:004041E0:: 40 INC EAX \:BYJMP JmpBy:004041E4,
::004041E1:: 83F8 0A CMP EAX,A
::004041E4:: 7C FA JL SHORT 004041E0 \:JMPUP
::004041E6:: 74 03 JE SHORT 004041EB \:JMPDOWN\:BYJMP JmpBy:004041DE,
::004041E8:: 75 01 JNZ SHORT 004041EB \:JMPDOWN
::004041EA:: E8 8B15E8BF CALL C028577A \:JMPDOWN
::004041EF:: 51 PUSH ECX
::004041F0:: 0052 E8 ADD [EDX-18],DL
::004041F3:: 09A9 02005984 OR [ECX+84590002],EBP
::004041F9:: C0 ???
::004041FA:: 74 72 JE SHORT 0040426E \:JMPDOWN
::004041FC:: 8B0D E8BF5100 MOV ECX,[51BFE8]
::00404202:: 51 PUSH ECX
::00404203:: E8 50AA0200 CALL 0042EC58 \:JMPDOWN
::00404208:: 59 POP ECX
::00404209:: 84C0 TEST AL,AL
::0040420B:: 74 61 JE SHORT 0040426E \:JMPDOWN
::0040420D:: 8BB3 70040000 MOV ESI,[EBX+470]
::00404213:: BA A2E84F00 MOV EDX,4FE8A2
::00404218:: 66:C745 B4 6800 MOV WORD PTR [EBP-4C],68
::0040421E:: 81C6 48020000 ADD ESI,248
::00404224:: 8D45 D8 LEA EAX,[EBP-28]
::00404227:: E8 7C490E00 CALL 004E8BA8 \:JMPDOWN
::0040422C:: FF45 C0 INC DWORD PTR [EBP-40]
::0040422F:: 8B10 MOV EDX,[EAX]
::00404231:: 8B06 MOV EAX,[ESI]
::00404233:: 8B08 MOV ECX,[EAX]
::00404235:: FF51 2C CALL [ECX+2C]
::00404238:: FF4D C0 DEC DWORD PTR [EBP-40]
::0040423B:: 8D45 D8 LEA EAX,[EBP-28]
::0040423E:: BA 02000000 MOV EDX,2
::00404243:: E8 304A0E00 CALL 004E8C78 \:JMPDOWN
::00404248:: C683 70090000 01 MOV BYTE PTR [EBX+970],1
::0040424F:: FF4D C0 DEC DWORD PTR [EBP-40]
::00404252:: 8D45 FC LEA EAX,[EBP-4]
::00404255:: BA 02000000 MOV EDX,2
::0040425A:: E8 194A0E00 CALL 004E8C78 \:JMPDOWN
::0040425F:: 8B4D A4 MOV ECX,[EBP-5C]
::00404262:: 64:890D 00000000 MOV FS:[0],ECX
::00404269:: E9 23010000 JMP 00404391 \:JMPDOWN
::0040426E:: 66:C745 B4 7400 MOV WORD PTR [EBP-4C],74 \:BYJMP JmpBy:004041FA,0040420B,
::00404274:: BA A3E84F00 MOV EDX,4FE8A3
\->: 玄奥八字V5.1未注册
::00404279:: 8D45 D4 LEA EAX,[EBP-2C]
::0040427C:: E8 27490E00 CALL 004E8BA8 \:JMPDOWN
::00404281:: FF45 C0 INC DWORD PTR [EBP-40]
::00404284:: 8B10 MOV EDX,[EAX]
::00404286:: 8BC3 MOV EAX,EBX
::00404288:: E8 03860A00 CALL 004AC890 \:JMPDOWN
::0040428D:: FF4D C0 DEC DWORD PTR [EBP-40]
::00404290:: 8D45 D4 LEA EAX,[EBP-2C]
::00404293:: BA 02000000 MOV EDX,2
::00404298:: E8 DB490E00 CALL 004E8C78 \:JMPDOWN
::0040429D:: 8B0D E8BF5100 MOV ECX,[51BFE8]
::004042A3:: 51 PUSH ECX
::004042A4:: E8 9BAC0200 CALL 0042EF44 \:JMPDOWN
::004042A9:: 59 POP ECX
::004042AA:: 84C0 TEST AL,AL
