已经找到全局注册标志，绝对是，肯定是，跑不了的是是是！
应该就是无疑了。问题是改成啥呢？
0241FA44 | E8 87FE28FE | call 原版helpman.6AF8D0 |
0241FA49 | A1 5CB37502 | mov eax,dword ptr ds:[275B35C] | eax:L"朜j"
0241FA4E | 8B00 | mov eax,dword ptr ds: | eax:L"朜j", :"劋S"
0241FA50 | 8B80 90000000 | mov eax,dword ptr ds: | eax:L"朜j", :&"劋S"
0241FA56 | 8B15 648C7502 | mov edx,dword ptr ds: |
0241FA5C | 8902 | mov dword ptr ds:,eax | eax:L"朜j"
0241FA5E | B8 CCC57A02 | mov eax,原版helpman.27AC5CC | eax:L"朜j"
0241FA63 | 8B15 588F7502 | mov edx,dword ptr ds: |
0241FA69 | 8B52 1C | mov edx,dword ptr ds: |
0241FA6C | B9 00000000 | mov ecx,0 |
0241FA71 | E8 82C6FEFD | call 原版helpman.40C0F8 |
0241FA76 | A1 5CB37502 | mov eax,dword ptr ds: | eax:L"朜j"
0241FA7B | 8B00 | mov eax,dword ptr ds: | eax:L"朜j", :"劋S"
0241FA7D | 8B80 94000000 | mov eax,dword ptr ds: | eax:L"朜j", :&"劋S"
0241FA83 | A3 D0C57A02 | mov dword ptr ds:,eax | eax:L"朜j"
0241FA88 | B9 F0FA4102 | mov ecx,原版helpman.241FAF0 | 241FAF0:"Basic Edition"
0241FA8D | BA 0CFB4102 | mov edx,原版helpman.241FB0C | 241FB0C:"STD"
0241FA92 | A1 D0C57A02 | mov eax,dword ptr ds: | eax:L"朜j"
0241FA97 | E8 58FA35FE | call 原版helpman.77F4F4 |
0241FA9C | B9 1CFB4102 | mov ecx,原版helpman.241FB1C | 241FB1C:"Professional Edition"
0241FAA1 | BA 40FB4102 | mov edx,原版helpman.241FB40 | 241FB40:"PRF"
0241FAA6 | A1 D0C57A02 | mov eax,dword ptr ds: | eax:L"朜j"
0241FAAB | E8 44FA35FE | call 原版helpman.77F4F4 |
0241FAB0 | B9 50FB4102 | mov ecx,原版helpman.241FB50 | 241FB50:"Floating Professional License"
0241FAB5 | BA 7CFB4102 | mov edx,原版helpman.241FB7C | 241FB7C:"SRV"
0241FABA | A1 D0C57A02 | mov eax,dword ptr ds: | eax:L"朜j"
0241FABF | E8 30FA35FE | call 原版helpman.77F4F4 |
0241FAC4 | 8BC3 | mov eax,ebx | eax:L"朜j", ebx:&"\f沶"
0241FAC6 | 807D FF 00 | cmp byte ptr ss:,0 |
02420187 | E8 8CAD03FE | call 原版helpman.45AF18 |
0242018C | 8B55 FC | mov edx,dword ptr ss: | :L"Unregistered Evaluation Copy"
0242018F | 8B86 B8030000 | mov eax,dword ptr ds: | :&"\f'n"
02420195 | E8 7EF92BFE | call 原版helpman.6DFB18 |
0242019A | A1 5CB37502 | mov eax,dword ptr ds: |
0242019F | 8B00 | mov eax,dword ptr ds: |
024201A1 | 8078 7C 00 | cmp byte ptr ds:,0 |
024201A5 | 74 58 | je 原版helpman.24201FF |
024201FA | E8 19F92BFE | call 原版helpman.6DFB18 |
024201FF | 68 64044202 | push 原版helpman.2420464 | 2420464:"Version "
02420204 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"劋S"
02420209 | 8B00 | mov eax,dword ptr ds: | eax:&"劋S", :"劋S"
0242020B | FFB0 80000000 | push dword ptr ds: | :"8.4.4"
02420211 | 68 7C044202 | push 原版helpman.242047C | 242047C:" Build "
02420216 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"劋S"
0242021B | 8B00 | mov eax,dword ptr ds: | eax:&"劋S", :"劋S"
0242021D | FFB0 84000000 | push dword ptr ds: | :"5960"
02420223 | 8D85 5CFFFFFF | lea eax,dword ptr ss: |
02420229 | BA 04000000 | mov edx,4
02662723 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"\f沶"
02662728 | 8B00 | mov eax,dword ptr ds: | eax:&"\f沶", :"\f沶"
0266272A | 8B80 90000000 | mov eax,dword ptr ds: | eax:&"\f沶"
02662730 | 8B15 648C7502 | mov edx,dword ptr ds: |
02662736 | 8902 | mov dword ptr ds:,eax | eax:&"\f沶"
02662738 | 33C9 | xor ecx,ecx |
