摸索了几天就是找到到注册码?
这里看似应该属关键跳了,但做出的注册机不能运行!
00AEC055 50 PUSH EAX
00AEC056 E8 8DA0FDFF CALL 00AC60E8 ; JMP 到 USER32.GetWindowTextA
00AEC05B B8 0498B000 MOV EAX,0B09804 ; ASCII "123456789"
00AEC060 E8 53B5FDFF CALL 00AC75B8
00AEC065 85C0 TEST EAX,EAX
00AEC067 74 0E JE SHORT 00AEC077
00AEC069 B8 0498B000 MOV EAX,0B09804 ; ASCII "123456789"
00AEC06E E8 45B5FDFF CALL 00AC75B8
00AEC073 85C0 TEST EAX,EAX
00AEC075 75 04 JNZ SHORT 00AEC07B
00AEC077 33C0 XOR EAX,EAX
00AEC079 EB 02 JMP SHORT 00AEC07D
00AEC07B B0 01 MOV AL,1
00AEC07D A2 B426B000 MOV BYTE PTR DS:[B026B4],AL
00AEC082 803D B426B000 0>CMP BYTE PTR DS:[B026B4],0
00AEC089 74 15 JE SHORT 00AEC0A0
00AEC08B 6A 01 PUSH 1
00AEC08D 68 0499B000 PUSH 0B09904 ; ASCII "ABCDE"
00AEC092 68 0498B000 PUSH 0B09804 ; ASCII "123456789"
00AEC097 E8 1CFAFFFF CALL 00AEBAB8
00AEC09C 85C0 TEST EAX,EAX
00AEC09E 75 04 JNZ SHORT 00AEC0A4
00AEC0A0 33C0 XOR EAX,EAX
00AEC0A2 EB 02 JMP SHORT 00AEC0A6
00AEC0A4 B0 01 MOV AL,1
00AEC0A6 A2 B426B000 MOV BYTE PTR DS:[B026B4],AL
00AEC0AB 803D B426B000 0>CMP BYTE PTR DS:[B026B4],0
00AEC0B2 75 18 JNZ SHORT 00AEC0CC
00AEC0B4 6A 30 PUSH 30
00AEC0B6 A1 682AB000 MOV EAX,DWORD PTR DS:[B02A68]
00AEC0BB 05 E9010000 ADD EAX,1E9
00AEC0C0 50 PUSH EAX
00AEC0C1 68 D4C0AE00 PUSH 0AEC0D4 ; ASCII "Key is not valid, please try again!"
00AEC0C6 53 PUSH EBX
00AEC0C7 E8 44A0FDFF CALL 00AC6110 ; JMP 到 USER32.MessageBoxA
00AEC0CC A0 B426B000 MOV AL,BYTE PTR DS:[B026B4]
00AEC0D1 5B POP EBX
00AEC0D2 C3 RETN
00AEC0D3 004B 65 ADD BYTE PTR DS:[EBX+65],CL
00AEC0D6 79 20 JNS SHORT 00AEC0F8
00AEC0D8 6973 20 6E6F742>IMUL ESI,DWORD PTR DS:[EBX+20],20746F6E
请高手指教!
[课程]Android-CTF解题方法汇总!