网络验证---解除《Easy网管》服务器的试用天数限制

lhl8730 · 发表于 2008-6-5 11:30:30

【破文标题】解除《Easy网管》服务器的试用天数限制
【破文作者】lhl8730
【作者邮箱】[email protected]
【作者主页】无
【破解工具】OD sniffer1.02
【破解平台】XP
【软件名称】《Easy网管》服务器V9.5.1
【软件大小】2.53M
【原版下载】http://www.banruo.net/pro/EasyNet95.1.zip
【保护方式】网络验证
【软件简介】Easy网管
   《Easy网管》是网络管理员的强大工具，会使你的工作更加方便、容易。《Easy网管》可以让网络管理员轻松实现：
1、访问网址管理；2、上网时间管理；3、QQ管理；4、网络流量监测与控制；5、Internet带宽占用监测与控制；6、Internet流量日志；7、收发邮件监视；8、限制局域网内计算机运行程序；9、全端口监测；10、遥控停止或开启Internet；11、截取屏幕；12、关闭电源；13、重新登陆Log Off；14、计算机锁定；15、远程任务管理器；16、远程设备管理；17、局域网内计算机探测；18、上网监测日志；19、良好的适应性；20、可以安装在网络任何计算机；21、不占用带宽资源；22、不阻断和转发包；23、自动设置；24、黑白名单随时转换；25、工作站在线监视；26、进程自我保护；27、工作站远程安装；28、限修改IP地址与MAC地址。

【破解声明】
------------------------------------------------------------------------
【破解过程】好久没写破文了,自己水平太差!!!没什么进展,今天写一个简单的网络验证的破文,难的不会!高手飘过~~~~~~希望对新手有些帮助!!!
运行程序看一下,有30天限制.
没加壳
OD载入查找字符串看到了"day=","Easy网络管理<Server> V9.5.1专业版(使用期限=" 呵呵,爽啊~~~~~~一下就到这了
0047D0FE .  83C4 08    ADD ESP,8
0047D101 .  68 F3B55C00 PUSH EasyNetC.005CB5F3                ;  gf823kd0sf93jkdf9dr2
0047D106 .  E8 155EFDFF CALL EasyNetC.00452F20
0047D10B .  59          POP ECX
0047D10C .  68 08B65C00 PUSH EasyNetC.005CB608                ;  day=
0047D111 .  8D8D 78FBFFFF LEA ECX,DWORD PTR SS:[EBP-488]
0047D117 .  51          PUSH ECX
0047D118 .  E8 4C381000 CALL EasyNetC.00580969
0047D11D .  83C4 08    ADD ESP,8
0047D120 .  8945 80    MOV DWORD PTR SS:[EBP-80],EAX
0047D123 .  837D 80 00 CMP DWORD PTR SS:[EBP-80],0
0047D127 .  0F84 16010000 JE EasyNetC.0047D243
0047D12D .  68 0DB65C00 PUSH EasyNetC.005CB60D                ;  d72jdf8cmv7hs89djkgf
0047D132 .  E8 E15EFDFF CALL EasyNetC.00453018
0047D137 .  59          POP ECX
0047D138 .  8B45 80    MOV EAX,DWORD PTR SS:[EBP-80]
0047D13B .  83C0 04    ADD EAX,4
0047D13E .  8985 7CFFFFFF MOV DWORD PTR SS:[EBP-84],EAX
0047D144 .  FFB5 7CFFFFFF PUSH DWORD PTR SS:[EBP-84]
0047D14A .  E8 6D8D1000 CALL EasyNetC.00585EBC
0047D14F .  59          POP ECX
0047D150 .  8945 88    MOV DWORD PTR SS:[EBP-78],EAX
0047D153 .  68 22B65C00 PUSH EasyNetC.005CB622                ;  xhsk49a01lzjdy47fizk
0047D158 .  E8 EB5CFDFF CALL EasyNetC.00452E48
0047D15D .  59          POP ECX
0047D15E .  66:C745 A0 5C>MOV WORD PTR SS:[EBP-60],5C
0047D164 .  BA 37B65C00 MOV EDX,EasyNetC.005CB637             ;  Easy网络管理<Server> V9.5.1专业版(使用期限=
0047D169 .  8D45 DC    LEA EAX,DWORD PTR SS:[EBP-24]
0047D16C .  E8 13081100 CALL EasyNetC.0058D984

往上找到
0047CED4 .  55          PUSH EBP 下断点
0047CED5 .  8BEC       MOV EBP,ESP
0047CED7 .  81C4 78FBFFFF ADD ESP,-488
0047CEDD .  53          PUSH EBX
0047CEDE .  56          PUSH ESI
0047CEDF .  57          PUSH EDI
0047CEE0 .  8945 8C    MOV DWORD PTR SS:[EBP-74],EAX
0047CEE3 .  B8 A8B95C00 MOV EAX,EasyNetC.005CB9A8
0047CEE8 .  E8 573C1000 CALL EasyNetC.00580B44
0047CEED .  66:C745 A0 08>MOV WORD PTR SS:[EBP-60],8
0047CEF3 .  33D2       XOR EDX,EDX
0047CEF5 .  8955 FC    MOV DWORD PTR SS:[EBP-4],EDX

