通过OD调试阻止对话框弹出

00401000 >/$  6A 00         push    0                                            ; /pModule = NULL
00401002  |.  E8 0D020000   call                 ; \GetModuleHandleA
00401007  |.  A3 1C314000   mov     dword ptr [40311C], eax
0040100C  |.  83F8 00       cmp     eax, 0
0040100F  |.  74 13         je      short 00401024
00401011  |.  6A 00         push    0                                            ; /Style = MB_OK|MB_APPLMODAL
00401013  |.  68 7D304000   push    0040307D                                     ; |Title = "Register Me"
00401018  |.  68 34304000   push    00403034                                     ; |Text = "Remove the nags to register",CR,LF,"This will make program fully registered :))"
0040101D  |.  6A 00         push    0                                            ; |hOwner = NULL
0040101F  |.  E8 C6010000   call                        ; \MessageBoxA
00401024  |>  6A 0A         push    0A
00401026  |.  FF35 20314000 push    dword ptr [403120]
0040102C  |.  6A 00         push    0
0040102E  |.  FF35 1C314000 push    dword ptr [40311C]
00401034  |.  E8 19000000   call    00401052
00401039  |.  6A 00         push    0                                            ; /Style = MB_OK|MB_APPLMODAL
0040103B  |.  68 7D304000   push    0040307D                                     ; |Title = "Register Me"
00401040  |.  68 89304000   push    00403089                                     ; |Text = "Oops! I am not registered !!"
00401045  |.  6A 00         push    0                                            ; |hOwner = NULL
00401047  |.  E8 9E010000   call                        ; \MessageBoxA
0040104C  |.  50            push    eax                                          ; /ExitCode
0040104D  \.  E8 BC010000   call                      ; \ExitProcess
004011AE   $- FF25 40204000 jmp     dword ptr [<&USER32.BeginPaint>]             ;  USER32.BeginPaint
004011B4   $- FF25 24204000 jmp     dword ptr [<&USER32.CreateWindowExA>]        ;  USER32.CreateWindowExA
004011BA   $- FF25 28204000 jmp     dword ptr [<&USER32.DefWindowProcA>]         ;  ntdll.NtdllDefWindowProc_A
004011C0   $- FF25 20204000 jmp     dword ptr [<&USER32.DispatchMessageA>]       ;  USER32.DispatchMessageA
004011C6   $- FF25 0C204000 jmp     dword ptr [<&USER32.DrawTextA>]              ;  USER32.DrawTextA
004011CC   $- FF25 10204000 jmp     dword ptr [<&USER32.EndPaint>]               ;  USER32.EndPaint
004011D2   $- FF25 14204000 jmp     dword ptr [<&USER32.GetClientRect>]          ;  USER32.GetClientRect
004011D8   $- FF25 18204000 jmp     dword ptr [<&USER32.GetMessageA>]            ;  USER32.GetMessageA
004011DE   $- FF25 1C204000 jmp     dword ptr [<&USER32.LoadCursorA>]            ;  USER32.LoadCursorA
004011E4   $- FF25 44204000 jmp     dword ptr [<&USER32.LoadIconA>]              ;  USER32.LoadIconA
004011EA   $- FF25 48204000 jmp     dword ptr [<&USER32.MessageBoxA>]            ;  USER32.MessageBoxA
004011F0   $- FF25 2C204000 jmp     dword ptr [<&USER32.PostQuitMessage>]        ;  USER32.PostQuitMessage
004011F6   $- FF25 30204000 jmp     dword ptr [<&USER32.RegisterClassExA>]       ;  USER32.RegisterClassExA
004011FC   $- FF25 34204000 jmp     dword ptr [<&USER32.ShowWindow>]             ;  USER32.ShowWindow
00401202   $- FF25 38204000 jmp     dword ptr [<&USER32.TranslateMessage>]       ;  USER32.TranslateMessage
00401208   $- FF25 3C204000 jmp     dword ptr [<&USER32.UpdateWindow>]           ;  USER32.UpdateWindow
0040120E   .- FF25 04204000 jmp     dword ptr [<&KERNEL32.ExitProcess>]          ;  kernel32.ExitProcess
00401214   $- FF25 00204000 jmp     dword ptr [<&KERNEL32.GetModuleHandleA>]     ;  kernel32.GetModuleHandleA

1.阻止对话框弹出方案一

通过OD调试阻止对话框弹出_第1张图片

2.阻止对话框弹出方案二

通过OD调试阻止对话框弹出_第2张图片

3.阻止对话框弹出方案三

通过OD调试阻止对话框弹出_第3张图片

4.阻止对话框弹出方案四

通过OD调试阻止对话框弹出_第4张图片


你可能感兴趣的:(OllyDbg调试)