-
-
[旧帖] [求助]求爆破点儿 0.00雪花
-
发表于: 2011-5-16 16:52
-
我是一名刚开始学逆向的新手，现遇到一问题不能解决，请大牛们指点一、二，不胜感激。
软件打开后先打开主窗口，然后又弹出来注册窗口，注册窗口如下图：
我找到004B823B 为断点儿，输入任一注册码后，程序被断下如下图，但是不知道怎么入手，我按F8一步步走，发现程序因为输入错误的注册码而跳过“已注册”那一部分，我就改了跳转的那一行 把“004B8295 /0F84 70010000 je 004B840B ” 中的 je 改为 jnz ,又保存为EXE文件，想爆破软件，但是打开出现注册对话框后，输入一个注册码，点注册，出现下面错误，然后程序就退出了。
004B8227 . 8B45 F0 mov eax, dword ptr [ebp-10]
004B822A . 85C0 test eax, eax
004B822C . 75 05 jnz short 004B8233
004B822E . B8 D87A5900 mov eax, 00597AD8
004B8233 > 50 push eax
004B8234 . 68 04000080 push 80000004
004B8239 . 6A 00 push 0
004B823B . 68 521F5F00 push 005F1F52 ; 注册码
004B8240 . 68 04000080 push 80000004
004B8245 . 6A 00 push 0
004B8247 . 8B5D F4 mov ebx, dword ptr [ebp-C]
004B824A . 8B03 mov eax, dword ptr [ebx]
004B824C . 85C0 test eax, eax
004B824E . 75 05 jnz short 004B8255
004B8250 . B8 D87A5900 mov eax, 00597AD8
004B8255 > 50 push eax
004B8256 . 68 04000080 push 80000004
004B825B . 6A 00 push 0
004B825D . 8B5D F8 mov ebx, dword ptr [ebp-8]
004B8260 . 8B03 mov eax, dword ptr [ebx]
004B8262 . 85C0 test eax, eax
004B8264 . 75 05 jnz short 004B826B
004B8266 . B8 D87A5900 mov eax, 00597AD8
004B826B > 50 push eax
004B826C . 68 04000000 push 4
004B8271 . BB C0004C00 mov ebx, 004C00C0
004B8276 . E8 61390000 call 004BBBDC
004B827B . 83C4 34 add esp, 34
004B827E . 8B5D F0 mov ebx, dword ptr [ebp-10]
004B8281 . 85DB test ebx, ebx
004B8283 . 74 09 je short 004B828E
004B8285 . 53 push ebx
004B8286 . E8 39390000 call 004BBBC4
004B828B . 83C4 04 add esp, 4
004B828E > E8 0394F4FF call 00401696
004B8293 . 85C0 test eax, eax
004B8295 /0F84 70010000 je 004B840B －－（输入错误的注册码时）从这里开始跳转，跳到后面红字区
004B829B . |6A 00 push 0
004B829D . |68 01000000 push 1
004B82A2 . |6A FF push -1
004B82A4 . |6A 06 push 6
004B82A6 . |68 72670116 push 16016772
004B82AB . |68 4C670152 push 5201674C
004B82B0 . |E8 1B390000 call 004BBBD0
004B82B5 . |83C4 18 add esp, 18
004B82B8 . |6A 00 push 0
004B82BA . |68 5F7B5900 push 00597B5F ; 已注册
004B82BF . |6A FF push -1
004B82C1 . |6A 0A push 0A
004B82C3 . |68 72670116 push 16016772
004B82C8 . |68 4C670152 push 5201674C
004B82CD . |E8 FE380000 call 004BBBD0
004B82D2 . |83C4 18 add esp, 18
004B82D5 . |6A 00 push 0
004B82D7 . |68 62A97800 push 0078A962 ; 恭喜,已注册!
004B82DC . |6A FF push -1
004B82DE . |6A 08 push 8
004B82E0 . |68 4D670106 push 601674D
004B82E5 . |68 4C670152 push 5201674C
004B82EA . |E8 E1380000 call 004BBBD0
004B82EF . |83C4 18 add esp, 18
004B82F2 . |E8 E9F1FCFF call 004874E0
004B82F7 . |E8 D1E1F5FF call 004164CD
004B82FC . |68 02000080 push 80000002
004B8301 . |6A 00 push 0
004B8303 . |50 push eax
004B8304 . |68 01000000 push 1
004B8309 . |BB E0CE4B00 mov ebx, 004BCEE0
004B830E . |E8 C9380000 call 004BBBDC
004B8313 . |83C4 10 add esp, 10
004B8316 . |8945 E8 mov dword ptr [ebp-18], eax
004B8319 . |8955 EC mov dword ptr [ebp-14], edx
004B831C . |DD45 E8 fld qword ptr [ebp-18]
004B831F . |E8 008FF4FF call 00401224
004B8324 . |33C9 xor ecx, ecx
004B8326 > |41 inc ecx
004B8327 . |51 push ecx
004B8328 . |50 push eax
004B8329 . |3BC8 cmp ecx, eax
004B832B . |0F8F 0B000000 jg 004B833C
004B8331 . |C745 FC 01000>mov dword ptr [ebp-4], 1
004B8338 . |58 pop eax
004B8339 . |59 pop ecx
004B833A .^|EB EA jmp short 004B8326
004B833C > |83C4 08 add esp, 8
004B833F . |837D FC 00 cmp dword ptr [ebp-4], 0
004B8343 . |0F85 0A000000 jnz 004B8353
004B8349 . |E8 43E2F5FF call 00416591
004B834E . |E9 A8010000 jmp 004B84FB
004B8353 > |833D AC928C00>cmp dword ptr [8C92AC], 0
004B835A . |0F85 61000000 jnz 004B83C1
004B8360 . |C745 F8 00000>mov dword ptr [ebp-8], 0
004B8367 . |6A 00 push 0
004B8369 . |8D45 F8 lea eax, dword ptr [ebp-8]
004B836C . |50 push eax
004B836D . |C745 F4 00000>mov dword ptr [ebp-C], 0
004B8374 . |6A 00 push 0
004B8376 . |FF75 F4 push dword ptr [ebp-C]
004B8379 . |68 5B3D4800 push 00483D5B
004B837E . |E8 BBE2F5FF call 0041663E
004B8383 . |68 00000000 push 0
004B8388 . |BB C0F64B00 mov ebx, 004BF6C0 ; j
004B838D . |E8 4A380000 call 004BBBDC
004B8392 . |83C4 04 add esp, 4
004B8395 . |6A 00 push 0
004B8397 . |6A 00 push 0
004B8399 . |6A 00 push 0
004B839B . |68 01000100 push 10001
004B83A0 . |68 4D670106 push 601674D
004B83A5 . |68 4C670152 push 5201674C
004B83AA . |68 02000000 push 2
004B83AF . |BB D0F64B00 mov ebx, 004BF6D0
004B83B4 . |E8 23380000 call 004BBBDC
004B83B9 . |83C4 1C add esp, 1C
004B83BC . |E9 3A010000 jmp 004B84FB
004B83C1 > |68 04000080 push 80000004
004B83C6 . |6A 00 push 0
004B83C8 . |68 098F5900 push 00598F09 ; 提示
004B83CD . |68 01030080 push 80000301
004B83D2 . |6A 00 push 0
004B83D4 . |68 40000000 push 40
004B83D9 . |68 04000080 push 80000004
004B83DE . |6A 00 push 0
004B83E0 . |68 CAA97800 push 0078A9CA ; 恭喜,注册成功,您现在需要重打开软件!