F9运行程序断下
0047CED4 .  55          PUSH EBP
0047CED5 .  8BEC       MOV EBP,ESP
0047CED7 .  81C4 78FBFFFF ADD ESP,-488
0047CEDD .  53          PUSH EBX
0047CEDE .  56          PUSH ESI
0047CEDF .  57          PUSH EDI
0047CEE0 .  8945 8C    MOV DWORD PTR SS:[EBP-74],EAX
0047CEE3 .  B8 A8B95C00 MOV EAX,EasyNetC.005CB9A8
0047CEE8 .  E8 573C1000 CALL EasyNetC.00580B44
0047CEED .  66:C745 A0 08>MOV WORD PTR SS:[EBP-60],8
0047CEF3 .  33D2       XOR EDX,EDX
0047CEF5 .  8955 FC    MOV DWORD PTR SS:[EBP-4],EDX
0047CEF8 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047CEFB .  66:C745 A0 14>MOV WORD PTR SS:[EBP-60],14
0047CF01 .  66:C745 A0 20>MOV WORD PTR SS:[EBP-60],20
0047CF07 .  33C9       XOR ECX,ECX
0047CF09 .  894D F8    MOV DWORD PTR SS:[EBP-8],ECX
0047CF0C .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047CF0F .  66:C745 A0 14>MOV WORD PTR SS:[EBP-60],14
0047CF15 .  66:C745 A0 2C>MOV WORD PTR SS:[EBP-60],2C
0047CF1B .  33C0       XOR EAX,EAX
0047CF1D .  8945 F4    MOV DWORD PTR SS:[EBP-C],EAX
0047CF20 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047CF23 .  66:C745 A0 14>MOV WORD PTR SS:[EBP-60],14
0047CF29 .  803D 94805B00>CMP BYTE PTR DS:[5B8094],1
0047CF30 .  75 3F       JNZ SHORT EasyNetC.0047CF71
0047CF32 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047CF35 .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047CF38 .  BA 02000000 MOV EDX,2
0047CF3D .  E8 E60B1100 CALL EasyNetC.0058DB28
0047CF42 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047CF45 .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0047CF48 .  BA 02000000 MOV EDX,2
0047CF4D .  E8 D60B1100 CALL EasyNetC.0058DB28
0047CF52 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047CF55 .  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
0047CF58 .  BA 02000000 MOV EDX,2
0047CF5D .  E8 C60B1100 CALL EasyNetC.0058DB28
0047CF62 .  8B4D 90    MOV ECX,DWORD PTR SS:[EBP-70]
0047CF65 .  64:890D 00000>MOV DWORD PTR FS:[0],ECX
0047CF6C .  E9 93050000 JMP EasyNetC.0047D504
0047CF71 >  66:C745 A0 38>MOV WORD PTR SS:[EBP-60],38
0047CF77 .  33C0       XOR EAX,EAX
0047CF79 .  8945 F0    MOV DWORD PTR SS:[EBP-10],EAX
0047CF7C .  8D55 F0    LEA EDX,DWORD PTR SS:[EBP-10]
0047CF7F .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047CF82 .  8B0D 90135E00 MOV ECX,DWORD PTR DS:[5E1390]          ;  EasyNetC._Form1
0047CF88 .  8B01       MOV EAX,DWORD PTR DS:[ECX]
0047CF8A .  8B80 A8030000 MOV EAX,DWORD PTR DS:[EAX+3A8]
0047CF90 .  E8 63770A00 CALL EasyNetC.005246F8
0047CF95 .  8D55 F0    LEA EDX,DWORD PTR SS:[EBP-10]          ;  产品号出现
0047CF98 .  33C9       XOR ECX,ECX
0047CF9A .  894D EC    MOV DWORD PTR SS:[EBP-14],ECX
0047CF9D .  8D4D EC    LEA ECX,DWORD PTR SS:[EBP-14]
0047CFA0 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047CFA3 .  B8 68B55C00 MOV EAX,EasyNetC.005CB568             ;  http://www.banruo.net/cphaction.asp?cph=
0047CFA8 .  E8 D3111100 CALL EasyNetC.0058E180
0047CFAD .  8D55 EC    LEA EDX,DWORD PTR SS:[EBP-14]
0047CFB0 .  52          PUSH EDX
0047CFB1 .  BA 91B55C00 MOV EDX,EasyNetC.005CB591             ;  &version=V9.5.1
0047CFB6 .  8D45 E8    LEA EAX,DWORD PTR SS:[EBP-18]
0047CFB9 .  E8 C6091100 CALL EasyNetC.0058D984
0047CFBE .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047CFC1 .  8D55 E8    LEA EDX,DWORD PTR SS:[EBP-18]
0047CFC4 .  33C0       XOR EAX,EAX
0047CFC6 .  8945 E4    MOV DWORD PTR SS:[EBP-1C],EAX
0047CFC9 .  8D4D E4    LEA ECX,DWORD PTR SS:[EBP-1C]          ;  (网址  连接  产品号连接版本号) 进行网络验证
0047CFCC .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047CFCF .  58          POP EAX
0047CFD0 .  E8 AB0B1100 CALL EasyNetC.0058DB80
0047CFD5 .  8D55 E4    LEA EDX,DWORD PTR SS:[EBP-1C]
0047CFD8 .  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
0047CFDB .  E8 780B1100 CALL EasyNetC.0058DB58
0047CFE0 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047CFE3 .  8D45 E4    LEA EAX,DWORD PTR SS:[EBP-1C]
0047CFE6 .  BA 02000000 MOV EDX,2
0047CFEB .  E8 380B1100 CALL EasyNetC.0058DB28
0047CFF0 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047CFF3 .  8D45 E8    LEA EAX,DWORD PTR SS:[EBP-18]
0047CFF6 .  BA 02000000 MOV EDX,2
0047CFFB .  E8 280B1100 CALL EasyNetC.0058DB28
0047D000 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D003 .  8D45 EC    LEA EAX,DWORD PTR SS:[EBP-14]
0047D006 .  BA 02000000 MOV EDX,2
0047D00B .  E8 180B1100 CALL EasyNetC.0058DB28
