成功破解WordScan数擎文档碎片扫描恢复软件 V1.5
见附件!!!
原版http://www.crsky.com/soft/15289.html
0043AAAD /. 55 push ebp
0043AAAE |. 8BEC mov ebp, esp
0043AAB0 |. 56 push esi
0043AAB1 |. 8BF1 mov esi, ecx
0043AAB3 |. 8B46 3C mov eax, dword ptr [esi+3C]
0043AAB6 |. 85C0 test eax, eax
0043AAB8 75 22 jnz short 0043AADC ; 跳转已实现,NOP.
0043AABA 8B06 mov eax, dword ptr [esi]
0043AABC FF90 F0000000 call dword ptr [eax+F0]
0043AAC2 8B00 mov eax, dword ptr [eax]
0043AAC4 85C0 test eax, eax
0043AAC6 75 14 jnz short 0043AADC ; 跳转已实现,NOP.
0043AAC8 |. FF75 10 push dword ptr [ebp+10] ; /lParam
0043AACB |. FF75 0C push dword ptr [ebp+C] ; |wParam
0043AACE |. FF75 08 push dword ptr [ebp+8] ; |Message
0043AAD1 |. FF76 1C push dword ptr [esi+1C] ; |hWnd
0043AAD4 |. FF15 C8A44400 call dword ptr [<&USER32.DefWindowProcW>] ; \DefWindowProcW
0043AADA |. EB 13 jmp short 0043AAEF
0043AADC |> FF75 10 push dword ptr [ebp+10] ; /lParam
0043AADF |. FF75 0C push dword ptr [ebp+C] ; |wParam
0043AAE2 |. FF75 08 push dword ptr [ebp+8] ; |Message
0043AAE5 |. FF76 1C push dword ptr [esi+1C] ; |hWnd
0043AAE8 |. 50 push eax ; |PrevProc
0043AAE9 |. FF15 CCA44400 call dword ptr [<&USER32.CallWindowProcW>] ; \CallWindowProcW
0043AAEF |> 5E pop esi
0043AAF0 |. 5D pop ebp
0043AAF1 \. C2 0C00 retn 0C
修改2处为NOP,程序不会自动退出,完全解除自效验。
OD 检视一下代码 修改 0041F8BC ie <---> imp
则执行初始化正常。
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课