FA29
00884FD5|.5B pop ebx ;kernel32.76B5FA29
00884FD6|.3BC1 cmp eax,ecx ;中学电路.<ModuleEntryPoint>
00884FD8|.7C 17 jl short 中学电路.00884FF1
00884FDA|.68 470F0000 push 0xF47
00884FDF|.68 482C0104 push 0x4012C48
00884FE4|.68 01000000 push 0x1
00884FE9|.E8 C15D0500 call 中学电路.008DADAF
00884FEE|.83C4 0C add esp,0xC
00884FF1|>C1E0 02 shl eax,0x2
00884FF4|.03D8 add ebx,eax
00884FF6|.895D D4 mov ,ebx
00884FF9|.8B5D D4 mov ebx,
00884FFC|.8B03 mov eax,dword ptr ds:
00884FFE|.85C0 test eax,eax
00885000|.74 15 je short 中学电路.00885017
00885002|.50 push eax
00885003|.8BD8 mov ebx,eax
00885005|.E8 A3C1B7FF call 中学电路.004011AD
0088500A|.40 inc eax
0088500B|.50 push eax
0088500C|.E8 985D0500 call 中学电路.008DADA9
00885011|.59 pop ecx ;kernel32.76B5FA29
00885012|.5E pop esi ;kernel32.76B5FA29
00885013|.8BF8 mov edi,eax
00885015|.F3:A4 rep movs byte ptr es:,byte ptr ds:[>
00885017|>50 push eax
00885018|.8B1D C4BD1001 mov ebx,dword ptr ds:
0088501E|.85DB test ebx,ebx
00885020|.74 09 je short 中学电路.0088502B
00885022|.53 push ebx
00885023|.E8 6F5D0500 call 中学电路.008DAD97
00885028|.83C4 04 add esp,0x4
0088502B|>58 pop eax ;kernel32.76B5FA29
0088502C|.A3 C4BD1001 mov dword ptr ds:,eax
00885031|.68 01030080 push 0x80000301
00885036|.6A 00 push 0x0
00885038|.68 01000000 push 0x1
0088503D|.68 04000080 push 0x80000004
00885042|.6A 00 push 0x0
00885044|.68 C1409A00 push 中学电路.009A40C1 ;◆◎■
00885049|.68 05000080 push 0x80000005
0088504E|.6A 00 push 0x0
00885050|.68 C8409A00 push 中学电路.009A40C8
00885055|.68 03000000 push 0x3
0088505A|.B8 03000000 mov eax,0x3
0088505F|.BB C0F59400 mov ebx,中学电路.0094F5C0
00885064|.E8 3A5D0500 call 中学电路.008DADA3
00885069|.83C4 28 add esp,0x28
0088506C|.8945 D4 mov ,eax
0088506F|.68 05000080 push 0x80000005
00885074|.6A 00 push 0x0
00885076|.8B45 D4 mov eax,
00885079|.85C0 test eax,eax
0088507B|.75 05 jnz short 中学电路.00885082
0088507D|.B8 48079A00 mov eax,中学电路.009A0748
00885082|>50 push eax
00885083|.68 01000000 push 0x1
00885088|.BB 20C88D00 mov ebx,中学电路.008DC820
0088508D|.E8 0B5D0500 call 中学电路.008DAD9D
00885092|.83C4 10 add esp,0x10
00885095|.8945 D0 mov ,eax
00885098|.8B5D D4 mov ebx,
0088509B|.85DB test ebx,ebx
0088509D|.74 09 je short 中学电路.008850A8
0088509F|.53 push ebx
008850A0|.E8 F25C0500 call 中学电路.008DAD97
008850A5|.83C4 04 add esp,0x4
008850A8|>68 04000080 push 0x80000004
008850AD|.6A 00 push 0x0
008850AF|.8B45 D0 mov eax,
008850B2|.85C0 test eax,eax
008850B4|.75 05 jnz short 中学电路.008850BB
008850B6|.B8 23069A00 mov eax,中学电路.009A0623
008850BB|>50 push eax
008850BC|.68 01000000 push 0x1
008850C1|.BB 90BB8D00 mov ebx,中学电路.008DBB90
008850C6|.E8 D25C0500 call 中学电路.008DAD9D
008850CB|.83C4 10 add esp,0x10
008850CE|.8945 C8 mov ,eax
008850D1|.8955 CC mov ,edx ;中学电路.<ModuleEntryPoint>
008850D4|.8B5D D0 mov ebx,
008850D7|.85DB test ebx,ebx
008850D9|.74 09 je short 中学电路.008850E4
008850DB|.53 push ebx
008850DC|.E8 B65C0500 call 中学电路.008DAD97
008850E1|.83C4 04 add esp,0x4
008850E4|>DD45 C8 fld qword ptr ss:
008850E7|.E8 88C1B7FF call 中学电路.00401274
008850EC|.A3 00BE1001 mov dword ptr ds:,eax
008850F1|.833D 84BB1001>cmp dword ptr ds:,0x1
