IRPTrace 破解笔记

软件下载地址：http://www.tssc.de/

2000669E    E8 F7030000     CALL TSCUST.?IsLicenseValid@CCustLib@@AAEGXZ  //关键call，直接返回eax = 1
200066A3    66:85C0         TEST AX,AX
200066A6    75 31           JNZ SHORT TSCUST.200066D9
200066A8    6A 01           PUSH 1
200066AA    8BCE            MOV ECX,ESI

跟如call后有字符串Lc

20006AD8    50              PUSH EAX
20006AD9    68 EC170020     PUSH TSCUST.200017EC                                    ; Lc
20006ADE    8BCA            MOV ECX,EDX

特征码：BB 97 00 00 00 83 C9 FF

转载于:https://www.cnblogs.com/coffeesoft/p/4889749.html