以前做了两个版本的米人的去广告，因为去广告简单
去广告方法：
用Hex Workshop，搜索Ascii字符串“ad_link”填充为任意字符或者00填充，
接着搜索Unicode字符：“http://www.namipan.com/inc_page/nami_soft.html”，最前面的几个用00填充，后面的自由发挥。
破解上传/下载任务数和线程:
载入OD搜索 ASCII 字符串 0040ED9C push 00469E34 max_download_connections //下载线程
0040EDFA push 00469E1C max_upload_connections //上传线程
0040EE58 push 00469E08 download_task_limit //下载任务数
0040EEC9 push 00469DF4 upload_task_limit //上传任务数
下载线程修改：0040ED9A > \6A 18 push 18
0040ED9C . 68 349E4600 push 00469E34 ; max_download_connections
0040EDA1 . 53 push ebx
0040EDA2 . E8 BCBF0300 call 0044AD63
0040EDA7 . 83C4 0C add esp, 0C
0040EDAA . 85C0 test eax, eax
0040EDAC . 75 4A jnz short 0040EDF8
0040EDAE . 6A 01 push 1
0040EDB0 . FF35 94934700 push dword ptr [479394]
0040EDB6 . 8D8D CCFEFFFF lea ecx, dword ptr [ebp-134]
0040EDBC . E8 7A22FFFF call 0040103B
0040EDC1 . 57 push edi
0040EDC2 . E8 59030300 call 0043F120
0040EDC7 . 39B5 CCFEFFFF cmp dword ptr [ebp-134], esi
0040EDCD . 59 pop ecx
0040EDCE . 8B0D 94934700 mov ecx, dword ptr [479394]
0040EDD4 . 8981 60010000 mov dword ptr [ecx+160], eax
0040EDDA .^ 0F84 28FAFFFF je 0040E808
修改方法可以找一块空地先跳过去，直接 mov dword ptr [ecx+160], 10 这里就是修改为16个线程，然后再跳回来，找不到空地可以用ZeroAdd加一个空区段。下面的修改方法基本类似。
上传线程修改：0040EDF8 > \6A 16 push 16
0040EDFA . 68 1C9E4600 push 00469E1C ; max_upload_connections
0040EDFF . 53 push ebx
0040EE00 . E8 5EBF0300 call 0044AD63
0040EE05 . 83C4 0C add esp, 0C
0040EE08 . 85C0 test eax, eax
0040EE0A . 75 4A jnz short 0040EE56
0040EE0C . 6A 01 push 1
0040EE0E . FF35 94934700 push dword ptr [479394]
0040EE14 . 8D8D 44FEFFFF lea ecx, dword ptr [ebp-1BC]
0040EE1A . E8 1C22FFFF call 0040103B
0040EE1F . 57 push edi
0040EE20 . E8 FB020300 call 0043F120
0040EE25 . 39B5 44FEFFFF cmp dword ptr [ebp-1BC], esi
0040EE2B . 59 pop ecx
0040EE2C . 8B0D 94934700 mov ecx, dword ptr [479394]
0040EE32 . 8981 64010000 mov dword ptr [ecx+164], eax
0040EE38 .^ 0F84 CAF9FFFF je 0040E808
下载任务数修改：0040EE56 > \6A 13 push 13
0040EE58 . 68 089E4600 push 00469E08 ; download_task_limit
0040EE5D . 53 push ebx
0040EE5E . E8 00BF0300 call 0044AD63
0040EE63 . 83C4 0C add esp, 0C
0040EE66 . 85C0 test eax, eax
0040EE68 . 75 5D jnz short 0040EEC7
0040EE6A . 6A 01 push 1
0040EE6C . FF35 94934700 push dword ptr [479394]
0040EE72 . 8D8D 7CFEFFFF lea ecx, dword ptr [ebp-184]
0040EE78 . E8 BE21FFFF call 0040103B
0040EE7D . 57 push edi
0040EE7E . E8 9D020300 call 0043F120
0040EE83 . 59 pop ecx
0040EE84 . 8B0D 94934700 mov ecx, dword ptr [479394]
0040EE8A 8981 40010000 mov dword ptr [ecx+140], eax
0040EE90 A1 94934700 mov eax, dword ptr [479394]
0040EE95 . 8B88 40010000 mov ecx, dword ptr [eax+140]
0040EE9B . 3948 74 cmp dword ptr [eax+74], ecx
0040EE9E . 76 03 jbe short 0040EEA3
上传任务数修改：0040EEC7 > \6A 11 push 11
0040EEC9 . 68 F49D4600 push 00469DF4 ; upload_task_limit
0040EECE . 53 push ebx
0040EECF . E8 8FBE0300 call 0044AD63
0040EED4 . 83C4 0C add esp, 0C
0040EED7 . 85C0 test eax, eax
0040EED9 . 75 5D jnz short 0040EF38
0040EEDB . 6A 01 push 1
0040EEDD . FF35 94934700 push dword ptr [479394]
0040EEE3 . 8D8D C4FEFFFF lea ecx, dword ptr [ebp-13C]
0040EEE9 . E8 4D21FFFF call 0040103B
0040EEEE . 57 push edi
0040EEEF . E8 2C020300 call 0043F120
0040EEF4 . 59 pop ecx
0040EEF5 . 8B0D 94934700 mov ecx, dword ptr [479394]
0040EEFB . 8981 3C010000 mov dword ptr [ecx+13C], eax
0040EF01 . A1 94934700 mov eax, dword ptr [479394]
0040EF06 . 8B88 3C010000 mov ecx, dword ptr [eax+13C]
0040EF0C . 3948 70 cmp dword ptr [eax+70], ecx
0040EF0F . 76 03 jbe short 0040EF14
| 
发表于 2009-10-10 15:01
发表于 2009-10-10 15:07
发表于 2009-10-10 15:11
|
发表于 2009-10-10 15:32
