下载地址:http://www.skycn.com/soft/277.html破解过程:
1.用language2000中文版检查无壳! 2.运行TRW2000 →Browse→OK 3.运行"MailBell V1.30.exe",在“License Code”窗口填入注册码(随便添的)!
4.Ctrl+N激活TRW2000,下断点命令:BPXHMEMCPY,回车确定后,按F5,点击 “OK”(注册)键,被TRW2000拦下,下“BC *”清除断点 。
5.下“pmodule”回车直接到达程序领空,再按4次F12键(注意如果按5次,则显示“the License Code has a bad format”(失败的注册码) ),看见下面的程序:0167:00425915 LEA ECX,[ESP+14]0167:00425919 MOV EBX,EAX0167:0042591B CALL 00424360 ---关键0167:00425920 TEST EBX,EBX0167:00425922 MOV EBP,EAX0167:00425924 JZ 00425957 ---关键跳0167:00425926 LEA ECX,[ESP+14]0167:0042592A CALL 004243300167:0042592F MOV ECX,[ESI+68].............0167:00425950 MOV EBP,050167:00425955 JMP SHORT 0042595B0167:00425957 TEST EBP,EBP ----比较EBP是否相等0167:00425959 JZ 00425995 ---关键跳,等于0则跳,跳则成功,不跳则失败,不跳,下R FL Z 改变跳的方向,成功了^0^0167:0042595B LEA EAX,[ESP+88]0167:00425962 PUSH EBP0167:00425963 PUSH EAX0167:00425964 CALL 00425AC00167:00425969 MOV EAX,[EAX]0167:0042596B MOV ESI,[ESI+18]0167:0042596E PUSH EAX0167:0042596F PUSH ESI0167:00425970 PUSH EDI0167:00425971 MOV BYTE [ESP+0B78],090167:00425979 CALL 0043C650 -----出现错误的对话框“the License Code has a bad format”0167:0042597E ADD ESP,BYTE +14...............0167:00425A05 PUSH EAX0167:00425A06 PUSH ESI0167:00425A07 PUSH EDI0167:00425A08 MOV BYTE [ESP+0B7C],080167:00425A10 call 0043C5F0 ---出现成功的对话框
6.启动hiew7.8, 打开"MailBell V1.30.exe",按 F4 然后选择 decode mode, 来到:0167:00425959 JZ 00425995
7.这就是修改的地方了,按F3进入修正状态,在机器码处直接用74代替75或EB,按F9存盘。
8.再随便输入几个数字,OK了^0^
9.可惜又是爆破!