某穿牆輔助的註冊碼破解

Q2757410577發表於2018-03-10

我的Q：2 7 5 7 4 1 0 5 7 7 想破解的請加我。

一個多月前，一個客戶找到我，說要破解一個外掛。卻拿了註冊碼，說是試用，沒了下文。這種人見多了，先是上來大談合作，大言炎炎彷彿一江湖老大的派頭，最後卻是鼠竊狗偷之徒。

這個破解資料公開一下吧，反正留著也沒用了。你也可以加我的企鵝：2 7 5 7 4 1 0 5 7 7 想破解軟體的才加我哦。本人不收徒。騙子請繞道。

00406EE1 /$ 55 push ebp
00406EE2 |. 8BEC mov ebp,esp
00406EE4 |. 81EC 24000000 sub esp,0x24
00406EEA |. C745 FC 00000000 mov [local.1],0x0
00406EF1 |. C745 F8 00000000 mov [local.2],0x0
00406EF8 |. E8 1EFFFFFF call 穿牆輔助.00406E1B
00406EFD |. 68 01030080 push 0x80000301
00406F02 |. 6A 00 push 0x0
00406F04 |. 50 push eax
00406F05 |. 68 01000000 push 0x1
00406F0A |. BB 10AC4000 mov ebx,穿牆輔助.0040AC10
00406F0F |. E8 48360000 call 穿牆輔助.0040A55C
00406F14 |. 83C4 10 add esp,0x10
00406F17 |. 8945 E4 mov [local.7],eax
00406F1A |. 8955 E8 mov [local.6],edx
00406F1D |. DD45 E4 fld qword ptr ss:[ebp-0x1C]
00406F20 |. E8 EDA8FFFF call 穿牆輔助.00401812
00406F25 |. 8945 FC mov [local.1],eax
00406F28 |. B8 DB4E4800 mov eax,穿牆輔助.00484EDB ; 配置.ini
00406F2D |. 8945 F4 mov [local.3],eax
00406F30 |. 8D45 F4 lea eax,[local.3]
00406F33 |. 50 push eax
00406F34 |. E8 BF030000 call 穿牆輔助.004072F8
00406F39 |. 8945 F0 mov [local.4],eax
00406F3C |. 8B5D F4 mov ebx,[local.3]
00406F3F |. 85DB test ebx,ebx
00406F41 |. 74 09 je short 穿牆輔助.00406F4C
00406F43 |. 53 push ebx
00406F44 |. E8 07360000 call 穿牆輔助.0040A550
00406F49 |. 83C4 04 add esp,0x4
00406F4C |> 837D F0 01 cmp [local.4],0x1
00406F50 |. 0F85 22010000 jnz 穿牆輔助.00407078
00406F56 |. 68 00000000 push 0x0
00406F5B |. BB 50A94000 mov ebx,穿牆輔助.0040A950 ; j
00406F60 |. E8 F7350000 call 穿牆輔助.0040A55C
00406F65 |. 83C4 04 add esp,0x4
00406F68 |. 8945 F4 mov [local.3],eax
00406F6B |. 68 E44E4800 push 穿牆輔助.00484EE4 ; \配置.ini
00406F70 |. FF75 F4 push [local.3]
00406F73 |. B9 02000000 mov ecx,0x2
00406F78 |. E8 C7ABFFFF call 穿牆輔助.00401B44
00406F7D |. 83C4 08 add esp,0x8
00406F80 |. 8945 F0 mov [local.4],eax
00406F83 |. 8B5D F4 mov ebx,[local.3]
00406F86 |. 85DB test ebx,ebx
00406F88 |. 74 09 je short 穿牆輔助.00406F93
00406F8A |. 53 push ebx
00406F8B |. E8 C0350000 call 穿牆輔助.0040A550
00406F90 |. 83C4 04 add esp,0x4
00406F93 |> 6A 00 push 0x0
00406F95 |. 6A 00 push 0x0
00406F97 |. 6A 00 push 0x0
00406F99 |. 68 04000080 push 0x80000004
00406F9E |. 6A 00 push 0x0
00406FA0 |. 68 EE4E4800 push 穿牆輔助.00484EEE ; 註冊碼
00406FA5 |. 68 04000080 push 0x80000004
00406FAA |. 6A 00 push 0x0
00406FAC |. 68 F54E4800 push 穿牆輔助.00484EF5 ; 配置資料
00406FB1 |. 68 04000080 push 0x80000004
00406FB6 |. 6A 00 push 0x0
00406FB8 |. 8B45 F0 mov eax,[local.4]
00406FBB |. 85C0 test eax,eax
00406FBD |. 75 05 jnz short 穿牆輔助.00406FC4
00406FBF |. B8 644E4800 mov eax,穿牆輔助.00484E64
00406FC4 |> 50 push eax
00406FC5 |. 68 04000000 push 0x4
00406FCA |. BB C0BB4000 mov ebx,穿牆輔助.0040BBC0
00406FCF |. E8 88350000 call 穿牆輔助.0040A55C
00406FD4 |. 83C4 34 add esp,0x34
00406FD7 |. 8945 EC mov [local.5],eax
00406FDA |. 8B5D F0 mov ebx,[local.4]
00406FDD |. 85DB test ebx,ebx
00406FDF |. 74 09 je short 穿牆輔助.00406FEA
00406FE1 |. 53 push ebx
00406FE2 |. E8 69350000 call 穿牆輔助.0040A550
00406FE7 |. 83C4 04 add esp,0x4
00406FEA |> 68 04000080 push 0x80000004
00406FEF |. 6A 00 push 0x0
00406FF1 |. 8B45 EC mov eax,[local.5]
00406FF4 |. 85C0 test eax,eax
00406FF6 |. 75 05 jnz short 穿牆輔助.00406FFD
00406FF8 |. B8 644E4800 mov eax,穿牆輔助.00484E64
00406FFD |> 50 push eax
00406FFE |. 68 01000000 push 0x1
00407003 |. BB 90AF4000 mov ebx,穿牆輔助.0040AF90
00407008 |. E8 4F350000 call 穿牆輔助.0040A55C
0040700D |. 83C4 10 add esp,0x10
00407010 |. 8945 E8 mov [local.6],eax
00407013 |. 8B5D EC mov ebx,[local.5]
00407016 |. 85DB test ebx,ebx
00407018 |. 74 09 je short 穿牆輔助.00407023
0040701A |. 53 push ebx
0040701B |. E8 30350000 call 穿牆輔助.0040A550
00407020 |. 83C4 04 add esp,0x4
