用OD载入看ascii 有个已注册 和 未注册 2个
已注册处..代码
00409A0E . 6A 00 PUSH 0
00409A10 . 8D4C24 08 LEA ECX,DWORD PTR SS:[ESP+8]
00409A14 . E8 27F4FFFF CALL 1_6.00408E40
00409A19 . 8D4C24 04 LEA ECX,DWORD PTR SS:[ESP+4]
00409A1D . C78424 AC00000>MOV DWORD PTR SS:[ESP+AC],0
00409A28 . E8 28590200 CALL 1_6.0042F355
00409A2D . 83F8 01 CMP EAX,1
00409A30 . 75 1C JNZ SHORT 1_6.00409A4E
00409A32 . E8 19F9FFFF CALL 1_6.00409350
00409A37 . 84C0 TEST AL,AL // 比较 下断
00409A39 . 74 07 JE SHORT 1_6.00409A42
00409A3B . 68 38C24500 PUSH 1_6.0045C238
未注册处..代码
00409A0E . 6A 00 PUSH 0
00409A10 . 8D4C24 08 LEA ECX,DWORD PTR SS:[ESP+8]
00409A14 . E8 27F4FFFF CALL 1_6.00408E40
00409A19 . 8D4C24 04 LEA ECX,DWORD PTR SS:[ESP+4]
00409A1D . C78424 AC00000>MOV DWORD PTR SS:[ESP+AC],0
00409A28 . E8 28590200 CALL 1_6.0042F355
00409A2D . 83F8 01 CMP EAX,1
00409A30 . 75 1C JNZ SHORT 1_6.00409A4E
00409A32 . E8 19F9FFFF CALL 1_6.00409350
00409A37 . 84C0 TEST AL,AL // 比较 下断
00409A39 . 74 07 JE SHORT 1_6.00409A42
00409A3B . 68 38C24500 PUSH 1_6.0045C238
00409A40 . EB 05 JMP SHORT 1_6.00409A47
00409A42 > 68 18C24500 PUSH 1_6.0045C218
我想用OD下断追出他的注册码,可是这2 个地方下断都断不下来。
程序是输入完注册码后,要重运行来判断。
程序下载地址:
ad2K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6Y4L8Y4y4K6M7#2)9J5k6h3y4G2L8g2)9J5c8X3#2S2K9h3&6Q4x3V1k6K6K9h3&6Y4L8r3g2Q4y4h3k6V1L8%4N6F1i4K6u0W2j5i4y4H3i4K6y4r3K9h3c8Q4x3@1b7I4y4b7`.`.
[培训]科锐软件逆向54期预科班、正式班开始火爆招生报名啦!!!