008850F8|.0F85 2C000000 jnz 中学电路.0088512A
008850FE|.837D EC 02 cmp ,0x2
00885102|.0F84 0E000000 je 中学电路.00885116
00885108|.837D EC 05 cmp ,0x5
0088510C|.0F84 04000000 je 中学电路.00885116
00885112|.33C0 xor eax,eax
00885114|.EB 05 jmp short 中学电路.0088511B
00885116|>B8 01000000 mov eax,0x1
0088511B|>85C0 test eax,eax
0088511D|.0F84 07000000 je 中学电路.0088512A
00885123|.B8 01000000 mov eax,0x1
00885128|.EB 05 jmp short 中学电路.0088512F
0088512A|>B8 00000000 mov eax,0x0
0088512F|>85C0 test eax,eax
00885131|.0F84 03010000 je 中学电路.0088523A
00885137|.68 3E429A00 push 中学电路.009A423E ;\U盘注册信息.uzc
0088513C|.FF35 88BB1001 push dword ptr ds:
00885142|.B9 02000000 mov ecx,0x2
00885147|.E8 CCC0B7FF call 中学电路.00401218
0088514C|.83C4 08 add esp,0x8
0088514F|.8945 D4 mov ,eax
00885152|.68 04000080 push 0x80000004
00885157|.6A 00 push 0x0
00885159|.A1 04BE1001 mov eax,dword ptr ds:
0088515E|.85C0 test eax,eax
00885160|.75 05 jnz short 中学电路.00885167
00885162|.B8 23069A00 mov eax,中学电路.009A0623
00885167|>50 push eax
00885168|.68 04000080 push 0x80000004
0088516D|.6A 00 push 0x0
0088516F|.68 4F429A00 push 中学电路.009A424F ;yhxx
00885174|.68 04000080 push 0x80000004
00885179|.6A 00 push 0x0
0088517B|.68 CC069A00 push 中学电路.009A06CC ;zxdlxnsys
00885180|.68 04000080 push 0x80000004
00885185|.6A 00 push 0x0
00885187|.8B45 D4 mov eax,
0088518A|.85C0 test eax,eax
0088518C|.75 05 jnz short 中学电路.00885193
0088518E|.B8 23069A00 mov eax,中学电路.009A0623
00885193|>50 push eax
00885194|.68 04000000 push 0x4
00885199|.BB 70FF8D00 mov ebx,中学电路.008DFF70
0088519E|.E8 FA5B0500 call 中学电路.008DAD9D
008851A3|.83C4 34 add esp,0x34
008851A6|.8B5D D4 mov ebx,
008851A9|.85DB test ebx,ebx
008851AB|.74 09 je short 中学电路.008851B6
008851AD|.53 push ebx
008851AE|.E8 E45B0500 call 中学电路.008DAD97
008851B3|.83C4 04 add esp,0x4
008851B6|>68 3E429A00 push 中学电路.009A423E ;\U盘注册信息.uzc
008851BB|.FF35 88BB1001 push dword ptr ds:
008851C1|.B9 02000000 mov ecx,0x2
008851C6|.E8 4DC0B7FF call 中学电路.00401218
008851CB|.83C4 08 add esp,0x8
008851CE|.8945 D4 mov ,eax
008851D1|.68 04000080 push 0x80000004
008851D6|.6A 00 push 0x0
008851D8|.A1 08BE1001 mov eax,dword ptr ds:
008851DD|.85C0 test eax,eax
008851DF|.75 05 jnz short 中学电路.008851E6
008851E1|.B8 23069A00 mov eax,中学电路.009A0623
008851E6|>50 push eax
008851E7|.68 04000080 push 0x80000004
008851EC|.6A 00 push 0x0
008851EE|.68 7D39D800 push 中学电路.00D8397D ;upxl
008851F3|.68 04000080 push 0x80000004
008851F8|.6A 00 push 0x0
008851FA|.68 CC069A00 push 中学电路.009A06CC ;zxdlxnsys
008851FF|.68 04000080 push 0x80000004
00885204|.6A 00 push 0x0
00885206|.8B45 D4 mov eax,
00885209|.85C0 test eax,eax
0088520B|.75 05 jnz short 中学电路.00885212
0088520D|.B8 23069A00 mov eax,中学电路.009A0623
00885212|>50 push eax
00885213|.68 04000000 push 0x4
00885218|.BB 70FF8D00 mov ebx,中学电路.008DFF70
0088521D|.E8 7B5B0500 call 中学电路.008DAD9D
00885222|.83C4 34 add esp,0x34
00885225|.8B5D D4 mov ebx,
00885228|.85DB test ebx,ebx
0088522A|.74 09 je short 中学电路.00885235
0088522C|.53 push ebx
0088522D|.E8 655B0500 call 中学电路.008DAD97
00885232|.83C4 04 add esp,0x4
00885235|>E9 BE050000 jmp 中学电路.008857F8
0088523A|>68 04000080 push 0x80000004
