电脑字体秀破解过程 (1千字)
URL http://www.embird.com/setup.exe电脑字体秀破解过程
工具soft ice for win9x
来到注册框,输入名字:crack,注册码:1234567890
ctrl+d
bpx hmemcpy
点ok
程序被中断,按f12,12下(13下出错)再按f10
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479773(C)
|
:0047973E A1141E4900 mov eax, dword ptr [00491E14]
:00479743 8B00 mov eax, dword ptr [eax]
:00479745 8A4418FF mov al, byte ptr [eax+ebx-01]
:00479749 2C30 sub al, 30 *小写转大写
:0047974B 7415 je 00479762
:0047974D 2C26 sub al, 26
:0047974F 7520 jne 00479771
:00479751 A1141E4900 mov eax, dword ptr [00491E14]
:00479756 E83DA9F8FF call 00404098
:0047975B C64418FF55 mov [eax+ebx-01], 55
:00479760 EB0F jmp 00479771
* Possible StringData Ref from Code Obj ->?
|
:00479859 B844994700 mov eax, 00479944
:0047985E E829CCFEFF call 0046648C
:00479863 8B45E4 mov eax, dword ptr [ebp-1C] *这里用d edx可看到注册码,(用alt+方向键查看)
:00479866 668B0D10994700 mov cx, word ptr [00479910]
:0047986D B201 mov dl, 01
:0047986F E8ECBAFDFF call 00455360 *出错了
:00479874 8B87D4020000 mov eax, dword ptr [edi+000002D4]
:0047987A 8B10 mov edx, dword ptr [eax]
:0047987C FF92B0000000 call dword ptr [edx+000000B0]
软件搞定了,可是需求的人哪里去了!
