应用平台： Win9x/NT/2000/XP
加入时间： 2003-04-03 16:03:55
推荐等级： ***
【软件简介】：1、Windows高级设置:在这个设置里，您可以系统进行一系列设置，包括禁止注册表运行、禁止按取消键登录系统等等……2、开始菜单和控制面板设置:在这个设置里，您可以对开始菜单和控制面板进行一系列设置……3、IE高级设置:在这个设置里，您可以IE进行一系列设置，包括隐藏部分选项、修改IE标题等等……4、其它高级设置:在这个设置里，您可以清除系统垃圾、隐藏驱动器等等……5、其它功能正在扩充中……
【软件限制】：20次试用。
【作者声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
【破解工具】：TRW2000娃娃修改版、Ollydbg1.09、PEiD、PE-scan、W32Dasm 10修改版
—————————————————————————————————
【过 程】：
Windows设置大师2003.exe 是 PECompact壳。用PE-scan脱之。414K->1.23M。Delphi编写。
申请号：14215752
姓 名：fly
公 司：【OCN】 不参与运算
试炼码：13572468
反汇编，查看出错提示，很容易就找到下面的核心了。
—————————————————————————————————
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004AAE09(C)
|
:004AAE7D 6964617465640053 imul esp, dword ptr [ecx+74], 53006465
:004AAE85 8BD8 mov ebx, eax
:004AAE87 8BC3 mov eax, ebx
:004AAE89 E876ABFFFF call 004A5A04
====>关键CALL!进入！
:004AAE8E 84C0 test al, al
:004AAE90 7409 je 004AAE9B
====>跳则OVER！
:004AAE92 8BC3 mov eax, ebx
:004AAE94 E877AAFFFF call 004A5910
:004AAE99 5B pop ebx
:004AAE9A C3 ret
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004AAE90(C)
|
:004AAE9B 6A00 push 00000000
* Possible StringData Ref from Code Obj ->"请与作者联系注册!"
|
:004AAE9D B9B8AE4A00 mov ecx, 004AAEB8
* Possible StringData Ref from Code Obj ->"对不起!您输入的注册码不正确,无法完成注册"
====>BAD BOY！
:004AAEA2 BACCAE4A00 mov edx, 004AAECC
:004AAEA7 A110DC4A00 mov eax, dword ptr [004ADC10]
:004AAEAC 8B00 mov eax, dword ptr [eax]
:004AAEAE E86D29FDFF call 0047D820
:004AAEB3 5B pop ebx
:004AAEB4 C3 ret
* Referenced by a CALL at Address:
|:004AAE94
|
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004A58A5(C)
|
:004A5910 53 push ebx
:004A5911 B201 mov dl, 01
:004A5913 A1D4644300 mov eax, dword ptr [004364D4]
:004A5918 E8B70CF9FF call 004365D4
:004A591D 8BD8 mov ebx, eax
:004A591F BA03000080 mov edx, 80000003
:004A5924 8BC3 mov eax, ebx
:004A5926 E8490DF9FF call 00436674
:004A592B B101 mov cl, 01
* Possible StringData Ref from Code Obj ->".DEFAULT\Software\xt-studio\windows\exe"
====>保存注册信息
:004A592D BA88594A00 mov edx, 004A5988
:004A5932 8BC3 mov eax, ebx
:004A5934 E87B0EF9FF call 004367B4
:004A5939 8B0D54F14A00 mov ecx, dword ptr [004AF154]
* Possible StringData Ref from Code Obj ->"Name"
|
:004A593F BAB8594A00 mov edx, 004A59B8
:004A5944 8BC3 mov eax, ebx
:004A5946 E8DD11F9FF call 00436B28
:004A594B 8B0D58F14A00 mov ecx, dword ptr [004AF158]
* Possible StringData Ref from Code Obj ->"Pass"
|
:004A5951 BAC8594A00 mov edx, 004A59C8
:004A5956 8BC3 mov eax, ebx
:004A5958 E86F12F9FF call 00436BCC
:004A595D 8BC3 mov eax, ebx
:004A595F E800DAF5FF call 00403364
:004A5964 6A00 push 00000000
* Possible StringData Ref from Code Obj ->"谢谢您注册本软件"
====>呵呵，胜利女神！
:004A5966 B9D0594A00 mov ecx, 004A59D0
* Possible StringData Ref from Code Obj ->"请您重新启动程序以验证注册码!"
|
:004A596B BAE4594A00 mov edx, 004A59E4
:004A5970 A110DC4A00 mov eax, dword ptr [004ADC10]
:004A5975 8B00 mov eax, dword ptr [eax]
:004A5977 E8A47EFDFF call 0047D820
:004A597C 5B pop ebx
:004A597D C3 ret
—————————————————————————————————
进入关键CALL：4AAE89 call 004A5A04
* Referenced by a CALL at Address:
|:004AAE89
|
:004A5A04 55 push ebp
:004A5A05 8BEC mov ebp, esp
:004A5A07 B905000000 mov ecx, 00000005
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004A5A11(C)
|
:004A5A0C 6A00 push 00000000
:004A5A0E 6A00 push 00000000
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004A599A(C)
|
:004A5A10 49 dec ecx
:004A5A11 75F9 jne 004A5A0C
:004A5A13 51 push ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004A59AD(C)
|
:004A5A14 53 push ebx
:004A5A15 56 push esi
:004A5A16 57 push edi
:004A5A17 8945FC mov dword ptr [ebp-04], eax
:004A5A1A 33C0 xor eax, eax
:004A5A1C 55 push ebp
:004A5A1D 685F5B4A00 push 004A5B5F
:004A5A22 64FF30 push dword ptr fs:[eax]
:004A5A25 648920 mov dword ptr fs:[eax], esp
:004A5A28 33DB xor ebx, ebx
:004A5A2A 8D55F4 [1] [2] [3] 下一页 |
