现在的方法是把比较后的跳转取消掉,把jg 改为nop 但好象不行.但改为JGE则有效.
有没有办法我把100改为无限大,可随便设置一个数如:100000000000000
请指教.
:0051EC3D 68BCED5100 push 0051EDBC
:0051EC42 8D45D4 lea eax, dword ptr [ebp-2C]
:0051EC45 BA03000000 mov edx, 00000003
:0051EC4A E87565EEFF call 004051C4
:0051EC4F 8B4DD4 mov ecx, dword ptr [ebp-2C]
:0051EC52 8B45FC mov eax, dword ptr [ebp-04]
:0051EC55 8B8024020000 mov eax, dword ptr [eax+00000224]
:0051EC5B 8B8018020000 mov eax, dword ptr [eax+00000218]
:0051EC61 33D2 xor edx, edx
:0051EC63 8B18 mov ebx, dword ptr [eax]
:0051EC65 FF5320 call [ebx+20]
:0051EC68 66B86400 mov ax, 0064
:0051EC6C 0FB7C8 movzx ecx, ax
:0051EC6F 8B55FC mov edx, dword ptr [ebp-04]
:0051EC72 8B9290020000 mov edx, dword ptr [edx+00000290]
:0051EC78 8B9228020000 mov edx, dword ptr [edx+00000228]
:0051EC7E 3B8A4C020000 cmp ecx, dword ptr [edx+0000024C]
:0051EC84 0F8F89000000 jg 0051ED13
:0051EC8A 8BC1 mov eax, ecx
:0051EC8C 92 xchg eax,edx
:0051EC8D E812DCF8FF call 004AC8A4
:0051EC92 8B45FC mov eax, dword ptr [ebp-04]
:0051EC95 8B8090020000 mov eax, dword ptr [eax+00000290]
:0051EC9B 8B8030020000 mov eax, dword ptr [eax+00000230]
:0051ECA1 33D2 xor edx, edx
:0051ECA3 E8244DF2FF call 004439CC
:0051ECA8 8B45FC mov eax, dword ptr [ebp-04]
:0051ECAB 8B8024020000 mov eax, dword ptr [eax+00000224]
:0051ECB1 8B8018020000 mov eax, dword ptr [eax+00000218]
:0051ECB7 8B10 mov edx, dword ptr [eax]
:0051ECB9 FF5214 call [edx+14]
:0051ECBC 85C0 test eax, eax
:
0051ECBE 7F16 jg 0051ECD6此处修改过为90但还是没用.
:0051ECC0 8B45FC mov eax, dword ptr [ebp-04]
:0051ECC3 8B8024020000 mov eax, dword ptr [eax+00000224]
:0051ECC9 8B8018020000 mov eax, dword ptr [eax+00000218]
:0051ECCF 33D2 xor edx, edx
:0051ECD1 8B08 mov ecx, dword ptr [eax]
:0051ECD3 FF5138 call [ecx+38]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0051ECBE(C)
|
:0051ECD6 8B45FC mov eax, dword ptr [ebp-04]
:0051ECD9 8B8090020000 mov eax, dword ptr [eax+00000290]
:0051ECDF 8B8024020000 mov eax, dword ptr [eax+00000224]
:0051ECE5 8B8018020000 mov eax, dword ptr [eax+00000218]
* Possible StringData Ref from Code Obj ->"***显示100条数据*** （试用版）"
|
:0051ECEB B9CCED5100 mov ecx, 0051EDCC
:0051ECF0 33D2 xor edx, edx
:0051ECF2 8B18 mov ebx, dword ptr [eax]
:0051ECF4 FF5320 call [ebx+20]
:0051ECF7 8B45FC mov eax, dword ptr [ebp-04]
:0051ECFA 8B8090020000 mov eax, dword ptr [eax+00000290]
:0051ED00 C680B402000001 mov byte ptr [eax+000002B4], 01
:0051ED07 66BA0300 mov dx, 0003
:0051ED0B 8B45FC mov eax, dword ptr [ebp-04]
:0051ED0E E881160000 call 00520394
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0051EC84(C)
|
:0051ED13 8BC6 mov eax, esi
:0051ED15 E86252EEFF call 00403F7C
:0051ED1A 33C0 xor eax, eax
:0051ED1C 5A pop edx
:0051ED1D 59 pop ecx
:0051ED1E 59 pop ecx
:0051ED1F 648910 mov dword ptr fs:[eax], edx
:0051ED22 EB53 jmp 0051ED77
:0051ED24 E93357EEFF jmp 0040445C
[课程]FART 脱壳王！加量不加价！FART作者讲授！
