破解名稱：WinRescure 98 3.07
軟體說明：系統恢復，可以搶救當機前工作的記錄。
工 具：TRW2000 1.23
軟體限制：未註冊版本執行時有10個數字倒記時，等的心煩。註冊形式是填入固定的程式碼，沒有使用者名稱。
破解過程：用trw載入程式，……（此處省去N字），跑到這裡：
....
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004681E5(C)
|
:00468254 8B00
mov eax, dword ptr [eax]
:00468256 33D2
xor edx, edx
:00468258 E85F47FCFF call 0042C9BC
:0046825D A120384800 mov eax,
dword ptr [00483820]
:00468262 E8C160FCFF call 0042E328
:00468267 8D55F4
lea edx, dword ptr [ebp-0C]
:0046826A 8B83F4010000 mov eax, dword
ptr [ebx+000001F4]
:00468270 E8BF82FBFF call 00420534
:00468275 837DF400 cmp
dword ptr [ebp-0C], 00000000
:00468279 7462
je 004682DD
:0046827B 8D55F4
lea edx, dword ptr [ebp-0C]
:0046827E 8B83F4010000 mov eax, dword
ptr [ebx+000001F4]
:00468284 E8AB82FBFF call 00420534
:00468289 8B55F4
mov edx, dword ptr [ebp-0C]
* Possible StringData Ref from Code Obj ->"SvetCHRISTA"
<===註冊碼 ^_^
|
:0046828C B870834600 mov eax,
00468370
:00468291 E81EBDF9FF call 00403FB4
<===下EDX見假的註冊碼，下EAX見真的註冊碼
:00468296 85C0
test eax, eax
:00468298 742D
je 004682C7 <===比較註冊碼，不等就跳到失敗處
:0046829A 33D2
xor edx, edx
:0046829C 8B83F4010000 mov eax, dword
ptr [ebx+000001F4]
:004682A2 E8BD82FBFF call 00420564
:004682A7 A1A42A4800 mov eax,
dword ptr [00482AA4]
:004682AC 8B00
mov eax, dword ptr [eax]
:004682AE 8B80F0010000 mov eax, dword
ptr [eax+000001F0]
:004682B4 C7400C64000000 mov [eax+0C], 00000064
* Possible StringData Ref from Code Obj ->"Registration Key Accepted <===註冊成功資訊
Thank "
->"you for registering."
|
:004682BB B884834600 mov eax,
00468384
:004682C0 E89751FDFF call 0043D45C
:004682C5 EB16
jmp 004682DD
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468298(C)
|
* Possible StringData Ref from Code Obj ->"WARNING - Incorrect Key Entered
<===註冊失敗資訊
WinRescue "
->"98 may be
used without entering "
->"a Key
WinRescue 98 Terminating."
........
整理：註冊碼為SvetCHRISTA（注意大小寫），或者修改85C0742D為85C0752D。