好友
阅读权限10
听众
最后登录1970-1-1
|
本帖最后由 wudichao 于 2021-3-20 08:20 编辑
今天老师上课用了个软件，今天回家想试一下，但是要付费，尝试破解了一下，用od爆破的方法，但是每次打开都要验证一次，很麻烦，想求大佬点拨一下验证call或注册码在哪，就不用每次都要重新注册一遍了
破解前：
00884FA7 |. 0F85 8A090000 jnz 中学电路.00885937 ; 关键跳
00884FAD |. 8B5D F8 mov ebx,[local.2]
00884FB0 |. E8 3BC1B7FF call 中学电路.004010F0
00884FB5 |. 53 push ebx
00884FB6 |. 51 push ecx ; 中学电路.<ModuleEntryPoint>
00884FB7 |. 8B45 EC mov eax,[local.5]
00884FBA |. 48 dec eax
00884FBB |. 79 17 jns short 中学电路.00884FD4
00884FBD |. 68 470F0000 push 0xF47
00884FC2 |. 68 482C0104 push 0x4012C48
00884FC7 |. 68 04000000 push 0x4
00884FCC |. E8 DE5D0500 call 中学电路.008DADAF
00884FD1 |. 83C4 0C add esp,0xC
00884FD4 |> 59 pop ecx ; kernel32.76B5FA29
00884FD5 |. 5B pop ebx ; kernel32.76B5FA29
00884FD6 |. 3BC1 cmp eax,ecx ; 中学电路.<ModuleEntryPoint>
00884FD8 |. 7C 17 jl short 中学电路.00884FF1
00884FDA |. 68 470F0000 push 0xF47
00884FDF |. 68 482C0104 push 0x4012C48
00884FE4 |. 68 01000000 push 0x1
00884FE9 |. E8 C15D0500 call 中学电路.008DADAF
00884FEE |. 83C4 0C add esp,0xC
00884FF1 |> C1E0 02 shl eax,0x2
00884FF4 |. 03D8 add ebx,eax
00884FF6 |. 895D D4 mov [local.11],ebx
00884FF9 |. 8B5D D4 mov ebx,[local.11]
00884FFC |. 8B03 mov eax,dword ptr ds:[ebx]
00884FFE |. 85C0 test eax,eax
00885000 |. 74 15 je short 中学电路.00885017
00885002 |. 50 push eax
00885003 |. 8BD8 mov ebx,eax
00885005 |. E8 A3C1B7FF call 中学电路.004011AD
0088500A |. 40 inc eax
0088500B |. 50 push eax
0088500C |. E8 985D0500 call 中学电路.008DADA9
00885011 |. 59 pop ecx ; kernel32.76B5FA29
00885012 |. 5E pop esi ; kernel32.76B5FA29
00885013 |. 8BF8 mov edi,eax
00885015 |. F3:A4 rep movs byte ptr es:[edi],byte ptr ds:[>
00885017 |> 50 push eax
00885018 |. 8B1D C4BD1001 mov ebx,dword ptr ds:[0x110BDC4]
0088501E |. 85DB test ebx,ebx
00885020 |. 74 09 je short 中学电路.0088502B
00885022 |. 53 push ebx
00885023 |. E8 6F5D0500 call 中学电路.008DAD97
00885028 |. 83C4 04 add esp,0x4
0088502B |> 58 pop eax ; kernel32.76B5FA29
0088502C |. A3 C4BD1001 mov dword ptr ds:[0x110BDC4],eax
00885031 |. 68 01030080 push 0x80000301
00885036 |. 6A 00 push 0x0
00885038 |. 68 01000000 push 0x1
0088503D |. 68 04000080 push 0x80000004
00885042 |. 6A 00 push 0x0
00885044 |. 68 C1409A00 push 中学电路.009A40C1 ; ◆◎■
00885049 |. 68 05000080 push 0x80000005
0088504E |. 6A 00 push 0x0
00885050 |. 68 C8409A00 push 中学电路.009A40C8
00885055 |. 68 03000000 push 0x3
0088505A |. B8 03000000 mov eax,0x3
0088505F |. BB C0F59400 mov ebx,中学电路.0094F5C0
00885064 |. E8 3A5D0500 call 中学电路.008DADA3
00885069 |. 83C4 28 add esp,0x28
0088506C |. 8945 D4 mov [local.11],eax
0088506F |. 68 05000080 push 0x80000005
00885074 |. 6A 00 push 0x0
00885076 |. 8B45 D4 mov eax,[local.11]
00885079 |. 85C0 test eax,eax
0088507B |. 75 05 jnz short 中学电路.00885082
0088507D |. B8 48079A00 mov eax,中学电路.009A0748
00885082 |> 50 push eax
00885083 |. 68 01000000 push 0x1
00885088 |. BB 20C88D00 mov ebx,中学电路.008DC820
0088508D |. E8 0B5D0500 call 中学电路.008DAD9D
00885092 |. 83C4 10 add esp,0x10
00885095 |. 8945 D0 mov [local.12],eax
00885098 |. 8B5D D4 mov ebx,[local.11]
0088509B |. 85DB test ebx,ebx
0088509D |. 74 09 je short 中学电路.008850A8
0088509F |. 53 push ebx
008850A0 |. E8 F25C0500 call 中学电路.008DAD97
008850A5 |. 83C4 04 add esp,0x4
008850A8 |> 68 04000080 push 0x80000004
008850AD |. 6A 00 push 0x0
008850AF |. 8B45 D0 mov eax,[local.12]
008850B2 |. 85C0 test eax,eax
008850B4 |. 75 05 jnz short 中学电路.008850BB
008850B6 |. B8 23069A00 mov eax,中学电路.009A0623
008850BB |> 50 push eax
008850BC |. 68 01000000 push 0x1
