还好,DRIP留有笔记,请看 (1千字)
drip注册码错误得到"蔬杰澳迋獖詧醾羵膫軅?",用W32DASM修改版反汇编
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004037B3(C) <--***
|
:0040385E 8B761C mov esi, dword ptr [esi+1C]
:00403861 85F6 test esi, esi
:00403863 7403 je 00403868
:00403865 8B761C mov esi, dword ptr [esi+1C]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403863(C)
|
:00403868 6A30 push 00000030
* Possible StringData Ref from Data Obj ->"搊榐幐攕"
|
:0040386A 6850A44600 push 0046A450
* Possible StringData Ref from Data Obj ->"蔬杰澳迋獖詧醾羵膫軅?"
|
:0040386F 6834A44600 push 0046A434
再看
:004037A9 E8F8140200 call 00424CA6 <--重点
:004037AE 83C408 add esp, 00000008
:004037B1 85C0 test eax, eax
:004037B3 0F85A5000000 jne 0040385E
所以用F8进入:004037A9 E8F8140200 call 00424CA6
走到
:00424CE6 8945F8 mov dword ptr [ebp-08], eax
下指令d eax, 就看到注册码
我的是
xiaolou
aaa
01E5
