:00407483 50 push eax :00407484 51 push ecx :00407485 C684246403000002 mov byte ptr [esp+00000364], 02 :0040748D E80A600100 call 0041D49C :00407492 C684245803000003 mov byte ptr [esp+00000358], 03 :0040749A E821D6FFFF call 00404AC0(此处改变eax的值,说明对注册码进行了判断) :0040749F 83C40C add esp, 0000000C :004074A2 8D4C242C lea ecx, dword ptr [esp+2C] :004074A6 8BF8 mov edi, eax(这里将eax的值赋予edi) :004074A8 889C244C030000 mov byte ptr [esp+0000034C], bl :004074AF E88A5E0100 call 0041D33E :004074B4 8D4C2418 lea ecx, dword ptr [esp+18] :004074B8 C784244C030000FFFFFFFF mov dword ptr [esp+0000034C], FFFFFFFF :004074C3 E8765E0100 call 0041D33E :004074C8 3BFB cmp edi, ebx :004074CA 0F849C000000 je 0040756C(此处若不跳,则可将错误的注册信息强制写入注册表) :004074D0 8D742444 lea esi, dword ptr [esp+44] :004074D4 8D6C2430 lea ebp, dword ptr [esp+30]
============================================================= 在:0040749A E821D6FFFF call 00404AC0处按F8进入:
:00404AC0 64A100000000 mov eax, dword ptr fs:[00000000] :00404AC6 6AFF push FFFFFFFF :00404AC8 6800414200 push 00424100 :00404ACD 50 push eax :00404ACE 64892500000000 mov dword ptr fs:[00000000], esp :00404AD5 53 push ebx
上一篇:爆破NetSpeeder v1.0
下一篇:FanPlayer V1.8破解
|