0047D010 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D013 .  8D45 F0    LEA EAX,DWORD PTR SS:[EBP-10]
0047D016 .  BA 02000000 MOV EDX,2
0047D01B .  E8 080B1100 CALL EasyNetC.0058DB28
0047D020 .  66:C745 A0 44>MOV WORD PTR SS:[EBP-60],44
0047D026 .  66:C745 A0 50>MOV WORD PTR SS:[EBP-60],50
0047D02C .  33C9       XOR ECX,ECX
0047D02E .  894D E0    MOV DWORD PTR SS:[EBP-20],ECX
0047D031 .  8D4D E0    LEA ECX,DWORD PTR SS:[EBP-20]
0047D034 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D037 .  A1 90135E00 MOV EAX,DWORD PTR DS:[5E1390]
0047D03C .  8B10       MOV EDX,DWORD PTR DS:[EAX]
0047D03E .  8B82 B0060000 MOV EAX,DWORD PTR DS:[EDX+6B0]
0047D044 .  8B55 FC    MOV EDX,DWORD PTR SS:[EBP-4]
0047D047 .  E8 C04EFAFF CALL EasyNetC.00421F0C
0047D04C .  8D55 E0    LEA EDX,DWORD PTR SS:[EBP-20]
0047D04F .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0047D052 .  E8 010B1100 CALL EasyNetC.0058DB58
0047D057 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D05A .  8D45 E0    LEA EAX,DWORD PTR SS:[EBP-20]
0047D05D .  BA 02000000 MOV EDX,2
0047D062 .  E8 C10A1100 CALL EasyNetC.0058DB28                ;  收到返回数据包
0047D067    66:C745 A0 14>MOV WORD PTR SS:[EBP-60],14
0047D06D .  EB 67       JMP SHORT EasyNetC.0047D0D6
0047D06F .  6A 30       PUSH 30
0047D071 .  B9 D8B55C00 MOV ECX,EasyNetC.005CB5D8             ;  错误
0047D076 .  BA A1B55C00 MOV EDX,EasyNetC.005CB5A1             ;  不能与《Easy网管》认证服务器通信,程序不能正常运行....!
0047D07B .  A1 0C155E00 MOV EAX,DWORD PTR DS:[5E150C]
0047D080 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
0047D082 .  E8 41081100 CALL EasyNetC.0058D8C8
0047D087 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D08A .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D08D .  BA 02000000 MOV EDX,2
0047D092 .  E8 910A1100 CALL EasyNetC.0058DB28
0047D097 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D09A .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0047D09D .  BA 02000000 MOV EDX,2
0047D0A2 .  E8 810A1100 CALL EasyNetC.0058DB28
0047D0A7 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D0AA .  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
0047D0AD .  BA 02000000 MOV EDX,2
0047D0B2 .  E8 710A1100 CALL EasyNetC.0058DB28
0047D0B7 .  33C9       XOR ECX,ECX
0047D0B9 .  894D AC    MOV DWORD PTR SS:[EBP-54],ECX
0047D0BC .  8D45 90    LEA EAX,DWORD PTR SS:[EBP-70]
0047D0BF .  50          PUSH EAX
0047D0C0 .  E8 FEE31000 CALL EasyNetC.0058B4C3
0047D0C5 .  59          POP ECX
0047D0C6 .  E9 39040000 JMP EasyNetC.0047D504
0047D0CB .  66:C745 A0 4C>MOV WORD PTR SS:[EBP-60],4C
0047D0D1 .  E8 38DD1000 CALL EasyNetC.0058AE0E
0047D0D6 >  68 DDB55C00 PUSH EasyNetC.005CB5DD                ;  91l6o6z9f83l49dkf95l
0047D0DB .  E8 685DFDFF CALL EasyNetC.00452E48                ;  以下是数据包分析
0047D0E0 .  59          POP ECX
0047D0E1 .  837D F8 00 CMP DWORD PTR SS:[EBP-8],0
0047D0E5 .  74 05       JE SHORT EasyNetC.0047D0EC
0047D0E7    8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]          ;  试用天数都看得见,呵呵
0047D0EA    EB 05       JMP SHORT EasyNetC.0047D0F1
0047D0EC >  BA F2B55C00 MOV EDX,EasyNetC.005CB5F2
0047D0F1 >  52          PUSH EDX
0047D0F2 .  8D85 78FBFFFF LEA EAX,DWORD PTR SS:[EBP-488]
0047D0F8 .  50          PUSH EAX
0047D0F9 .  E8 36371000 CALL EasyNetC.00580834
0047D0FE .  83C4 08    ADD ESP,8
0047D101 .  68 F3B55C00 PUSH EasyNetC.005CB5F3                ;  gf823kd0sf93jkdf9dr2
0047D106 .  E8 155EFDFF CALL EasyNetC.00452F20
0047D10B .  59          POP ECX
0047D10C .  68 08B65C00 PUSH EasyNetC.005CB608                ;  day=
0047D111 .  8D8D 78FBFFFF LEA ECX,DWORD PTR SS:[EBP-488]          ;  试用的天数
0047D117 .  51          PUSH ECX
0047D118 .  E8 4C381000 CALL EasyNetC.00580969
0047D11D .  83C4 08    ADD ESP,8
0047D120 .  8945 80    MOV DWORD PTR SS:[EBP-80],EAX
0047D123 .  837D 80 00 CMP DWORD PTR SS:[EBP-80],0
0047D127 .  0F84 16010000 JE EasyNetC.0047D243                   nop掉
0047D12D .  68 0DB65C00 PUSH EasyNetC.005CB60D                ;  d72jdf8cmv7hs89djkgf
0047D132 .  E8 E15EFDFF CALL EasyNetC.00453018
0047D137 .  59          POP ECX
0047D138 .  8B45 80    MOV EAX,DWORD PTR SS:[EBP-80]
0047D13B .  83C0 04    ADD EAX,4
0047D13E .  8985 7CFFFFFF MOV DWORD PTR SS:[EBP-84],EAX
0047D144 .  FFB5 7CFFFFFF PUSH DWORD PTR SS:[EBP-84]
0047D14A .  E8 6D8D1000 CALL EasyNetC.00585EBC
0047D14F .  59          POP ECX
0047D150 .  8945 88    MOV DWORD PTR SS:[EBP-78],EAX