004B83E5 . |68 03000000 push 3
004B83EA . |BB C0EE4B00 mov ebx, 004BEEC0
004B83EF . |E8 E8370000 call 004BBBDC
004B83F4 . |83C4 28 add esp, 28
004B83F7 . |6A 00 push 0
004B83F9 . |E8 E4370000 call 004BBBE2
004B83FE . |83C4 04 add esp, 4
004B8401 . |E9 F5000000 jmp 004B84FB
004B8406 . |E9 F0000000 jmp 004B84FB
004B840B > \E8 C549F7FF call 0042CDD5 －－跳转到这里
004B8410 . 8945 F4 mov dword ptr [ebp-C], eax
004B8413 . 837D F4 01 cmp dword ptr [ebp-C], 1
004B8417 . 0F85 57000000 jnz 004B8474
004B841D . C745 F8 00000>mov dword ptr [ebp-8], 0
004B8424 . 6A 00 push 0
004B8426 . 8D45 F8 lea eax, dword ptr [ebp-8]
004B8429 . 50 push eax
004B842A . C745 F4 00000>mov dword ptr [ebp-C], 0
004B8431 . 6A 00 push 0
004B8433 . FF75 F4 push dword ptr [ebp-C]
004B8436 . 68 B8944300 push 004394B8
004B843B . E8 FEE1F5FF call 0041663E
004B8440 . 68 00000000 push 0
004B8445 . BB C0F64B00 mov ebx, 004BF6C0 ; j
004B844A . E8 8D370000 call 004BBBDC
004B844F . 83C4 04 add esp, 4
004B8452 . 6A 00 push 0
004B8454 . 68 00000000 push 0
004B8459 . 6A FF push -1
004B845B . 6A 05 push 5
004B845D . 68 4D670106 push 601674D
004B8462 . 68 4C670152 push 5201674C
004B8467 . E8 64370000 call 004BBBD0
004B846C . 83C4 18 add esp, 18
004B846F . E9 87000000 jmp 004B84FB
004B8474 > 6A 00 push 0
004B8476 . 68 00000000 push 0
004B847B . 6A FF push -1
004B847D . 6A 06 push 6
004B847F . 68 72670116 push 16016772
004B8484 . 68 4C670152 push 5201674C
004B8489 . E8 42370000 call 004BBBD0
004B848E . 83C4 18 add esp, 18
004B8491 . 6A 00 push 0
004B8493 . 68 EEA97800 push 0078A9EE ; 注册
004B8498 . 6A FF push -1
004B849A . 6A 0A push 0A
004B849C . 68 72670116 push 16016772
004B84A1 . 68 4C670152 push 5201674C
004B84A6 . E8 25370000 call 004BBBD0
004B84AB . 83C4 18 add esp, 18
004B84AE . 6A 00 push 0
004B84B0 . 68 F3A97800 push 0078A9F3 ; 注册失败
004B84B5 . 6A FF push -1
004B84B7 . 6A 08 push 8
004B84B9 . 68 4D670106 push 601674D
004B84BE . 68 4C670152 push 5201674C
004B84C3 . E8 08370000 call 004BBBD0
004B84C8 . 83C4 18 add esp, 18
004B84CB . 6A 00 push 0
004B84CD . 6A 00 push 0
004B84CF . 6A 00 push 0
004B84D1 . 68 01030080 push 80000301
004B84D6 . 6A 00 push 0
004B84D8 . 68 00000000 push 0
004B84DD . 68 04000080 push 80000004
004B84E2 . 6A 00 push 0
004B84E4 . 68 F3A97800 push 0078A9F3 ; 注册失败
004B84E9 . 68 03000000 push 3
004B84EE . BB C0EE4B00 mov ebx, 004BEEC0
004B84F3 . E8 E4360000 call 004BBBDC
004B84F8 . 83C4 28 add esp, 28
004B84FB > 8BE5 mov esp, ebp
004B84FD . 5D pop ebp
004B84FE . C3 retn
004B84FF /. 55 push ebp
004B8500 |. 8BEC mov ebp, esp
004B8502 |. 6A 00 push 0
004B8504 |. 68 00000000 push 0
004B8509 |. 6A FF push -1
004B850B |. 6A 08 push 8
004B850D |. 68 46670116 push 16016746
004B8512 |. 68 68020152 push 52010268
004B8517 |. E8 B4360000 call 004BBBD0
004B851C |. 83C4 18 add esp, 18
004B851F |. 6A 00 push 0
004B8521 |. 68 FCA97800 push 0078A9FC ; http://dosame.com/reg1/
004B8526 |. 6A FF push -1
004B8528 |. 6A 0B push 0B
004B852A |. 68 45670116 push 16016745
004B852F |. 68 68020152 push 52010268
004B8534 |. E8 97360000 call 004BBBD0
004B8539 |. 83C4 18 add esp, 18
004B853C |. 8BE5 mov esp, ebp
004B853E |. 5D pop ebp
004B853F \. C3 retn
004B8540 /. 55 push ebp
004B8541 |. 8BEC mov ebp, esp
004B8543 |. 81EC 08000000 sub esp, 8
004B8549 |. 6A FF push -1
004B854B |. 6A 0B push 0B
004B854D |. 68 36760116 push 16017636
004B8552 |. 68 33760152 push 52017633
004B8557 |. E8 7A360000 call 004BBBD6
004B855C |. 83C4 10 add esp, 10
004B855F |. 8945 FC mov dword ptr [ebp-4], eax
004B8562 |. 6A FF push -1
004B8564 |. 6A 12 push 12
004B8566 |. 68 36760116 push 16017636
004B856B |. 68 33760152 push 52017633
004B8570 |. E8 61360000 call 004BBBD6
004B8575 |. 83C4 10 add esp, 10
004B8578 |. 8945 F8 mov dword ptr [ebp-8], eax
004B857B |. 6A 01 push 1