008850C1 |. BB 90BB8D00 mov ebx,中学电路.008DBB90
008850C6 |. E8 D25C0500 call 中学电路.008DAD9D
008850CB |. 83C4 10 add esp,0x10
008850CE |. 8945 C8 mov [local.14],eax
008850D1 |. 8955 CC mov [local.13],edx ; 中学电路.<ModuleEntryPoint>
008850D4 |. 8B5D D0 mov ebx,[local.12]
008850D7 |. 85DB test ebx,ebx
008850D9 |. 74 09 je short 中学电路.008850E4
008850DB |. 53 push ebx
008850DC |. E8 B65C0500 call 中学电路.008DAD97
008850E1 |. 83C4 04 add esp,0x4
008850E4 |> DD45 C8 fld qword ptr ss:[ebp-0x38]
008850E7 |. E8 88C1B7FF call 中学电路.00401274
008850EC |. A3 00BE1001 mov dword ptr ds:[0x110BE00],eax
008850F1 |. 833D 84BB1001>cmp dword ptr ds:[0x110BB84],0x1
008850F8 |. 0F85 2C000000 jnz 中学电路.0088512A
008850FE |. 837D EC 02 cmp [local.5],0x2
00885102 |. 0F84 0E000000 je 中学电路.00885116
00885108 |. 837D EC 05 cmp [local.5],0x5
0088510C |. 0F84 04000000 je 中学电路.00885116
00885112 |. 33C0 xor eax,eax
00885114 |. EB 05 jmp short 中学电路.0088511B
00885116 |> B8 01000000 mov eax,0x1
0088511B |> 85C0 test eax,eax
0088511D |. 0F84 07000000 je 中学电路.0088512A
00885123 |. B8 01000000 mov eax,0x1
00885128 |. EB 05 jmp short 中学电路.0088512F
0088512A |> B8 00000000 mov eax,0x0
0088512F |> 85C0 test eax,eax
00885131 |. 0F84 03010000 je 中学电路.0088523A
00885137 |. 68 3E429A00 push 中学电路.009A423E ; \U盘注册信息.uzc
0088513C |. FF35 88BB1001 push dword ptr ds:[0x110BB88]
00885142 |. B9 02000000 mov ecx,0x2
00885147 |. E8 CCC0B7FF call 中学电路.00401218
0088514C |. 83C4 08 add esp,0x8
0088514F |. 8945 D4 mov [local.11],eax
00885152 |. 68 04000080 push 0x80000004
00885157 |. 6A 00 push 0x0
00885159 |. A1 04BE1001 mov eax,dword ptr ds:[0x110BE04]
0088515E |. 85C0 test eax,eax
00885160 |. 75 05 jnz short 中学电路.00885167
00885162 |. B8 23069A00 mov eax,中学电路.009A0623
00885167 |> 50 push eax
00885168 |. 68 04000080 push 0x80000004
0088516D |. 6A 00 push 0x0
0088516F |. 68 4F429A00 push 中学电路.009A424F ; yhxx
00885174 |. 68 04000080 push 0x80000004
00885179 |. 6A 00 push 0x0
0088517B |. 68 CC069A00 push 中学电路.009A06CC ; zxdlxnsys
00885180 |. 68 04000080 push 0x80000004
00885185 |. 6A 00 push 0x0
00885187 |. 8B45 D4 mov eax,[local.11]
0088518A |. 85C0 test eax,eax
0088518C |. 75 05 jnz short 中学电路.00885193
0088518E |. B8 23069A00 mov eax,中学电路.009A0623
00885193 |> 50 push eax
00885194 |. 68 04000000 push 0x4
00885199 |. BB 70FF8D00 mov ebx,中学电路.008DFF70
0088519E |. E8 FA5B0500 call 中学电路.008DAD9D
008851A3 |. 83C4 34 add esp,0x34
008851A6 |. 8B5D D4 mov ebx,[local.11]
008851A9 |. 85DB test ebx,ebx
008851AB |. 74 09 je short 中学电路.008851B6
008851AD |. 53 push ebx
008851AE |. E8 E45B0500 call 中学电路.008DAD97
008851B3 |. 83C4 04 add esp,0x4
008851B6 |> 68 3E429A00 push 中学电路.009A423E ; \U盘注册信息.uzc
008851BB |. FF35 88BB1001 push dword ptr ds:[0x110BB88]
008851C1 |. B9 02000000 mov ecx,0x2
008851C6 |. E8 4DC0B7FF call 中学电路.00401218
008851CB |. 83C4 08 add esp,0x8
008851CE |. 8945 D4 mov [local.11],eax
008851D1 |. 68 04000080 push 0x80000004
008851D6 |. 6A 00 push 0x0
008851D8 |. A1 08BE1001 mov eax,dword ptr ds:[0x110BE08]
008851DD |. 85C0 test eax,eax
008851DF |. 75 05 jnz short 中学电路.008851E6
008851E1 |. B8 23069A00 mov eax,中学电路.009A0623
008851E6 |> 50 push eax
008851E7 |. 68 04000080 push 0x80000004
008851EC |. 6A 00 push 0x0
008851EE |. 68 7D39D800 push 中学电路.00D8397D ; upxl
008851F3 |. 68 04000080 push 0x80000004
008851F8 |. 6A 00 push 0x0
008851FA |. 68 CC069A00 push 中学电路.009A06CC ; zxdlxnsys
008851FF |. 68 04000080 push 0x80000004
00885204 |. 6A 00 push 0x0
00885206 |. 8B45 D4 mov eax,[local.11]