00407023 |> 8B45 E8 mov eax,[local.6] ; QQPinyin.102653D4
00407026 |. 8945 F8 mov [local.2],eax
00407029 |. 68 01030080 push 0x80000301
0040702E |. 6A 00 push 0x0
00407030 |. FF75 F8 push [local.2]
00407033 |. 68 01000000 push 0x1
00407038 |. BB E0B74000 mov ebx,穿牆輔助.0040B7E0
0040703D |. E8 1A350000 call 穿牆輔助.0040A55C
00407042 |. 83C4 10 add esp,0x10
00407045 |. 8945 F4 mov [local.3],eax
00407048 |. 6A 00 push 0x0
0040704A |. FF75 F4 push [local.3]
0040704D |. 6A FF push -0x1
0040704F |. 6A 08 push 0x8
00407051 |. 68 7D3A0116 push 0x16013A7D
00407056 |. 68 04000152 push 0x52010004
0040705B |. E8 14350000 call 穿牆輔助.0040A574
00407060 |. 83C4 18 add esp,0x18
00407063 |. 8B5D F4 mov ebx,[local.3]
00407066 |. 85DB test ebx,ebx
00407068 |. 74 09 je short 穿牆輔助.00407073
0040706A |. 53 push ebx
0040706B |. E8 E0340000 call 穿牆輔助.0040A550
00407070 |. 83C4 04 add esp,0x4
00407073 |> E9 00000000 jmp 穿牆輔助.00407078 Q：2 7 5 7 4 1 0 5 7 7 想破解的請加我。
00407078 |> 837D FC 00 cmp [local.1],0x0 這個是序列號的16進位制
0040707C |. 0F85 1D000000 jnz 穿牆輔助.0040709F
00407082 |. 6A 00 push 0x0
00407084 |. 68 FE4E4800 push 穿牆輔助.00484EFE ; 稍等...
00407089 |. 6A FF push -0x1
0040708B |. 6A 08 push 0x8
0040708D |. 68 793A0116 push 0x16013A79
00407092 |. 68 04000152 push 0x52010004
00407097 |. E8 D8340000 call 穿牆輔助.0040A574
0040709C |. 83C4 18 add esp,0x18
0040709F |> FF75 FC push [local.1]
004070A2 |. E8 98020000 call 穿牆輔助.0040733F
004070A7 |. 8945 F4 mov [local.3],eax
004070AA |. 6A FF push -0x1
004070AC |. 6A 08 push 0x8
004070AE |. 68 7D3A0116 push 0x16013A7D
004070B3 |. 68 04000152 push 0x52010004
004070B8 |. E8 B1340000 call 穿牆輔助.0040A56E
004070BD |. 83C4 10 add esp,0x10
004070C0 |. 8945 F0 mov [local.4],eax
004070C3 |. 68 04000080 push 0x80000004
004070C8 |. 6A 00 push 0x0
004070CA |. 8B45 F0 mov eax,[local.4]
004070CD |. 85C0 test eax,eax
004070CF |. 75 05 jnz short 穿牆輔助.004070D6
004070D1 |. B8 644E4800 mov eax,穿牆輔助.00484E64
004070D6 |> 50 push eax
004070D7 |. 68 01000000 push 0x1
004070DC |. BB 10AC4000 mov ebx,穿牆輔助.0040AC10
004070E1 |. E8 76340000 call 穿牆輔助.0040A55C
004070E6 |. 83C4 10 add esp,0x10
004070E9 |. 8945 E8 mov [local.6],eax
004070EC |. 8955 EC mov [local.5],edx
004070EF |. 8B5D F0 mov ebx,[local.4]
004070F2 |. 85DB test ebx,ebx
004070F4 |. 74 09 je short 穿牆輔助.004070FF
004070F6 |. 53 push ebx
004070F7 |. E8 54340000 call 穿牆輔助.0040A550
004070FC |. 83C4 04 add esp,0x4
004070FF |> DB45 F4 fild [local.3]
00407102 |. DD5D E0 fstp qword ptr ss:[ebp-0x20]
00407105 |. DD45 E0 fld qword ptr ss:[ebp-0x20]
00407108 |. DC65 E8 fsub qword ptr ss:[ebp-0x18]
0040710B |. D9E4 ftst
0040710D |. DFE0 fstsw ax
0040710F |. F6C4 01 test ah,0x1
00407112 |. 74 02 je short 穿牆輔助.00407116
00407114 |. D9E0 fchs
00407116 |> DC1D 064F4800 fcomp qword ptr ds:[0x484F06]
0040711C |. DFE0 fstsw ax
0040711E |. F6C4 41 test ah,0x41
00407121 |. 0F85 A4000000 jnz 穿牆輔助.004071CB 這裡跳，就註冊
00407127 |. 6A 00 push 0x0
00407129 |. 68 0E4F4800 push 穿牆輔助.00484F0E ; QQ:97283845
0040712E |. 6A FF push -0x1
00407130 |. 6A 08 push 0x8
00407132 |. 68 793A0116 push 0x16013A79
00407137 |. 68 04000152 push 0x52010004
0040713C |. E8 33340000 call 穿牆輔助.0040A574
00407141 |. 83C4 18 add esp,0x18
00407144 |. 6A 00 push 0x0
00407146 |. 68 644E4800 push 穿牆輔助.00484E64
0040714B |. 6A FF push -0x1
0040714D |. 6A 08 push 0x8
0040714F |. 68 7D3A0116 push 0x16013A7D
00407154 |. 68 04000152 push 0x52010004
00407159 |. E8 16340000 call 穿牆輔助.0040A574
0040715E |. 83C4 18 add esp,0x18
00407161 |. 6A 00 push 0x0
00407163 |. 68 00000000 push 0x0
00407168 |. 6A FF push -0x1
0040716A |. 6A 06 push 0x6
0040716C |. 68 783A0116 push 0x16013A78
00407171 |. 68 04000152 push 0x52010004
00407176 |. E8 F9330000 call 穿牆輔助.0040A574
0040717B |. 83C4 18 add esp,0x18
0040717E |. 6A 00 push 0x0