0047D153 .  68 22B65C00 PUSH EasyNetC.005CB622                ;  xhsk49a01lzjdy47fizk
0047D158 .  E8 EB5CFDFF CALL EasyNetC.00452E48
0047D15D .  59          POP ECX
0047D15E .  66:C745 A0 5C>MOV WORD PTR SS:[EBP-60],5C
0047D164 .  BA 37B65C00 MOV EDX,EasyNetC.005CB637             ;  Easy网络管理<Server> V9.5.1专业版(使用期限=
0047D169 .  8D45 DC    LEA EAX,DWORD PTR SS:[EBP-24]
0047D16C .  E8 13081100 CALL EasyNetC.0058D984
0047D171 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D174 .  8D55 DC    LEA EDX,DWORD PTR SS:[EBP-24]
0047D177 .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D17A .  E8 D9091100 CALL EasyNetC.0058DB58
0047D17F .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D182 .  8D45 DC    LEA EAX,DWORD PTR SS:[EBP-24]
0047D185 .  BA 02000000 MOV EDX,2
0047D18A .  E8 99091100 CALL EasyNetC.0058DB28
0047D18F .  66:C745 A0 68>MOV WORD PTR SS:[EBP-60],68
0047D195 .  33C9       XOR ECX,ECX
0047D197 .  894D D8    MOV DWORD PTR SS:[EBP-28],ECX
0047D19A .  8D55 D8    LEA EDX,DWORD PTR SS:[EBP-28]
0047D19D .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D1A0 .  8B45 88    MOV EAX,DWORD PTR SS:[EBP-78]
0047D1A3 .  E8 4CDB0E00 CALL EasyNetC.0056ACF4
0047D1A8 .  8D55 D8    LEA EDX,DWORD PTR SS:[EBP-28]
0047D1AB .  33C0       XOR EAX,EAX
0047D1AD .  8945 D4    MOV DWORD PTR SS:[EBP-2C],EAX
0047D1B0 .  8D4D D4    LEA ECX,DWORD PTR SS:[EBP-2C]
0047D1B3 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D1B6 .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D1B9 .  E8 C2091100 CALL EasyNetC.0058DB80
0047D1BE .  8D55 D4    LEA EDX,DWORD PTR SS:[EBP-2C]
0047D1C1 .  52          PUSH EDX
0047D1C2 .  BA 63B65C00 MOV EDX,EasyNetC.005CB663             ;  天)             Copyright：辽宁般若网络科技有限公司
0047D1C7 .  8D45 D0    LEA EAX,DWORD PTR SS:[EBP-30]
0047D1CA .  E8 B5071100 CALL EasyNetC.0058D984
0047D1CF .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D1D2 .  8D55 D0    LEA EDX,DWORD PTR SS:[EBP-30]
0047D1D5 .  33C0       XOR EAX,EAX
0047D1D7 .  8945 CC    MOV DWORD PTR SS:[EBP-34],EAX
0047D1DA .  8D4D CC    LEA ECX,DWORD PTR SS:[EBP-34]
0047D1DD .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D1E0 .  58          POP EAX
0047D1E1 .  E8 9A091100 CALL EasyNetC.0058DB80
0047D1E6 .  8D55 CC    LEA EDX,DWORD PTR SS:[EBP-34]
0047D1E9 .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D1EC .  E8 67091100 CALL EasyNetC.0058DB58
0047D1F1 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D1F4 .  8D45 CC    LEA EAX,DWORD PTR SS:[EBP-34]
0047D1F7 .  BA 02000000 MOV EDX,2
0047D1FC .  E8 27091100 CALL EasyNetC.0058DB28
0047D201 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D204 .  8D45 D0    LEA EAX,DWORD PTR SS:[EBP-30]
0047D207 .  BA 02000000 MOV EDX,2
0047D20C .  E8 17091100 CALL EasyNetC.0058DB28
0047D211 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D214 .  8D45 D4    LEA EAX,DWORD PTR SS:[EBP-2C]
0047D217 .  BA 02000000 MOV EDX,2
0047D21C .  E8 07091100 CALL EasyNetC.0058DB28
0047D221 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D224 .  8D45 D8    LEA EAX,DWORD PTR SS:[EBP-28]
0047D227 .  BA 02000000 MOV EDX,2
0047D22C .  E8 F7081100 CALL EasyNetC.0058DB28
0047D231 .  8B0D 90135E00 MOV ECX,DWORD PTR DS:[5E1390]          ;  EasyNetC._Form1
0047D237 .  8B01       MOV EAX,DWORD PTR DS:[ECX]
0047D239 .  8B55 F4    MOV EDX,DWORD PTR SS:[EBP-C]
0047D23C .  E8 E7740A00 CALL EasyNetC.00524728
0047D241 .  EB 57       JMP SHORT EasyNetC.0047D29A
0047D243 >  6A 30       PUSH 30
0047D245 .  B9 D1B65C00 MOV ECX,EasyNetC.005CB6D1             ;  错误
0047D24A .  BA 9AB65C00 MOV EDX,EasyNetC.005CB69A             ;  不能与《Easy网管》认证服务器通信,程序不能正常运行....!
0047D24F .  A1 0C155E00 MOV EAX,DWORD PTR DS:[5E150C]
0047D254 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
0047D256 .  E8 6D061100 CALL EasyNetC.0058D8C8
0047D25B .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D25E .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D261 .  BA 02000000 MOV EDX,2
0047D266 .  E8 BD081100 CALL EasyNetC.0058DB28
0047D26B .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D26E .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0047D271 .  BA 02000000 MOV EDX,2
0047D276 .  E8 AD081100 CALL EasyNetC.0058DB28
0047D27B .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D27E .  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
0047D281 .  BA 02000000 MOV EDX,2
0047D286 .  E8 9D081100 CALL EasyNetC.0058DB28