00885209 |. 85C0 test eax,eax
0088520B |. 75 05 jnz short 中学电路.00885212
0088520D |. B8 23069A00 mov eax,中学电路.009A0623
00885212 |> 50 push eax
00885213 |. 68 04000000 push 0x4
00885218 |. BB 70FF8D00 mov ebx,中学电路.008DFF70
0088521D |. E8 7B5B0500 call 中学电路.008DAD9D
00885222 |. 83C4 34 add esp,0x34
00885225 |. 8B5D D4 mov ebx,[local.11]
00885228 |. 85DB test ebx,ebx
0088522A |. 74 09 je short 中学电路.00885235
0088522C |. 53 push ebx
0088522D |. E8 655B0500 call 中学电路.008DAD97
00885232 |. 83C4 04 add esp,0x4
00885235 |> E9 BE050000 jmp 中学电路.008857F8
0088523A |> 68 04000080 push 0x80000004
0088523F |. 6A 00 push 0x0
00885241 |. A1 04BE1001 mov eax,dword ptr ds:[0x110BE04]
00885246 |. 85C0 test eax,eax
00885248 |. 75 05 jnz short 中学电路.0088524F
0088524A |. B8 23069A00 mov eax,中学电路.009A0623
0088524F |> 50 push eax
00885250 |. 68 04000080 push 0x80000004
00885255 |. 6A 00 push 0x0
00885257 |. 68 54429A00 push 中学电路.009A4254 ; Software\Kerosoft\zxdlxnsys\V5.7
0088525C |. 68 01030080 push 0x80000301
00885261 |. 6A 00 push 0x0
00885263 |. 68 04000000 push 0x4
00885268 |. 68 03000000 push 0x3
0088526D |. BB 50D68D00 mov ebx,中学电路.008DD650
00885272 |. E8 265B0500 call 中学电路.008DAD9D
00885277 |. 83C4 28 add esp,0x28
0088527A |. 68 01030080 push 0x80000301
0088527F |. 6A 00 push 0x0
00885281 |. 68 04000000 push 0x4
00885286 |. 68 01000000 push 0x1
0088528B |. B8 02000000 mov eax,0x2
00885290 |. BB 80EF9400 mov ebx,中学电路.0094EF80
00885295 |. E8 095B0500 call 中学电路.008DADA3
0088529A |. 83C4 10 add esp,0x10
0088529D |. 8945 D4 mov [local.11],eax
008852A0 |. 68 75429A00 push 中学电路.009A4275 ; recent.TTF
008852A5 |. FF75 D4 push [local.11]
008852A8 |. B9 02000000 mov ecx,0x2
008852AD |. E8 66BFB7FF call 中学电路.00401218
008852B2 |. 83C4 08 add esp,0x8
008852B5 |. 8945 D0 mov [local.12],eax
008852B8 |. 8B5D D4 mov ebx,[local.11]
008852BB |. 85DB test ebx,ebx
008852BD |. 74 09 je short 中学电路.008852C8
008852BF |. 53 push ebx
008852C0 |. E8 D25A0500 call 中学电路.008DAD97
008852C5 |. 83C4 04 add esp,0x4
008852C8 |> 68 04000080 push 0x80000004
008852CD |. 6A 00 push 0x0
008852CF |. A1 04BE1001 mov eax,dword ptr ds:[0x110BE04]
008852D4 |. 85C0 test eax,eax
008852D6 |. 75 05 jnz short 中学电路.008852DD
008852D8 |. B8 23069A00 mov eax,中学电路.009A0623
008852DD |> 50 push eax
008852DE |. 68 04000080 push 0x80000004
008852E3 |. 6A 00 push 0x0
008852E5 |. 68 C73A9A00 push 中学电路.009A3AC7 ; V5.7
008852EA |. 68 04000080 push 0x80000004
008852EF |. 6A 00 push 0x0
008852F1 |. 68 CC069A00 push 中学电路.009A06CC ; zxdlxnsys
008852F6 |. 68 04000080 push 0x80000004
008852FB |. 6A 00 push 0x0
008852FD |. 8B45 D0 mov eax,[local.12]
00885300 |. 85C0 test eax,eax
00885302 |. 75 05 jnz short 中学电路.00885309
00885304 |. B8 23069A00 mov eax,中学电路.009A0623
00885309 |> 50 push eax
0088530A |. 68 04000000 push 0x4
0088530F |. BB 70FF8D00 mov ebx,中学电路.008DFF70
00885314 |. E8 845A0500 call 中学电路.008DAD9D
00885319 |. 83C4 34 add esp,0x34
0088531C |. 8B5D D0 mov ebx,[local.12]
0088531F |. 85DB test ebx,ebx
00885321 |. 74 09 je short 中学电路.0088532C
00885323 |. 53 push ebx
00885324 |. E8 6E5A0500 call 中学电路.008DAD97
00885329 |. 83C4 04 add esp,0x4
0088532C |> 68 04000080 push 0x80000004
00885331 |. 6A 00 push 0x0
00885333 |. A1 C4BD1001 mov eax,dword ptr ds:[0x110BDC4]
00885338 |. 85C0 test eax,eax
0088533A |. 75 05 jnz short 中学电路.00885341
0088533C |. B8 23069A00 mov eax,中学电路.009A0623
00885341 |> 50 push eax
00885342 |. 68 04000080 push 0x80000004
00885347 |. 6A 00 push 0x0