00407180 |. 68 00000000 push 0x0
00407185 |. 6A FF push -0x1
00407187 |. 6A 06 push 0x6
00407189 |. 68 7D3A0116 push 0x16013A7D
0040718E |. 68 04000152 push 0x52010004
00407193 |. E8 DC330000 call 穿牆輔助.0040A574
00407198 |. 83C4 18 add esp,0x18
0040719B |. B8 DB4E4800 mov eax,穿牆輔助.00484EDB ; 配置.ini
004071A0 |. 8945 F4 mov [local.3],eax
004071A3 |. 8D45 F4 lea eax,[local.3]
004071A6 |. 50 push eax
004071A7 |. E8 EC010000 call 穿牆輔助.00407398
004071AC |. 8B5D F4 mov ebx,[local.3]
004071AF |. 85DB test ebx,ebx
004071B1 |. 74 09 je short 穿牆輔助.004071BC
004071B3 |. 53 push ebx
004071B4 |. E8 97330000 call 穿牆輔助.0040A550
004071B9 |. 83C4 04 add esp,0x4
004071BC |> C705 941B4B00 000000>mov dword ptr ds:[0x4B1B94],0x0
004071C6 |. E9 29010000 jmp 穿牆輔助.004072F4
004071CB |> 6A 00 push 0x0
004071CD |. 68 1A4F4800 push 穿牆輔助.00484F1A ; 註冊成功
004071D2 |. 6A FF push -0x1
004071D4 |. 6A 08 push 0x8
004071D6 |. 68 793A0116 push 0x16013A79
004071DB |. 68 04000152 push 0x52010004
004071E0 |. E8 8F330000 call 穿牆輔助.0040A574
004071E5 |. 83C4 18 add esp,0x18
004071E8 |. C705 941B4B00 010000>mov dword ptr ds:[0x4B1B94],0x1
004071F2 |. 6A 00 push 0x0
004071F4 |. 68 01000000 push 0x1
004071F9 |. 6A FF push -0x1
004071FB |. 6A 06 push 0x6
004071FD |. 68 783A0116 push 0x16013A78
00407202 |. 68 04000152 push 0x52010004
00407207 |. E8 68330000 call 穿牆輔助.0040A574
0040720C |. 83C4 18 add esp,0x18
0040720F |. 6A 00 push 0x0
00407211 |. 68 01000000 push 0x1
00407216 |. 6A FF push -0x1
00407218 |. 6A 06 push 0x6
0040721A |. 68 7D3A0116 push 0x16013A7D
0040721F |. 68 04000152 push 0x52010004
00407224 |. E8 4B330000 call 穿牆輔助.0040A574
00407229 |. 83C4 18 add esp,0x18
0040722C |. 68 00000000 push 0x0
00407231 |. BB 50A94000 mov ebx,穿牆輔助.0040A950 ; j
00407236 |. E8 21330000 call 穿牆輔助.0040A55C
0040723B |. 83C4 04 add esp,0x4
0040723E |. 8945 F4 mov [local.3],eax
00407241 |. 68 E44E4800 push 穿牆輔助.00484EE4 ; \配置.ini
00407246 |. FF75 F4 push [local.3]
00407249 |. B9 02000000 mov ecx,0x2
0040724E |. E8 F1A8FFFF call 穿牆輔助.00401B44
00407253 |. 83C4 08 add esp,0x8
00407256 |. 8945 F0 mov [local.4],eax
00407259 |. 8B5D F4 mov ebx,[local.3]
0040725C |. 85DB test ebx,ebx
0040725E |. 74 09 je short 穿牆輔助.00407269
00407260 |. 53 push ebx
00407261 |. E8 EA320000 call 穿牆輔助.0040A550
00407266 |. 83C4 04 add esp,0x4
00407269 |> 6A FF push -0x1
0040726B |. 6A 08 push 0x8
0040726D |. 68 7D3A0116 push 0x16013A7D
00407272 |. 68 04000152 push 0x52010004
00407277 |. E8 F2320000 call 穿牆輔助.0040A56E
0040727C |. 83C4 10 add esp,0x10
0040727F |. 8945 EC mov [local.5],eax
00407282 |. 68 04000080 push 0x80000004
00407287 |. 6A 00 push 0x0
00407289 |. 8B45 EC mov eax,[local.5]
0040728C |. 85C0 test eax,eax
0040728E |. 75 05 jnz short 穿牆輔助.00407295
00407290 |. B8 644E4800 mov eax,穿牆輔助.00484E64
00407295 |> 50 push eax
00407296 |. 68 04000080 push 0x80000004
0040729B |. 6A 00 push 0x0
0040729D |. 68 EE4E4800 push 穿牆輔助.00484EEE ; 註冊碼
004072A2 |. 68 04000080 push 0x80000004
004072A7 |. 6A 00 push 0x0
004072A9 |. 68 F54E4800 push 穿牆輔助.00484EF5 ; 配置資料
004072AE |. 68 04000080 push 0x80000004
004072B3 |. 6A 00 push 0x0
004072B5 |. 8B45 F0 mov eax,[local.4]
004072B8 |. 85C0 test eax,eax
004072BA |. 75 05 jnz short 穿牆輔助.004072C1
004072BC |. B8 644E4800 mov eax,穿牆輔助.00484E64
004072C1 |> 50 push eax
004072C2 |. 68 04000000 push 0x4
004072C7 |. BB C0BC4000 mov ebx,穿牆輔助.0040BCC0
004072CC |. E8 8B320000 call 穿牆輔助.0040A55C
004072D1 |. 83C4 34 add esp,0x34
004072D4 |. 8B5D F0 mov ebx,[local.4]
004072D7 |. 85DB test ebx,ebx
004072D9 |. 74 09 je short 穿牆輔助.004072E4
004072DB |. 53 push ebx
004072DC |. E8 6F320000 call 穿牆輔助.0040A550
004072E1 |. 83C4 04 add esp,0x4
004072E4 |> 8B5D EC mov ebx,[local.5]
004072E7 |. 85DB test ebx,ebx
