新纪元财务、进销存一体化软件 (4千字)
新纪元财务、进销存一体化软件下载地址：http://www.shareware.net.cn/dl.asp?id={AA5CFB89-2BCB-4474-9C43-3FE0CB156308}
使用工具：HIEW、W32DASM、language
操作步骤：
一、运行language打开xsj.exe显示格式为DELPHI语言
二、用W32DASM反汇编xsj.exe
相关如下：
:512538F2 0F850B010000 jne 51253A03 ==>00252cf2h
909090909090 ==>修改（注：不让此行跳到出错地址 ）
:512538F8 8B8680030000 mov eax, dword ptr [esi+00000380]
:512538FE 33D2 xor edx, edx
:51253900 E8EB2DDFFF call 510466F0
:51253905 BA02000080 mov edx, 80000002
:5125390A A1B4102651 mov eax, dword ptr [512610B4]
:5125390F E8BC9EE3FF call 5108D7D0
:51253914 B101 mov cl, 01
* Possible StringData Ref from Code Obj ->"\SoftWare\Microsoft_98"
|
:51253916 BACC3A2551 mov edx, 51253ACC
:5125391B A1B4102651 mov eax, dword ptr [512610B4]
:51253920 E8EF9FE3FF call 5108D914
:51253925 8B45F4 mov eax, dword ptr [ebp-0C]
:51253928 E8C361DBFF call 51009AF0
:5125392D 8BC8 mov ecx, eax
:5125392F 81C100040000 add ecx, 00000400
:51253935 BAC03A2551 mov edx, 51253AC0
:5125393A A1B4102651 mov eax, dword ptr [512610B4]
:5125393F E8C4A5E3FF call 5108DF08
:51253944 A1B4102651 mov eax, dword ptr [512610B4]
:51253949 E8529EE3FF call 5108D7A0
:5125394E 6A00 push 00000000
* Possible StringData Ref from Code Obj ->"注册完成!
序列号："
|
:51253950 68EC3A2551 push 51253AEC
:51253955 8D95A4FEFFFF lea edx, dword ptr [ebp+FFFFFEA4]
:5125395B A154EB2551 mov eax, dword ptr [5125EB54]
:51253960 8B00 mov eax, dword ptr [eax]
:51253962 8B80E8020000 mov eax, dword ptr [eax+000002E8]
:51253968 E8B325DEFF call 51035F20
:5125396D 8B85A4FEFFFF mov eax, dword ptr [ebp+FFFFFEA4]
:51253973 8D95A8FEFFFF lea edx, dword ptr [ebp+FFFFFEA8]
:51253979 E84E5EDBFF call 510097CC
:5125397E FFB5A8FEFFFF push dword ptr [ebp+FFFFFEA8]
* Possible StringData Ref from Code Obj ->"
"
|
:51253984 680C3B2551 push 51253B0C
* Possible StringData Ref from Code Obj ->"注册码："
|
:51253989 681C3B2551 push 51253B1C
:5125398E 8D959CFEFFFF lea edx, dword ptr [ebp+FFFFFE9C]
:51253994 A154EB2551 mov eax, dword ptr [5125EB54]
:51253999 8B00 mov eax, dword ptr [eax]
:5125399B 8B80E0020000 mov eax, dword ptr [eax+000002E0]
:512539A1 E87A25DEFF call 51035F20
:512539A6 8B859CFEFFFF mov eax, dword ptr [ebp+FFFFFE9C]
:512539AC 8D95A0FEFFFF lea edx, dword ptr [ebp+FFFFFEA0]
:512539B2 E8155EDBFF call 510097CC
:512539B7 FFB5A0FEFFFF push dword ptr [ebp+FFFFFEA0]
* Possible StringData Ref from Code Obj ->"
"
|
:512539BD 680C3B2551 push 51253B0C
* Possible StringData Ref from Code Obj ->"退出本软件重新进入后,您将成为正式用户!"
|
:512539C2 68303B2551 push 51253B30
:512539C7 8D85ACFEFFFF lea eax, dword ptr [ebp+FFFFFEAC]
:512539CD BA07000000 mov edx, 00000007
:512539D2 E85D06DBFF call 51004034
:512539D7 8B85ACFEFFFF mov eax, dword ptr [ebp+FFFFFEAC]
:512539DD E85607DBFF call 51004138
:512539E2 8BD0 mov edx, eax
* Possible StringData Ref from Code Obj ->"祝贺!"
|
:512539E4 B9583B2551 mov ecx, 51253B58
:512539E9 A138EE2551 mov eax, dword ptr [5125EE38]
:512539EE 8B00 mov eax, dword ptr [eax]
:512539F0 E84712E0FF call 51054C3C
:512539F5 A138EE2551 mov eax, dword ptr [5125EE38]
:512539FA 8B00 mov eax, dword ptr [eax]
:512539FC E89711E0FF call 51054B98
:51253A01 EB18 jmp 51253A1B
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:512538F2(C)
|
:51253A03 6A00 push 00000000
* Possible StringData Ref from Code Obj ->"警告!"
|
:51253A05 B9603B2551 mov ecx, 51253B60
* Possible StringData Ref from Code Obj ->"注册号不正确!"
|
:51253A0A BA683B2551 mov edx, 51253B68
三、用HIEW查找0f850b010000修改为909090909090
成功，输入任意号码注册完成。~~~~