00885349 |. 68 8239D800 push 中学电路.00D83982 ; Software\Kerosoft\zxdlxnsys\V5.7L
0088534E |. 68 01030080 push 0x80000301
00885353 |. 6A 00 push 0x0
00885355 |. 68 04000000 push 0x4
0088535A |. 68 03000000 push 0x3
0088535F |. BB 50D68D00 mov ebx,中学电路.008DD650
00885364 |. E8 345A0500 call 中学电路.008DAD9D
00885369 |. 83C4 28 add esp,0x28
0088536C |. 68 01030080 push 0x80000301
00885371 |. 6A 00 push 0x0
00885373 |. 68 04000000 push 0x4
00885378 |. 68 01000000 push 0x1
0088537D |. B8 02000000 mov eax,0x2
00885382 |. BB 80EF9400 mov ebx,中学电路.0094EF80
00885387 |. E8 175A0500 call 中学电路.008DADA3
0088538C |. 83C4 10 add esp,0x10
0088538F |. 8945 D4 mov [local.11],eax
00885392 |. 68 75429A00 push 中学电路.009A4275 ; recent.TTF
00885397 |. FF75 D4 push [local.11]
0088539A |. B9 02000000 mov ecx,0x2
0088539F |. E8 74BEB7FF call 中学电路.00401218
008853A4 |. 83C4 08 add esp,0x8
008853A7 |. 8945 D0 mov [local.12],eax
008853AA |. 8B5D D4 mov ebx,[local.11]
008853AD |. 85DB test ebx,ebx
008853AF |. 74 09 je short 中学电路.008853BA
008853B1 |. 53 push ebx
008853B2 |. E8 E0590500 call 中学电路.008DAD97
008853B7 |. 83C4 04 add esp,0x4
008853BA |> 68 04000080 push 0x80000004
008853BF |. 6A 00 push 0x0
008853C1 |. A1 C4BD1001 mov eax,dword ptr ds:[0x110BDC4]
008853C6 |. 85C0 test eax,eax
008853C8 |. 75 05 jnz short 中学电路.008853CF
008853CA |. B8 23069A00 mov eax,中学电路.009A0623
008853CF |> 50 push eax
008853D0 |. 68 04000080 push 0x80000004
008853D5 |. 6A 00 push 0x0
008853D7 |. 68 A439D800 push 中学电路.00D839A4 ; V5.7L
008853DC |. 68 04000080 push 0x80000004
008853E1 |. 6A 00 push 0x0
008853E3 |. 68 CC069A00 push 中学电路.009A06CC ; zxdlxnsys
008853E8 |. 68 04000080 push 0x80000004
008853ED |. 6A 00 push 0x0
008853EF |. 8B45 D0 mov eax,[local.12]
008853F2 |. 85C0 test eax,eax
008853F4 |. 75 05 jnz short 中学电路.008853FB
008853F6 |. B8 23069A00 mov eax,中学电路.009A0623
008853FB |> 50 push eax
008853FC |. 68 04000000 push 0x4
00885401 |. BB 70FF8D00 mov ebx,中学电路.008DFF70
00885406 |. E8 92590500 call 中学电路.008DAD9D
0088540B |. 83C4 34 add esp,0x34
0088540E |. 8B5D D0 mov ebx,[local.12]
00885411 |. 85DB test ebx,ebx
00885413 |. 74 09 je short 中学电路.0088541E
00885415 |. 53 push ebx
00885416 |. E8 7C590500 call 中学电路.008DAD97
0088541B |. 83C4 04 add esp,0x4
0088541E |> 68 04000080 push 0x80000004
00885423 |. 6A 00 push 0x0
00885425 |. A1 08BE1001 mov eax,dword ptr ds:[0x110BE08]
0088542A |. 85C0 test eax,eax
0088542C |. 75 05 jnz short 中学电路.00885433
0088542E |. B8 23069A00 mov eax,中学电路.009A0623
00885433 |> 50 push eax
00885434 |. 68 04000080 push 0x80000004
00885439 |. 6A 00 push 0x0
0088543B |. 68 AA39D800 push 中学电路.00D839AA ; Software\Kerosoft\zxdlxnsys\V5.7S
00885440 |. 68 01030080 push 0x80000301
00885445 |. 6A 00 push 0x0
00885447 |. 68 04000000 push 0x4
0088544C |. 68 03000000 push 0x3
00885451 |. BB 50D68D00 mov ebx,中学电路.008DD650
00885456 |. E8 42590500 call 中学电路.008DAD9D
0088545B |. 83C4 28 add esp,0x28
0088545E |. 68 01030080 push 0x80000301
00885463 |. 6A 00 push 0x0
00885465 |. 68 04000000 push 0x4
0088546A |. 68 01000000 push 0x1
0088546F |. B8 02000000 mov eax,0x2
00885474 |. BB 80EF9400 mov ebx,中学电路.0094EF80
00885479 |. E8 25590500 call 中学电路.008DADA3
0088547E |. 83C4 10 add esp,0x10
00885481 |. 8945 D4 mov [local.11],eax
00885484 |. 68 75429A00 push 中学电路.009A4275 ; recent.TTF
00885489 |. FF75 D4 push [local.11]
0088548C |. B9 02000000 mov ecx,0x2
00885491 |. E8 82BDB7FF call 中学电路.00401218
00885496 |. 83C4 08 add esp,0x8
00885499 |. 8945 D0 mov [local.12],eax