004072E9 |. 74 09 je short 穿牆輔助.004072F4
004072EB |. 53 push ebx
004072EC |. E8 5F320000 call 穿牆輔助.0040A550
004072F1 |. 83C4 04 add esp,0x4
004072F4 |> 8BE5 mov esp,ebp
004072F6 |. 5D pop ebp ; ntdll.7C9301BB
004072F7 \. C3 retn
Q：2 7 5 7 4 1 0 5 7 7 想破解的請加我。

序列號進入這裡進行運算這裡計算註冊碼的關鍵CALL 特徵碼：83 C4 1C 89 45 F4 DB 45 F4 DD 5D F4 DD 45 F4

00406ADE /$ 55 push ebp
00406ADF |. 8BEC mov ebp,esp
00406AE1 |. 81EC 14000000 sub esp,0x14
00406AE7 |. 68 01030080 push 0x80000301
00406AEC |. 6A 00 push 0x0
00406AEE |. 68 A813C342 push 0x42C313A8
00406AF3 |. 68 01030080 push 0x80000301
00406AF8 |. 6A 00 push 0x0
00406AFA |. FF75 08 push [arg.1]
00406AFD |. 68 02000000 push 0x2
00406B02 |. BB B0A94000 mov ebx,穿牆輔助.0040A9B0
00406B07 |. E8 6A3B0000 call 穿牆輔助.0040A676
00406B0C |. 83C4 1C add esp,0x1C
00406B0F |. 8945 F4 mov [local.3],eax
00406B12 |. DB45 F4 fild [local.3]
00406B15 |. DD5D F4 fstp qword ptr ss:[ebp-0xC]
00406B18 |. DD45 F4 fld qword ptr ss:[ebp-0xC]
00406B1B |. DC05 F35E4800 fadd qword ptr ds:[0x485EF3]
00406B21 |. DD5D EC fstp qword ptr ss:[ebp-0x14]
00406B24 |. DD45 EC fld qword ptr ss:[ebp-0x14]
00406B27 |. E8 1CA5FFFF call 穿牆輔助.00401048
00406B2C |. E9 00000000 jmp 穿牆輔助.00406B31
00406B31 |> 8BE5 mov esp,ebp
00406B33 |. 5D pop ebp ; ntdll.7C93003D
00406B34 \. C2 0400 retn 0x4

配置.ini裡的內容

[配置資料]
註冊碼=1109170196

004065BA /$ 55 push ebp
004065BB |. 8BEC mov ebp,esp
004065BD |. 81EC 24000000 sub esp,0x24
004065C3 |. C745 FC 00000000 mov dword ptr ss:[ebp-0x4],0x0
004065CA |. C745 F8 00000000 mov dword ptr ss:[ebp-0x8],0x0
004065D1 |. E8 FB030000 call 穿牆輔助.004069D1
004065D6 |. 68 01030080 push 0x80000301
004065DB |. 6A 00 push 0x0
004065DD |. 50 push eax
004065DE |. 68 01000000 push 0x1
004065E3 |. BB 20AD4000 mov ebx,穿牆輔助.0040AD20
004065E8 |. E8 89400000 call 穿牆輔助.0040A676
004065ED |. 83C4 10 add esp,0x10
004065F0 |. 8945 E4 mov dword ptr ss:[ebp-0x1C],eax
004065F3 |. 8955 E8 mov dword ptr ss:[ebp-0x18],edx
004065F6 |. DD45 E4 fld qword ptr ss:[ebp-0x1C]
004065F9 |. E8 4AAAFFFF call 穿牆輔助.00401048
004065FE |. 8945 FC mov dword ptr ss:[ebp-0x4],eax
00406601 |. B8 AB5E4800 mov eax,穿牆輔助.00485EAB ; 配置.ini
00406606 |. 8945 F4 mov dword ptr ss:[ebp-0xC],eax
00406609 |. 8D45 F4 lea eax,dword ptr ss:[ebp-0xC]
0040660C |. 50 push eax
0040660D |. E8 85040000 call 穿牆輔助.00406A97
00406612 |. 8945 F0 mov dword ptr ss:[ebp-0x10],eax
00406615 |. 8B5D F4 mov ebx,dword ptr ss:[ebp-0xC]
00406618 |. 85DB test ebx,ebx
0040661A |. 74 09 je short 穿牆輔助.00406625
0040661C |. 53 push ebx
0040661D |. E8 42400000 call 穿牆輔助.0040A664
00406622 |. 83C4 04 add esp,0x4
00406625 |> 837D F0 01 cmp dword ptr ss:[ebp-0x10],0x1
00406629 |. 0F85 22010000 jnz 穿牆輔助.00406751
0040662F |. 68 00000000 push 0x0
00406634 |. BB 60AA4000 mov ebx,穿牆輔助.0040AA60 ; j
00406639 |. E8 38400000 call 穿牆輔助.0040A676
0040663E |. 83C4 04 add esp,0x4
00406641 |. 8945 F4 mov dword ptr ss:[ebp-0xC],eax
00406644 |. 68 B45E4800 push 穿牆輔助.00485EB4 ; \配置.ini
00406649 |. FF75 F4 push dword ptr ss:[ebp-0xC]
0040664C |. B9 02000000 mov ecx,0x2
00406651 |. E8 C7B5FFFF call 穿牆輔助.00401C1D
00406656 |. 83C4 08 add esp,0x8
00406659 |. 8945 F0 mov dword ptr ss:[ebp-0x10],eax
0040665C |. 8B5D F4 mov ebx,dword ptr ss:[ebp-0xC]
0040665F |. 85DB test ebx,ebx
00406661 |. 74 09 je short 穿牆輔助.0040666C
00406663 |. 53 push ebx
00406664 |. E8 FB3F0000 call 穿牆輔助.0040A664
00406669 |. 83C4 04 add esp,0x4
0040666C |> 6A 00 push 0x0
0040666E |. 6A 00 push 0x0
00406670 |. 6A 00 push 0x0
00406672 |. 68 04000080 push 0x80000004
00406677 |. 6A 00 push 0x0
00406679 |. 68 BE5E4800 push 穿牆輔助.00485EBE ; 註冊碼
0040667E |. 68 04000080 push 0x80000004
00406683 |. 6A 00 push 0x0
00406685 |. 68 C55E4800 push 穿牆輔助.00485EC5 ; 配置資料
0040668A |. 68 04000080 push 0x80000004