004B857D |. FF75 F8 push dword ptr [ebp-8]
004B8580 |. 8D45 FC lea eax, dword ptr [ebp-4]
004B8583 |. 50 push eax
004B8584 |. E8 F637FFFF call 004ABD7F
004B8589 |. 8B5D FC mov ebx, dword ptr [ebp-4]
004B858C |. 85DB test ebx, ebx
004B858E |. 74 09 je short 004B8599
004B8590 |. 53 push ebx
004B8591 |. E8 2E360000 call 004BBBC4
004B8596 |. 83C4 04 add esp, 4
004B8599 |> 8BE5 mov esp, ebp
004B859B |. 5D pop ebp
004B859C \. C3 retn
004B859D /. 55 push ebp
004B859E |. 8BEC mov ebp, esp
004B85A0 |. 81EC 08000000 sub esp, 8
004B85A6 |. 6A 00 push 0
004B85A8 |. 68 01000000 push 1
004B85AD |. 6A FF push -1
004B85AF |. 6A 12 push 12
004B85B1 |. 68 575E0116 push 16015E57
004B85B6 |. 68 4F5E0152 push 52015E4F
004B85BB |. E8 10360000 call 004BBBD0
004B85C0 |. 83C4 18 add esp, 18
004B85C3 |. 6A FF push -1
004B85C5 |. 6A 12 push 12
004B85C7 |. 68 575E0116 push 16015E57
004B85CC |. 68 4F5E0152 push 52015E4F
004B85D1 |. E8 00360000 call 004BBBD6
004B85D6 |. 83C4 10 add esp, 10
004B85D9 |. 83E0 01 and eax, 1
004B85DC |. 83F0 01 xor eax, 1
004B85DF |. 6A 00 push 0
004B85E1 |. 50 push eax
004B85E2 |. 6A FF push -1
004B85E4 |. 6A 12 push 12
004B85E6 |. 68 555E0116 push 16015E55
004B85EB |. 68 4F5E0152 push 52015E4F
004B85F0 |. E8 DB350000 call 004BBBD0
004B85F5 |. 83C4 18 add esp, 18
004B85F8 |. 6A FF push -1
004B85FA |. 6A 12 push 12
004B85FC |. 68 575E0116 push 16015E57
004B8601 |. 68 4F5E0152 push 52015E4F
004B8606 |. E8 CB350000 call 004BBBD6
004B860B |. 83C4 10 add esp, 10
004B860E |. 83E0 01 and eax, 1
004B8611 |. 83F0 01 xor eax, 1
004B8614 |. 6A 00 push 0
004B8616 |. 50 push eax
004B8617 |. 6A FF push -1
004B8619 |. 6A 12 push 12
004B861B |. 68 565E0116 push 16015E56
004B8620 |. 68 4F5E0152 push 52015E4F
004B8625 |. E8 A6350000 call 004BBBD0
004B862A |. 83C4 18 add esp, 18
004B862D |. 6A FF push -1
004B862F |. 6A 12 push 12
004B8631 |. 68 565E0116 push 16015E56
004B8636 |. 68 4F5E0152 push 52015E4F
004B863B |. E8 96350000 call 004BBBD6
004B8640 |. 83C4 10 add esp, 10
004B8643 |. 83E0 01 and eax, 1
004B8646 |. 83F0 01 xor eax, 1
004B8649 |. 6A 00 push 0
004B864B |. 50 push eax
004B864C |. 6A FF push -1
004B864E |. 6A 06 push 6
004B8650 |. 68 535E0116 push 16015E53
004B8655 |. 68 4F5E0152 push 52015E4F
004B865A |. E8 71350000 call 004BBBD0
004B865F |. 83C4 18 add esp, 18
004B8662 |. 6A FF push -1
004B8664 |. 6A 12 push 12
004B8666 |. 68 575E0116 push 16015E57
004B866B |. 68 4F5E0152 push 52015E4F
004B8670 |. E8 61350000 call 004BBBD6
004B8675 |. 83C4 10 add esp, 10
004B8678 |. 83E0 01 and eax, 1
004B867B |. 83F0 01 xor eax, 1
004B867E |. 6A 00 push 0
004B8680 |. 50 push eax
004B8681 |. 6A FF push -1
004B8683 |. 6A 06 push 6
004B8685 |. 68 5A5E0116 push 16015E5A
004B868A |. 68 4F5E0152 push 52015E4F
004B868F |. E8 3C350000 call 004BBBD0
004B8694 |. 83C4 18 add esp, 18
004B8697 |. 33DB xor ebx, ebx
004B8699 |. 8BE5 mov esp, ebp
004B869B |. 5D pop ebp
004B869C \. C2 0C00 retn 0C
004B869F /. 55 push ebp
004B86A0 |. 8BEC mov ebp, esp
004B86A2 |. 68 01030080 push 80000301
004B86A7 |. 6A 00 push 0
004B86A9 |. 68 07000000 push 7
004B86AE |. 68 01000400 push 40001
004B86B3 |. 68 EC2A0116 push 16012AEC
004B86B8 |. 68 E72A0152 push 52012AE7
004B86BD |. 68 02000000 push 2
004B86C2 |. B8 03000000 mov eax, 3
004B86C7 |. BB C0615300 mov ebx, 005361C0
004B86CC |. E8 17350000 call 004BBBE8
004B86D1 |. 83C4 1C add esp, 1C
004B86D4 |. 8BE5 mov esp, ebp
004B86D6 |. 5D pop ebp
004B86D7 \. C3 retn
004B86D8 /$ 55 push ebp
004B86D9 |. 8BEC mov ebp, esp
004B86DB |. E8 0E000000 call 004B86EE
004B86E0 |. B8 00000000 mov eax, 0
004B86E5 |. E9 00000000 jmp 004B86EA
004B86EA |> 8BE5 mov esp, ebp
004B86EC |. 5D pop ebp
004B86ED \. C3 retn
004B86EE /$ 55 push ebp
004B86EF |. 8BEC mov ebp, esp
004B86F1 |. 8BE5 mov esp, ebp
004B86F3 |. 5D pop ebp