0088523F|.6A 00 push 0x0
00885241|.A1 04BE1001 mov eax,dword ptr ds:
00885246|.85C0 test eax,eax
00885248|.75 05 jnz short 中学电路.0088524F
0088524A|.B8 23069A00 mov eax,中学电路.009A0623
0088524F|>50 push eax
00885250|.68 04000080 push 0x80000004
00885255|.6A 00 push 0x0
00885257|.68 54429A00 push 中学电路.009A4254 ;Software\Kerosoft\zxdlxnsys\V5.7
0088525C|.68 01030080 push 0x80000301
00885261|.6A 00 push 0x0
00885263|.68 04000000 push 0x4
00885268|.68 03000000 push 0x3
0088526D|.BB 50D68D00 mov ebx,中学电路.008DD650
00885272|.E8 265B0500 call 中学电路.008DAD9D
00885277|.83C4 28 add esp,0x28
0088527A|.68 01030080 push 0x80000301
0088527F|.6A 00 push 0x0
00885281|.68 04000000 push 0x4
00885286|.68 01000000 push 0x1
0088528B|.B8 02000000 mov eax,0x2
00885290|.BB 80EF9400 mov ebx,中学电路.0094EF80
00885295|.E8 095B0500 call 中学电路.008DADA3
0088529A|.83C4 10 add esp,0x10
0088529D|.8945 D4 mov ,eax
008852A0|.68 75429A00 push 中学电路.009A4275 ;recent.TTF
008852A5|.FF75 D4 push
008852A8|.B9 02000000 mov ecx,0x2
008852AD|.E8 66BFB7FF call 中学电路.00401218
008852B2|.83C4 08 add esp,0x8
008852B5|.8945 D0 mov ,eax
008852B8|.8B5D D4 mov ebx,
008852BB|.85DB test ebx,ebx
008852BD|.74 09 je short 中学电路.008852C8
008852BF|.53 push ebx
008852C0|.E8 D25A0500 call 中学电路.008DAD97
008852C5|.83C4 04 add esp,0x4
008852C8|>68 04000080 push 0x80000004
008852CD|.6A 00 push 0x0
008852CF|.A1 04BE1001 mov eax,dword ptr ds:
008852D4|.85C0 test eax,eax
008852D6|.75 05 jnz short 中学电路.008852DD
008852D8|.B8 23069A00 mov eax,中学电路.009A0623
008852DD|>50 push eax
008852DE|.68 04000080 push 0x80000004
008852E3|.6A 00 push 0x0
008852E5|.68 C73A9A00 push 中学电路.009A3AC7 ;V5.7
008852EA|.68 04000080 push 0x80000004
008852EF|.6A 00 push 0x0
008852F1|.68 CC069A00 push 中学电路.009A06CC ;zxdlxnsys
008852F6|.68 04000080 push 0x80000004
008852FB|.6A 00 push 0x0
008852FD|.8B45 D0 mov eax,
00885300|.85C0 test eax,eax
00885302|.75 05 jnz short 中学电路.00885309
00885304|.B8 23069A00 mov eax,中学电路.009A0623
00885309|>50 push eax
0088530A|.68 04000000 push 0x4
0088530F|.BB 70FF8D00 mov ebx,中学电路.008DFF70
00885314|.E8 845A0500 call 中学电路.008DAD9D
00885319|.83C4 34 add esp,0x34
0088531C|.8B5D D0 mov ebx,
0088531F|.85DB test ebx,ebx
00885321|.74 09 je short 中学电路.0088532C
00885323|.53 push ebx
00885324|.E8 6E5A0500 call 中学电路.008DAD97
00885329|.83C4 04 add esp,0x4
0088532C|>68 04000080 push 0x80000004
00885331|.6A 00 push 0x0
00885333|.A1 C4BD1001 mov eax,dword ptr ds:
00885338|.85C0 test eax,eax
0088533A|.75 05 jnz short 中学电路.00885341
0088533C|.B8 23069A00 mov eax,中学电路.009A0623
00885341|>50 push eax
00885342|.68 04000080 push 0x80000004
00885347|.6A 00 push 0x0
00885349|.68 8239D800 push 中学电路.00D83982 ;Software\Kerosoft\zxdlxnsys\V5.7L
0088534E|.68 01030080 push 0x80000301
00885353|.6A 00 push 0x0
00885355|.68 04000000 push 0x4
0088535A|.68 03000000 push 0x3
0088535F|.BB 50D68D00 mov ebx,中学电路.008DD650
00885364|.E8 345A0500 call 中学电路.008DAD9D
00885369|.83C4 28 add esp,0x28
0088536C|.68 01030080 push 0x80000301
00885371|.6A 00 push 0x0
00885373|.68 04000000 push 0x4
00885378|.68 01000000 push 0x1
0088537D|.B8 02000000 mov eax,0x2
