1Byte 干掉 Reveal 1.0.6 授权，完美破解

iOS

__text:000000010009470C                         sub_10009470C   proc near               ; CODE XREF: -[IBAAppDelegate init]+A8p
__text:000000010009470C                                                                 ; -[IBAMainWindowController configureTitleBarAccessoryView]+11p ...
__text:000000010009470C
__text:000000010009470C                         var_18          = qword ptr -18h
__text:000000010009470C                         var_10          = qword ptr -10h
__text:000000010009470C
__text:000000010009470C 55                                      push    rbp
__text:000000010009470D 48 89 E5                                mov     rbp, rsp
__text:0000000100094710 53                                      push    rbx
__text:0000000100094711 48 83 EC 18                             sub     rsp, 18h
__text:0000000100094715 E8 6A 37 FF FF                          call    sub_100087E84
__text:000000010009471A 48 8D 0D E7 60 0B 00                    lea     rcx, off_10014A808
__text:0000000100094721 48 8B 11                                mov     rdx, [rcx]
__text:0000000100094724 48 8D 7D E8                             lea     rdi, [rbp+var_18]
__text:0000000100094728 48 89 C6                                mov     rsi, rax
__text:000000010009472B E8 06 3D FF FF                          call    sub_100088436
__text:0000000100094730 48 83 7D E8 00                          cmp     [rbp+var_18], 0
__text:0000000100094735 0F 95 C3                                setnz   bl              ; ★★★★★patch SETE BL  95 ==> 94★★★★★
__text:0000000100094738 48 8B 7D F0                             mov     rdi, [rbp+var_10] ; this
__text:000000010009473C 48 85 FF                                test    rdi, rdi
__text:000000010009473F 74 05                                   jz      short loc_100094746
__text:0000000100094741 E8 10 CD 00 00                          call    __ZNSt3__119__shared_weak_count16__release_sharedEv ; std::__1::__shared_weak_count::__release_shared(void)
__text:0000000100094746
__text:0000000100094746                         loc_100094746:                          ; CODE XREF: sub_10009470C+33j
__text:0000000100094746 0F B6 C3                                movzx   eax, bl
__text:0000000100094749 48 83 C4 18                             add     rsp, 18h
__text:000000010009474D 5B                                      pop     rbx
__text:000000010009474E 5D                                      pop     rbp
__text:000000010009474F C3                                      retn
__text:000000010009474F                         sub_10009470C   endp

评论区

已有9位网友发表了看法：

1L 访客 2014-10-20 15:53:03 回复

你好，不知道怎么破解，能否发一个你破解的给我，谢谢xujunwen@star-net.cn

2L 访客 2014-10-23 20:04:20 回复

把这个95字节改成94，破解的原理是什么呢？

2L piaoyun 2014-10-30 10:45:58 回复

@访客置标志位啊~

3L atest 2014-11-03 12:03:44 回复

赞一下，实测可用

4L 访客 2014-11-07 14:14:41 回复

按照楼主大神的指点，修改了一下，现在弹出一个框，写着：For security reasons, you need to code sign your application or sign your updates with a DSA key. See Sparkle's documentation for more information，该如何去掉这个框？求大神指点

4L piaoyun 2014-11-07 14:53:35 回复

@访客提示你代码签名，
应该是改错了，用IDA改
或者 chmod +x 一下，然后重新签名看看

4L 访客 2014-11-11 10:35:06 回复

@piaoyun 修改以后提示 insecure update error 该怎么处理呢