Safengine NoobyProtect 过注册半自动脚本

 软件打开时界面：

 

 

 

过2.X所有版本

pause
pause
BC
bphwcall
var BPRegOpenKeyExA
var ZwProtectVirtualMemoryAddress
var bptimes
var FirstTimeEncryptWordsAddress
var SecondTimeEncryptWordsAddress
var EncryptWords
//瞧，这个就是半自动
mov FirstTimeEncryptWordsAddress,06fc18
mov SecondTimeEncryptWordsAddress,06f960
mov EncryptWords,#D7E2CAB50008010061060100001F926C83BF060738988AF4974006A4#mov bptimes,0
GPA "ZwProtectVirtualMemory","ntdll.dll"
log $RESULT
mov ZwProtectVirtualMemoryAddress,$RESULT
GPA "ZwReadFile","ntdll.dll"
log $RESULT
bp $RESULT

check_bptimes:
esto
inc bptimes
cmp bptimes,5  
jnz check_bptimes
bc $RESULT

findmem #8BFF558BEC83EC0C8365FC0053568B750881FE0400008057#
mov BPRegOpenKeyExA,$RESULT
bp BPRegOpenKeyExA+17 
esto
pause
pause
bphws FirstTimeEncryptWordsAddress+18,"w" 
esto
bphwc FirstTimeEncryptWordsAddress+18
mov [FirstTimeEncryptWordsAddress],EncryptWords 
esto
bphws SecondTimeEncryptWordsAddress+18,"w" 
esto
bphwc SecondTimeEncryptWordsAddress+18
mov [SecondTimeEncryptWordsAddress],EncryptWords 
bc BPRegOpenKeyExA
run


脚本分两次跑，第一次跑到下划线部分的pause就可以获得你锁需要的3个变量了，修改填入后，第二次跑就可以patch HWID过注册了。。

 

软件有偿解密服务QQ（64177398）

本文出自 “软件” 博客，转载请与作者联系！