0088549C |. 8B5D D4 mov ebx,[local.11]
0088549F |. 85DB test ebx,ebx
008854A1 |. 74 09 je short 中学电路.008854AC
008854A3 |. 53 push ebx
008854A4 |. E8 EE580500 call 中学电路.008DAD97
008854A9 |. 83C4 04 add esp,0x4
008854AC |> 68 04000080 push 0x80000004
008854B1 |. 6A 00 push 0x0
008854B3 |. A1 08BE1001 mov eax,dword ptr ds:[0x110BE08]
008854B8 |. 85C0 test eax,eax
008854BA |. 75 05 jnz short 中学电路.008854C1
008854BC |. B8 23069A00 mov eax,中学电路.009A0623
008854C1 |> 50 push eax
008854C2 |. 68 04000080 push 0x80000004
008854C7 |. 6A 00 push 0x0
008854C9 |. 68 CC39D800 push 中学电路.00D839CC ; V5.7S
008854CE |. 68 04000080 push 0x80000004
008854D3 |. 6A 00 push 0x0
008854D5 |. 68 CC069A00 push 中学电路.009A06CC ; zxdlxnsys
008854DA |. 68 04000080 push 0x80000004
008854DF |. 6A 00 push 0x0
008854E1 |. 8B45 D0 mov eax,[local.12]
008854E4 |. 85C0 test eax,eax
008854E6 |. 75 05 jnz short 中学电路.008854ED
008854E8 |. B8 23069A00 mov eax,中学电路.009A0623
008854ED |> 50 push eax
008854EE |. 68 04000000 push 0x4
008854F3 |. BB 70FF8D00 mov ebx,中学电路.008DFF70
008854F8 |. E8 A0580500 call 中学电路.008DAD9D
008854FD |. 83C4 34 add esp,0x34
00885500 |. 8B5D D0 mov ebx,[local.12]
00885503 |. 85DB test ebx,ebx
00885505 |. 74 09 je short 中学电路.00885510
00885507 |. 53 push ebx
00885508 |. E8 8A580500 call 中学电路.008DAD97
0088550D |. 83C4 04 add esp,0x4
00885510 |> 837D EC 01 cmp [local.5],0x1
00885514 |. 0F84 0E000000 je 中学电路.00885528
0088551A |. 837D EC 03 cmp [local.5],0x3
0088551E |. 0F84 04000000 je 中学电路.00885528
00885524 |. 33C0 xor eax,eax
00885526 |. EB 05 jmp short 中学电路.0088552D
00885528 |> B8 01000000 mov eax,0x1
0088552D |> 85C0 test eax,eax
0088552F |. 0F84 72020000 je 中学电路.008857A7
00885535 |. 837D DC 01 cmp [local.9],0x1
00885539 |. 0F85 68020000 jnz 中学电路.008857A7
0088553F |. E8 7C050000 call 中学电路.00885AC0
00885544 |. 68 01030080 push 0x80000301
00885549 |. 6A 00 push 0x0
0088554B |. 50 push eax
0088554C |. 68 01000000 push 0x1
00885551 |. BB 20C88D00 mov ebx,中学电路.008DC820
00885556 |. E8 42580500 call 中学电路.008DAD9D
0088555B |. 83C4 10 add esp,0x10
0088555E |. 8945 D0 mov [local.12],eax
00885561 |. 8D45 D0 lea eax,[local.12]
00885564 |. 50 push eax
00885565 |. E8 8FC6BCFF call 中学电路.00451BF9
0088556A |. 8945 CC mov [local.13],eax
0088556D |. 8B5D D0 mov ebx,[local.12]
00885570 |. 85DB test ebx,ebx
00885572 |. 74 09 je short 中学电路.0088557D
00885574 |. 53 push ebx
00885575 |. E8 1D580500 call 中学电路.008DAD97
0088557A |. 83C4 04 add esp,0x4
0088557D |> 68 04000080 push 0x80000004
00885582 |. 6A 00 push 0x0
00885584 |. 8B45 CC mov eax,[local.13]
00885587 |. 85C0 test eax,eax
00885589 |. 75 05 jnz short 中学电路.00885590
0088558B |. B8 23069A00 mov eax,中学电路.009A0623
00885590 |> 50 push eax
00885591 |. 68 04000080 push 0x80000004
00885596 |. 6A 00 push 0x0
00885598 |. 68 D239D800 push 中学电路.00D839D2 ; Software\Kerosoft\zxdlxnsys\X
0088559D |. 68 01030080 push 0x80000301
008855A2 |. 6A 00 push 0x0
008855A4 |. 68 04000000 push 0x4
008855A9 |. 68 03000000 push 0x3
008855AE |. BB 50D68D00 mov ebx,中学电路.008DD650
008855B3 |. E8 E5570500 call 中学电路.008DAD9D
008855B8 |. 83C4 28 add esp,0x28
008855BB |. 8B5D CC mov ebx,[local.13]
008855BE |. 85DB test ebx,ebx
008855C0 |. 74 09 je short 中学电路.008855CB
008855C2 |. 53 push ebx
008855C3 |. E8 CF570500 call 中学电路.008DAD97
008855C8 |. 83C4 04 add esp,0x4
008855CB |> 68 01030080 push 0x80000301
008855D0 |. 6A 00 push 0x0
008855D2 |. 68 04000000 push 0x4
008855D7 |. 68 01000000 push 0x1
008855DC |. B8 02000000 mov eax,0x2