0040668F |. 6A 00 push 0x0
00406691 |. 8B45 F0 mov eax,dword ptr ss:[ebp-0x10]
00406694 |. 85C0 test eax,eax
00406696 |. 75 05 jnz short 穿牆輔助.0040669D
00406698 |. B8 1A5E4800 mov eax,穿牆輔助.00485E1A
0040669D |> 50 push eax
0040669E |. 68 04000000 push 0x4
004066A3 |. BB D0BC4000 mov ebx,穿牆輔助.0040BCD0
004066A8 |. E8 C93F0000 call 穿牆輔助.0040A676
004066AD |. 83C4 34 add esp,0x34
004066B0 |. 8945 EC mov dword ptr ss:[ebp-0x14],eax
004066B3 |. 8B5D F0 mov ebx,dword ptr ss:[ebp-0x10]
004066B6 |. 85DB test ebx,ebx
004066B8 |. 74 09 je short 穿牆輔助.004066C3
004066BA |. 53 push ebx
004066BB |. E8 A43F0000 call 穿牆輔助.0040A664
004066C0 |. 83C4 04 add esp,0x4
004066C3 |> 68 04000080 push 0x80000004
004066C8 |. 6A 00 push 0x0
004066CA |. 8B45 EC mov eax,dword ptr ss:[ebp-0x14]
004066CD |. 85C0 test eax,eax
004066CF |. 75 05 jnz short 穿牆輔助.004066D6
004066D1 |. B8 1A5E4800 mov eax,穿牆輔助.00485E1A
004066D6 |> 50 push eax
004066D7 |. 68 01000000 push 0x1
004066DC |. BB A0B04000 mov ebx,穿牆輔助.0040B0A0
004066E1 |. E8 903F0000 call 穿牆輔助.0040A676
004066E6 |. 83C4 10 add esp,0x10
004066E9 |. 8945 E8 mov dword ptr ss:[ebp-0x18],eax
004066EC |. 8B5D EC mov ebx,dword ptr ss:[ebp-0x14]
004066EF |. 85DB test ebx,ebx
004066F1 |. 74 09 je short 穿牆輔助.004066FC
004066F3 |. 53 push ebx
004066F4 |. E8 6B3F0000 call 穿牆輔助.0040A664
004066F9 |. 83C4 04 add esp,0x4
004066FC |> 8B45 E8 mov eax,dword ptr ss:[ebp-0x18]
004066FF |. 8945 F8 mov dword ptr ss:[ebp-0x8],eax
00406702 |. 68 01030080 push 0x80000301
00406707 |. 6A 00 push 0x0
00406709 |. FF75 F8 push dword ptr ss:[ebp-0x8]
0040670C |. 68 01000000 push 0x1
00406711 |. BB F0B84000 mov ebx,穿牆輔助.0040B8F0
00406716 |. E8 5B3F0000 call 穿牆輔助.0040A676
0040671B |. 83C4 10 add esp,0x10
0040671E |. 8945 F4 mov dword ptr ss:[ebp-0xC],eax
00406721 |. 6A 00 push 0x0
00406723 |. FF75 F4 push dword ptr ss:[ebp-0xC]
00406726 |. 6A FF push -0x1
00406728 |. 6A 08 push 0x8
0040672A |. 68 7D3A0116 push 0x16013A7D
0040672F |. 68 04000152 push 0x52010004
00406734 |. E8 373F0000 call 穿牆輔助.0040A670
00406739 |. 83C4 18 add esp,0x18
0040673C |. 8B5D F4 mov ebx,dword ptr ss:[ebp-0xC]
0040673F |. 85DB test ebx,ebx
00406741 |. 74 09 je short 穿牆輔助.0040674C
00406743 |. 53 push ebx
00406744 |. E8 1B3F0000 call 穿牆輔助.0040A664
00406749 |. 83C4 04 add esp,0x4
0040674C |> E9 00000000 jmp 穿牆輔助.00406751
00406751 |> 837D FC 00 cmp dword ptr ss:[ebp-0x4],0x0
00406755 |. 0F85 1D000000 jnz 穿牆輔助.00406778
0040675B |. 6A 00 push 0x0
0040675D |. 68 CE5E4800 push 穿牆輔助.00485ECE ; 稍等...
00406762 |. 6A FF push -0x1
00406764 |. 6A 08 push 0x8
00406766 |. 68 793A0116 push 0x16013A79
0040676B |. 68 04000152 push 0x52010004
00406770 |. E8 FB3E0000 call 穿牆輔助.0040A670
00406775 |. 83C4 18 add esp,0x18
00406778 |> FF75 FC push dword ptr ss:[ebp-0x4] ; 這裡出現序列號
0040677B |. E8 5E030000 call 穿牆輔助.00406ADE ; 計算註冊碼關鍵CALL
00406780 |. 8945 F4 mov dword ptr ss:[ebp-0xC],eax ; EAX中是註冊碼的十六進位制
00406783 |. 6A FF push -0x1
00406785 |. 6A 08 push 0x8
00406787 |. 68 7D3A0116 push 0x16013A7D
0040678C |. 68 04000152 push 0x52010004
00406791 |. E8 F23E0000 call 穿牆輔助.0040A688
00406796 |. 83C4 10 add esp,0x10 ; 1286608618
00406799 |. 8945 F0 mov dword ptr ss:[ebp-0x10],eax
0040679C |. 68 04000080 push 0x80000004
004067A1 |. 6A 00 push 0x0
004067A3 |. 8B45 F0 mov eax,dword ptr ss:[ebp-0x10]
004067A6 |. 85C0 test eax,eax
004067A8 |. 75 05 jnz short 穿牆輔助.004067AF
004067AA |. B8 1A5E4800 mov eax,穿牆輔助.00485E1A
004067AF |> 50 push eax
004067B0 |. 68 01000000 push 0x1
004067B5 |. BB 20AD4000 mov ebx,穿牆輔助.0040AD20
004067BA |. E8 B73E0000 call 穿牆輔助.0040A676
004067BF |. 83C4 10 add esp,0x10
004067C2 |. 8945 E8 mov dword ptr ss:[ebp-0x18],eax
004067C5 |. 8955 EC mov dword ptr ss:[ebp-0x14],edx
004067C8 |. 8B5D F0 mov ebx,dword ptr ss:[ebp-0x10]