0047D28B .  8B4D 90    MOV ECX,DWORD PTR SS:[EBP-70]
0047D28E .  64:890D 00000>MOV DWORD PTR FS:[0],ECX
0047D295 .  E9 6A020000 JMP EasyNetC.0047D504
0047D29A >  68 D6B65C00 PUSH EasyNetC.005CB6D6                ;  user=
0047D29F .  8D85 78FBFFFF LEA EAX,DWORD PTR SS:[EBP-488]          ;  用户的个数
0047D2A5 .  50          PUSH EAX
0047D2A6 .  E8 BE361000 CALL EasyNetC.00580969
0047D2AB .  83C4 08    ADD ESP,8
0047D2AE .  8945 80    MOV DWORD PTR SS:[EBP-80],EAX
0047D2B1 .  837D 80 00 CMP DWORD PTR SS:[EBP-80],0
0047D2B5 .  74 7C       JE SHORT EasyNetC.0047D333             nop掉
0047D2B7 .  68 DCB65C00 PUSH EasyNetC.005CB6DC                ;  xhsj301lziw9103e8sds
0047D2BC .  E8 5F5CFDFF CALL EasyNetC.00452F20
0047D2C1 .  59          POP ECX
0047D2C2 .  8B55 80    MOV EDX,DWORD PTR SS:[EBP-80]
0047D2C5 .  83C2 05    ADD EDX,5
0047D2C8 .  8995 78FFFFFF MOV DWORD PTR SS:[EBP-88],EDX
0047D2CE .  FFB5 78FFFFFF PUSH DWORD PTR SS:[EBP-88]
0047D2D4 .  E8 E38B1000 CALL EasyNetC.00585EBC
0047D2D9 .  59          POP ECX
0047D2DA .  8945 84    MOV DWORD PTR SS:[EBP-7C],EAX
0047D2DD .  68 F1B65C00 PUSH EasyNetC.005CB6F1                ;  f84kflas0a9195mxjuea
0047D2E2 .  E8 315DFDFF CALL EasyNetC.00453018
0047D2E7 .  59          POP ECX
0047D2E8 .  8B4D 84    MOV ECX,DWORD PTR SS:[EBP-7C]
0047D2EB .  890D D4275E00 MOV DWORD PTR DS:[5E27D4],ECX
0047D2F1 .  66:C745 A0 74>MOV WORD PTR SS:[EBP-60],74
0047D2F7 .  33C0       XOR EAX,EAX
0047D2F9 .  8945 C8    MOV DWORD PTR SS:[EBP-38],EAX
0047D2FC .  8D55 C8    LEA EDX,DWORD PTR SS:[EBP-38]
0047D2FF .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D302 .  8B45 84    MOV EAX,DWORD PTR SS:[EBP-7C]
0047D305 .  E8 EAD90E00 CALL EasyNetC.0056ACF4
0047D30A .  8D55 C8    LEA EDX,DWORD PTR SS:[EBP-38]
0047D30D .  8B12       MOV EDX,DWORD PTR DS:[EDX]
0047D30F .  A1 90135E00 MOV EAX,DWORD PTR DS:[5E1390]
0047D314 .  8B08       MOV ECX,DWORD PTR DS:[EAX]
0047D316 .  8B81 D8050000 MOV EAX,DWORD PTR DS:[ECX+5D8]
0047D31C .  E8 07740A00 CALL EasyNetC.00524728
0047D321 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D324 .  8D45 C8    LEA EAX,DWORD PTR SS:[EBP-38]
0047D327 .  BA 02000000 MOV EDX,2
0047D32C .  E8 F7071100 CALL EasyNetC.0058DB28
0047D331 .  EB 57       JMP SHORT EasyNetC.0047D38A
0047D333 >  6A 30       PUSH 30
0047D335 .  B9 3DB75C00 MOV ECX,EasyNetC.005CB73D             ;  错误
0047D33A .  BA 06B75C00 MOV EDX,EasyNetC.005CB706             ;  不能与《Easy网管》认证服务器通信,程序不能正常运行....!
0047D33F .  A1 0C155E00 MOV EAX,DWORD PTR DS:[5E150C]
0047D344 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
0047D346 .  E8 7D051100 CALL EasyNetC.0058D8C8
0047D34B .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D34E .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D351 .  BA 02000000 MOV EDX,2
0047D356 .  E8 CD071100 CALL EasyNetC.0058DB28
0047D35B .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D35E .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0047D361 .  BA 02000000 MOV EDX,2
0047D366 .  E8 BD071100 CALL EasyNetC.0058DB28
0047D36B .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D36E .  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
0047D371 .  BA 02000000 MOV EDX,2
0047D376 .  E8 AD071100 CALL EasyNetC.0058DB28
0047D37B .  8B4D 90    MOV ECX,DWORD PTR SS:[EBP-70]
0047D37E .  64:890D 00000>MOV DWORD PTR FS:[0],ECX
0047D385 .  E9 7A010000 JMP EasyNetC.0047D504
0047D38A >  837D 88 00 CMP DWORD PTR SS:[EBP-78],0
0047D38E .  7F 58       JG SHORT EasyNetC.0047D3E8             ;  go go go go ,呵呵
0047D390 .  68 42B75C00 PUSH EasyNetC.005CB742                ;  d72jdf8cmv7hs89djkgf
0047D395 .  E8 7E5CFDFF CALL EasyNetC.00453018
0047D39A .  59          POP ECX
0047D39B .  C605 B9805B00>MOV BYTE PTR DS:[5B80B9],0
0047D3A2 .  66:C745 A0 80>MOV WORD PTR SS:[EBP-60],80
0047D3A8 .  BA 57B75C00 MOV EDX,EasyNetC.005CB757             ;  Easy网络管理<Server> V9.5.1专业版(权期已到,不能再继续使用,请您申请延期使用.....!)
0047D3AD .  8D45 C4    LEA EAX,DWORD PTR SS:[EBP-3C]
0047D3B0 .  E8 CF051100 CALL EasyNetC.0058D984
0047D3B5 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D3B8 .  8D55 C4    LEA EDX,DWORD PTR SS:[EBP-3C]
0047D3BB .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D3BE .  E8 95071100 CALL EasyNetC.0058DB58
0047D3C3 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D3C6 .  8D45 C4    LEA EAX,DWORD PTR SS:[EBP-3C]
0047D3C9 .  BA 02000000 MOV EDX,2
