能力值:
(RANK:170 )
|
-
-
2 楼
楼主最好写一下逆向笔记.否则久了就忘记了:)
|
能力值:
( LV2,RANK:10 )
|
-
-
3 楼
我勒个去!这才是大杀器!
|
能力值:
( LV2,RANK:10 )
|
-
-
4 楼
从来没使用过快乐播放器
|
能力值:
( LV4,RANK:50 )
|
-
-
5 楼
木用过快播的撸过
|
能力值:
(RANK:10 )
|
-
-
6 楼
_http://www.kuaibo.com/
|
能力值:
( LV2,RANK:10 )
|
-
-
7 楼
这个补丁通用吗,快播3天2头更新的呀
|
能力值:
( LV2,RANK:10 )
|
-
-
8 楼
不要这么复杂吧。
bp ShowWindow
alt+f9
修改函数入口为 retn 04
over。
004F295D $ C2 0400 RETN 4 004F2960 . 83EC 10 SUB ESP,10 004F2963 . 53 PUSH EBX 004F2964 . 8B5D 08 MOV EBX,DWORD PTR SS:[EBP+8] 004F2967 . 56 PUSH ESI 004F2968 . 57 PUSH EDI 004F2969 . 33FF XOR EDI,EDI 004F296B . 83FB 05 CMP EBX,5 004F296E . 8BF1 MOV ESI,ECX 004F2970 . 74 4A JE SHORT QvodPlay.004F29BC 004F2972 . 3BDF CMP EBX,EDI 004F2974 . 74 46 JE SHORT QvodPlay.004F29BC 004F2976 . 57 PUSH EDI 004F2977 . E8 5EE1FEFF CALL QvodPlay.004E0ADA 004F297C . 3938 CMP DWORD PTR DS:[EAX],EDI 004F297E . 0F84 04010000 JE QvodPlay.004F2A88 004F2984 . 8B86 B8120000 MOV EAX,DWORD PTR DS:[ESI+12B8] 004F298A . 83C0 04 ADD EAX,4 004F298D . FF30 PUSH DWORD PTR DS:[EAX] ; /hWnd 004F298F . FF15 D4955900 CALL DWORD PTR DS:[<&USER32.IsWindow>] ; \IsWindow 004F2995 . 85C0 TEST EAX,EAX 004F2997 . 0F84 EB000000 JE QvodPlay.004F2A88 004F299D . 81C3 187FFFFF ADD EBX,FFFF7F18 004F29A3 . 83FB 24 CMP EBX,24 004F29A6 . 0F87 DC000000 JA QvodPlay.004F2A88 004F29AC . 8B8E B8120000 MOV ECX,DWORD PTR DS:[ESI+12B8] 004F29B2 . E8 CF23FFFF CALL QvodPlay.004E4D86 004F29B7 . E9 CC000000 JMP QvodPlay.004F2A88 004F29BC > 39BE B8120000 CMP DWORD PTR DS:[ESI+12B8],EDI 004F29C2 . 0F85 A3000000 JNZ QvodPlay.004F2A6B 004F29C8 . 68 BC010000 PUSH 1BC 004F29CD . E8 966D0700 CALL QvodPlay.00569768 004F29D2 . 3BC7 CMP EAX,EDI 004F29D4 . 59 POP ECX 004F29D5 . 74 09 JE SHORT QvodPlay.004F29E0 004F29D7 . 8BC8 MOV ECX,EAX 004F29D9 . E8 BCECFFFF CALL QvodPlay.004F169A 004F29DE . EB 02 JMP SHORT QvodPlay.004F29E2 004F29E0 > 33C0 XOR EAX,EAX 004F29E2 > 3BC7 CMP EAX,EDI 004F29E4 . 8986 B8120000 MOV DWORD PTR DS:[ESI+12B8],EAX 004F29EA . 74 07 JE SHORT QvodPlay.004F29F3 004F29EC . 05 68010000 ADD EAX,168 004F29F1 . EB 02 JMP SHORT QvodPlay.004F29F5 004F29F3 > 33C0 XOR EAX,EAX 004F29F5 > 6A 01 PUSH 1 004F29F7 . 50 PUSH EAX 004F29F8 . E8 13E8FBFF CALL QvodPlay.004B1210 004F29FD . 59 POP ECX 004F29FE . 59 POP ECX 004F29FF . 