小弟近日开始没学习破解,在破解“Delphi、C高手速成V3.0”注册码时,出现了大问题,怎么也找不到,要中断的点!
我用OD加载后,代码如下:
0052674B E8 28BEF0FF call <jmp.&shell32.ShellExecuteA>
00526750 5B pop ebx
00526751 C3 retn
00526752 0000 add [eax], al
00526754 68 7474703A push 3A707474
00526759 2F das
0052675A 2F das
0052675B 77 77 ja short 005267D4
0052675D 77 2E ja short 0052678D
0052675F 73 6F jnb short 005267D0
00526761 - 66:74 72 je short 000067D6
00526764 65: prefix gs:
00526765 67:2E:636F 6D arpl cs:[bx+6D], bp
0052676A 2E:636E 2F arpl cs:[esi+2F], bp
0052676E 73 68 jnb short 005267D8
00526770 61 popad
00526771 72 65 jb short 005267D8
00526773 77 61 ja short 005267D6
00526775 /72 65 jb short 005267DC
00526777 |5F pop edi
00526778 |76 69 jbe short 005267E3
0052677A |65:77 2E ja short 005267AB
0052677D |61 popad
0052677E |73 70 jnb short 005267F0
00526780 |3F aas
00526781 |69643D 2F 35344>imul esp, [ebp+edi+2F], 33453435
00526789 |42 inc edx
0052678A |313430 xor [eax+esi], esi
0052678D |2D 35433339 sub eax, 39334335
00526792 |2D 34443141 sub eax, 41314434
00526797 |2D 39303943 sub eax, 43393039
0052679C |2D 39423831 sub eax, 31384239
005267A1 |3832 cmp [edx], dh
005267A3 |383444 cmp [esp+eax*2], dh
005267A6 |3345 30 xor eax, [ebp+30]
005267A9 |2F das
005267AA |2372 65 and esi, [edx+65]
005267AD |67:66:6F outs dx, word ptr es:[di]
005267B0 |72 6D jb short 0052681F
005267B2 |0000 add [eax], al
005267B4 |6F outs dx, dword ptr es:[edi]
005267B5 |70 65 jo short 0052681C
005267B7 |6E outs dx, byte ptr es:[edi]
005267B8 |0000 add [eax], al
005267BA |0000 add [eax], al
005267BC |B8 D0675200 mov eax, 005267D0 ; 注册码错误
005267C1 |E8 22E1F0FF call 004348E8
005267C6 |C3 retn
005267C7 |00FF add bh, bh
005267C9 |FFFF ??? ; 未知命令
005267CB |FF0A dec dword ptr [edx]
005267CD |0000 add [eax], al
005267CF |00D7 add bh, dl
005267D1 |A2 B2E1C2EB mov [EBC2E1B2], al
005267D6 |B4 ED mov ah, 0ED
005267D8 |CE into
005267D9 |F3: prefix rep:
005267DA |0000 add [eax], al
005267DC \53 push ebx
005267DD 8BD8 mov ebx, eax
原理上说好像是在“注册码错误”的上面下断点,可是我怎么也下不了断点。
用w32asm.可以知道他是来自这个地方:
0052675D 77 2E ja short 0052678D
可是我在这个地方断点也没用!不知道应如何下手,请高手们指点一下!
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课