::00417E93:: A1 D0634700 MOV EAX,[4763D0] //在这里下过断点,程序被正常拦截
::00417E98:: 8945 F0 MOV [EBP-10],EAX
::00417E9B:: 8B0D CCF04700 MOV ECX,[47F0CC]
::00417EA1:: 8365 FC 00 AND DWORD PTR [EBP-4],0
::00417EA5:: 8D45 F0 LEA EAX,[EBP-10]
::00417EA8:: 50 PUSH EAX
::00417EA9:: 68 BC764700 PUSH 4776BC \->: bookname
::00417EAE:: E8 063A0000 CALL 0041B8B9 这里就是关键的算法处了::00417EB3:: 8B45 F0 MOV EAX,[EBP-10]
::00417EB6:: 8378 F8 00 CMP DWORD PTR [EAX-8],0
::00417EBA:: 75 23 JNZ SHORT 00417EDF //这里是关键跳
::00417EBC:: 6A 64 PUSH 64
::00417EBE:: 8D4D EC LEA ECX,[EBP-14]
::00417EC1:: E8 6691FEFF CALL 0040102C \:JMPUP
::00417EC6:: 50 PUSH EAX
::00417EC7:: 8D4D F0 LEA ECX,[EBP-10]
::00417ECA:: C645 FC 01 MOV BYTE PTR [EBP-4],1
::00417ECE:: E8 EAD3FEFF CALL 004052BD \:JMPUP
::00417ED3:: 8065 FC 00 AND BYTE PTR [EBP-4],0
::00417ED7:: 8D4D EC LEA ECX,[EBP-14]
::00417EDA:: E8 2191FEFF CALL 00401000 \:JMPUP
::00417EDF:: 68 FFEF0000 PUSH EFFF //这里提示注册失败
在算法处那里我实在是找不出它是怎么得到注册码的,不过这和我的汇编水平有很大的关系
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!