004B86F4 \. C3 retn
004B86F5 /. 55 push ebp
004B86F6 |. 8BEC mov ebp, esp
004B86F8 |. 81EC 0C000000 sub esp, 0C
004B86FE |. C745 FC 00000>mov dword ptr [ebp-4], 0
004B8705 |. 68 25000100 push 10025
004B870A |. 68 58030116 push 16010358
004B870F |. 68 68020152 push 52010268
004B8714 |. 68 01000000 push 1
004B8719 |. BB B0FF4B00 mov ebx, 004BFFB0
004B871E |. E8 B9340000 call 004BBBDC
004B8723 |. 83C4 10 add esp, 10
004B8726 |. 8945 F8 mov dword ptr [ebp-8], eax
004B8729 |. 68 05000080 push 80000005
004B872E |. 6A 00 push 0
004B8730 |. 8B45 F8 mov eax, dword ptr [ebp-8]
004B8733 |. 85C0 test eax, eax
004B8735 |. 75 05 jnz short 004B873C
004B8737 |. B8 A07C5900 mov eax, 00597CA0
004B873C |> 50 push eax
004B873D |. 68 01000000 push 1
004B8742 |. BB A0DD4B00 mov ebx, 004BDDA0
004B8747 |. E8 90340000 call 004BBBDC
004B874C |. 83C4 10 add esp, 10
004B874F |. 8945 F4 mov dword ptr [ebp-C], eax
004B8752 |. 8B5D F8 mov ebx, dword ptr [ebp-8]
004B8755 |. 85DB test ebx, ebx
004B8757 |. 74 09 je short 004B8762
004B8759 |. 53 push ebx
004B875A |. E8 65340000 call 004BBBC4
004B875F |. 83C4 04 add esp, 4
004B8762 |> 8B45 F4 mov eax, dword ptr [ebp-C]
004B8765 |. 50 push eax
004B8766 |. 8B5D FC mov ebx, dword ptr [ebp-4]
004B8769 |. 85DB test ebx, ebx
004B876B |. 74 09 je short 004B8776
004B876D |. 53 push ebx
004B876E |. E8 51340000 call 004BBBC4
004B8773 |. 83C4 04 add esp, 4
004B8776 |> 58 pop eax
004B8777 |. 8945 FC mov dword ptr [ebp-4], eax
004B877A |. 68 14AA7800 push 0078AA14 ; 不合法的序列号
004B877F |. FF75 FC push dword ptr [ebp-4]
004B8782 |. E8 AC9AF4FF call 00402233
004B8787 |. 83C4 08 add esp, 8
004B878A |. 83F8 00 cmp eax, 0
004B878D |. 0F85 6F000000 jnz 004B8802
004B8793 |. 6A 00 push 0
004B8795 |. 68 14AA7800 push 0078AA14 ; 不合法的序列号
004B879A |. 6A FF push -1
004B879C |. 6A 08 push 8
004B879E |. 68 67020106 push 6010267
004B87A3 |. 68 68020152 push 52010268
004B87A8 |. E8 23340000 call 004BBBD0
004B87AD |. 83C4 18 add esp, 18
004B87B0 |. 6A 00 push 0
004B87B2 |. 6A 00 push 0
004B87B4 |. 6A 00 push 0
004B87B6 |. 68 01030080 push 80000301
004B87BB |. 6A 00 push 0
004B87BD |. 68 00000000 push 0
004B87C2 |. 68 04000080 push 80000004
004B87C7 |. 6A 00 push 0
004B87C9 |. 68 14AA7800 push 0078AA14 ; 不合法的序列号
004B87CE |. 68 03000000 push 3
004B87D3 |. BB C0EE4B00 mov ebx, 004BEEC0
004B87D8 |. E8 FF330000 call 004BBBDC
004B87DD |. 83C4 28 add esp, 28
004B87E0 |. 6A 00 push 0
004B87E2 |. 68 00000000 push 0
004B87E7 |. 6A FF push -1
004B87E9 |. 6A 06 push 6
004B87EB |. 68 B2660116 push 160166B2
004B87F0 |. 68 68020152 push 52010268
004B87F5 |. E8 D6330000 call 004BBBD0
004B87FA |. 83C4 18 add esp, 18
004B87FD |. E9 20000000 jmp 004B8822
004B8802 |> 6A 00 push 0
004B8804 |. FF75 FC push dword ptr [ebp-4]
004B8807 |. 6A FF push -1
004B8809 |. 6A 08 push 8
004B880B |. 68 B0660116 push 160166B0
004B8810 |. 68 68020152 push 52010268
004B8815 |. E8 B6330000 call 004BBBD0
004B881A |. 83C4 18 add esp, 18
软件打开后先打开主窗口，然后又弹出来注册窗口，注册窗口如下图：
我找到004B823B 为断点儿，输入任一注册码后，程序被断下如下图，但是不知道怎么入手，我按F8一步步走，发现程序因为输入错误的注册码而跳过“已注册”那一部分，我就改了跳转的那一行 把“004B8295 /0F84 70010000 je 004B840B ” 中的 je 改为 jnz ,又保存为EXE文件，想爆破软件，但是打开出现注册对话框后，输入一个注册码，点注册，出现下面错误，然后程序就退出了。
004B8227 . 8B45 F0 mov eax, dword ptr [ebp-10]
004B822A . 85C0 test eax, eax
004B822C . 75 05 jnz short 004B8233
004B822E . B8 D87A5900 mov eax, 00597AD8
004B8233 > 50 push eax
004B8234 . 68 04000080 push 80000004
004B8239 . 6A 00 push 0
004B823B . 68 521F5F00 push 005F1F52 ; 注册码
004B8240 . 68 04000080 push 80000004
004B8245 . 6A 00 push 0
004B8247 . 8B5D F4 mov ebx, dword ptr [ebp-C]
004B824A . 8B03 mov eax, dword ptr [ebx]
004B824C . 85C0 test eax, eax
004B824E . 75 05 jnz short 004B8255
004B8250 . B8 D87A5900 mov eax, 00597AD8
004B8255 > 50 push eax
004B8256 . 68 04000080 push 80000004