0047D3CE .  E8 55071100 CALL EasyNetC.0058DB28
0047D3D3 .  8B0D 90135E00 MOV ECX,DWORD PTR DS:[5E1390]          ;  EasyNetC._Form1
0047D3D9 .  8B01       MOV EAX,DWORD PTR DS:[ECX]
0047D3DB .  8B55 F4    MOV EDX,DWORD PTR SS:[EBP-C]
0047D3DE .  E8 45730A00 CALL EasyNetC.00524728
0047D3E3 .  E9 DB000000 JMP EasyNetC.0047D4C3
0047D3E8 >  68 A9B75C00 PUSH EasyNetC.005CB7A9                ;  d72jdf8cmv7hs89djkgf
0047D3ED .  E8 265CFDFF CALL EasyNetC.00453018
0047D3F2 .  59          POP ECX
0047D3F3 .  837D 88 03 CMP DWORD PTR SS:[EBP-78],3
0047D3F7 .  0F8F B4000000 JG EasyNetC.0047D4B1                   ;  go go go go ,呵呵
0047D3FD .  66:C745 A0 8C>MOV WORD PTR SS:[EBP-60],8C
0047D403 .  33C9       XOR ECX,ECX
0047D405 .  894D C0    MOV DWORD PTR SS:[EBP-40],ECX
0047D408 .  8D55 C0    LEA EDX,DWORD PTR SS:[EBP-40]
0047D40B .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D40E .  8B45 88    MOV EAX,DWORD PTR SS:[EBP-78]
0047D411 .  E8 DED80E00 CALL EasyNetC.0056ACF4
0047D416 .  8D55 C0    LEA EDX,DWORD PTR SS:[EBP-40]
0047D419 .  33C0       XOR EAX,EAX
0047D41B .  8945 BC    MOV DWORD PTR SS:[EBP-44],EAX
0047D41E .  8D4D BC    LEA ECX,DWORD PTR SS:[EBP-44]
0047D421 .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D424 .  B8 BEB75C00 MOV EAX,EasyNetC.005CB7BE             ;  Easy网络管理<Server> V9.5.1专业版(离授权期还有
0047D429 .  E8 520D1100 CALL EasyNetC.0058E180
0047D42E .  8D55 BC    LEA EDX,DWORD PTR SS:[EBP-44]
0047D431 .  52          PUSH EDX
0047D432 .  BA EEB75C00 MOV EDX,EasyNetC.005CB7EE             ; 天，请尽快申请延期，以免耽误您的使用...!)
0047D437 .  8D45 B8    LEA EAX,DWORD PTR SS:[EBP-48]
0047D43A .  E8 45051100 CALL EasyNetC.0058D984
0047D43F .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D442 .  8D55 B8    LEA EDX,DWORD PTR SS:[EBP-48]
0047D445 .  33C0       XOR EAX,EAX
0047D447 .  8945 B4    MOV DWORD PTR SS:[EBP-4C],EAX
0047D44A .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
0047D44D .  FF45 AC    INC DWORD PTR SS:[EBP-54]
0047D450 .  58          POP EAX
0047D451 .  E8 2A071100 CALL EasyNetC.0058DB80
0047D456 .  8D55 B4    LEA EDX,DWORD PTR SS:[EBP-4C]
0047D459 .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D45C .  E8 F7061100 CALL EasyNetC.0058DB58
0047D461 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D464 .  8D45 B4    LEA EAX,DWORD PTR SS:[EBP-4C]
0047D467 .  BA 02000000 MOV EDX,2
0047D46C .  E8 B7061100 CALL EasyNetC.0058DB28
0047D471 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D474 .  8D45 B8    LEA EAX,DWORD PTR SS:[EBP-48]
0047D477 .  BA 02000000 MOV EDX,2
0047D47C .  E8 A7061100 CALL EasyNetC.0058DB28
0047D481 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D484 .  8D45 BC    LEA EAX,DWORD PTR SS:[EBP-44]
0047D487 .  BA 02000000 MOV EDX,2
0047D48C .  E8 97061100 CALL EasyNetC.0058DB28
0047D491 .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D494 .  8D45 C0    LEA EAX,DWORD PTR SS:[EBP-40]
0047D497 .  BA 02000000 MOV EDX,2
0047D49C .  E8 87061100 CALL EasyNetC.0058DB28
0047D4A1 .  8B0D 90135E00 MOV ECX,DWORD PTR DS:[5E1390]          ;  EasyNetC._Form1
0047D4A7 .  8B01       MOV EAX,DWORD PTR DS:[ECX]
0047D4A9 .  8B55 F4    MOV EDX,DWORD PTR SS:[EBP-C]
0047D4AC .  E8 77720A00 CALL EasyNetC.00524728
0047D4B1 >  68 19B85C00 PUSH EasyNetC.005CB819                ;  xhsj301lziw9103e8sds
0047D4B6 .  E8 655AFDFF CALL EasyNetC.00452F20
0047D4BB .  59          POP ECX
0047D4BC .  C605 B9805B00>MOV BYTE PTR DS:[5B80B9],1
0047D4C3 >  C605 94805B00>MOV BYTE PTR DS:[5B8094],1
0047D4CA .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D4CD .  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047D4D0 .  BA 02000000 MOV EDX,2
0047D4D5 .  E8 4E061100 CALL EasyNetC.0058DB28
0047D4DA .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D4DD .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0047D4E0 .  BA 02000000 MOV EDX,2
0047D4E5 .  E8 3E061100 CALL EasyNetC.0058DB28
0047D4EA .  FF4D AC    DEC DWORD PTR SS:[EBP-54]
0047D4ED .  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
0047D4F0 .  BA 02000000 MOV EDX,2
0047D4F5 .  E8 2E061100 CALL EasyNetC.0058DB28
0047D4FA .  8B4D 90    MOV ECX,DWORD PTR SS:[EBP-70]
0047D4FD .  64:890D 00000>MOV DWORD PTR FS:[0],ECX
0047D504 >  5F          POP EDI
0047D505 .  5E          POP ESI
0047D506 .  5B          POP EBX
0047D507 .  8BE5       MOV ESP,EBP
0047D509 .  5D          POP EBP
0047D50A .  C3          RETN