004067CB |. 85DB test ebx,ebx
004067CD |. 74 09 je short 穿牆輔助.004067D8
004067CF |. 53 push ebx
004067D0 |. E8 8F3E0000 call 穿牆輔助.0040A664
004067D5 |. 83C4 04 add esp,0x4
004067D8 |> DB45 F4 fild dword ptr ss:[ebp-0xC] ; ebp-c中是真註冊碼的16進位制
004067DB |. DD5D E0 fstp qword ptr ss:[ebp-0x20]
004067DE |. DD45 E0 fld qword ptr ss:[ebp-0x20]
004067E1 |. DC65 E8 fsub qword ptr ss:[ebp-0x18]
004067E4 |. D9E4 ftst
004067E6 |. DFE0 fstsw ax
004067E8 |. F6C4 01 test ah,0x1
004067EB |. 74 02 je short 穿牆輔助.004067EF
004067ED |. D9E0 fchs
004067EF |> DC1D D65E4800 fcomp qword ptr ds:[0x485ED6]
004067F5 |. DFE0 fstsw ax
004067F7 |. F6C4 41 test ah,0x41
004067FA |. 0F85 A4000000 jnz 穿牆輔助.004068A4 ; 跳，註冊成功
00406800 |. 6A 00 push 0x0
00406802 |. 68 DE5E4800 push 穿牆輔助.00485EDE ; QQ:97283845
00406807 |. 6A FF push -0x1
00406809 |. 6A 08 push 0x8
0040680B |. 68 793A0116 push 0x16013A79
00406810 |. 68 04000152 push 0x52010004
00406815 |. E8 563E0000 call 穿牆輔助.0040A670
0040681A |. 83C4 18 add esp,0x18
0040681D |. 6A 00 push 0x0
0040681F |. 68 1A5E4800 push 穿牆輔助.00485E1A
00406824 |. 6A FF push -0x1
00406826 |. 6A 08 push 0x8
00406828 |. 68 7D3A0116 push 0x16013A7D
0040682D |. 68 04000152 push 0x52010004
00406832 |. E8 393E0000 call 穿牆輔助.0040A670
00406837 |. 83C4 18 add esp,0x18
0040683A |. 6A 00 push 0x0
0040683C |. 68 00000000 push 0x0
00406841 |. 6A FF push -0x1
00406843 |. 6A 06 push 0x6
00406845 |. 68 783A0116 push 0x16013A78
0040684A |. 68 04000152 push 0x52010004
0040684F |. E8 1C3E0000 call 穿牆輔助.0040A670
00406854 |. 83C4 18 add esp,0x18
00406857 |. 6A 00 push 0x0
00406859 |. 68 00000000 push 0x0
0040685E |. 6A FF push -0x1
00406860 |. 6A 06 push 0x6
00406862 |. 68 7D3A0116 push 0x16013A7D
00406867 |. 68 04000152 push 0x52010004
0040686C |. E8 FF3D0000 call 穿牆輔助.0040A670
00406871 |. 83C4 18 add esp,0x18
00406874 |. B8 AB5E4800 mov eax,穿牆輔助.00485EAB ; 配置.ini
00406879 |. 8945 F4 mov dword ptr ss:[ebp-0xC],eax
0040687C |. 8D45 F4 lea eax,dword ptr ss:[ebp-0xC]
0040687F |. 50 push eax
00406880 |. E8 B2020000 call 穿牆輔助.00406B37
00406885 |. 8B5D F4 mov ebx,dword ptr ss:[ebp-0xC]
00406888 |. 85DB test ebx,ebx
0040688A |. 74 09 je short 穿牆輔助.00406895
0040688C |. 53 push ebx
0040688D |. E8 D23D0000 call 穿牆輔助.0040A664
00406892 |. 83C4 04 add esp,0x4
00406895 |> C705 302B4B00 00000000 mov dword ptr ds:[0x4B2B30],0x0
0040689F |. E9 29010000 jmp 穿牆輔助.004069CD
004068A4 |> 6A 00 push 0x0
004068A6 |. 68 EA5E4800 push 穿牆輔助.00485EEA ; 註冊成功
004068AB |. 6A FF push -0x1
004068AD |. 6A 08 push 0x8
004068AF |. 68 793A0116 push 0x16013A79
004068B4 |. 68 04000152 push 0x52010004
004068B9 |. E8 B23D0000 call 穿牆輔助.0040A670
004068BE |. 83C4 18 add esp,0x18
004068C1 |. C705 302B4B00 01000000 mov dword ptr ds:[0x4B2B30],0x1
004068CB |. 6A 00 push 0x0
004068CD |. 68 01000000 push 0x1
004068D2 |. 6A FF push -0x1
004068D4 |. 6A 06 push 0x6
004068D6 |. 68 783A0116 push 0x16013A78
004068DB |. 68 04000152 push 0x52010004
004068E0 |. E8 8B3D0000 call 穿牆輔助.0040A670
004068E5 |. 83C4 18 add esp,0x18
004068E8 |. 6A 00 push 0x0
004068EA |. 68 01000000 push 0x1
004068EF |. 6A FF push -0x1
004068F1 |. 6A 06 push 0x6
004068F3 |. 68 7D3A0116 push 0x16013A7D
004068F8 |. 68 04000152 push 0x52010004
004068FD |. E8 6E3D0000 call 穿牆輔助.0040A670
00406902 |. 83C4 18 add esp,0x18
00406905 |. 68 00000000 push 0x0
0040690A |. BB 60AA4000 mov ebx,穿牆輔助.0040AA60 ; j
0040690F |. E8 623D0000 call 穿牆輔助.0040A676
00406914 |. 83C4 04 add esp,0x4
00406917 |. 8945 F4 mov dword ptr ss:[ebp-0xC],eax
0040691A |. 68 B45E4800 push 穿牆輔助.00485EB4 ; \配置.ini
0040691F |. FF75 F4 push dword ptr ss:[ebp-0xC]
00406922 |. B9 02000000 mov ecx,0x2
00406927 |. E8 F1B2FFFF call 穿牆輔助.00401C1D
0040692C |. 83C4 08 add esp,0x8