004B825B . 6A 00 push 0
004B825D . 8B5D F8 mov ebx, dword ptr [ebp-8]
004B8260 . 8B03 mov eax, dword ptr [ebx]
004B8262 . 85C0 test eax, eax
004B8264 . 75 05 jnz short 004B826B
004B8266 . B8 D87A5900 mov eax, 00597AD8
004B826B > 50 push eax
004B826C . 68 04000000 push 4
004B8271 . BB C0004C00 mov ebx, 004C00C0
004B8276 . E8 61390000 call 004BBBDC
004B827B . 83C4 34 add esp, 34
004B827E . 8B5D F0 mov ebx, dword ptr [ebp-10]
004B8281 . 85DB test ebx, ebx
004B8283 . 74 09 je short 004B828E
004B8285 . 53 push ebx
004B8286 . E8 39390000 call 004BBBC4
004B828B . 83C4 04 add esp, 4
004B828E > E8 0394F4FF call 00401696
004B8293 . 85C0 test eax, eax
004B8295 /0F84 70010000 je 004B840B －－（输入错误的注册码时）从这里开始跳转，跳到后面红字区
004B829B . |6A 00 push 0
004B829D . |68 01000000 push 1
004B82A2 . |6A FF push -1
004B82A4 . |6A 06 push 6
004B82A6 . |68 72670116 push 16016772
004B82AB . |68 4C670152 push 5201674C
004B82B0 . |E8 1B390000 call 004BBBD0
004B82B5 . |83C4 18 add esp, 18
004B82B8 . |6A 00 push 0
004B82BA . |68 5F7B5900 push 00597B5F ; 已注册
004B82BF . |6A FF push -1
004B82C1 . |6A 0A push 0A
004B82C3 . |68 72670116 push 16016772
004B82C8 . |68 4C670152 push 5201674C
004B82CD . |E8 FE380000 call 004BBBD0
004B82D2 . |83C4 18 add esp, 18
004B82D5 . |6A 00 push 0
004B82D7 . |68 62A97800 push 0078A962 ; 恭喜,已注册!
004B82DC . |6A FF push -1
004B82DE . |6A 08 push 8
004B82E0 . |68 4D670106 push 601674D
004B82E5 . |68 4C670152 push 5201674C
004B82EA . |E8 E1380000 call 004BBBD0
004B82EF . |83C4 18 add esp, 18
004B82F2 . |E8 E9F1FCFF call 004874E0
004B82F7 . |E8 D1E1F5FF call 004164CD
004B82FC . |68 02000080 push 80000002
004B8301 . |6A 00 push 0
004B8303 . |50 push eax
004B8304 . |68 01000000 push 1
004B8309 . |BB E0CE4B00 mov ebx, 004BCEE0
004B830E . |E8 C9380000 call 004BBBDC
004B8313 . |83C4 10 add esp, 10
004B8316 . |8945 E8 mov dword ptr [ebp-18], eax
004B8319 . |8955 EC mov dword ptr [ebp-14], edx
004B831C . |DD45 E8 fld qword ptr [ebp-18]
004B831F . |E8 008FF4FF call 00401224
004B8324 . |33C9 xor ecx, ecx
004B8326 > |41 inc ecx
004B8327 . |51 push ecx
004B8328 . |50 push eax
004B8329 . |3BC8 cmp ecx, eax
004B832B . |0F8F 0B000000 jg 004B833C
004B8331 . |C745 FC 01000>mov dword ptr [ebp-4], 1
004B8338 . |58 pop eax
004B8339 . |59 pop ecx
004B833A .^|EB EA jmp short 004B8326
004B833C > |83C4 08 add esp, 8
004B833F . |837D FC 00 cmp dword ptr [ebp-4], 0
004B8343 . |0F85 0A000000 jnz 004B8353
004B8349 . |E8 43E2F5FF call 00416591
004B834E . |E9 A8010000 jmp 004B84FB
004B8353 > |833D AC928C00>cmp dword ptr [8C92AC], 0
004B835A . |0F85 61000000 jnz 004B83C1
004B8360 . |C745 F8 00000>mov dword ptr [ebp-8], 0
004B8367 . |6A 00 push 0
004B8369 . |8D45 F8 lea eax, dword ptr [ebp-8]
004B836C . |50 push eax
004B836D . |C745 F4 00000>mov dword ptr [ebp-C], 0
004B8374 . |6A 00 push 0
004B8376 . |FF75 F4 push dword ptr [ebp-C]
004B8379 . |68 5B3D4800 push 00483D5B
004B837E . |E8 BBE2F5FF call 0041663E
004B8383 . |68 00000000 push 0
004B8388 . |BB C0F64B00 mov ebx, 004BF6C0 ; j
004B838D . |E8 4A380000 call 004BBBDC
004B8392 . |83C4 04 add esp, 4
004B8395 . |6A 00 push 0
004B8397 . |6A 00 push 0
004B8399 . |6A 00 push 0
004B839B . |68 01000100 push 10001
004B83A0 . |68 4D670106 push 601674D
004B83A5 . |68 4C670152 push 5201674C
004B83AA . |68 02000000 push 2
004B83AF . |BB D0F64B00 mov ebx, 004BF6D0
004B83B4 . |E8 23380000 call 004BBBDC
004B83B9 . |83C4 1C add esp, 1C
004B83BC . |E9 3A010000 jmp 004B84FB
004B83C1 > |68 04000080 push 80000004
004B83C6 . |6A 00 push 0
004B83C8 . |68 098F5900 push 00598F09 ; 提示
004B83CD . |68 01030080 push 80000301
004B83D2 . |6A 00 push 0
004B83D4 . |68 40000000 push 40
004B83D9 . |68 04000080 push 80000004
004B83DE . |6A 00 push 0
004B83E0 . |68 CAA97800 push 0078A9CA ; 恭喜,注册成功,您现在需要重打开软件!