008855E1 |. BB 80EF9400 mov ebx,中学电路.0094EF80
008855E6 |. E8 B8570500 call 中学电路.008DADA3
008855EB |. 83C4 10 add esp,0x10
008855EE |. 8945 D4 mov [local.11],eax
008855F1 |. 68 75429A00 push 中学电路.009A4275 ; recent.TTF
008855F6 |. FF75 D4 push [local.11]
008855F9 |. B9 02000000 mov ecx,0x2
008855FE |. E8 15BCB7FF call 中学电路.00401218
00885603 |. 83C4 08 add esp,0x8
00885606 |. 8945 D0 mov [local.12],eax
00885609 |. 8B5D D4 mov ebx,[local.11]
0088560C |. 85DB test ebx,ebx
0088560E |. 74 09 je short 中学电路.00885619
00885610 |. 53 push ebx
00885611 |. E8 81570500 call 中学电路.008DAD97
00885616 |. 83C4 04 add esp,0x4
00885619 |> E8 A2040000 call 中学电路.00885AC0
0088561E |. 68 01030080 push 0x80000301
00885623 |. 6A 00 push 0x0
00885625 |. 50 push eax
00885626 |. 68 01000000 push 0x1
0088562B |. BB 20C88D00 mov ebx,中学电路.008DC820
00885630 |. E8 68570500 call 中学电路.008DAD9D
00885635 |. 83C4 10 add esp,0x10
00885638 |. 8945 C8 mov [local.14],eax
0088563B |. 8D45 C8 lea eax,[local.14]
0088563E |. 50 push eax
0088563F |. E8 B5C5BCFF call 中学电路.00451BF9
00885644 |. 8945 C4 mov [local.15],eax
00885647 |. 8B5D C8 mov ebx,[local.14]
0088564A |. 85DB test ebx,ebx
0088564C |. 74 09 je short 中学电路.00885657
0088564E |. 53 push ebx
0088564F |. E8 43570500 call 中学电路.008DAD97
00885654 |. 83C4 04 add esp,0x4
00885657 |> 68 04000080 push 0x80000004
0088565C |. 6A 00 push 0x0
0088565E |. 8B45 C4 mov eax,[local.15]
00885661 |. 85C0 test eax,eax
00885663 |. 75 05 jnz short 中学电路.0088566A
00885665 |. B8 23069A00 mov eax,中学电路.009A0623
0088566A |> 50 push eax
0088566B |. 68 04000080 push 0x80000004
00885670 |. 6A 00 push 0x0
00885672 |. 68 0D3D9A00 push 中学电路.009A3D0D ; X
00885677 |. 68 04000080 push 0x80000004
0088567C |. 6A 00 push 0x0
0088567E |. 68 CC069A00 push 中学电路.009A06CC ; zxdlxnsys
00885683 |. 68 04000080 push 0x80000004
00885688 |. 6A 00 push 0x0
0088568A |. 8B45 D0 mov eax,[local.12]
0088568D |. 85C0 test eax,eax
0088568F |. 75 05 jnz short 中学电路.00885696
00885691 |. B8 23069A00 mov eax,中学电路.009A0623
00885696 |> 50 push eax
00885697 |. 68 04000000 push 0x4
0088569C |. BB 70FF8D00 mov ebx,中学电路.008DFF70
008856A1 |. E8 F7560500 call 中学电路.008DAD9D
008856A6 |. 83C4 34 add esp,0x34
008856A9 |. 8B5D D0 mov ebx,[local.12]
008856AC |. 85DB test ebx,ebx
008856AE |. 74 09 je short 中学电路.008856B9
008856B0 |. 53 push ebx
008856B1 |. E8 E1560500 call 中学电路.008DAD97
008856B6 |. 83C4 04 add esp,0x4
008856B9 |> 8B5D C4 mov ebx,[local.15]
008856BC |. 85DB test ebx,ebx
008856BE |. 74 09 je short 中学电路.008856C9
008856C0 |. 53 push ebx
008856C1 |. E8 D1560500 call 中学电路.008DAD97
008856C6 |. 83C4 04 add esp,0x4
008856C9 |> 68 04000080 push 0x80000004
008856CE |. 6A 00 push 0x0
008856D0 |. 68 B6069A00 push 中学电路.009A06B6 ; 1
008856D5 |. 68 04000080 push 0x80000004
008856DA |. 6A 00 push 0x0
008856DC |. 68 F039D800 push 中学电路.00D839F0 ; Software\Kerosoft\zxdlxnsys\Y
008856E1 |. 68 01030080 push 0x80000301
008856E6 |. 6A 00 push 0x0
008856E8 |. 68 04000000 push 0x4
008856ED |. 68 03000000 push 0x3
008856F2 |. BB 50D68D00 mov ebx,中学电路.008DD650
008856F7 |. E8 A1560500 call 中学电路.008DAD9D
008856FC |. 83C4 28 add esp,0x28
008856FF |. 68 01030080 push 0x80000301
00885704 |. 6A 00 push 0x0
00885706 |. 68 04000000 push 0x4
0088570B |. 68 01000000 push 0x1
00885710 |. B8 02000000 mov eax,0x2
00885715 |. BB 80EF9400 mov ebx,中学电路.0094EF80
0088571A |. E8 84560500 call 中学电路.008DADA3
0088571F |. 83C4 10 add esp,0x10
00885722 |. 8945 D4 mov [local.11],eax