::004042AC:: 74 21 JE SHORT 004042CF \:JMPDOWN
::004042AE:: A1 E8BF5100 MOV EAX,[51BFE8]
::004042B3:: 0FBF40 18 MOVSX EAX,WORD PTR [EAX+18]
::004042B7:: 85C0 TEST EAX,EAX
::004042B9:: 7C 45 JL SHORT 00404300 \:JMPDOWN
::004042BB:: 50 PUSH EAX
::004042BC:: 68 B6E84F00 PUSH 4FE8B6
\->: \x0A未注册软件,还能再用%d次,请向作者注册以使用全部功能。\x0A\x0A
::004042C1:: 8D55 FC LEA EDX,[EBP-4]
::004042C4:: 52 PUSH EDX
::004042C5:: E8 D24B0E00 CALL 004E8E9C \:JMPDOWN
::004042CA:: 83C4 0C ADD ESP,C
::004042CD:: EB 31 JMP SHORT 00404300 \:JMPDOWN
::004042CF:: 66:C745 B4 8000 MOV WORD PTR [EBP-4C],80 \:BYJMP JmpBy:004042AC,
::004042D5:: BA F0E84F00 MOV EDX,4FE8F0
\->: \x0A试用次数已到,请向作者注册以使用全部功能。\x0A\x0A
::004042DA:: 8D45 D0 LEA EAX,[EBP-30]
::004042DD:: E8 C6480E00 CALL 004E8BA8 \:JMPDOWN
::004042E2:: FF45 C0 INC DWORD PTR [EBP-40]
::004042E5:: 8D55 D0 LEA EDX,[EBP-30]
::004042E8:: 8D45 FC LEA EAX,[EBP-4]
::004042EB:: E8 B8490E00 CALL 004E8CA8 \:JMPDOWN
::004042F0:: FF4D C0 DEC DWORD PTR [EBP-40]
::004042F3:: 8D45 D0 LEA EAX,[EBP-30]
::004042F6:: BA 02000000 MOV EDX,2
::004042FB:: E8 78490E00 CALL 004E8C78 \:JMPDOWN
::00404300:: 8BB3 70040000 MOV ESI,[EBX+470] \:BYJMP JmpBy:004042B9,004042CD,
::00404306:: 33D2 XOR EDX,EDX
::00404308:: 66:C745 B4 8C00 MOV WORD PTR [EBP-4C],8C
::0040430E:: 8B83 70040000 MOV EAX,[EBX+470]
::00404314:: 81C6 48020000 ADD ESI,248
::0040431A:: 05 48020000 ADD EAX,248
::0040431F:: 8945 A0 MOV [EBP-60],EAX
::00404322:: 8955 CC MOV [EBP-34],EDX
::00404325:: FF45 C0 INC DWORD PTR [EBP-40]
::00404328:: 8D55 CC LEA EDX,[EBP-34]
::0040432B:: 8B45 A0 MOV EAX,[EBP-60]
::0040432E:: 8B00 MOV EAX,[EAX]
::00404330:: 8B08 MOV ECX,[EAX]
::00404332:: FF51 1C CALL [ECX+1C]
::00404335:: 8D55 CC LEA EDX,[EBP-34]
::00404338:: 33C0 XOR EAX,EAX
::0040433A:: 8945 C8 MOV [EBP-38],EAX
::0040433D:: 8D4D C8 LEA ECX,[EBP-38]
::00404340:: FF45 C0 INC DWORD PTR [EBP-40]
::00404343:: 8D45 FC LEA EAX,[EBP-4]
::00404346:: E8 85490E00 CALL 004E8CD0 \:JMPDOWN
::0040434B:: 8B06 MOV EAX,[ESI]
::0040434D:: 8D55 C8 LEA EDX,[EBP-38]
::00404350:: 8B08 MOV ECX,[EAX]
::00404352:: 8B12 MOV EDX,[EDX]
::00404354:: FF51 2C CALL [ECX+2C]
::00404357:: FF4D C0 DEC DWORD PTR [EBP-40]
::0040435A:: 8D45 C8 LEA EAX,[EBP-38]
::0040435D:: BA 02000000 MOV EDX,2
::00404362:: E8 11490E00 CALL 004E8C78 \:JMPDOWN
::00404367:: FF4D C0 DEC DWORD PTR [EBP-40]
[课程]Android-CTF解题方法汇总!