|
【破文标题】菜鸟简单爆破局域网查看工具V1.63
【破文作者】飘之叶
【破解工具】OD peid
【破解平台】xp2
【软件名称】局域网查看工具V1.63
【原版下载】http://www.onlinedown.net/soft/21691.htm
【保护方式】注册码
【软件简介】局域网查看,未注册有线程的限制。破解后取消线程的限制。
【破解声明】只是感兴趣,没有其他目的。
【破解过程】peid查壳后无壳.破解后可直接修改线程。
先运行程序,默认线程数为8,点击修改弹出注册后才可以设置线程数。注册软件提示您输入注册名或注册码无效请重新输入!
查找字符串,找到"您输入的注册名或注册码无效,请重新输入!",
代码:
0049EC61 |. 55 push ebp
0049EC62 |. 68 3FED4900 push 0049ED3F
0049EC67 |. 64:FF30 push [dword fs:eax]
0049EC6A |. 64:8920 mov [dword fs:eax], esp
0049EC6D |. 8D55 FC lea edx, [dword ebp-4]
0049EC70 |. 8B86 04030000 mov eax, [dword esi+304]
0049EC76 |. E8 D522FDFF call 00470F50
0049EC7B |. 8B45 FC mov eax, [dword ebp-4]
0049EC7E |. E8 69FFFFFF call 0049EBEC
0049EC83 84C0 test al, al
0049EC85 0F84 8F000000 je 0049ED1A ; 关键跳
0049EC8B |. B2 01 mov dl, 1
0049EC8D |. A1 D0AE4300 mov eax, [dword 43AED0]
0049EC92 |. E8 39C3F9FF call 0043AFD0
0049EC97 |. 8BD8 mov ebx, eax
0049EC99 |. BA 02000080 mov edx, 80000002
0049EC9E |. 8BC3 mov eax, ebx
0049ECA0 |. E8 CBC3F9FF call 0043B070
0049ECA5 |. B1 01 mov cl, 1
0049ECA7 |. BA 54ED4900 mov edx, 0049ED54 ; software\lansee
0049ECAC |. 8BC3 mov eax, ebx
0049ECAE |. E8 21C4F9FF call 0043B0D4
0049ECB3 84C0 test al, al
0049ECB5 |. 74 1D je short 0049ECD4
0049ECB7 |. 8D55 F8 lea edx, [dword ebp-8]
0049ECBA |. 8B86 04030000 mov eax, [dword esi+304]
0049ECC0 |. E8 8B22FDFF call 00470F50
0049ECC5 |. 8B4D F8 mov ecx, [dword ebp-8]
0049ECC8 |. BA 6CED4900 mov edx, 0049ED6C ; serial
0049ECCD |. 8BC3 mov eax, ebx
0049ECCF |. E8 9CC5F9FF call 0043B270
0049ECD4 |> 8BC3 mov eax, ebx
0049ECD6 |. E8 65C3F9FF call 0043B040
0049ECDB |. 8BC3 mov eax, ebx
0049ECDD |. E8 EA46F6FF call 004033CC
0049ECE2 |. A1 04054B00 mov eax, [dword 4B0504]
0049ECE7 |. 8B00 mov eax, [dword eax]
0049ECE9 |. C680 B8070000>mov [byte eax+7B8], 1
0049ECF0 |. A1 04054B00 mov eax, [dword 4B0504]
0049ECF5 |. 8B00 mov eax, [dword eax]
0049ECF7 |. 8B80 F0030000 mov eax, [dword eax+3F0]
0049ECFD |. BA 10000000 mov edx, 10
0049ED02 |. E8 E1B8FFFF call 0049A5E8
0049ED07 |. B8 7CED4900 mov eax, 0049ED7C ; 谢谢您的注册!
0049ED0C |. E8 A343F9FF call 004330B4
0049ED11 |. 8BC6 mov eax, esi
0049ED13 |. E8 B4EAFEFF call 0048D7CC
0049ED18 |. EB 0A jmp short 0049ED24
0049ED1A |> B8 94ED4900 mov eax, 0049ED94 ; 您输入的注册名或注册码无效,请重新输入!
把下面的je 改成jnz 就可以爆破
0049EC85 /0F84 8F000000 je 0049ED1A
------------------------------------------------------------------------
【破解总结】爆破比较简单适合菜鸟,高手飘过。
------------------------------------------------------------------------
【版权声明】 |
|