00885725 |. 68 75429A00 push 中学电路.009A4275 ; recent.TTF
0088572A |. FF75 D4 push [local.11]
0088572D |. B9 02000000 mov ecx,0x2
00885732 |. E8 E1BAB7FF call 中学电路.00401218
00885737 |. 83C4 08 add esp,0x8
0088573A |. 8945 D0 mov [local.12],eax
0088573D |. 8B5D D4 mov ebx,[local.11]
00885740 |. 85DB test ebx,ebx
00885742 |. 74 09 je short 中学电路.0088574D
00885744 |. 53 push ebx
00885745 |. E8 4D560500 call 中学电路.008DAD97
0088574A |. 83C4 04 add esp,0x4
0088574D |> 68 04000080 push 0x80000004
00885752 |. 6A 00 push 0x0
00885754 |. 68 B6069A00 push 中学电路.009A06B6 ; 1
00885759 |. 68 04000080 push 0x80000004
0088575E |. 6A 00 push 0x0
00885760 |. 68 0E3AD800 push 中学电路.00D83A0E ; Y
00885765 |. 68 04000080 push 0x80000004
0088576A |. 6A 00 push 0x0
0088576C |. 68 CC069A00 push 中学电路.009A06CC ; zxdlxnsys
00885771 |. 68 04000080 push 0x80000004
00885776 |. 6A 00 push 0x0
00885778 |. 8B45 D0 mov eax,[local.12]
0088577B |. 85C0 test eax,eax
0088577D |. 75 05 jnz short 中学电路.00885784
0088577F |. B8 23069A00 mov eax,中学电路.009A0623
00885784 |> 50 push eax
00885785 |. 68 04000000 push 0x4
0088578A |. BB 70FF8D00 mov ebx,中学电路.008DFF70
0088578F |. E8 09560500 call 中学电路.008DAD9D
00885794 |. 83C4 34 add esp,0x34
00885797 |. 8B5D D0 mov ebx,[local.12]
0088579A |. 85DB test ebx,ebx
0088579C |. 74 09 je short 中学电路.008857A7
0088579E |. 53 push ebx
0088579F |. E8 F3550500 call 中学电路.008DAD97
008857A4 |. 83C4 04 add esp,0x4
008857A7 |> 68 3E429A00 push 中学电路.009A423E ; \U盘注册信息.uzc
008857AC |. FF35 88BB1001 push dword ptr ds:[0x110BB88]
008857B2 |. B9 02000000 mov ecx,0x2
008857B7 |. E8 5CBAB7FF call 中学电路.00401218
008857BC |. 83C4 08 add esp,0x8
008857BF |. 8945 D4 mov [local.11],eax
008857C2 |. 68 04000080 push 0x80000004
008857C7 |. 6A 00 push 0x0
008857C9 |. 8B45 D4 mov eax,[local.11]
008857CC |. 85C0 test eax,eax
008857CE |. 75 05 jnz short 中学电路.008857D5
008857D0 |. B8 23069A00 mov eax,中学电路.009A0623
008857D5 |> 50 push eax
008857D6 |. 68 01000000 push 0x1
008857DB |. BB 80CD8D00 mov ebx,中学电路.008DCD80
008857E0 |. E8 B8550500 call 中学电路.008DAD9D
008857E5 |. 83C4 10 add esp,0x10
008857E8 |. 8B5D D4 mov ebx,[local.11]
008857EB |. 85DB test ebx,ebx
008857ED |. 74 09 je short 中学电路.008857F8
008857EF |. 53 push ebx
008857F0 |. E8 A2550500 call 中学电路.008DAD97
008857F5 |. 83C4 04 add esp,0x4
008857F8 |> 6A 00 push 0x0
008857FA |. 6A 00 push 0x0
008857FC |. 6A 00 push 0x0
008857FE |. 68 04000080 push 0x80000004
00885803 |. 6A 00 push 0x0
00885805 |. 68 2E0D9A00 push 中学电路.009A0D2E ; 提示：
0088580A |. 68 01030080 push 0x80000301
0088580F |. 6A 00 push 0x0
00885811 |. 68 00000000 push 0x0
00885816 |. 68 04000080 push 0x80000004
0088581B |. 6A 00 push 0x0
0088581D |. 68 103AD800 push 中学电路.00D83A10 ; 注册成功，谢谢您的支持！
00885822 |. 68 04000000 push 0x4
00885827 |. BB 70D68D00 mov ebx,中学电路.008DD670
0088582C |. E8 6C550500 call 中学电路.008DAD9D
00885831 |. 83C4 34 add esp,0x34
00885834 |. 68 01030080 push 0x80000301
00885839 |. 6A 00 push 0x0
0088583B |. 68 0A000000 push 0xA
00885840 |. 68 03000200 push 0x20003
00885845 |. 68 03000116 push 0x16010003
0088584A |. 68 01000152 push 0x52010001
0088584F |. 68 02000000 push 0x2
00885854 |. B8 01000000 mov eax,0x1
00885859 |. BB 80A49400 mov ebx,中学电路.0094A480
0088585E |. E8 40550500 call 中学电路.008DADA3
00885863 |. 83C4 1C add esp,0x1C
00885866 |. 68 01030080 push 0x80000301
0088586B |. 6A 00 push 0x0
0088586D |. 68 00000000 push 0x0
00885872 |. 68 04000080 push 0x80000004
00885877 |. 6A 00 push 0x0
00885879 |. 68 293AD800 push 中学电路.00D83A29 ; 退出实验室