0266273A | B2 01 | mov dl,1 |
0266273C | A1 9C170F02 | mov eax,dword ptr ds: | eax:&"\f沶", 020F179C:&"\f沶"
02662776 | A1 5CB37502 | mov eax,dword ptr ds: |
0266277B | 8B00 | mov eax,dword ptr ds: |
0266277D | 8B40 6C | mov eax,dword ptr ds: |
02662780 | BA 942E6602 | mov edx,原版helpman.2662E94 | 2662E94:"license-icon1.png"
02662785 | E8 2ABE62FF | call 原版helpman.1C8E5B4 |
0266278A | 8BC8 | mov ecx,eax |
0266278C | BA 01000000 | mov edx,1 |
02662791 | 8B45 D0 | mov eax,dword ptr ss: | :&"\f沶"
02662794 | E8 7F67A9FF | call 原版helpman.20F8F18 |
02662799 | A1 5CB37502 | mov eax,dword ptr ds: |
0266279E | 8B00 | mov eax,dword ptr ds: |
026627A0 | 8B40 6C | mov eax,dword ptr ds: |
026627A3 | BA B42E6602 | mov edx,<原版helpman.sub_2662EB4> | 2662EB4:"license-icon2.png"
026627A8 | E8 07BE62FF | call 原版helpman.1C8E5B4 |
026627AD | 8BC8 | mov ecx,eax |
026627AF | BA 02000000 | mov edx,2 |
026627B4 | 8B45 D0 | mov eax,dword ptr ss: | :&"\f沶"
026627B7 | E8 5C67A9FF | call 原版helpman.20F8F18 |
026627BC | A1 5CB37502 | mov eax,dword ptr ds: |
026627C1 | 8B00 | mov eax,dword ptr ds: |
026627C3 | 8B40 6C | mov eax,dword ptr ds: |
026627C6 | BA D42E6602 | mov edx,原版helpman.2662ED4 | 2662ED4:"license-icon3.png"
02662878 | FF92 38010000 | call dword ptr ds: |
0266287E | 48 | dec eax |
0266287F | 75 6F | jne 原版helpman.26628F0 |
02662881 | A1 5CB37502 | mov eax,dword ptr ds: |
02662886 | 8B00 | mov eax,dword ptr ds: |
02420187 | E8 8CAD03FE | call 原版helpman.45AF18 |
0242018C | 8B55 FC | mov edx,dword ptr ss: | :L"Unregistered Evaluation Copy"
0242018F | 8B86 B8030000 | mov eax,dword ptr ds: | :&"\f'n"
02420195 | E8 7EF92BFE | call 原版helpman.6DFB18 |
0242019A | A1 5CB37502 | mov eax,dword ptr ds: |
0242019F | 8B00 | mov eax,dword ptr ds: |
024201A1 | 8078 7C 00 | cmp byte ptr ds:,0 |
024201A5 | 74 58 | je 原版helpman.24201FF
024201FF | 68 64044202 | push 原版helpman.2420464 | 2420464:"Version "
02420204 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"劋S"
02420209 | 8B00 | mov eax,dword ptr ds: | eax:&"劋S", :"劋S"
0242020B | FFB0 80000000 | push dword ptr ds: | :"8.4.4"
02420211 | 68 7C044202 | push 原版helpman.242047C | 242047C:" Build "
02420216 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"劋S"
0242021B | 8B00 | mov eax,dword ptr ds: | eax:&"劋S", :"劋S"
0242021D | FFB0 84000000 | push dword ptr ds: | :"5960"
02420223 | 8D85 5CFFFFFF | lea eax,dword ptr ss: |
02420229 | BA 04000000 | mov edx,4
025D0BB6 | E8 B56406FE | call 原版helpman.637070 |
025D0BBB | A1 5CB37502 | mov eax,dword ptr ds: |
025D0BC0 | 8B00 | mov eax,dword ptr ds: |
025D0BC2 | 83B8 9C000000 00| cmp dword ptr ds:,0
025D0BC9 | 0F8E 9B000000 | jle 原版helpman.25D0C6A
025B1D57 | A1 5CB37502 | mov eax,dword ptr ds: |
025B1D5C | 8B00 | mov eax,dword ptr ds: |
025B1D5E | 8078 7D 00 | cmp byte ptr ds:,0 |
025B1D62 | 74 08 | je 原版helpman.25B1D6C |
025856D7 | 0FB605 F45D5802 | movzx eax,byte ptr ds:|
025856DE | 8845 EF | mov byte ptr ss:,al |
025856E1 | A1 5CB37502 | mov eax,dword ptr ds: |
025856E6 | 8B00 | mov eax,dword ptr ds: |
025856E8 | 8078 7D 00 | cmp byte ptr ds:,0 |
025856EC | 75 1A | jne 原版helpman.2585708 |
025856EE | A1 5CB37502 | mov eax,dword ptr ds: |
