IRPTrace 破解筆記

軟件下載地址：http://www.tssc.de/

2000669E    E8 F7030000     CALL TSCUST.?IsLicenseValid@CCustLib@@AAEGXZ  //關鍵call，直接返回eax = 1
200066A3    66:85C0         TEST AX,AX
200066A6    75 31           JNZ SHORT TSCUST.200066D9
200066A8    6A 01           PUSH 1
200066AA    8BCE            MOV ECX,ESI

跟如call後有字符串Lc

20006AD8    50              PUSH EAX
20006AD9    68 EC170020     PUSH TSCUST.200017EC                                    ; Lc
20006ADE    8BCA            MOV ECX,EDX

特徵碼：BB 97 00 00 00 83 C9 FF