用sniffer1.02抓获的数据包如下:
48 54 54 50 2F 31 2E 31 |  HTTP/1.1
20 32 30 30 20 4F 4B 0D | 200 OK.
0A 53 65 72 76 65 72 3A |  .Server:
20 4D 69 63 72 6F 73 6F | Microso
66 74 2D 49 49 53 2F 35 |  ft-IIS/5
2E 30 0D 0A 44 61 74 65 |  .0..Date
3A 20 54 68 75 2C 20 30 |  : Thu, 0
35 20 4A 75 6E 20 32 30 |  5 Jun 20
30 38 20 31 31 3A 32 31 |  08 11:21
3A 33 38 20 47 4D 54 0D |  :38 GMT.
0A 43 6F 6E 74 65 6E 74 |  .Content
2D 4C 65 6E 67 74 68 3A |  -Length:
20 35 30 0D 0A 43 6F 6E | 50..Con
74 65 6E 74 2D 54 79 70 |  tent-Typ
65 3A 20 74 65 78 74 2F |  e: text/
68 74 6D 6C 0D 0A 53 65 |  html..Se
74 2D 43 6F 6F 6B 69 65 |  t-Cookie
3A 20 41 53 50 53 45 53 |  : ASPSES
53 49 4F 4E 49 44 43 43 |  SIONIDCC
54 52 51 43 41 43 3D 48 |  TRQCAC=H
43 4B 4C 50 43 4F 43 4F |  CKLPCOCO
4C 4B 42 44 45 4E 4D 50 |  LKBDENMP
49 46 4A 4E 41 4D 4D 3B |  IFJNAMM;
20 70 61 74 68 3D 2F 0D | path=/.
0A 43 61 63 68 65 2D 63 |  .Cache-c
6F 6E 74 72 6F 6C 3A 20 |  ontrol:
70 72 69 76 61 74 65 0D |  private.
0A 0D 0A 0D 0A 3C 68 74 |  .....<ht
6D 6C 3E 0D 0A 3C 74 69 |  ml>..<ti
74 6C 65 3E 64 61 79 3D |  tle>day=
32 39 26 75 73 65 72 3D |  29&user=
35 30 3C 2F 74 69 74 6C |  50</titl
65 3E 0D 0A 3C 2F 68 74 |  e>..</ht
6D 6C 3E 0D 0A          |  ml>..