00885382|.BB 80EF9400 mov ebx,中学电路.0094EF80
00885387|.E8 175A0500 call 中学电路.008DADA3
0088538C|.83C4 10 add esp,0x10
0088538F|.8945 D4 mov ,eax
00885392|.68 75429A00 push 中学电路.009A4275 ;recent.TTF
00885397|.FF75 D4 push
0088539A|.B9 02000000 mov ecx,0x2
0088539F|.E8 74BEB7FF call 中学电路.00401218
008853A4|.83C4 08 add esp,0x8
008853A7|.8945 D0 mov ,eax
008853AA|.8B5D D4 mov ebx,
008853AD|.85DB test ebx,ebx
008853AF|.74 09 je short 中学电路.008853BA
008853B1|.53 push ebx
008853B2|.E8 E0590500 call 中学电路.008DAD97
008853B7|.83C4 04 add esp,0x4
008853BA|>68 04000080 push 0x80000004
008853BF|.6A 00 push 0x0
008853C1|.A1 C4BD1001 mov eax,dword ptr ds:
008853C6|.85C0 test eax,eax
008853C8|.75 05 jnz short 中学电路.008853CF
008853CA|.B8 23069A00 mov eax,中学电路.009A0623
008853CF|>50 push eax
008853D0|.68 04000080 push 0x80000004
008853D5|.6A 00 push 0x0
008853D7|.68 A439D800 push 中学电路.00D839A4 ;V5.7L
008853DC|.68 04000080 push 0x80000004
008853E1|.6A 00 push 0x0
008853E3|.68 CC069A00 push 中学电路.009A06CC ;zxdlxnsys
008853E8|.68 04000080 push 0x80000004
008853ED|.6A 00 push 0x0
008853EF|.8B45 D0 mov eax,
008853F2|.85C0 test eax,eax
008853F4|.75 05 jnz short 中学电路.008853FB
008853F6|.B8 23069A00 mov eax,中学电路.009A0623
008853FB|>50 push eax
008853FC|.68 04000000 push 0x4
00885401|.BB 70FF8D00 mov ebx,中学电路.008DFF70
00885406|.E8 92590500 call 中学电路.008DAD9D
0088540B|.83C4 34 add esp,0x34
0088540E|.8B5D D0 mov ebx,
00885411|.85DB test ebx,ebx
00885413|.74 09 je short 中学电路.0088541E
00885415|.53 push ebx
00885416|.E8 7C590500 call 中学电路.008DAD97
0088541B|.83C4 04 add esp,0x4
0088541E|>68 04000080 push 0x80000004
00885423|.6A 00 push 0x0
00885425|.A1 08BE1001 mov eax,dword ptr ds:
0088542A|.85C0 test eax,eax
0088542C|.75 05 jnz short 中学电路.00885433
0088542E|.B8 23069A00 mov eax,中学电路.009A0623
00885433|>50 push eax
00885434|.68 04000080 push 0x80000004
00885439|.6A 00 push 0x0
0088543B|.68 AA39D800 push 中学电路.00D839AA ;Software\Kerosoft\zxdlxnsys\V5.7S
00885440|.68 01030080 push 0x80000301
00885445|.6A 00 push 0x0
00885447|.68 04000000 push 0x4
0088544C|.68 03000000 push 0x3
00885451|.BB 50D68D00 mov ebx,中学电路.008DD650
00885456|.E8 42590500 call 中学电路.008DAD9D
0088545B|.83C4 28 add esp,0x28
0088545E|.68 01030080 push 0x80000301
00885463|.6A 00 push 0x0
00885465|.68 04000000 push 0x4
0088546A|.68 01000000 push 0x1
0088546F|.B8 02000000 mov eax,0x2
00885474|.BB 80EF9400 mov ebx,中学电路.0094EF80
00885479|.E8 25590500 call 中学电路.008DADA3
0088547E|.83C4 10 add esp,0x10
00885481|.8945 D4 mov ,eax
00885484|.68 75429A00 push 中学电路.009A4275 ;recent.TTF
00885489|.FF75 D4 push
0088548C|.B9 02000000 mov ecx,0x2
00885491|.E8 82BDB7FF call 中学电路.00401218
00885496|.83C4 08 add esp,0x8
00885499|.8945 D0 mov ,eax
0088549C|.8B5D D4 mov ebx,
0088549F|.85DB test ebx,ebx
008854A1|.74 09 je short 中学电路.008854AC
008854A3|.53 push ebx
008854A4|.E8 EE580500 call 中学电路.008DAD97
008854A9|.83C4 04 add esp,0x4
008854AC|>68 04000080 push 0x80000004
008854B1|.6A 00 push 0x0
008854B3|.A1 08BE1001 mov eax,dword ptr ds:
008854B8|.85C0 test eax,eax
008854BA|.75 05 jnz short 中学电路.008854C1
008854BC|.B8 23069A00 mov eax,中学电路.009A0623