8B8E B8120000 MOV ECX,DWORD PTR DS:[ESI+12B8] 004F2A05 . 8981 7C010000 MOV DWORD PTR DS:[ECX+17C],EAX 004F2A0B . 57 PUSH EDI ; /Arg7 004F2A0C . 51 PUSH ECX ; |Arg6 004F2A0D . 8BC6 MOV EAX,ESI ; | 004F2A0F . F7D8 NEG EAX ; | 004F2A11 . 1BC0 SBB EAX,EAX ; | 004F2A13 . 8D96 B4000000 LEA EDX,DWORD PTR DS:[ESI+B4] ; | 004F2A19 . 23C2 AND EAX,EDX ; | 004F2A1B . 8981 80010000 MOV DWORD PTR DS:[ECX+180],EAX ; | 004F2A21 . 8BC4 MOV EAX,ESP ; | 004F2A23 . 57 PUSH EDI ; |Arg5 004F2A24 . 68 00000086 PUSH 86000000 ; |Arg4 = 86000000 004F2A29 . 8938 MOV DWORD PTR DS:[EAX],EDI ; | 004F2A2B . 57 PUSH EDI ; |Arg3 004F2A2C . 51 PUSH ECX ; |Arg2 004F2A2D . 8BC4 MOV EAX,ESP ; | 004F2A2F . 8D4D F0 LEA ECX,DWORD PTR SS:[EBP-10] ; | 004F2A32 . 897D F0 MOV DWORD PTR SS:[EBP-10],EDI ; | 004F2A35 . 897D F4 MOV DWORD PTR SS:[EBP-C],EDI ; | 004F2A38 . 897D F8 MOV DWORD PTR SS:[EBP-8],EDI ; | 004F2A3B . 897D FC MOV DWORD PTR SS:[EBP-4],EDI ; | 004F2A3E . 8908 MOV DWORD PTR DS:[EAX],ECX ; | 004F2A40 . 8B8E B8120000 MOV ECX,DWORD PTR DS:[ESI+12B8] ; | 004F2A46 . 57 PUSH EDI ; |Arg1 004F2A47 . E8 7F79FFFF CALL QvodPlay.004EA3CB ; \QvodPlay.004EA3CB 004F2A4C . 8B86 B8120000 MOV EAX,DWORD PTR DS:[ESI+12B8] 004F2A52 . 6A 03 PUSH 3 ; /Flags = SWP_NOSIZE|SWP_NOMOVE 004F2A54 . 57 PUSH EDI ; |Height 004F2A55 . 57 PUSH EDI ; |Width 004F2A56 . 57 PUSH EDI ; |Y 004F2A57 . 57 PUSH EDI ; |X 004F2A58 . 6A FF PUSH -1 ; |InsertAfter = HWND_TOPMOST 004F2A5A . FF70 04 PUSH DWORD PTR DS:[EAX+4] ; |hWnd 004F2A5D . FF15 C4955900 CALL DWORD PTR DS:[<&USER32.SetWindowPos>; \SetWindowPos 004F2A63 . 393D 00245F00 CMP DWORD PTR DS:[5F2400],EDI 004F2A69 . 74 1D JE SHORT QvodPlay.004F2A88 004F2A6B > 8B86 B8120000 MOV EAX,DWORD PTR DS:[ESI+12B8] 004F2A71 . 53 PUSH EBX ; /ShowState 004F2A72 . FF70 04 PUSH DWORD PTR DS:[EAX+4] ; |hWnd 004F2A75 . FF15 C8955900 CALL DWORD PTR DS:[<&USER32.ShowWindow>] ; \ShowWindow 004F2A7B . 33C0 XOR EAX,EAX 004F2A7D . 83FB 05 CMP EBX,5 004F2A80 . 0F94C0 SETE AL 004F2A83 . A3 00245F00 MOV DWORD PTR DS:[5F2400],EAX 004F2A88 > 5F POP EDI 004F2A89 . 5E POP ESI 004F2A8A . 5B POP EBX 004F2A8B . C9 LEAVE 004F2A8C . C2 0400 RETN 4
|
能力值:
( LV2,RANK:140 )
|
-
-
9 楼
就是写了DLL自动注入进去Hook ShowWindow
|
能力值:
( LV2,RANK:140 )
|
-
-
10 楼
应该还是比较通用的。 禁止那个浮窗的类窗口显示出来。
|