1.清空IE临时文件夹；
2.清空IE历史记录；
3.清空文档内容；
4.删除收藏夹网址；
5.删除IE地址栏网址；
6.恢复IE浏览器默认设置如标题、起始页、默认页以及网络设置选项中的按钮变灰；
7.还可以定义你保密的文件目录等。软件支持一些主流的浏览器如IE,Opera,TE,Netscape等，用于网吧、学校、家庭等需要禁止上网者访问色情、暴力、非法、反动等不健康内容的网络站点或需要对某些站点、文档目录进行身份权限控制的场合。
工具：W32DASM的V10版 Language2000
首先: 用Language2000监测llwebguarder.exe,发现没有加壳.(爽!这样的好软件可不多了)
然后打开w32dasm调进主程序，利用“串式查找”功能找到：" 软件注册号错误! "
反复双击，发现只有一处调用!代码如下:
:00487840 8D45E0 lea eax, dword ptr [ebp-20]
:00487843 E8D8C4FFFF call 00483D20
:00487848 8B4DE0 mov ecx, dword ptr [ebp-20]
:0048784B 8BC1 mov eax, ecx
:0048784D 99 cdq
:0048784E 3B55FC cmp edx, dword ptr [ebp-04]
:00487851 0F85B0000000 jne 00487907 ---------跳了就game over
:00487857 3B45F8 cmp eax, dword ptr [ebp-08]
:0048785A 0F85A7000000 jne 00487907 ---------跳了就game over
:00487860 8B8378030000 mov eax, dword ptr [ebx+00000378]
:00487866 B201 mov dl, 01
:00487868 8B08 mov ecx, dword ptr [eax]
:0048786A FF5164 call [ecx+64]
:0048786D 8B8318040000 mov eax, dword ptr [ebx+00000418]
* Possible StringData Ref from Code Obj ->"已注册版本"
|
:00487873 BA98794800 mov edx, 00487998
:00487878 E84F7BFBFF call 0043F3CC
:0048787D 8B8320040000 mov eax, dword ptr [ebx+00000420]
:00487883 33D2 xor edx, edx
:00487885 8B08 mov ecx, dword ptr [eax]
:00487887 FF5164 call [ecx+64]
:0048788A 6A00 push 00000000
:0048788C 668B0DA4794800 mov cx, word ptr [004879A4]
:00487893 B202 mov dl, 02
* Possible StringData Ref from Code Obj ->"软件登记注册成功"
|
:00487895 B8B0794800 mov eax, 004879B0
:0048789A E8D90EFBFF call 00438778
:0048789F B201 mov dl, 01
:004878A1 A1400E4800 mov eax, dword ptr [00480E40]
:004878A6 E89596FFFF call 00480F40
:004878AB 8945F0 mov dword ptr [ebp-10], eax
:004878AE 33C0 xor eax, eax
:004878B0 55 push ebp
:004878B1 6800794800 push 00487900
:004878B6 64FF30 push dword ptr fs:[eax]
:004878B9 648920 mov dword ptr fs:[eax], esp
:004878BC BA01000080 mov edx, 80000001
:004878C1 8B45F0 mov eax, dword ptr [ebp-10]
:004878C4 E81797FFFF call 00480FE0
:004878C9 B101 mov cl, 01
* Possible StringData Ref from Code Obj ->"\Software\lanlinksoft\config"
|
:004878CB BACC794800 mov edx, 004879CC
:004878D0 8B45F0 mov eax, dword ptr [ebp-10]
:004878D3 E84C98FFFF call 00481124
:004878D8 B9F4794800 mov ecx, 004879F4
* Possible StringData Ref from Code Obj ->"info"
|
:004878DD BA007A4800 mov edx, 00487A00
:004878E2 8B45F0 mov eax, dword ptr [ebp-10]
:004878E5 E8D69BFFFF call 004814C0
:004878EA 33C0 xor eax, eax
:004878EC 5A pop edx
:004878ED 59 pop ecx
:004878EE 59 pop ecx
:004878EF 648910 mov dword ptr fs:[eax], edx
:004878F2 681C794800 push 0048791C
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00487905(U)
|
:004878F7 8B45F0 mov eax, dword ptr [ebp-10]
:004878FA E825C1F7FF call 00403A24
:004878FF C3 ret
:00487900 E9B3C8F7FF jmp 004041B8
:00487905 EBF0 jmp 004878F7
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00487851(C), :0048785A(C) ---------是这两个地方跳过来的
|
:00487907 6A00 push 00000000
:00487909 668B0DA4794800 mov cx, word ptr [004879A4]
:00487910 B201 mov dl, 01
* Possible StringData Ref from Code Obj ->"软件注册号错误" ----------往上看
|
:00487912 B8107A4800 mov eax, 00487A10
:00487917 E85C0EFBFF call 00438778
现在开始破解,把上面两处 jne 00487907 的 Jne 改为 JE 就好了 ,就是把0F85改为0F84.
这样修改的意义是: 原来是注册码错误时,就跳到注册失败
现在是注册码正确时,就跳到注册失败(也就是说注册码错误时,就注册成功)
新手作品，请多指教！