004B83E5 . |68 03000000 push 3
004B83EA . |BB C0EE4B00 mov ebx, 004BEEC0
004B83EF . |E8 E8370000 call 004BBBDC
004B83F4 . |83C4 28 add esp, 28
004B83F7 . |6A 00 push 0
004B83F9 . |E8 E4370000 call 004BBBE2
004B83FE . |83C4 04 add esp, 4
004B8401 . |E9 F5000000 jmp 004B84FB
004B8406 . |E9 F0000000 jmp 004B84FB
004B840B > \E8 C549F7FF call 0042CDD5 －－跳转到这里
004B8410 . 8945 F4 mov dword ptr [ebp-C], eax
004B8413 . 837D F4 01 cmp dword ptr [ebp-C], 1
004B8417 . 0F85 57000000 jnz 004B8474
004B841D . C745 F8 00000>mov dword ptr [ebp-8], 0
004B8424 . 6A 00 push 0
004B8426 . 8D45 F8 lea eax, dword ptr [ebp-8]
004B8429 . 50 push eax
004B842A . C745 F4 00000>mov dword ptr [ebp-C], 0
004B8431 . 6A 00 push 0
004B8433 . FF75 F4 push dword ptr [ebp-C]
004B8436 . 68 B8944300 push 004394B8
004B843B . E8 FEE1F5FF call 0041663E
004B8440 . 68 00000000 push 0
004B8445 . BB C0F64B00 mov ebx, 004BF6C0 ; j
004B844A . E8 8D370000 call 004BBBDC
004B844F . 83C4 04 add esp, 4
004B8452 . 6A 00 push 0
004B8454 . 68 00000000 push 0
004B8459 . 6A FF push -1
004B845B . 6A 05 push 5
004B845D . 68 4D670106 push 601674D
004B8462 . 68 4C670152 push 5201674C
004B8467 . E8 64370000 call 004BBBD0
004B846C . 83C4 18 add esp, 18
004B846F . E9 87000000 jmp 004B84FB
004B8474 > 6A 00 push 0
004B8476 . 68 00000000 push 0
004B847B . 6A FF push -1
004B847D . 6A 06 push 6
004B847F . 68 72670116 push 16016772
004B8484 . 68 4C670152 push 5201674C
004B8489 . E8 42370000 call 004BBBD0
004B848E . 83C4 18 add esp, 18
004B8491 . 6A 00 push 0
004B8493 . 68 EEA97800 push 0078A9EE ; 注册
004B8498 . 6A FF push -1
004B849A . 6A 0A push 0A
004B849C . 68 72670116 push 16016772
004B84A1 . 68 4C670152 push 5201674C
004B84A6 . E8 25370000 call 004BBBD0
004B84AB . 83C4 18 add esp, 18
004B84AE . 6A 00 push 0
004B84B0 . 68 F3A97800 push 0078A9F3 ; 注册失败
004B84B5 . 6A FF push -1
004B84B7 . 6A 08 push 8
004B84B9 . 68 4D670106 push 601674D
004B84BE . 68 4C670152 push 5201674C
004B84C3 . E8 08370000 call 004BBBD0
004B84C8 . 83C4 18 add esp, 18
004B84CB . 6A 00 push 0
004B84CD . 6A 00 push 0
004B84CF . 6A 00 push 0
004B84D1 . 68 01030080 push 80000301
004B84D6 . 6A 00 push 0
004B84D8 . 68 00000000 push 0
004B84DD . 68 04000080 push 80000004
004B84E2 . 6A 00 push 0
004B84E4 . 68 F3A97800 push 0078A9F3 ; 注册失败
004B84E9 . 68 03000000 push 3
004B84EE . BB C0EE4B00 mov ebx, 004BEEC0
004B84F3 . E8 E4360000 call 004BBBDC
004B84F8 . 83C4 28 add esp, 28
004B84FB > 8BE5 mov esp, ebp
004B84FD . 5D pop ebp
004B84FE . C3 retn
004B84FF /. 55 push ebp
004B8500 |. 8BEC mov ebp, esp
004B8502 |. 6A 00 push 0
004B8504 |. 68 00000000 push 0
004B8509 |. 6A FF push -1
004B850B |. 6A 08 push 8
004B850D |. 68 46670116 push 16016746
004B8512 |. 68 68020152 push 52010268
004B8517 |. E8 B4360000 call 004BBBD0
004B851C |. 83C4 18 add esp, 18
004B851F |. 6A 00 push 0
004B8521 |. 68 FCA97800 push 0078A9FC ; http://dosame.com/reg1/
004B8526 |. 6A FF push -1
004B8528 |. 6A 0B push 0B
004B852A |. 68 45670116 push 16016745
004B852F |. 68 68020152 push 52010268
004B8534 |. E8 97360000 call 004BBBD0
004B8539 |. 83C4 18 add esp, 18
004B853C |. 8BE5 mov esp, ebp
004B853E |. 5D pop ebp
004B853F \. C3 retn
004B8540 /. 55 push ebp
004B8541 |. 8BEC mov ebp, esp
004B8543 |. 81EC 08000000 sub esp, 8
004B8549 |. 6A FF push -1
004B854B |. 6A 0B push 0B
004B854D |. 68 36760116 push 16017636
004B8552 |. 68 33760152 push 52017633
004B8557 |. E8 7A360000 call 004BBBD6
004B855C |. 83C4 10 add esp, 10
004B855F |. 8945 FC mov dword ptr [ebp-4], eax
004B8562 |. 6A FF push -1
004B8564 |. 6A 12 push 12
