飓风10.X版的,我将验证的关键跳改成功后,运行时,却发现播放器只是闪了一下,OD里显示代码自动退出,不知道哪里还有影响环节,望各位高人指点一下.我跟了一下,有个CALL和TEST,那里直接退出了,但是,附近也不有跳,我不知道怎么能跳过去.视频退出后,超级字符串里会多好多东西,不知道是什么情况.
0046D264 BA 1CD74600 mov edx,言语理解.0046D71C ; ok
0046D269 E8 8E76F9FF call 言语理解.004048FC
0046D26E 33C0 xor eax,eax
0046D270 55 push ebp
0046D271 68 70D34600 push 言语理解.0046D370
0046D276 64:FF30 push dword ptr fs:[eax]
0046D279 64:8920 mov dword ptr fs:[eax],esp
0046D27C 68 E0D64600 push 言语理解.0046D6E0 ; c:\china-drm\
0046D281 FF35 601D4700 push dword ptr ds:[471D60]
0046D287 FF35 5C1D4700 push dword ptr ds:[471D5C]
0046D28D FF35 141E4700 push dword ptr ds:[471E14]
0046D293 68 F8D64600 push 言语理解.0046D6F8 ; mediakjjf
0046D298 8D85 20FDFEFF lea eax,dword ptr ss:[ebp+FFFEFD20]
0046D29E BA 04000000 mov edx,4
0046D2A3 E8 8079F9FF call 言语理解.00404C28
0046D2A8 8B85 20FDFEFF mov eax,dword ptr ss:[ebp+FFFEFD20]
0046D2AE 8D95 FCFDFEFF lea edx,dword ptr ss:[ebp+FFFEFDFC]
0046D2B4 E8 8FAAFFFF call 言语理解.00467D48
0046D2B9 8D85 FCFDFEFF lea eax,dword ptr ss:[ebp+FFFEFDFC]
0046D2BF 8D95 24FDFEFF lea edx,dword ptr ss:[ebp+FFFEFD24]
0046D2C5 E8 F2AAFFFF call 言语理解.00467DBC
0046D2CA FFB5 24FDFEFF push dword ptr ss:[ebp+FFFEFD24]
0046D2D0 68 0CD74600 push 言语理解.0046D70C ; .config
0046D2D5 8D85 28FDFEFF lea eax,dword ptr ss:[ebp+FFFEFD28]
0046D2DB BA 03000000 mov edx,3
0046D2E0 E8 4379F9FF call 言语理解.00404C28
0046D2E5 8B95 28FDFEFF mov edx,dword ptr ss:[ebp+FFFEFD28]
0046D2EB 8D85 20FEFFFF lea eax,dword ptr ss:[ebp-1E0]
0046D2F1 E8 D65BF9FF call 言语理解.00402ECC
0046D2F6 8D85 20FEFFFF lea eax,dword ptr ss:[ebp-1E0]
0046D2FC E8 5B59F9FF call 言语理解.00402C5C
0046D301 E8 4656F9FF call 言语理解.0040294C
0046D306 8D85 20FEFFFF lea eax,dword ptr ss:[ebp-1E0]
0046D30C E8 EB5DF9FF call 言语理解.004030FC
0046D311 E8 3656F9FF call 言语理解.0040294C
0046D316 84C0 test al,al
首行是验证的关键地方,跳到那里就好了,但是后面这里是验证的关键地方(F8单步到这里就RETN)也许不对,或是还有别的地方
超级字符串查找到播放的地方,如下:
0046E715 mov edx,言语理解.0046E8E4 yes
0046E72B mov eax,言语理解.0046E8F0 E567CE24FB11E333C822EA3AE006F02FD4768312FD0FE732
0046E7FA push 言语理解.0046E92C ,
0046E853 mov ecx,言语理解.0046E934 x
0046E886 mov eax,言语理解.0046E9A0 本加密视频启用了增强防翻录功能,现在系统检测到本机有疑似屏幕翻录软件在运行,\r\n您可以将其他各种应用软件退出后再播放,以免系统误判!
0046EED7 mov eax,言语理解.0046EC68 L
0046EEF0 mov edx,言语理解.0046EF48 Play
我想直接跳到L的地方,但是附近没有跳,也不知道行不行得通,请各位帮忙指点一下.
6f8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3&6S2L8h3W2H3j5h3&6Q4x3X3g2U0L8$3#2Q4x3V1k6V1i4K6u0r3i4K6t1#2k6e0S2Q4x3U0g2S2z5q4)9J5y4e0R3H3i4K6t1#2k6e0S2Q4x3U0g2S2k6W2)9J5y4h3q4V1i4K6t1#2k6e0N6Q4x3U0f1&6x3q4)9J5y4e0R3$3i4K6t1#2k6e0S2Q4x3U0g2S2y4#2)9J5y4h3p5K6i4K6t1#2k6e0W2Q4x3U0g2S2j5W2)9J5y4e0V1^5i4K6t1#2k6e0g2Q4x3U0f1^5z5q4)9J5y4e0R3$3i4K6t1#2k6e0N6Q4x3U0f1^5z5g2)9J5y4h3t1&6i4K6t1#2k6e0S2Q4x3U0g2S2k6g2)9J5y4h3q4V1x3o6y4Q4x3X3g2W2P5r3g2Q4x3V1j5J5j5e0M7#2k6U0g2T1j5X3k6V1y4e0g2S2z5o6y4T1x3o6g2W2k6o6V1H3j5X3f1^5x3e0R3%4z5o6k6X3x3K6p5^5x3U0R3K6z5e0k6W2y4K6t1I4k6U0j5#2x3o6x3`.
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课