能力值:
(RANK:760 )
|
-
-
2 楼
[61e95c]中存放的是地址,然后把这个地址所指向的字节数据取出来,看是否为0
所以你要修改的是这个地址所指向的数据,而不是把地址改为0
|
能力值:
( LV15,RANK:500 )
|
-
-
3 楼
脱了2级指针了.
注意它不是LEA reg32, 是MOV reg32
所以你也要
mov reg32/mem32, DWORD PTR [address]
mov Byte PTR [reg32/mem32], 0
嗷嗷嗷, 中午回来发时候坛子崩了, 楼上已经说了
|
能力值:
( LV3,RANK:20 )
|
-
-
4 楼
程序启动时检查注册
0060AC1B . 68 C49D6400 PUSH _Netcafe.00649DC4
0060AC20 . A1 B8EA6100 MOV EAX,DWORD PTR DS:[61EAB8]
0060AC25 . 50 PUSH EAX
0060AC26 . A1 1CEA6100 MOV EAX,DWORD PTR DS:[61EA1C]
0060AC2B . 8B00 MOV EAX,DWORD PTR DS:[EAX]
0060AC2D . 50 PUSH EAX
0060AC2E . A1 88E76100 MOV EAX,DWORD PTR DS:[61E788]
0060AC33 . 8B00 MOV EAX,DWORD PTR DS:[EAX]
0060AC35 . 50 PUSH EAX
0060AC36 E8 C9FCF2FF CALL _Netcafe.0053A904 ; JMP 到 ckg.CheckSoftReg //NOP掉检查注册函数
0060AC3B 83F8 01 CMP EAX,1
0060AC3E . 1BC0 SBB EAX,EAX
0060AC40 40 INC EAX
0060AC41 . 8B15 5CE96100 MOV EDX,DWORD PTR DS:[61E95C] ; _Netcafe.0060D0F8 关键值,存到61E95C地址,0为成功注册的
0060AC47 8802 MOV BYTE PTR DS:[EDX],AL
0060AC49 68 C49D6400 PUSH _Netcafe.00649DC4
0060AC4E . A1 B8EA6100 MOV EAX,DWORD PTR DS:[61EAB8]
0060AC53 . 50 PUSH EAX
0060AC54 . A1 1CEA6100 MOV EAX,DWORD PTR DS:[61EA1C]
0060AC59 . 8B00 MOV EAX,DWORD PTR DS:[EAX]
0060AC5B . 50 PUSH EAX
0060AC5C . A1 88E76100 MOV EAX,DWORD PTR DS:[61E788]
0060AC61 . 8B00 MOV EAX,DWORD PTR DS:[EAX]
0060AC63 . 50 PUSH EAX
0060AC64 . E8 BFF6FFFF CALL _Netcafe.0060A328 //检查注册
0060AC69 . 83F8 01 CMP EAX,1
0060AC6C . 1BC0 SBB EAX,EAX
0060AC6E 40 INC EAX
0060AC6F . 8B15 5CE96100 MOV EDX,DWORD PTR DS:[61E95C] ; _Netcafe.0060D0F8 关键值,存到61E95C地址,0为成功注册的
0060AC75 . 8802 MOV BYTE PTR DS:[EDX],AL
0060AC77 . 833D C49D6400>CMP DWORD PTR DS:[649DC4],2
0060AC7E 74 6C JE SHORT _Netcafe.0060ACEC
0060AC80 . 33C9 XOR ECX,ECX
0060AC82 . B2 01 MOV DL,1
0060AC84 . A1 BC895B00 MOV EAX,DWORD PTR DS:[5B89BC]
0060AC89 . E8 B623E9FF CALL _Netcafe.0049D044
0060AC8E . A3 C89D6400 MOV DWORD PTR DS:[649DC8],EAX
0060AC93 . 33C0 XOR EAX,EAX
//=============================================================
很多地方有类似下面这种试用比较
相关的试用限制
005A626C . 55 PUSH EBP
005A626D . 68 7C645A00 PUSH _Netcafe.005A647C
005A6272 . 64:FF30 PUSH DWORD PTR FS:[EAX]
005A6275 . 64:8920 MOV DWORD PTR FS:[EAX],ESP
005A6278 . A1 5CE96100 MOV EAX,DWORD PTR DS:[61E95C] ;读取地址61E95C地址数据到EAX
005A627D . 8038 00 CMP BYTE PTR DS:[EAX],0 ;比较寄存器EAX是否为0
005A6280 . 75 1F JNZ SHORT _Netcafe.005A62A1 ;EB可跳过
005A6282 . 6A 40 PUSH 40
005A6284 . 68 8C645A00 PUSH _Netcafe.005A648C ; ASCII "系统提示"
005A6289 . 68 98645A00 PUSH _Netcafe.005A6498 ; ASCII "此功能对注册用户开放!"
005A628E . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
005A6291 . E8 C642EEFF CALL _Netcafe.0048A55C
005A6296 . 50 PUSH EAX ; |hOwner
005A6297 . E8 B821E6FF CALL _Netcafe.00408454 ; \MessageBoxA
005A629C . E9 AB010000 JMP _Netcafe.005A644C
005A62A1 > 33C0 XOR EAX,EAX
005A62A3 . 55 PUSH EBP
005A62A4 . 68 45645A00 PUSH _Netcafe.005A6445
005A62A9 . 64:FF30 PUSH DWORD PTR FS:[EAX]
005A62AC . 64:8920 MOV DWORD PTR FS:[EAX],ESP
005A62AF . B2 01 MOV DL,1
不行啊
还是改不了这地址的值
|
能力值:
( LV3,RANK:20 )
|
-
-
5 楼
不用了,自已解决了。呵可
|