軟體名稱：冰盾IV
破解人：TAE！[BCG] TAE[FCG]
保護方法：註冊碼
簡介：一個安全工具！
前面步驟不在複述，應該不難跟蹤至以下程式段。
:004036E0 56
push esi
:004036E1 57
push edi
:004036E2 8BF1
mov esi, ecx
:004036E4 6A01
push 00000001
:004036E6 E8456E0100 call 0041A530
:004036EB 8B4664
mov eax, dword ptr [esi+64]
:004036EE 50
push eax
:004036EF E839820000 call 0040B92D
\\該call將你的註冊申請碼轉換為數值型
:004036F4 8BF8
mov edi, eax \\儲存到edi
:004036F6 8B4660
mov eax, dword ptr [esi+60]
:004036F9 50
push eax
:004036FA E82E820000 call 0040B92D
\\將輸入得註冊碼轉換為數值型並放入eax
:004036FF 8B4E5C
mov ecx, dword ptr [esi+5C]\\將一個數放入ecx
:00403702 33C7
xor eax, edi \\eax和edi異或
:00403704 83C408
add esp, 00000008
:00403707 3BC1
cmp eax, ecx \\比較異或後的數是不是等於ecx
:00403709 7523
jne 0040372E \\是就註冊成功，否則就。。。
:0040370B 8BCE
mov ecx, esi
:0040370D E83E000000 call 00403750
:00403712 85C0
test eax, eax
:00403714 7426
je 0040373C
:00403716 6A00
push 00000000
:00403718 6A00
push 00000000
* Possible StringData Ref from Data Obj ->"恭喜您註冊成功!"
|
:0040371A 6884F44200 push 0042F484
:0040371F E842BE0100 call 0041F566
:00403724 8BCE
mov ecx, esi
:00403726 E84C950100 call 0041CC77
:0040372B 5F
pop edi
:0040372C 5E
pop esi
:0040372D C3
ret
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403709(C)
|
:0040372E 6A00
push 00000000
:00403730 6A00
push 00000000
* Possible StringData Ref from Data Obj ->"註冊失敗!"
|
:00403732 6878F44200 push 0042F478
:00403737 E82ABE0100 call 0041F566
本文是我破解完成以後寫的，由於不知該軟體將註冊標記放入哪裡，不能重複註冊，所以有疏漏的地方請大家提出！