Safengine NoobyProtect 过注册半自动脚本
?軟件打開時界面:
?
?
?
過2.X所有版本
pause
pause
BC
bphwcall
var?BPRegOpenKeyExA
var?ZwProtectVirtualMemoryAddress
var?bptimes
var?FirstTimeEncryptWordsAddress
var?SecondTimeEncryptWordsAddress
var?EncryptWords
//瞧,這個就是半自動
mov?FirstTimeEncryptWordsAddress,06fc18
mov?SecondTimeEncryptWordsAddress,06f960
mov?EncryptWords,#D7E2CAB50008010061060100001F926C83BF060738988AF4974006A4#mov?bptimes,0
GPA?"ZwProtectVirtualMemory","ntdll.dll"
log?$RESULT
mov?ZwProtectVirtualMemoryAddress,$RESULT
GPA?"ZwReadFile","ntdll.dll"
log?$RESULT
bp?$RESULT
check_bptimes:
esto
inc?bptimes
cmp?bptimes,5??
jnz?check_bptimes
bc?$RESULT
findmem?#8BFF558BEC83EC0C8365FC0053568B750881FE0400008057#
mov?BPRegOpenKeyExA,$RESULT
bp?BPRegOpenKeyExA+17?
esto
pause
pause
bphws?FirstTimeEncryptWordsAddress+18,"w"?
esto
bphwc?FirstTimeEncryptWordsAddress+18
mov?[FirstTimeEncryptWordsAddress],EncryptWords?
esto
bphws?SecondTimeEncryptWordsAddress+18,"w"?
esto
bphwc?SecondTimeEncryptWordsAddress+18
mov?[SecondTimeEncryptWordsAddress],EncryptWords?
bc?BPRegOpenKeyExA
run
腳本分兩次跑,第一次跑到下劃線部分的pause就可以獲得你鎖需要的3個變量了,修改填入后,第二次跑就可以patch?HWID過注冊了。。
?
軟件有償解密服務QQ(64177398)
轉載于:https://blog.51cto.com/pcw520/1030795
總結
以上是生活随笔為你收集整理的Safengine NoobyProtect 过注册半自动脚本的全部內容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: 暗黑3服务器维护能登录,暗黑3登陆错误原
- 下一篇: 富文本编辑器漏洞