易网通行V1.1笔记

:00421EFD 8B0D54F94800            mov ecx, dword ptr [0048F954]
:00421F03 8B542408                mov edx, dword ptr [esp+08]
:00421F07 8B040E                  mov eax, dword ptr [esi+ecx]
:00421F0A 50                      push eax
                                 //真码"ADTUY-65II9-UIYT8"
                                 //这个程序是固定的注册码的!

:00421F0B 52                      push edx
                                 //我输入的"987654321ABCDEF"

:00421F0C E8D4120100              call 004331E5
                                 //很明显,真假注册码比较的过程

:00421F11 83C408                  add esp, 00000008
:00421F14 85C0                    test eax, eax
                                 //这里是注册标志比较

:00421F16 744C                    je 00421F64
                                 //这里就是跳向注册成功那里的!

:00421F18 83C604                  add esi, 00000004
:00421F1B 83FE50                  cmp esi, 00000050
:00421F1E 7CDD                    jl 00421EFD
:00421F20 8B54240C                mov edx, dword ptr [esp+0C]
:00421F24 52                      push edx

* Reference To: ADVAPI32.RegCloseKey, Ord:015Bh
                                 

关键词：易网通行V1.1笔记