观察代码,发现0F85C6000000 jne 0048E793,所以我用UE将0F85C6000000改为0F84C6000000程序可以正常注册。于是拿出kaymake写内存补丁
修改地址:0048E6C7
修改长度:6
原始指令:0F85C6000000
修改指令:0F84C6000000
补丁作出来打在软件上却只是注册失败,请问这个问题出在哪里了?
:0048E6C7 0F85C6000000 jne 0048E793
:0048E6CD 8D95CCFBFFFF lea edx, dword ptr [ebp+FFFFFBCC]
:0048E6D3 A120214B00 mov eax, dword ptr [004B2120]
:0048E6D8 8B00 mov eax, dword ptr [eax]
:0048E6DA 8B80FC020000 mov eax, dword ptr [eax+000002FC]
:0048E6E0 E8576DFDFF call 0046543C
:0048E6E5 8B85CCFBFFFF mov eax, dword ptr [ebp+FFFFFBCC]
:0048E6EB 8D95D0FBFFFF lea edx, dword ptr [ebp+FFFFFBD0]
:0048E6F1 E812A5F7FF call 00408C08
:0048E6F6 8B95D0FBFFFF mov edx, dword ptr [ebp+FFFFFBD0]
:0048E6FC 8D85F8FCFFFF lea eax, dword ptr [ebp+FFFFFCF8]
:0048E702 B9FF000000 mov ecx, 000000FF
:0048E707 E88063F7FF call 00404A8C
:0048E70C 8D95F8FCFFFF lea edx, dword ptr [ebp+FFFFFCF8]
:0048E712 8BCE mov ecx, esi
:0048E714 8BC3 mov eax, ebx
:0048E716 E8A9070000 call 0048EEC4
:0048E71B 84C0 test al, al
:0048E71D 7468 je 0048E787
:0048E71F 8D95C4FBFFFF lea edx, dword ptr [ebp+FFFFFBC4]
:0048E725 A120214B00 mov eax, dword ptr [004B2120]
:0048E72A 8B00 mov eax, dword ptr [eax]
:0048E72C 8B80FC020000 mov eax, dword ptr [eax+000002FC]
:0048E732 E8056DFDFF call 0046543C
:0048E737 8B85C4FBFFFF mov eax, dword ptr [ebp+FFFFFBC4]
:0048E73D 8D95C8FBFFFF lea edx, dword ptr [ebp+FFFFFBC8]
:0048E743 E8C0A4F7FF call 00408C08
:0048E748 8B95C8FBFFFF mov edx, dword ptr [ebp+FFFFFBC8]
:0048E74E 8D85F8FCFFFF lea eax, dword ptr [ebp+FFFFFCF8]
:0048E754 B9FF000000 mov ecx, 000000FF
:0048E759 E82E63F7FF call 00404A8C
:0048E75E 8D95F8FCFFFF lea edx, dword ptr [ebp+FFFFFCF8]
:0048E764 8BC3 mov eax, ebx
:0048E766 E89D0E0000 call 0048F608
:0048E76B 84C0 test al, al
:0048E76D 740C je 0048E77B
* Possible StringData Ref from Code Obj ->"A problem occured while registering "
->"[1866].
Please contact a vendor "
->"of the software."
|
:0048E76F B87CE94800 mov eax, 0048E97C
:0048E774 E8A354FAFF call 00433C1C
:0048E779 EB7B jmp 0048E7F6
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0048E76D(C)
|
* Possible StringData Ref from Code Obj ->"The application was succesfully "
->"registered."
|
:0048E77B B8DCE94800 mov eax, 0048E9DC
:0048E780 E89754FAFF call 00433C1C
:0048E785 EB6F jmp 0048E7F6
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0048E71D(C)
|
* Possible StringData Ref from Code Obj ->"A technical problem occured while "
->"registering.
Please contact a "
->"vendor of the software."
|
:0048E787 B810EA4800 mov eax, 0048EA10
:0048E78C E88B54FAFF call 00433C1C
:0048E791 EB63 jmp 0048E7F6
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课