HTTP/1.1 200 OK..Server: Microsoft-IIS/5.0..Date: Thu, 05 Jun 2008 11:21:38 GMT..Content-Length: 50..Content-Type: text/html..Set-Cookie: ASPSESSIONIDCCTRQCAC=HCKLPCOCOLKBDENMPIFJNAMM; path=/..Cache-control: private......<html>..<title>day=29&user=50</title>..</html>..
下载地址:http://www.namipan.com/d/8a011e7 ... 71e0c9a24a252702c00

录像的地址:https://www.chinapyg.com/viewthr ... &extra=page%3D1
------------------------------------------------------------------------
【破解总结】把产品号发到服务器端验证,返回试用天数和用户数
改的思路两种:1 改产品号.改一个就有30天的试用值!! 2 改数据包的数据,如把<html>..<title>day=29&user=50</title>..</html>改成<html>..<title>day=1000&user=10000</title>..</html>

简单吧~~~希望高手做几个高难度的网络验证让我等菜鸟来学习一下~呵呵!!!!!!
------------------------------------------------------------------------
【版权声明】PYG首发,转载请保持文章完整及作者信息。

[ 本帖最后由 lhl8730 于 2008-6-5 13:14 编辑 ]

cdygr · 发表于 2008-6-5 13:17:13

值得收藏，牛人的作品

寒轩 · 发表于 2008-6-7 10:00:08

/:010 /:010 /:010
向LZ学习了。。好牛啊。。

iamok · 发表于 2008-6-7 13:46:48

厉害，学习了。。。。。。。。。。。。。。。

yayo6506 · 发表于 2008-6-8 10:58:46

我看了一看，支持楼主，你辛苦了。蛮好的。

wuzhi8899 · 发表于 2008-6-9 15:39:26

厉害，学习/:014

yybns · 发表于 2008-6-9 22:03:33

支持楼主，你辛苦了。蛮好的。/:good

guyuelang · 发表于 2008-6-9 22:29:13

我有个高难度的
是个原动力的外挂也是网络验证的
不但用户名要发出连游戏的用户也要发很难找到验证通过的地方
楼主有空试试啊

xbb[DFCG] · 发表于 2008-6-16 11:52:13

难怪我爆破不成功呢，原来有网络验证啊～可惜不会搞网络验证的程序～差距啊！
看来关键还是要弄懂程序的作用！

lzover · 发表于 2008-6-16 12:23:11

抓包~~~~/:QQ2
高深的技术~~学习了

		自动登录	找回密码
密码			加入我们

[原创] 网络验证---解除《Easy网管》服务器的试用天数限制

评分

相关帖子