004B8566 |. 68 36760116 push 16017636
004B856B |. 68 33760152 push 52017633
004B8570 |. E8 61360000 call 004BBBD6
004B8575 |. 83C4 10 add esp, 10
004B8578 |. 8945 F8 mov dword ptr [ebp-8], eax
004B857B |. 6A 01 push 1
004B857D |. FF75 F8 push dword ptr [ebp-8]
004B8580 |. 8D45 FC lea eax, dword ptr [ebp-4]
004B8583 |. 50 push eax
004B8584 |. E8 F637FFFF call 004ABD7F
004B8589 |. 8B5D FC mov ebx, dword ptr [ebp-4]
004B858C |. 85DB test ebx, ebx
004B858E |. 74 09 je short 004B8599
004B8590 |. 53 push ebx
004B8591 |. E8 2E360000 call 004BBBC4
004B8596 |. 83C4 04 add esp, 4
004B8599 |> 8BE5 mov esp, ebp
004B859B |. 5D pop ebp
004B859C \. C3 retn
004B859D /. 55 push ebp
004B859E |. 8BEC mov ebp, esp
004B85A0 |. 81EC 08000000 sub esp, 8
004B85A6 |. 6A 00 push 0
004B85A8 |. 68 01000000 push 1
004B85AD |. 6A FF push -1
004B85AF |. 6A 12 push 12
004B85B1 |. 68 575E0116 push 16015E57
004B85B6 |. 68 4F5E0152 push 52015E4F
004B85BB |. E8 10360000 call 004BBBD0
004B85C0 |. 83C4 18 add esp, 18
004B85C3 |. 6A FF push -1
004B85C5 |. 6A 12 push 12
004B85C7 |. 68 575E0116 push 16015E57
004B85CC |. 68 4F5E0152 push 52015E4F
004B85D1 |. E8 00360000 call 004BBBD6
004B85D6 |. 83C4 10 add esp, 10
004B85D9 |. 83E0 01 and eax, 1
004B85DC |. 83F0 01 xor eax, 1
004B85DF |. 6A 00 push 0
004B85E1 |. 50 push eax
004B85E2 |. 6A FF push -1
004B85E4 |. 6A 12 push 12
004B85E6 |. 68 555E0116 push 16015E55
004B85EB |. 68 4F5E0152 push 52015E4F
004B85F0 |. E8 DB350000 call 004BBBD0
004B85F5 |. 83C4 18 add esp, 18
004B85F8 |. 6A FF push -1
004B85FA |. 6A 12 push 12
004B85FC |. 68 575E0116 push 16015E57
004B8601 |. 68 4F5E0152 push 52015E4F
004B8606 |. E8 CB350000 call 004BBBD6
004B860B |. 83C4 10 add esp, 10
004B860E |. 83E0 01 and eax, 1
004B8611 |. 83F0 01 xor eax, 1
004B8614 |. 6A 00 push 0
004B8616 |. 50 push eax
004B8617 |. 6A FF push -1
004B8619 |. 6A 12 push 12
004B861B |. 68 565E0116 push 16015E56
004B8620 |. 68 4F5E0152 push 52015E4F
004B8625 |. E8 A6350000 call 004BBBD0
004B862A |. 83C4 18 add esp, 18
004B862D |. 6A FF push -1
004B862F |. 6A 12 push 12
004B8631 |. 68 565E0116 push 16015E56
004B8636 |. 68 4F5E0152 push 52015E4F
004B863B |. E8 96350000 call 004BBBD6
004B8640 |. 83C4 10 add esp, 10
004B8643 |. 83E0 01 and eax, 1
004B8646 |. 83F0 01 xor eax, 1
004B8649 |. 6A 00 push 0
004B864B |. 50 push eax
004B864C |. 6A FF push -1
004B864E |. 6A 06 push 6
004B8650 |. 68 535E0116 push 16015E53
004B8655 |. 68 4F5E0152 push 52015E4F
004B865A |. E8 71350000 call 004BBBD0
004B865F |. 83C4 18 add esp, 18
004B8662 |. 6A FF push -1
004B8664 |. 6A 12 push 12
004B8666 |. 68 575E0116 push 16015E57
004B866B |. 68 4F5E0152 push 52015E4F
004B8670 |. E8 61350000 call 004BBBD6
004B8675 |. 83C4 10 add esp, 10
004B8678 |. 83E0 01 and eax, 1
004B867B |. 83F0 01 xor eax, 1
004B867E |. 6A 00 push 0
004B8680 |. 50 push eax
004B8681 |. 6A FF push -1
004B8683 |. 6A 06 push 6
004B8685 |. 68 5A5E0116 push 16015E5A
004B868A |. 68 4F5E0152 push 52015E4F
004B868F |. E8 3C350000 call 004BBBD0
004B8694 |. 83C4 18 add esp, 18
004B8697 |. 33DB xor ebx, ebx
004B8699 |. 8BE5 mov esp, ebp
004B869B |. 5D pop ebp
004B869C \. C2 0C00 retn 0C
004B869F /. 55 push ebp
004B86A0 |. 8BEC mov ebp, esp
004B86A2 |. 68 01030080 push 80000301
004B86A7 |. 6A 00 push 0
004B86A9 |. 68 07000000 push 7
004B86AE |. 68 01000400 push 40001
004B86B3 |. 68 EC2A0116 push 16012AEC
004B86B8 |. 68 E72A0152 push 52012AE7
004B86BD |. 68 02000000 push 2
004B86C2 |. B8 03000000 mov eax, 3
004B86C7 |. BB C0615300 mov ebx, 005361C0
004B86CC |. E8 17350000 call 004BBBE8
004B86D1 |. 83C4 1C add esp, 1C