008854C1|>50 push eax
008854C2|.68 04000080 push 0x80000004
008854C7|.6A 00 push 0x0
008854C9|.68 CC39D800 push 中学电路.00D839CC ;V5.7S
008854CE|.68 04000080 push 0x80000004
008854D3|.6A 00 push 0x0
008854D5|.68 CC069A00 push 中学电路.009A06CC ;zxdlxnsys
008854DA|.68 04000080 push 0x80000004
008854DF|.6A 00 push 0x0
008854E1|.8B45 D0 mov eax,
008854E4|.85C0 test eax,eax
008854E6|.75 05 jnz short 中学电路.008854ED
008854E8|.B8 23069A00 mov eax,中学电路.009A0623
008854ED|>50 push eax
008854EE|.68 04000000 push 0x4
008854F3|.BB 70FF8D00 mov ebx,中学电路.008DFF70
008854F8|.E8 A0580500 call 中学电路.008DAD9D
008854FD|.83C4 34 add esp,0x34
00885500|.8B5D D0 mov ebx,
00885503|.85DB test ebx,ebx
00885505|.74 09 je short 中学电路.00885510
00885507|.53 push ebx
00885508|.E8 8A580500 call 中学电路.008DAD97
0088550D|.83C4 04 add esp,0x4
00885510|>837D EC 01 cmp ,0x1
00885514|.0F84 0E000000 je 中学电路.00885528
0088551A|.837D EC 03 cmp ,0x3
0088551E|.0F84 04000000 je 中学电路.00885528
00885524|.33C0 xor eax,eax
00885526|.EB 05 jmp short 中学电路.0088552D
00885528|>B8 01000000 mov eax,0x1
0088552D|>85C0 test eax,eax
0088552F|.0F84 72020000 je 中学电路.008857A7
00885535|.837D DC 01 cmp ,0x1
00885539|.0F85 68020000 jnz 中学电路.008857A7
0088553F|.E8 7C050000 call 中学电路.00885AC0
00885544|.68 01030080 push 0x80000301
00885549|.6A 00 push 0x0
0088554B|.50 push eax
0088554C|.68 01000000 push 0x1
00885551|.BB 20C88D00 mov ebx,中学电路.008DC820
00885556|.E8 42580500 call 中学电路.008DAD9D
0088555B|.83C4 10 add esp,0x10
0088555E|.8945 D0 mov ,eax
00885561|.8D45 D0 lea eax,
00885564|.50 push eax
00885565|.E8 8FC6BCFF call 中学电路.00451BF9
0088556A|.8945 CC mov ,eax
0088556D|.8B5D D0 mov ebx,
00885570|.85DB test ebx,ebx
00885572|.74 09 je short 中学电路.0088557D
00885574|.53 push ebx
00885575|.E8 1D580500 call 中学电路.008DAD97
0088557A|.83C4 04 add esp,0x4
0088557D|>68 04000080 push 0x80000004
00885582|.6A 00 push 0x0
00885584|.8B45 CC mov eax,
00885587|.85C0 test eax,eax
00885589|.75 05 jnz short 中学电路.00885590
0088558B|.B8 23069A00 mov eax,中学电路.009A0623
00885590|>50 push eax
00885591|.68 04000080 push 0x80000004
00885596|.6A 00 push 0x0
00885598|.68 D239D800 push 中学电路.00D839D2 ;Software\Kerosoft\zxdlxnsys\X
0088559D|.68 01030080 push 0x80000301
008855A2|.6A 00 push 0x0
008855A4|.68 04000000 push 0x4
008855A9|.68 03000000 push 0x3
008855AE|.BB 50D68D00 mov ebx,中学电路.008DD650
008855B3|.E8 E5570500 call 中学电路.008DAD9D
008855B8|.83C4 28 add esp,0x28
008855BB|.8B5D CC mov ebx,
008855BE|.85DB test ebx,ebx
008855C0|.74 09 je short 中学电路.008855CB
008855C2|.53 push ebx
008855C3|.E8 CF570500 call 中学电路.008DAD97
008855C8|.83C4 04 add esp,0x4
008855CB|>68 01030080 push 0x80000301
008855D0|.6A 00 push 0x0
008855D2|.68 04000000 push 0x4
008855D7|.68 01000000 push 0x1
008855DC|.B8 02000000 mov eax,0x2
008855E1|.BB 80EF9400 mov ebx,中学电路.0094EF80
008855E6|.E8 B8570500 call 中学电路.008DADA3
008855EB|.83C4 10 add esp,0x10
008855EE|.8945 D4 mov ,eax
008855F1|.68 75429A00 push 中学电路.009A4275 ;recent.TTF
008855F6|.FF75 D4 push
008855F9|.B9 02000000 mov ecx,0x2
008855FE|.E8 15BCB7FF call 中学电路.00401218
00885603|.83C4 08 add esp,0x8
00885606|.8945 D0 mov ,eax
