破解冰盾IV (2千字)
软件名称：冰盾IV破解人：TAE！[BCG] TAE[FCG]
保护方法：注册码
简介：一个安全工具！
前面步骤不在复述，应该不难跟踪至以下程序段。
:004036E0 56 push esi
:004036E1 57 push edi
:004036E2 8BF1 mov esi, ecx
:004036E4 6A01 push 00000001
:004036E6 E8456E0100 call 0041A530
:004036EB 8B4664 mov eax, dword ptr [esi+64]
:004036EE 50 push eax
:004036EF E839820000 call 0040B92D \\该call将你的注册申请码转换为数值型
:004036F4 8BF8 mov edi, eax \\保存到edi
:004036F6 8B4660 mov eax, dword ptr [esi+60]
:004036F9 50 push eax
:004036FA E82E820000 call 0040B92D \\将输入得注册码转换为数值型并放入eax
:004036FF 8B4E5C mov ecx, dword ptr [esi+5C]\\将一个数放入ecx
:00403702 33C7 xor eax, edi \\eax和edi异或
:00403704 83C408 add esp, 00000008
:00403707 3BC1 cmp eax, ecx \\比较异或后的数是不是等于ecx
:00403709 7523 jne 0040372E \\是就注册成功，否则就。。。
:0040370B 8BCE mov ecx, esi
:0040370D E83E000000 call 00403750
:00403712 85C0 test eax, eax
:00403714 7426 je 0040373C
:00403716 6A00 push 00000000
:00403718 6A00 push 00000000
* Possible StringData Ref from Data Obj ->"恭喜您注册成功!"
|
:0040371A 6884F44200 push 0042F484
:0040371F E842BE0100 call 0041F566
:00403724 8BCE mov ecx, esi
:00403726 E84C950100 call 0041CC77
:0040372B 5F pop edi
:0040372C 5E pop esi
:0040372D C3 ret
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403709(C)
|
:0040372E 6A00 push 00000000
:00403730 6A00 push 00000000
* Possible StringData Ref from Data Obj ->"注册失败!"
|
:00403732 6878F44200 push 0042F478
:00403737 E82ABE0100 call 0041F566
本文是我破解完成以后写的，由于不知该软件将注册标记放入哪里，不能重复注册，所以有疏漏的地方请大家提出！