0088587E |. 68 04000080 push 0x80000004
00885883 |. 6A 00 push 0x0
00885885 |. 68 98CF9A00 push 中学电路.009ACF98 ; 退出
0088588A |. 68 01030080 push 0x80000301
0088588F |. 6A 00 push 0x0
00885891 |. 68 02000000 push 0x2
00885896 |. 68 01030080 push 0x80000301
0088589B |. 6A 00 push 0x0
0088589D |. 68 00000000 push 0x0
008858A2 |. 68 01030080 push 0x80000301
008858A7 |. 6A 00 push 0x0
008858A9 |. 68 0C000000 push 0xC
008858AE |. 68 03000200 push 0x20003
008858B3 |. 68 03000116 push 0x16010003
008858B8 |. 68 01000152 push 0x52010001
008858BD |. 68 07000000 push 0x7
008858C2 |. B8 01000000 mov eax,0x1
008858C7 |. BB 20A19400 mov ebx,中学电路.0094A120
008858CC |. E8 D2540500 call 中学电路.008DADA3
008858D1 |. 83C4 58 add esp,0x58
008858D4 |. C705 BCBD1001>mov dword ptr ds:[0x110BDBC],0x1
008858DE |. C705 48BF1001>mov dword ptr ds:[0x110BF48],0x0
008858E8 |. E8 F51EBAFF call 中学电路.004277E2
008858ED |. 68 01030080 push 0x80000301
008858F2 |. 6A 00 push 0x0
008858F4 |. 68 64000000 push 0x64
008858F9 |. 68 01000000 push 0x1
008858FE |. BB 40FE8D00 mov ebx,中学电路.008DFE40
00885903 |. E8 95540500 call 中学电路.008DAD9D
00885908 |. 83C4 10 add esp,0x10
0088590B |. 6A 00 push 0x0
0088590D |. 6A 00 push 0x0
0088590F |. 6A 00 push 0x0
00885911 |. 68 01000100 push 0x10001
00885916 |. 68 EE2B0106 push 0x6012BEE
0088591B |. 68 ED2B0152 push 0x52012BED
00885920 |. 68 02000000 push 0x2
00885925 |. BB 10DF8D00 mov ebx,中学电路.008DDF10
0088592A |. E8 6E540500 call 中学电路.008DAD9D
0088592F |. 83C4 1C add esp,0x1C
00885932 |. E9 7A000000 jmp 中学电路.008859B1
00885937 |> 6A 00 push 0x0
00885939 |. 6A 00 push 0x0
0088593B |. 6A 00 push 0x0
0088593D |. 68 04000080 push 0x80000004
00885942 |. 6A 00 push 0x0
00885944 |. 68 2E0D9A00 push 中学电路.009A0D2E ; 提示：
00885949 |. 68 01030080 push 0x80000301
0088594E |. 6A 00 push 0x0
00885950 |. 68 00000000 push 0x0
00885955 |. 68 04000080 push 0x80000004
0088595A |. 6A 00 push 0x0
0088595C |. 68 343AD800 push 中学电路.00D83A34 ; 注册码有误。
00885961 |. 68 04000000 push 0x4
00885966 |. BB 70D68D00 mov ebx,中学电路.008DD670
0088596B |. E8 2D540500 call 中学电路.008DAD9D
00885970 |. 83C4 34 add esp,0x34
00885973 |. 6A 00 push 0x0
00885975 |. 68 23069A00 push 中学电路.009A0623
0088597A |. 6A FF push -0x1
0088597C |. 6A 08 push 0x8
0088597E |. 68 99FE0116 push 0x1601FE99
00885983 |. 68 ED2B0152 push 0x52012BED
00885988 |. E8 28540500 call 中学电路.008DADB5
0088598D |. 83C4 18 add esp,0x18
00885990 |. 68 05000100 push 0x10005
00885995 |. 68 99FE0116 push 0x1601FE99
0088599A |. 68 ED2B0152 push 0x52012BED
0088599F |. 68 01000000 push 0x1
008859A4 |. BB 90E08D00 mov ebx,中学电路.008DE090
008859A9 |. E8 EF530500 call 中学电路.008DAD9D
008859AE |. 83C4 10 add esp,0x10
008859B1 |> E9 3C000000 jmp 中学电路.008859F2
008859B6 |> 6A 00 push 0x0
008859B8 |. 6A 00 push 0x0
008859BA |. 6A 00 push 0x0
008859BC |. 68 04000080 push 0x80000004
008859C1 |. 6A 00 push 0x0
008859C3 |. 68 2E0D9A00 push 中学电路.009A0D2E ; 提示：
008859C8 |. 68 01030080 push 0x80000301
008859CD |. 6A 00 push 0x0
008859CF |. 68 40000000 push 0x40
008859D4 |. 68 04000080 push 0x80000004
008859D9 |. 6A 00 push 0x0
008859DB |. 68 413AD800 push 中学电路.00D83A41 ; 您本次尝试注册已达5次，请下次再注册，\r\n如果有疑问请联系软件作者。
008859E0 |. 68 04000000 push 0x4
008859E5 |. BB 70D68D00 mov ebx,中学电路.008DD670
我先用ascii查找到“注册码有误”，再向上找到关键跳，在关键跳处把jnz改成jz，途中有几个报错的call，全部都用nop爆破掉，但每次打开都要重新点一次注册，十分麻烦，所以求大佬帮忙指点一下验证call或注册码在哪里看，谢谢！！！
求大佬指教！！！
原版链接（文件太大存不了附件，解压密码：52pojie）：https://wws.lanzouj.com/i3Kv0n3yx1e 密码:28nb |
|
发表于 2021-3-20 00:26
收藏
淘帖
有用
分享到朋友圈
