- UID
- 1874
注册时间2005-6-3
阅读权限30
最后登录1970-1-1
龙战于野
该用户从未签到
|
发表于 2006-7-8 21:50:44
|
显示全部楼层
搜索引擎工厂专业版v2.36破解
这是以前对v2.36的爆破笔记
- 搜索引擎工厂专业版v2.36破解
- (与标准版方法一样)
- 搜索CTRL+B:85 C0 75 74 并观察有Call GetSubMenu来到:
- 0044465F A1 60115300 mov eax, [531160]
- 00444664 85C0 test eax, eax
- 00444666 75 74 jnz short 004446DC
- 00444668 8B4D 04 mov ecx, [ebp+4]
- 0044466B |. 6A 05 push 5 ; /Pos = 5
- 0044466D |. 51 push ecx ; |hMenu
- 0044466E |. FF15 18774F00 call [<&USER32.GetSubMenu>] ; \GetSubMenu
- 00444674 |. 50 push eax
- 00444675 |. E8 15530800 call 004C998F
- 0044467A |. 57 push edi
- 0044467B |. 6A 64 push 64
- 0044467D |. 8D5424 20 lea edx, [esp+20]
- 00444681 |. 52 push edx
- 00444682 |. 68 2C015000 push 0050012C ; &buy now
- 00444687 |. 68 2C015000 push 0050012C ; &buy now
- 0044468C |. 68 688F4F00 push 004F8F68 ; string
- 00444691 |. 8BE8 mov ebp, eax
- 00444693 |. FFD6 call esi
- 00444695 |. 8B4D 04 mov ecx, [ebp+4]
- 00444698 |. 8D4424 18 lea eax, [esp+18]
- 0044469C |. 50 push eax
- 0044469D |. 68 09800000 push 8009
- 004446A2 |. 6A 00 push 0
- 004446A4 |. 68 09800000 push 8009
- 004446A9 |. 51 push ecx
- 004446AA |. FFD3 call ebx
- 004446AC |. 57 push edi
- 004446AD |. 6A 64 push 64
- 004446AF |. 8D5424 20 lea edx, [esp+20]
- 004446B3 |. 52 push edx
- 004446B4 |. 68 1C015000 push 0050011C ; ®ister now
- 004446B9 |. 68 1C015000 push 0050011C ; ®ister now
- 004446BE |. 68 688F4F00 push 004F8F68 ; string
- 004446C3 |. FFD6 call esi
- 修改为:
- 0044465F B8 01000000 mov eax, 1
- 00444664 A3 60115300 mov [531160], eax
- 00444669 EB 71 jmp short 004446DC
- 0044466B |. 6A 05 push 5 ; /Pos = 5
- 0044466D |. 51 push ecx ; |hMenu
- 0044466E |. FF15 18774F00 call [<&USER32.GetSubMenu>] ; \GetSubMenu
复制代码 |
|