00885609|.8B5D D4 mov ebx,
0088560C|.85DB test ebx,ebx
0088560E|.74 09 je short 中学电路.00885619
00885610|.53 push ebx
00885611|.E8 81570500 call 中学电路.008DAD97
00885616|.83C4 04 add esp,0x4
00885619|>E8 A2040000 call 中学电路.00885AC0
0088561E|.68 01030080 push 0x80000301
00885623|.6A 00 push 0x0
00885625|.50 push eax
00885626|.68 01000000 push 0x1
0088562B|.BB 20C88D00 mov ebx,中学电路.008DC820
00885630|.E8 68570500 call 中学电路.008DAD9D
00885635|.83C4 10 add esp,0x10
00885638|.8945 C8 mov ,eax
0088563B|.8D45 C8 lea eax,
0088563E|.50 push eax
0088563F|.E8 B5C5BCFF call 中学电路.00451BF9
00885644|.8945 C4 mov ,eax
00885647|.8B5D C8 mov ebx,
0088564A|.85DB test ebx,ebx
0088564C|.74 09 je short 中学电路.00885657
0088564E|.53 push ebx
0088564F|.E8 43570500 call 中学电路.008DAD97
00885654|.83C4 04 add esp,0x4
00885657|>68 04000080 push 0x80000004
0088565C|.6A 00 push 0x0
0088565E|.8B45 C4 mov eax,
00885661|.85C0 test eax,eax
00885663|.75 05 jnz short 中学电路.0088566A
00885665|.B8 23069A00 mov eax,中学电路.009A0623
0088566A|>50 push eax
0088566B|.68 04000080 push 0x80000004
00885670|.6A 00 push 0x0
00885672|.68 0D3D9A00 push 中学电路.009A3D0D ;X
00885677|.68 04000080 push 0x80000004
0088567C|.6A 00 push 0x0
0088567E|.68 CC069A00 push 中学电路.009A06CC ;zxdlxnsys
00885683|.68 04000080 push 0x80000004
00885688|.6A 00 push 0x0
0088568A|.8B45 D0 mov eax,
0088568D|.85C0 test eax,eax
0088568F|.75 05 jnz short 中学电路.00885696
00885691|.B8 23069A00 mov eax,中学电路.009A0623
00885696|>50 push eax
00885697|.68 04000000 push 0x4
0088569C|.BB 70FF8D00 mov ebx,中学电路.008DFF70
008856A1|.E8 F7560500 call 中学电路.008DAD9D
008856A6|.83C4 34 add esp,0x34
008856A9|.8B5D D0 mov ebx,
008856AC|.85DB test ebx,ebx
008856AE|.74 09 je short 中学电路.008856B9
008856B0|.53 push ebx
008856B1|.E8 E1560500 call 中学电路.008DAD97
008856B6|.83C4 04 add esp,0x4
008856B9|>8B5D C4 mov ebx,
008856BC|.85DB test ebx,ebx
008856BE|.74 09 je short 中学电路.008856C9
008856C0|.53 push ebx
008856C1|.E8 D1560500 call 中学电路.008DAD97
008856C6|.83C4 04 add esp,0x4
008856C9|>68 04000080 push 0x80000004
008856CE|.6A 00 push 0x0
008856D0|.68 B6069A00 push 中学电路.009A06B6 ;1
008856D5|.68 04000080 push 0x80000004
008856DA|.6A 00 push 0x0
008856DC|.68 F039D800 push 中学电路.00D839F0 ;Software\Kerosoft\zxdlxnsys\Y
008856E1|.68 01030080 push 0x80000301
008856E6|.6A 00 push 0x0
008856E8|.68 04000000 push 0x4
008856ED|.68 03000000 push 0x3
008856F2|.BB 50D68D00 mov ebx,中学电路.008DD650
008856F7|.E8 A1560500 call 中学电路.008DAD9D
008856FC|.83C4 28 add esp,0x28
008856FF|.68 01030080 push 0x80000301
00885704|.6A 00 push 0x0
00885706|.68 04000000 push 0x4
0088570B|.68 01000000 push 0x1
00885710|.B8 02000000 mov eax,0x2
00885715|.BB 80EF9400 mov ebx,中学电路.0094EF80
0088571A|.E8 84560500 call 中学电路.008DADA3
0088571F|.83C4 10 add esp,0x10
00885722|.8945 D4 mov ,eax
00885725|.68 75429A00 push 中学电路.009A4275 ;recent.TTF
0088572A|.FF75 D4 push
0088572D|.B9 02000000 mov ecx,0x2
00885732|.E8 E1BAB7FF call 中学电路.00401218
00885737|.83C4 08 add esp,0x8
0088573A|.8945 D0 mov ,eax
0088573D|.8B5D D4 mov ebx,
00885740|.85DB test ebx,ebx
00885742|.74 09 je short 中学电路.0088574D
00885744|.53 push ebx
