URL http://www.embird.com/setup.exe
電腦字型秀破解過程
工具soft ice for win9x
來到註冊框，輸入名字：crack，註冊碼：1234567890
ctrl+d
bpx hmemcpy
點ok
程式被中斷，按f12，12下（13下出錯）再按f10
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479773(C)
|
:0047973E A1141E4900 mov eax,
dword ptr [00491E14]
:00479743 8B00
mov eax, dword ptr [eax]
:00479745 8A4418FF
mov al, byte ptr [eax+ebx-01]
:00479749 2C30
sub al, 30 *小寫轉大寫
:0047974B 7415
je 00479762
:0047974D 2C26
sub al, 26
:0047974F 7520
jne 00479771
:00479751 A1141E4900 mov eax,
dword ptr [00491E14]
:00479756 E83DA9F8FF call
00404098
:0047975B C64418FF55 mov [eax+ebx-01],
55
:00479760 EB0F
jmp 00479771
* Possible StringData Ref from Code Obj ->?
|
:00479859 B844994700 mov eax,
00479944
:0047985E E829CCFEFF call
0046648C
:00479863 8B45E4
mov eax, dword ptr [ebp-1C] *這裡用d edx可看到註冊碼，（用alt+方向鍵檢視）
:00479866 668B0D10994700 mov cx, word ptr
[00479910]
:0047986D B201
mov dl, 01
:0047986F E8ECBAFDFF call
00455360 *出錯了
:00479874 8B87D4020000 mov eax, dword
ptr [edi+000002D4]
:0047987A 8B10
mov edx, dword ptr [eax]
:0047987C FF92B0000000 call dword
ptr [edx+000000B0]
軟體搞定了，可是需求的人哪裡去了！