004B86D4 |. 8BE5 mov esp, ebp
004B86D6 |. 5D pop ebp
004B86D7 \. C3 retn
004B86D8 /$ 55 push ebp
004B86D9 |. 8BEC mov ebp, esp
004B86DB |. E8 0E000000 call 004B86EE
004B86E0 |. B8 00000000 mov eax, 0
004B86E5 |. E9 00000000 jmp 004B86EA
004B86EA |> 8BE5 mov esp, ebp
004B86EC |. 5D pop ebp
004B86ED \. C3 retn
004B86EE /$ 55 push ebp
004B86EF |. 8BEC mov ebp, esp
004B86F1 |. 8BE5 mov esp, ebp
004B86F3 |. 5D pop ebp
004B86F4 \. C3 retn
004B86F5 /. 55 push ebp
004B86F6 |. 8BEC mov ebp, esp
004B86F8 |. 81EC 0C000000 sub esp, 0C
004B86FE |. C745 FC 00000>mov dword ptr [ebp-4], 0
004B8705 |. 68 25000100 push 10025
004B870A |. 68 58030116 push 16010358
004B870F |. 68 68020152 push 52010268
004B8714 |. 68 01000000 push 1
004B8719 |. BB B0FF4B00 mov ebx, 004BFFB0
004B871E |. E8 B9340000 call 004BBBDC
004B8723 |. 83C4 10 add esp, 10
004B8726 |. 8945 F8 mov dword ptr [ebp-8], eax
004B8729 |. 68 05000080 push 80000005
004B872E |. 6A 00 push 0
004B8730 |. 8B45 F8 mov eax, dword ptr [ebp-8]
004B8733 |. 85C0 test eax, eax
004B8735 |. 75 05 jnz short 004B873C
004B8737 |. B8 A07C5900 mov eax, 00597CA0
004B873C |> 50 push eax
004B873D |. 68 01000000 push 1
004B8742 |. BB A0DD4B00 mov ebx, 004BDDA0
004B8747 |. E8 90340000 call 004BBBDC
004B874C |. 83C4 10 add esp, 10
004B874F |. 8945 F4 mov dword ptr [ebp-C], eax
004B8752 |. 8B5D F8 mov ebx, dword ptr [ebp-8]
004B8755 |. 85DB test ebx, ebx
004B8757 |. 74 09 je short 004B8762
004B8759 |. 53 push ebx
004B875A |. E8 65340000 call 004BBBC4
004B875F |. 83C4 04 add esp, 4
004B8762 |> 8B45 F4 mov eax, dword ptr [ebp-C]
004B8765 |. 50 push eax
004B8766 |. 8B5D FC mov ebx, dword ptr [ebp-4]
004B8769 |. 85DB test ebx, ebx
004B876B |. 74 09 je short 004B8776
004B876D |. 53 push ebx
004B876E |. E8 51340000 call 004BBBC4
004B8773 |. 83C4 04 add esp, 4
004B8776 |> 58 pop eax
004B8777 |. 8945 FC mov dword ptr [ebp-4], eax
004B877A |. 68 14AA7800 push 0078AA14 ; 不合法的序列号
004B877F |. FF75 FC push dword ptr [ebp-4]
004B8782 |. E8 AC9AF4FF call 00402233
004B8787 |. 83C4 08 add esp, 8
004B878A |. 83F8 00 cmp eax, 0
004B878D |. 0F85 6F000000 jnz 004B8802
004B8793 |. 6A 00 push 0
004B8795 |. 68 14AA7800 push 0078AA14 ; 不合法的序列号
004B879A |. 6A FF push -1
004B879C |. 6A 08 push 8
004B879E |. 68 67020106 push 6010267
004B87A3 |. 68 68020152 push 52010268
004B87A8 |. E8 23340000 call 004BBBD0
004B87AD |. 83C4 18 add esp, 18
004B87B0 |. 6A 00 push 0
004B87B2 |. 6A 00 push 0
004B87B4 |. 6A 00 push 0
004B87B6 |. 68 01030080 push 80000301
004B87BB |. 6A 00 push 0
004B87BD |. 68 00000000 push 0
004B87C2 |. 68 04000080 push 80000004
004B87C7 |. 6A 00 push 0
004B87C9 |. 68 14AA7800 push 0078AA14 ; 不合法的序列号
004B87CE |. 68 03000000 push 3
004B87D3 |. BB C0EE4B00 mov ebx, 004BEEC0
004B87D8 |. E8 FF330000 call 004BBBDC
004B87DD |. 83C4 28 add esp, 28
004B87E0 |. 6A 00 push 0
004B87E2 |. 68 00000000 push 0
004B87E7 |. 6A FF push -1
004B87E9 |. 6A 06 push 6
004B87EB |. 68 B2660116 push 160166B2
004B87F0 |. 68 68020152 push 52010268
004B87F5 |. E8 D6330000 call 004BBBD0
004B87FA |. 83C4 18 add esp, 18
004B87FD |. E9 20000000 jmp 004B8822
004B8802 |> 6A 00 push 0
004B8804 |. FF75 FC push dword ptr [ebp-4]
004B8807 |. 6A FF push -1
004B8809 |. 6A 08 push 8
004B880B |. 68 B0660116 push 160166B0
004B8810 |. 68 68020152 push 52010268
004B8815 |. E8 B6330000 call 004BBBD0
004B881A |. 83C4 18 add esp, 18
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
确实如这位老师所言，这一个判断我在查看超级参考的时候看到了相关内容，大概意思是，为了防止破解，完整版的只给了注册用户，但是我也不敢确定。
另外我想在大家的心中，把算法或者爆破点找到的意义远远比使用这个取名软件的意义大，不知道我说的对不对。 
|
|
|
|
|
|
|
|
|
|
|
|
|
