Delphi 11.2 绿化程序强日记：
(编辑：jimmy 日期: 2024/12/28 浏览：3 次 )
故事起因：法王姥爷要在VMWare 里测试安装 绿色版 Delphi 11.2
把下载到的基础包7z文件解出来之后、绿化文件 和 注册文件 解出来之后：
运行这个绿色配置文件时，就出这个东西了。
image.png
帮助中这样说的
image.png
image.png
无论 你目录是 RAD Studio 还是 RADStudio(没空格) ，还是11.1 死活都报这个错。
就算 你启用Process Monitor 监视，右面也显示 Success ,照报无误 ！
难道 我们非得 下载原来的 6.xxG 的ISO 就此重头做起吗？
请来x64dbg吧，待我们强日主程序，我的电脑，咱做主，岂容你放肆！
image.png
来到Alt+E 窗口，搜索下message
F2下好断点，顺势按Ctrl+F8 直接跑起来
待弹框出现，右下角堆栈区，
连按Ctrl+Shift+↓ 来到最下面第一次见到主程序的初始地方
此处就是开始点
打个注释加个记号，或按个F2
015B54FE | B9 C8815B01 | mov ecx,radstudio11green.15B81C8 | 15B81C8:L"\\bin"
015B5503 | E8 445AD7FF | call <radstudio11green.sub_132AF4C |
015B5508 | 8B45 DC | mov eax,dword ptr ss:[ebp-24] |
015B550B | B2 01 | mov dl,1 |
015B550D | E8 8E12D9FF | call <radstudio11green.sub_13467A0 | ==>这里进入修改返回值al=1
015B5512 | 84C0 | test al,al |
015B5514 | 75 2D | jne radstudio11green.15B5543 |
015B5516 | 6A 10 | push 10 |
015B5518 | 8D55 D8 | lea edx,dword ptr ss:[ebp-28] |
015B551B | 8B45 F4 | mov eax,dword ptr ss:[ebp-C] |
015B551E | E8 35B2EAFF | call radstudio11green.1460758 |
015B5523 | 8B45 D8 | mov eax,dword ptr ss:[ebp-28] |
015B5526 | E8 BD57D7FF | call <radstudio11green.sub_132ACE8 |
015B552B | 8BC8 | mov ecx,eax |
015B552D | BA D4815B01 | mov edx,radstudio11green.15B81D4 | 15B81D4:L"当前路径不是RAD Studio路径，需要将本程序放在RAD Studio的根目录"
015B5532 | A1 E8DE5C01 | mov eax,dword ptr ds:[15CDEE8] |
015B5537 | 8B00 | mov eax,dword ptr ds:[eax] |
015B5539 | E8 CE15F6FF | call <radstudio11green.sub_1516B0C |
015B553E | E9 142A0000 | jmp radstudio11green.15B7F57 |
015B5543 | 8B45 F4 | mov eax,dword ptr ss:[ebp-C] |
015B5546 | 8B90 10050000 | mov edx,dword ptr ds:[eax+510] |
015B554C | 8D45 D4 | lea eax,dword ptr ss:[ebp-2C] |
015B554F | B9 34825B01 | mov ecx,<radstudio11green.sub_15B8 | 15B8234:L"\\bin\\bds.exe"
015B5554 | E8 F359D7FF | call <radstudio11green.sub_132AF4C |
015B5559 | 8B45 D4 | mov eax,dword ptr ss:[ebp-2C] |
015B555C | B2 01 | mov dl,1 |
015B555E | E8 A511D9FF | call <radstudio11green.sub_1346708 | ==>al返回1 ，不是11.2啊，下面就弹框
015B5563 | 84C0 | test al,al |
015B5565 | 75 2D | jne radstudio11green.15B5594 |
015B5567 | 6A 10 | push 10 |
015B5569 | 8D55 D0 | lea edx,dword ptr ss:[ebp-30] |
015B556C | 8B45 F4 | mov eax,dword ptr ss:[ebp-C] |
015B556F | E8 E4B1EAFF | call radstudio11green.1460758 |
015B5574 | 8B45 D0 | mov eax,dword ptr ss:[ebp-30] |
015B5577 | E8 6C57D7FF | call <radstudio11green.sub_132ACE8 |
015B557C | 8BC8 | mov ecx,eax |
015B557E | BA D4815B01 | mov edx,radstudio11green.15B81D4 | 15B81D4:L"当前路径不是RAD Studio路径，需要将本程序放在RAD Studio的根目录"
015B5583 | A1 E8DE5C01 | mov eax,dword ptr ds:[15CDEE8] |
015B5588 | 8B00 | mov eax,dword ptr ds:[eax] |
015B558A | E8 7D15F6FF | call <radstudio11green.sub_1516B0C |
015B558F | E9 C3290000 | jmp radstudio11green.15B7F57 |
015B5594 | 8B45 F4 | mov eax,dword ptr ss:[ebp-C] |
015B5597 | 8B80 28050000 | mov eax,dword ptr ds:[eax+528] |
015B559D | BA 5C825B01 | mov edx,radstudio11green.15B825C | 15B825C:L"28.0.46141.937"
015B55A2 | E8 DD5AD7FF | call <radstudio11green.sub_132B084 |
015B55A7 | 73 2D | jae radstudio11green.15B55D6 | => 这里修改第三处强行跳过
015B55A9 | 6A 40 | push 40 |
015B55AB | 8D55 CC | lea edx,dword ptr ss:[ebp-34] |
015B55AE | 8B45 F4 | mov eax,dword ptr ss:[ebp-C] |
015B55B1 | E8 A2B1EAFF | call radstudio11green.1460758 |
015B55B6 | 8B45 CC | mov eax,dword ptr ss:[ebp-34] |
015B55B9 | E8 2A57D7FF | call <radstudio11green.sub_132ACE8 |
015B55BE | 8BC8 | mov ecx,eax |
015B55C0 | BA 7C825B01 | mov edx,<radstudio11green.sub_15B8 | 15B827C:L"绿化程序只适合RAD Studio 11.2！"
015B55C5 | A1 E8DE5C01 | mov eax,dword ptr ds:[15CDEE8] |
015B55CA | 8B00 | mov eax,dword ptr ds:[eax] |
015B55CC | E8 3B15F6FF | call <radstudio11green.sub_1516B0C |
015B55D1 | E9 81290000 | jmp radstudio11green.15B7F57 |
015B55D6 | 8B45 F4 | mov eax,dword ptr ss:[ebp-C] |
015B55D9 | 8B90 20050000 | mov edx,dword ptr ds:[eax+520] |
015B55DF | 8D45 C8 | lea eax,dword ptr ss:[ebp-38] |
015B55E2 | B9 B8825B01 | mov ecx,radstudio11green.15B82B8 | 15B82B8:L"\\Microsoft.NET\\Framework\\v4.0.30319\\regasm.exe"
image.png
都改完之后，观赏通关画面。
下一篇：玩玩破解——小白实战4，冰火两重天