00885745|.E8 4D560500 call 中学电路.008DAD97
0088574A|.83C4 04 add esp,0x4
0088574D|>68 04000080 push 0x80000004
00885752|.6A 00 push 0x0
00885754|.68 B6069A00 push 中学电路.009A06B6 ;1
00885759|.68 04000080 push 0x80000004
0088575E|.6A 00 push 0x0
00885760|.68 0E3AD800 push 中学电路.00D83A0E ;Y
00885765|.68 04000080 push 0x80000004
0088576A|.6A 00 push 0x0
0088576C|.68 CC069A00 push 中学电路.009A06CC ;zxdlxnsys
00885771|.68 04000080 push 0x80000004
00885776|.6A 00 push 0x0
00885778|.8B45 D0 mov eax,
0088577B|.85C0 test eax,eax
0088577D|.75 05 jnz short 中学电路.00885784
0088577F|.B8 23069A00 mov eax,中学电路.009A0623
00885784|>50 push eax
00885785|.68 04000000 push 0x4
0088578A|.BB 70FF8D00 mov ebx,中学电路.008DFF70
0088578F|.E8 09560500 call 中学电路.008DAD9D
00885794|.83C4 34 add esp,0x34
00885797|.8B5D D0 mov ebx,
0088579A|.85DB test ebx,ebx
0088579C|.74 09 je short 中学电路.008857A7
0088579E|.53 push ebx
0088579F|.E8 F3550500 call 中学电路.008DAD97
008857A4|.83C4 04 add esp,0x4
008857A7|>68 3E429A00 push 中学电路.009A423E ;\U盘注册信息.uzc
008857AC|.FF35 88BB1001 push dword ptr ds:
008857B2|.B9 02000000 mov ecx,0x2
008857B7|.E8 5CBAB7FF call 中学电路.00401218
008857BC|.83C4 08 add esp,0x8
008857BF|.8945 D4 mov ,eax
008857C2|.68 04000080 push 0x80000004
008857C7|.6A 00 push 0x0
008857C9|.8B45 D4 mov eax,
008857CC|.85C0 test eax,eax
008857CE|.75 05 jnz short 中学电路.008857D5
008857D0|.B8 23069A00 mov eax,中学电路.009A0623
008857D5|>50 push eax
008857D6|.68 01000000 push 0x1
008857DB|.BB 80CD8D00 mov ebx,中学电路.008DCD80
008857E0|.E8 B8550500 call 中学电路.008DAD9D
008857E5|.83C4 10 add esp,0x10
008857E8|.8B5D D4 mov ebx,
008857EB|.85DB test ebx,ebx
008857ED|.74 09 je short 中学电路.008857F8
008857EF|.53 push ebx
008857F0|.E8 A2550500 call 中学电路.008DAD97
008857F5|.83C4 04 add esp,0x4
008857F8|>6A 00 push 0x0
008857FA|.6A 00 push 0x0
008857FC|.6A 00 push 0x0
008857FE|.68 04000080 push 0x80000004
00885803|.6A 00 push 0x0
00885805|.68 2E0D9A00 push 中学电路.009A0D2E ;提示：
0088580A|.68 01030080 push 0x80000301
0088580F|.6A 00 push 0x0
00885811|.68 00000000 push 0x0
00885816|.68 04000080 push 0x80000004
0088581B|.6A 00 push 0x0
0088581D|.68 103AD800 push 中学电路.00D83A10 ;注册成功，谢谢您的支持！
00885822|.68 04000000 push 0x4
00885827|.BB 70D68D00 mov ebx,中学电路.008DD670
0088582C|.E8 6C550500 call 中学电路.008DAD9D
00885831|.83C4 34 add esp,0x34
00885834|.68 01030080 push 0x80000301
00885839|.6A 00 push 0x0
0088583B|.68 0A000000 push 0xA
00885840|.68 03000200 push 0x20003
00885845|.68 03000116 push 0x16010003
0088584A|.68 01000152 push 0x52010001
0088584F|.68 02000000 push 0x2
00885854|.B8 01000000 mov eax,0x1
00885859|.BB 80A49400 mov ebx,中学电路.0094A480
0088585E|.E8 40550500 call 中学电路.008DADA3
00885863|.83C4 1C add esp,0x1C
00885866|.68 01030080 push 0x80000301
0088586B|.6A 00 push 0x0
0088586D|.68 00000000 push 0x0
00885872|.68 04000080 push 0x80000004
00885877|.6A 00 push 0x0
00885879|.68 293AD800 push 中学电路.00D83A29 ;退出实验室
0088587E|.68 04000080 push 0x80000004
00885883|.6A 00 push 0x0
00885885|.68 98CF9A00 push 中学电路.009ACF98 ;退出
0088588A|.68 01030080 push 0x80000301
0088588F|.6A 00 push 0x0
00885891|.68 02000000 push 0x2
