- UID
- 2198
注册时间2005-6-29
阅读权限255
最后登录1970-1-1
副坛主
  
该用户从未签到
|

楼主 |
发表于 2008-6-17 20:26:46
|
显示全部楼层
零售版
0040837B C645 B7 01 MOV BYTE PTR SS:[EBP-49],0
0040837F . 50 PUSH EAX
00408380 . 837D FC 00 CMP DWORD PTR SS:[EBP-4],0
00408384 . 74 05 JE SHORT PFW.0040838B
00408386 . 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4]
00408389 . EB 06 JMP SHORT PFW.00408391
C6 45 B7 00 50 83 7D FC 00 74 05
C6 45 B7 01 50 83 7D FC 00 74 05
Updata
00405B26 |> \5F POP EDI
00405B27 |. 5E POP ESI
00405B28 B0 01 MOV AL,1
00405B2A |. 5B POP EBX
00405B2B |. 81C4 04010000 ADD ESP,104
00405B31 \. C3 RETN
5F 5E 33 C0 5B 81 C4 04 01 00 00 C3
5F 5E B0 01 5B 81 C4 04 01 00 00 C3
004054FB > \E8 40050000 CALL PFWLiveU.00405A40 ; here
00405500 . 85C0 TEST EAX,EAX
00405502 . 0F85 90000000 JNZ PFWLiveU.00405598
004054FB > \E8 40050000 CALL PFWLiveU.00405A40 ; here
00405500 . 85C0 TEST EAX,EAX
00405502 90 NOP
00405503 E9 90000000 JMP PFWLiveU.00405598
E8 ?? ?? ?? 00 85 C0 0F 85 90 00 00 00
E8 ?? ?? ?? 00 85 C0 90 E9 90 00 00 00
充值版:
004086F3 > \803D 1C2E5900 00 CMP BYTE PTR DS:[592E1C],0
004086FA . 74 0E JE SHORT PFW.0040870A
004086FC 8B45 C4 MOV EAX,DWORD PTR SS:[EBP-3C]
80 3D ?? ?? ?? 00 00 74 0E 8B 45
?? ?? ?? ?? ?? ?? ?? ?? 00 ?? ??
其实Updata只是验证是否有pfw.dat文件的存在 做了个通用补丁 适合 零售版和充值版
我先不升级 啥时候有时间了 研究下他的网络验证体系 |
|