疑問 - 反反Softice的軟體

[poiuytre]

Hi Everybody,

有些軟體會偵測系統是否存在Softice而使軟體無法執行
當然Softice就無法進行破解程式?

請問如何讓騙過軟體的偵測(or何種軟體?),可使Softice可以執行破解程序???

Thanks!!!

[mini]

個人是第一次聽過
不過想想的確辦的到
比如搜尋視窗 Softice 關鍵字
最簡單就是用 winAPI : FindWindow

如真的是這個方法反反制Softice
那只要改 Softice 的視窗標題即可
用資源修改軟體開啟Softice再改名稱即可
※如果 Softice 主程式有經過加殼加密 那就要先脫殼了

當然還有其他方法
寫一段程式來改 Softice的視窗標題即可
VB 是這麼寫的
Dim hwnd As Long
hwnd = FindWindow(vbNullString, "Softice xxxxx")
Me.Caption = hwnd & "這是Softice的視窗編號"
SetWindowText hwnd, "XX 我要變變變"

上面的 "Softice xxxxx" 必須一模一樣
當然也可以只要找到視窗標題內有 Softice關鍵字就作用的方法
試寫了一下 "軟體偵測系統是否存在Softice而使軟體無法執行" 之功能

以下加在 Private Sub Form_Load() 裡即可

Dim hCurrentWindow As Long
Dim buff As String * 255
Dim strText As String

hCurrentWindow = GetWindow(Me.hwnd, GW_HWNDFIRST)
Do While hCurrentWindow <> 0
     If ((GetWindowText(hCurrentWindow, buff, 255) > 0) And IsWindowVisible(hCurrentWindow)) Then
          strText = Replace(buff, Chr$(0), vbNullString, 1, -1, vbBinaryCompare)
          If InStr(1, strText, "Softice", vbTextCompare) = 1 Then End
     End If
     hCurrentWindow = GetWindow(hCurrentWindow, GW_HWNDNEXT)
Loop

需要用到的 winAPI宣告 (開一個 .bas 放進去)

Option Explicit

Public Declare Function FindWindow Lib "user32" Alias "FindWindowA" ( _
    ByVal lpClassName As String, _
    ByVal lpWindowName As String) As Long
Public Declare Function IsWindowVisible Lib "user32" (ByVal hwnd As Long) As Long
Public Declare Function GetWindowText Lib "user32" Alias "GetWindowTextA" ( _
    ByVal hwnd As Long, _
    ByVal lpString As String, _
    ByVal cch As Long) As Long
Public Declare Function SetWindowText Lib "user32" Alias "SetWindowTextA" ( _
    ByVal hwnd As Long, _
    ByVal lpString As String) As Long
Public Declare Function GetWindow Lib "user32" ( _
    ByVal hwnd As Long, _
    ByVal wCmd As Long) As Long
Global Const GW_HWNDFIRST = 0
Global Const GW_HWNDNEXT = 2

[GaMNiA]

舊版的 Soft-ICE v4.2.6 可以用 icedump
新版的話, 我就不知道了, 太久沒玩了......