025856F3 | 8B00 | mov eax,dword ptr ds: |
025856F5 | 83B8 90000000 00| cmp dword ptr ds:,0 |
025856FC | 7D 0A | jge 原版helpman.2585708 |
这块是发布页，没去掉那个未注册label
01FD31D5 | E8 3ABB70FE | call 原版helpman.6DED14 |
01FD31DA | A1 5CB37502 | mov eax,dword ptr ds: |
01FD31DF | 8B00 | mov eax,dword ptr ds: |
01FD31E1 | 83B8 9C000000 00| cmp dword ptr ds:,0 |
01FD31E8 | 74 10 | je 原版helpman.1FD31FA |
01FD31EA | A1 5CB37502 | mov eax,dword ptr ds: |
01FD31D5 | E8 3ABB70FE | call 原版helpman.6DED14 |
01FD31DA | A1 5CB37502 | mov eax,dword ptr ds: |
01FD31DF | 8B00 | mov eax,dword ptr ds: |
01FD31E1 | 83B8 9C000000 00| cmp dword ptr ds:,0 |
01FD31E8 | 74 10 | je 原版helpman.1FD31FA |
01FD31EA | A1 5CB37502 | mov eax,dword ptr ds:
01FDBB87 | 64:FF32 | push dword ptr fs: |
01FDBB8A | 64:8922 | mov dword ptr fs:,esp |
01FDBB8D | 8D4D E0 | lea ecx,dword ptr ss: |
01FDBB90 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"劋S"
01FDBB95 | 8B00 | mov eax,dword ptr ds: | eax:&"劋S", :"劋S"
01FDBB97 | 8B80 94000000 | mov eax,dword ptr ds: | eax:&"劋S"
01FDBB9D | BA F8BDFD01 | mov edx,原版helpman.1FDBDF8 | 1FDBDF8:"P1"
下面是点关于时发生的：
0241FA44 | E8 87FE28FE | call 原版helpman.6AF8D0 |
0241FA49 | A1 5CB37502 | mov eax,dword ptr ds: | eax:L"朜j"
0241FA4E | 8B00 | mov eax,dword ptr ds: | eax:L"朜j", :"劋S"
0241FA50 | 8B80 90000000 | mov eax,dword ptr ds: | eax:L"朜j", :&"劋S"
0241FA56 | 8B15 648C7502 | mov edx,dword ptr ds: |
0241FA5C | 8902 | mov dword ptr ds:,eax | eax:L"朜j"
0241FA5E | B8 CCC57A02 | mov eax,原版helpman.27AC5CC | eax:L"朜j", 27AC5CC:&" .;,:(){}\"/\\<>!?[]‘’“”-+*=????…??"
0241FA63 | 8B15 588F7502 | mov edx,dword ptr ds: |
0241FA69 | 8B52 1C | mov edx,dword ptr ds: |
0241FA6C | B9 00000000 | mov ecx,0 |
0241FA71 | E8 82C6FEFD | call 原版helpman.40C0F8 |
0241FA76 | A1 5CB37502 | mov eax,dword ptr ds: | eax:L"朜j"
0241FA7B | 8B00 | mov eax,dword ptr ds: | eax:L"朜j", :"劋S"
0241FA7D | 8B80 94000000 | mov eax,dword ptr ds: | eax:L"朜j", :&"劋S"
0241FA83 | A3 D0C57A02 | mov dword ptr ds:,eax | 027AC5D0:&"T豾", eax:L"朜j"
0241FA88 | B9 F0FA4102 | mov ecx,原版helpman.241FAF0 | 241FAF0:"Basic Edition"
0241FA8D | BA 0CFB4102 | mov edx,原版helpman.241FB0C | 241FB0C:"STD"
0241FA92 | A1 D0C57A02 | mov eax,dword ptr ds: | eax:L"朜j", 027AC5D0:&"T豾"
0242018C | 8B55 FC | mov edx,dword ptr ss: | :L"Unregistered Evaluation Copy"
0242018F | 8B86 B8030000 | mov eax,dword ptr ds: | :&"\f'n"
02420195 | E8 7EF92BFE | call 原版helpman.6DFB18 |
0242019A | A1 5CB37502 | mov eax,dword ptr ds: |
0242019F | 8B00 | mov eax,dword ptr ds: |
024201A1 | 8078 7C 00 | cmp byte ptr ds:,0 |
024201A5 | 74 58 | je 原版helpman.24201FF |
02420204 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"劋S"
02420209 | 8B00 | mov eax,dword ptr ds: | eax:&"劋S", :"劋S"
0242020B | FFB0 80000000 | push dword ptr ds: | :"8.4.4"
02420211 | 68 7C044202 | push 原版helpman.242047C | 242047C:" Build "
02420216 | A1 5CB37502 | mov eax,dword ptr ds: | eax:&"劋S"
0242021B | 8B00 | mov eax,dword ptr ds: | eax:&"劋S", :"劋S"
0242021D | FFB0 84000000 | push dword ptr ds: | :"5960"
02420223 | 8D85 5CFFFFFF | lea eax,dword ptr ss: |
02420229 | BA 04000000 | mov edx,4
是x64dbg吗
页:
[1]