0040692F |. 8945 F0 mov dword ptr ss:[ebp-0x10],eax
00406932 |. 8B5D F4 mov ebx,dword ptr ss:[ebp-0xC]
00406935 |. 85DB test ebx,ebx
00406937 |. 74 09 je short 穿牆輔助.00406942
00406939 |. 53 push ebx
0040693A |. E8 253D0000 call 穿牆輔助.0040A664
0040693F |. 83C4 04 add esp,0x4
00406942 |> 6A FF push -0x1
00406944 |. 6A 08 push 0x8
00406946 |. 68 7D3A0116 push 0x16013A7D
0040694B |. 68 04000152 push 0x52010004
00406950 |. E8 333D0000 call 穿牆輔助.0040A688
00406955 |. 83C4 10 add esp,0x10
00406958 |. 8945 EC mov dword ptr ss:[ebp-0x14],eax
0040695B |. 68 04000080 push 0x80000004
00406960 |. 6A 00 push 0x0
00406962 |. 8B45 EC mov eax,dword ptr ss:[ebp-0x14]
00406965 |. 85C0 test eax,eax
00406967 |. 75 05 jnz short 穿牆輔助.0040696E
00406969 |. B8 1A5E4800 mov eax,穿牆輔助.00485E1A
0040696E |> 50 push eax
0040696F |. 68 04000080 push 0x80000004
00406974 |. 6A 00 push 0x0
00406976 |. 68 BE5E4800 push 穿牆輔助.00485EBE ; 註冊碼
0040697B |. 68 04000080 push 0x80000004
00406980 |. 6A 00 push 0x0
00406982 |. 68 C55E4800 push 穿牆輔助.00485EC5 ; 配置資料
00406987 |. 68 04000080 push 0x80000004
0040698C |. 6A 00 push 0x0
0040698E |. 8B45 F0 mov eax,dword ptr ss:[ebp-0x10]
00406991 |. 85C0 test eax,eax
00406993 |. 75 05 jnz short 穿牆輔助.0040699A
00406995 |. B8 1A5E4800 mov eax,穿牆輔助.00485E1A
0040699A |> 50 push eax
0040699B |. 68 04000000 push 0x4
004069A0 |. BB D0BD4000 mov ebx,穿牆輔助.0040BDD0
004069A5 |. E8 CC3C0000 call 穿牆輔助.0040A676
004069AA |. 83C4 34 add esp,0x34
004069AD |. 8B5D F0 mov ebx,dword ptr ss:[ebp-0x10]
004069B0 |. 85DB test ebx,ebx
004069B2 |. 74 09 je short 穿牆輔助.004069BD
004069B4 |. 53 push ebx
004069B5 |. E8 AA3C0000 call 穿牆輔助.0040A664
004069BA |. 83C4 04 add esp,0x4
004069BD |> 8B5D EC mov ebx,dword ptr ss:[ebp-0x14]
004069C0 |. 85DB test ebx,ebx
004069C2 |. 74 09 je short 穿牆輔助.004069CD
004069C4 |. 53 push ebx
004069C5 |. E8 9A3C0000 call 穿牆輔助.0040A664
004069CA |. 83C4 04 add esp,0x4
004069CD |> 8BE5 mov esp,ebp
004069CF |. 5D pop ebp ; 0017229F
004069D0 \. C3 retn
004069D1 $ 55 push ebp
004069D2 . 8BEC mov ebp,esp
004069D4 . 81EC 0C000000 sub esp,0xC
004069DA . C745 FC 00000000 mov dword ptr ss:[ebp-0x4],0x0
004069E1 . C745 F8 00000000 mov dword ptr ss:[ebp-0x8],0x0
004069E8 . 68 00000000 push 0x0
004069ED . BB B0BC4000 mov ebx,穿牆輔助.0040BCB0 ; j
004069F2 . E8 7F3C0000 call 穿牆輔助.0040A676
004069F7 . 83C4 04 add esp,0x4
004069FA . 8945 FC mov dword ptr ss:[ebp-0x4],eax
004069FD . 837D FC 00 cmp dword ptr ss:[ebp-0x4],0x0
00406A01 . 0F84 82000000 je 穿牆輔助.00406A89
00406A07 . 68 01030080 push 0x80000301
00406A0C . 6A 00 push 0x0
00406A0E . 68 F6F4BE42 push 0x42BEF4F6
00406A13 . 68 01030080 push 0x80000301
00406A18 . 6A 00 push 0x0
00406A1A . FF75 FC push dword ptr ss:[ebp-0x4]
00406A1D . 68 02000000 push 0x2
00406A22 . BB B0A94000 mov ebx,穿牆輔助.0040A9B0
00406A27 . E8 4A3C0000 call 穿牆輔助.0040A676 ; 產生序列號
00406A2C . 83C4 1C add esp,0x1C
00406A2F . 8945 F8 mov dword ptr ss:[ebp-0x8],eax
00406A32 . 68 01030080 push 0x80000301
00406A37 . 6A 00 push 0x0
00406A39 . FF75 F8 push dword ptr ss:[ebp-0x8]
00406A3C . 68 01000000 push 0x1
00406A41 . BB F0B84000 mov ebx,穿牆輔助.0040B8F0
00406A46 . E8 2B3C0000 call 穿牆輔助.0040A676
00406A4B . 83C4 10 add esp,0x10
00406A4E . 8945 F4 mov dword ptr ss:[ebp-0xC],eax
00406A51 . 6A 00 push 0x0
00406A53 . FF75 F4 push dword ptr ss:[ebp-0xC]
00406A56 . 6A FF push -0x1
00406A58 . 6A 08 push 0x8
00406A5A . 68 7B3A0116 push 0x16013A7B
00406A5F . 68 04000152 push 0x52010004
00406A64 . E8 073C0000 call 穿牆輔助.0040A670
00406A69 . 83C4 18 add esp,0x18
00406A6C . 8B5D F4 mov ebx,dword ptr ss:[ebp-0xC]
00406A6F . 85DB test ebx,ebx
00406A71 . 74 09 je short 穿牆輔助.00406A7C
00406A73 . 53 push ebx
00406A74 . E8 EB3B0000 call 穿牆輔助.0040A664
00406A79 . 83C4 04 add esp,0x4