00885896|.68 01030080 push 0x80000301
0088589B|.6A 00 push 0x0
0088589D|.68 00000000 push 0x0
008858A2|.68 01030080 push 0x80000301
008858A7|.6A 00 push 0x0
008858A9|.68 0C000000 push 0xC
008858AE|.68 03000200 push 0x20003
008858B3|.68 03000116 push 0x16010003
008858B8|.68 01000152 push 0x52010001
008858BD|.68 07000000 push 0x7
008858C2|.B8 01000000 mov eax,0x1
008858C7|.BB 20A19400 mov ebx,中学电路.0094A120
008858CC|.E8 D2540500 call 中学电路.008DADA3
008858D1|.83C4 58 add esp,0x58
008858D4|.C705 BCBD1001>mov dword ptr ds:,0x1
008858DE|.C705 48BF1001>mov dword ptr ds:,0x0
008858E8|.E8 F51EBAFF call 中学电路.004277E2
008858ED|.68 01030080 push 0x80000301
008858F2|.6A 00 push 0x0
008858F4|.68 64000000 push 0x64
008858F9|.68 01000000 push 0x1
008858FE|.BB 40FE8D00 mov ebx,中学电路.008DFE40
00885903|.E8 95540500 call 中学电路.008DAD9D
00885908|.83C4 10 add esp,0x10
0088590B|.6A 00 push 0x0
0088590D|.6A 00 push 0x0
0088590F|.6A 00 push 0x0
00885911|.68 01000100 push 0x10001
00885916|.68 EE2B0106 push 0x6012BEE
0088591B|.68 ED2B0152 push 0x52012BED
00885920|.68 02000000 push 0x2
00885925|.BB 10DF8D00 mov ebx,中学电路.008DDF10
0088592A|.E8 6E540500 call 中学电路.008DAD9D
0088592F|.83C4 1C add esp,0x1C
00885932|.E9 7A000000 jmp 中学电路.008859B1
00885937|>6A 00 push 0x0
00885939|.6A 00 push 0x0
0088593B|.6A 00 push 0x0
0088593D|.68 04000080 push 0x80000004
00885942|.6A 00 push 0x0
00885944|.68 2E0D9A00 push 中学电路.009A0D2E ;提示：
00885949|.68 01030080 push 0x80000301
0088594E|.6A 00 push 0x0
00885950|.68 00000000 push 0x0
00885955|.68 04000080 push 0x80000004
0088595A|.6A 00 push 0x0
0088595C|.68 343AD800 push 中学电路.00D83A34 ;注册码有误。
00885961|.68 04000000 push 0x4
00885966|.BB 70D68D00 mov ebx,中学电路.008DD670
0088596B|.E8 2D540500 call 中学电路.008DAD9D
00885970|.83C4 34 add esp,0x34
00885973|.6A 00 push 0x0
00885975|.68 23069A00 push 中学电路.009A0623
0088597A|.6A FF push -0x1
0088597C|.6A 08 push 0x8
0088597E|.68 99FE0116 push 0x1601FE99
00885983|.68 ED2B0152 push 0x52012BED
00885988|.E8 28540500 call 中学电路.008DADB5
0088598D|.83C4 18 add esp,0x18
00885990|.68 05000100 push 0x10005
00885995|.68 99FE0116 push 0x1601FE99
0088599A|.68 ED2B0152 push 0x52012BED
0088599F|.68 01000000 push 0x1
008859A4|.BB 90E08D00 mov ebx,中学电路.008DE090
008859A9|.E8 EF530500 call 中学电路.008DAD9D
008859AE|.83C4 10 add esp,0x10
008859B1|>E9 3C000000 jmp 中学电路.008859F2
008859B6|>6A 00 push 0x0
008859B8|.6A 00 push 0x0
008859BA|.6A 00 push 0x0
008859BC|.68 04000080 push 0x80000004
008859C1|.6A 00 push 0x0
008859C3|.68 2E0D9A00 push 中学电路.009A0D2E ;提示：
008859C8|.68 01030080 push 0x80000301
008859CD|.6A 00 push 0x0
008859CF|.68 40000000 push 0x40
008859D4|.68 04000080 push 0x80000004
008859D9|.6A 00 push 0x0
008859DB|.68 413AD800 push 中学电路.00D83A41 ;您本次尝试注册已达5次，请下次再注册，\r\n如果有疑问请联系软件作者。
008859E0|.68 04000000 push 0x4
008859E5|.BB 70D68D00 mov ebx,中学电路.008DD670
我先用ascii查找到“注册码有误”，再向上找到关键跳，在关键跳处把jnz改成jz，途中有几个报错的call，全部都用nop爆破掉，但每次打开都要重新点一次注册，十分麻烦，所以求大佬帮忙指点一下验证call或注册码在哪里看，谢谢！！！
求大佬指教！！！
原版链接（文件太大存不了附件，解压密码：52pojie）：https://wws.lanzouj.com/i3Kv0n3yx1e密码:28nb 本帖最后由 涛之雨 于 2021-3-20 00:27 编辑
请楼主修改内容，简述修改的内容和思路，
请勿大段贴代码，刷屏影响阅读和论坛响应速度
页:
[1]