Delphi 11.2 绿化程序强日记：

破解资源 2024/12/25 佚名

3 2 1

故事起因：法王姥爷要在VMWare 里测试安装绿色版 Delphi 11.2
把下载到的基础包7z文件解出来之后、绿化文件和注册文件解出来之后：
运行这个绿色配置文件时，就出这个东西了。

image.png

帮助中这样说的

image.png

无论你目录是 RAD Studio 还是 RADStudio(没空格) ，还是11.1 死活都报这个错。
就算你启用Process Monitor 监视，右面也显示 Success ,照报无误！
难道我们非得下载原来的 6.xxG 的ISO 就此重头做起吗？
请来x64dbg吧，待我们强日主程序，我的电脑，咱做主，岂容你放肆！

image.png

来到Alt+E  窗口，搜索下message
F2下好断点，顺势按Ctrl+F8 直接跑起来
待弹框出现，右下角堆栈区，
连按Ctrl+Shift+↓ 来到最下面第一次见到主程序的初始地方
此处就是开始点
打个注释加个记号，或按个F2
015B54FE | B9 C8815B01          | mov ecx,radstudio11green.15B81C8 | 15B81C8:L"\\bin"
015B5503 | E8 445AD7FF          | call <radstudio11green.sub_132AF4C |
015B5508 | 8B45 DC             | mov eax,dword ptr ss:[ebp-24]    |
015B550B | B2 01                | mov dl,1                         |
015B550D | E8 8E12D9FF          | call <radstudio11green.sub_13467A0 | ==>这里进入修改返回值al=1
015B5512 | 84C0                | test al,al                      |
015B5514 | 75 2D                | jne radstudio11green.15B5543    |
015B5516 | 6A 10                | push 10                         |
015B5518 | 8D55 D8             | lea edx,dword ptr ss:[ebp-28]    |
015B551B | 8B45 F4             | mov eax,dword ptr ss:[ebp-C]    |
015B551E | E8 35B2EAFF          | call radstudio11green.1460758    |
015B5523 | 8B45 D8             | mov eax,dword ptr ss:[ebp-28]    |
015B5526 | E8 BD57D7FF          | call <radstudio11green.sub_132ACE8 |
015B552B | 8BC8                | mov ecx,eax                      |
015B552D | BA D4815B01          | mov edx,radstudio11green.15B81D4 | 15B81D4:L"当前路径不是RAD Studio路径，需要将本程序放在RAD Studio的根目录"
015B5532 | A1 E8DE5C01          | mov eax,dword ptr ds:[15CDEE8]    |
015B5537 | 8B00                | mov eax,dword ptr ds:[eax]       |
015B5539 | E8 CE15F6FF          | call <radstudio11green.sub_1516B0C |
015B553E | E9 142A0000          | jmp radstudio11green.15B7F57    |
015B5543 | 8B45 F4             | mov eax,dword ptr ss:[ebp-C]    |
015B5546 | 8B90 10050000       | mov edx,dword ptr ds:[eax+510]    |
015B554C | 8D45 D4             | lea eax,dword ptr ss:[ebp-2C]    |
015B554F | B9 34825B01          | mov ecx,<radstudio11green.sub_15B8 | 15B8234:L"\\bin\\bds.exe"
015B5554 | E8 F359D7FF          | call <radstudio11green.sub_132AF4C |
015B5559 | 8B45 D4             | mov eax,dword ptr ss:[ebp-2C]    |
015B555C | B2 01                | mov dl,1                         |
015B555E | E8 A511D9FF          | call <radstudio11green.sub_1346708 | ==>al返回1 ，不是11.2啊，下面就弹框
015B5563 | 84C0                | test al,al                      |
015B5565 | 75 2D                | jne radstudio11green.15B5594    |
015B5567 | 6A 10                | push 10                         |
015B5569 | 8D55 D0             | lea edx,dword ptr ss:[ebp-30]    |
015B556C | 8B45 F4             | mov eax,dword ptr ss:[ebp-C]    |
015B556F | E8 E4B1EAFF          | call radstudio11green.1460758    |
015B5574 | 8B45 D0             | mov eax,dword ptr ss:[ebp-30]    |
015B5577 | E8 6C57D7FF          | call <radstudio11green.sub_132ACE8 |
015B557C | 8BC8                | mov ecx,eax                      |
015B557E | BA D4815B01          | mov edx,radstudio11green.15B81D4 | 15B81D4:L"当前路径不是RAD Studio路径，需要将本程序放在RAD Studio的根目录"
015B5583 | A1 E8DE5C01          | mov eax,dword ptr ds:[15CDEE8]    |
015B5588 | 8B00                | mov eax,dword ptr ds:[eax]       |
015B558A | E8 7D15F6FF          | call <radstudio11green.sub_1516B0C |
015B558F | E9 C3290000          | jmp radstudio11green.15B7F57    |
015B5594 | 8B45 F4             | mov eax,dword ptr ss:[ebp-C]    |
015B5597 | 8B80 28050000       | mov eax,dword ptr ds:[eax+528]    |
015B559D | BA 5C825B01          | mov edx,radstudio11green.15B825C | 15B825C:L"28.0.46141.937"
015B55A2 | E8 DD5AD7FF          | call <radstudio11green.sub_132B084 |
015B55A7 | 73 2D                | jae radstudio11green.15B55D6    | => 这里修改第三处强行跳过
015B55A9 | 6A 40                | push 40                         |
015B55AB | 8D55 CC             | lea edx,dword ptr ss:[ebp-34]    |
015B55AE | 8B45 F4             | mov eax,dword ptr ss:[ebp-C]    |
015B55B1 | E8 A2B1EAFF          | call radstudio11green.1460758    |
015B55B6 | 8B45 CC             | mov eax,dword ptr ss:[ebp-34]    |
015B55B9 | E8 2A57D7FF          | call <radstudio11green.sub_132ACE8 |
015B55BE | 8BC8                | mov ecx,eax                      |
015B55C0 | BA 7C825B01          | mov edx,<radstudio11green.sub_15B8 | 15B827C:L"绿化程序只适合RAD Studio 11.2！"
015B55C5 | A1 E8DE5C01          | mov eax,dword ptr ds:[15CDEE8]    |
015B55CA | 8B00                | mov eax,dword ptr ds:[eax]       |
015B55CC | E8 3B15F6FF          | call <radstudio11green.sub_1516B0C |
015B55D1 | E9 81290000          | jmp radstudio11green.15B7F57    |
015B55D6 | 8B45 F4             | mov eax,dword ptr ss:[ebp-C]    |
015B55D9 | 8B90 20050000       | mov edx,dword ptr ds:[eax+520]    |
015B55DF | 8D45 C8             | lea eax,dword ptr ss:[ebp-38]    |
015B55E2 | B9 B8825B01          | mov ecx,radstudio11green.15B82B8 | 15B82B8:L"\\Microsoft.NET\\Framework\\v4.0.30319\\regasm.exe"