00406A7C > 8B45 F8 mov eax,dword ptr ss:[ebp-0x8]
00406A7F . E9 0F000000 jmp 穿牆輔助.00406A93
00406A84 . E9 0A000000 jmp 穿牆輔助.00406A93
00406A89 > B8 00000000 mov eax,0x0
00406A8E . E9 00000000 jmp 穿牆輔助.00406A93
00406A93 > 8BE5 mov esp,ebp
00406A95 . 5D pop ebp ; 0017229F
00406A96 . C3 retn
00406A97 /$ 55 push ebp
00406A98 |. 8BEC mov ebp,esp
00406A9A |. 81EC 10000000 sub esp,0x10
00406AA0 |. 8965 FC mov dword ptr ss:[ebp-0x4],esp
00406AA3 |. 8B5D 08 mov ebx,dword ptr ss:[ebp+0x8]
00406AA6 |. FF33 push dword ptr ds:[ebx]
00406AA8 |. B8 15000000 mov eax,0x15
00406AAD |. E8 D03B0000 call 穿牆輔助.0040A682
00406AB2 |. 3965 FC cmp dword ptr ss:[ebp-0x4],esp
00406AB5 |. 74 0D je short 穿牆輔助.00406AC4
00406AB7 |. 68 06000000 push 0x6
00406ABC |. E8 BB3B0000 call 穿牆輔助.0040A67C
00406AC1 |. 83C4 04 add esp,0x4
00406AC4 |> 8945 F4 mov dword ptr ss:[ebp-0xC],eax
00406AC7 |. 837D F4 01 cmp dword ptr ss:[ebp-0xC],0x1
00406ACB |. B8 00000000 mov eax,0x0
00406AD0 |. 0f94c0 sete al
00406AD3 |. E9 00000000 jmp 穿牆輔助.00406AD8
00406AD8 |> 8BE5 mov esp,ebp
00406ADA |. 5D pop ebp ; 0017229F
00406ADB \. C2 0400 retn 0x4
00406ADE /$ 55 push ebp
00406ADF |. 8BEC mov ebp,esp
00406AE1 |. 81EC 14000000 sub esp,0x14
00406AE7 |. 68 01030080 push 0x80000301
00406AEC |. 6A 00 push 0x0
00406AEE |. 68 A813C342 push 0x42C313A8
00406AF3 |. 68 01030080 push 0x80000301
00406AF8 |. 6A 00 push 0x0
00406AFA |. FF75 08 push dword ptr ss:[ebp+0x8]
00406AFD |. 68 02000000 push 0x2
00406B02 |. BB B0A94000 mov ebx,穿牆輔助.0040A9B0
00406B07 |. E8 6A3B0000 call 穿牆輔助.0040A676
00406B0C |. 83C4 1C add esp,0x1C
00406B0F |. 8945 F4 mov dword ptr ss:[ebp-0xC],eax
00406B12 |. DB45 F4 fild dword ptr ss:[ebp-0xC]
00406B15 |. DD5D F4 fstp qword ptr ss:[ebp-0xC]
00406B18 |. DD45 F4 fld qword ptr ss:[ebp-0xC]
00406B1B |. DC05 F35E4800 fadd qword ptr ds:[0x485EF3]
00406B21 |. DD5D EC fstp qword ptr ss:[ebp-0x14]
00406B24 |. DD45 EC fld qword ptr ss:[ebp-0x14]
00406B27 |. E8 1CA5FFFF call 穿牆輔助.00401048
00406B2C |. E9 00000000 jmp 穿牆輔助.00406B31
00406B31 |> 8BE5 mov esp,ebp
00406B33 |. 5D pop ebp ; 0017229F
00406B34 \. C2 0400 retn 0x4

最後輸入註冊碼：顯示註冊成功，具體成不成，我沒試，但要破解的那個客戶得到了註冊碼後，一直沒再聯絡我，如果不成功的話，早就來找我了。

相關文章

Pycharm安裝破解註冊碼
2017-06-25
PyCharm
破解某美容美髮管理系統加密狗、註冊碼、序列號的研究分析
2018-06-14
加密
《TxEdit 4.6》的註冊碼破解 (11千字)
2001-07-28
蘋果Mac電腦簡單好用的防火牆：Radio Silence註冊碼破解版最新
2023-12-29
蘋果Mac防火牆
某電子書註冊破解實錄，高手莫入。 (6千字)
2002-10-05
一種非明碼比較程式的註冊------NS-SHAFT註冊碼破解 (9千字)
2015-11-15
Tower 最新註冊碼 Tower 破解下載
2023-09-28
Regediter 1.3 破解(得到註冊碼) (9千字)
2002-01-23
IconToy 3.1 註冊碼快速破解 (11千字)
2001-03-02
BabyGame 破解方法及註冊碼錶 (1千字)
2001-07-04
GAM
winimp1.11註冊碼破解 (2千字)
2000-07-16
菜鳥破解之軟體自己顯示註冊碼
2015-11-15
快捷反垃圾郵件破解手記--找出註冊碼
2015-11-15
好用的HTML處理工具：BBEdit 註冊碼破解版最新
2023-11-08
HTML
i-view32註冊碼的破解手記 (778字)
2001-02-03
View
Cute FTP Ver 4.0 build 19 的註冊碼破解 (820字)
2001-02-05
FTPUI
SMailserver2.5註冊碼的破解手記 (1千字)
2001-03-01
AIServer
財智證券結算軟體2.5 破解註冊碼分析！使用ollydbg 破解註冊動畫！高手莫入！ (1千字)
2001-11-20
動畫
Topaz Video AI註冊碼破解版v4.1.0
2024-01-04
IDEAI
idea啟用，使用破解補丁無需註冊碼
2017-08-19
Idea
《ICONSCAN 2.4》註冊碼破解高手莫入！ (3千字)
2001-05-06
《MAGICWIN RELEASE 1.2》註冊碼破解高手莫入！ (2千字)
2001-05-07
螢幕錄影專家 v5.0 註冊碼破解
2015-11-15
Kugle Regediter 1.0 註冊碼破解法（非明碼） (8千字)
2001-11-03
『凌雲郵神』註冊碼破解（非明碼比較的哦 ^_^） (6千字)
2001-11-05
Vopt99 v4.31的註冊碼破解 (11千字)
2000-09-28
《EASY MP3 2.2》的註冊碼破解高手莫入！ (2千字)
2001-05-05
C#實現無法破解的軟體註冊碼演算法
2013-02-22
C#演算法
eXeScope V6.41 的註冊演算法破解
2004-05-03
演算法
WebStorm註冊碼+WebStorm破解版漢化最新「相容macos14」
2023-12-26
WebORMMac
sublime text 註冊碼漢化下載+sublime text 破解安裝教程
2023-12-08
《WinImage v5.00.5007 註冊碼破解》 (7千字)
2001-05-10
32bit Convert It 9.52.01破解手記--找到註冊碼
2015-11-15
XX解霸3000（共享版）註冊碼破解實錄
2015-11-15
Emeditor 註冊碼
2017-08-14
WebStorm註冊碼
2014-04-29
WebORM
zend studio 9.0.2 破解-註冊-漢化流程
2013-11-12
什麼路由器穿牆效果好？無線路由器穿牆能力的辨別方法
2019-03-11
路由器