|
[求助]请把这个壳脱去,谢谢!
这个文件很有意思,一看就知很关键,用户名,注册码,试用时间全有了。 TPF0TProgramSettings UserNamec1ikmRegistrationCodeAXMQX-RMMMJ-DBHHF-WIHTVInstallDate 蹹SkinNOSkinCutomColorclLime RunCountsdShowDonateDialogMinimizeAtStartUpDisplayMouseCursorAutoCopyToClipboardPreviewInEditorDelayBeforeScrollAudioNotification DelayBeforeCapture MouseWheelZoomAutoCloseEditor RemindSave NotRemindWhenCloseTab ConfirmOverwrite ShowCaptureButtonsShowFullPathAllowSelDragDrop AltDragModeDimSelection ShowHandles HandlesColorclWhiteHandlesBKColorclWhiteMinWhenOpenFolderKeepRecentFiles EditorBackgroundColor热? EditorChessBoardCloseButtonOnly AutoPrintAutoOrientation LastMainX LastMainY? LastDeskWidth€LastDeskHeight8lastX lastY lastWidth lastHeight lastScreenWidth lastScreenHeight Maximized NewImageSaveFormat.pngJPEGQualityZJPEGSubsampling PNG16M PNGCompression PNGFilter GIFQualityTIFF16MBMP16MEmailFormatJPEGEmailQualityEmailSubSampling GIFEmailQualityPNGEmail16M CaptureDestination HotkeyCtrl1HotkeyCode1,HotkeyCtrl2HotkeyCode2,HotkeyCtrl3HotkeyCode3,HotkeyCtrl4HotkeyCode4,HotkeyCtrl5 HotkeyCode5,HotkeyCtrl6HotkeyCode6,HotkeyCtrl7 HotkeyCode7 HotkeyCtrl8 HotkeyCode8 HotkeyCtrl9 HotkeyCode9 HotkeyCtrl10HotkeyCode10,HotkeyCtrl11 HotkeyCode11 HotkeyCtrl12 HotkeyCode12 HotkeyCtrl13 HotkeyCode13 HotkeyCtrl14 HotkeyCode14 SelectMode Print_Top,Print_Bottem, Print_Left,Print_Right,Print_NewTop,Print_NewBottem, Print_NewLeft,Print_NewRight,Print_PositionPrint_GammaCorrection?Print_CustomedWidthpPrint_CustomedHeight? Print_Size Print_NewSize Print_Unit Print_NewUnit Print_OrientationPrint_AspectRatio Print_DividedbyScreenSize Print_CurrentPageOnlyPrint_UserNamePrint_PageNumberPrint_PageDatePrint_PageTimePrint_HeaderAlignPrint_HeaderBold ShowMinizeTipTipWinMaximizedTipWinViewY FilenameTemplate$Y-$M-$D_$H$N$S AutoSerialAutoResetOnNewDayAutoSaveAutoOutputFormatAutoOutputOpenAutoJPEGQualityZAutoSubSampling AutoGIFColor AutoPNG16M AutoTIFF16M AutoBMP16M AutoToExEAutoToClipboard ShowMagnifier IncludeFileOpenInclude2FileOpen IncludeFixed IncludeRecorder IncludeMagnifier IncludePickerIncludeRulerIncludeCrosshairIncludeRepeatLast FixedSizeW? FixedSizeH, MagnifierSize MagnifierShapeMagnifierRatioSmoothMagnifier MagnifierCrossHairMagnifierHairType MagnifierHairThin MagnifierPixelMoveMagnifierHalfHeightMagnifierBorderNegativeMagnifier SelectMagAreaShowPrintSetup UseScreenDPI DPI? DPI2? LastBrightness LastContrast LastGamma?BCGKeepSettings LastHue LastSaturation LastLightness HSLKeepSettings LastRed LastGreen LastBlue RGBKeepSettings DropToFullScreenViewerCaptureMultiScreensLastSelectionW LastSelectionH ExpandCanvasW ExpandCanvasH ExpandCanvasPosExpandCanvasColorclWhiteExpandCanvasUseEdgeEffects UseEffects UseDropShadow DropShadowSizeDropShadowBlurDropShadowDarkUseFrame FrameWidth FrameColorclRedUseTornEdgeTornEdgeSize TornEdgeBorderUseFadeEdgeFadeEdgeSizeFadeEdgeBorderUseWatermarkWatermarkPos WatermarkX?WatermarkY?WatermarkTransWaterShadow UseCaptionNotAskForInputCaptionDateTime CaptionComputerNameCaptionUsernameCaptionBorderColorclRedCaptionBorderSize CaptionSp CaptionBottomCaptionBKColorclWhiteCaptionFontNameArialCaptionFontSizeCaptionFontStylefsBold CaptionFontColorclBlueCaptionAlign CaptionKeepItExProgramsStringText:Paint:Program_LocationIs:C:\windows\system32\mspaint.exe ExProgramNo ZoomMenuNo MSOffice ConvertTo256RulerTopMost RulerColor? RulerOpacityd RulerHori RulerX RulerY RulerW?RulerH,RulerDTSize RulerUnit RulerMagnifier RulerPPI? TipsOnWindows TipsOnRectangle TipsOnFreehand TipsOnCrosshair FTPPort FTPPassiveFTPSaveCopy FTPCopyURL FTPOpenURL PickerDest AutoGrayAutoPDF_PageSizeAutoPDF_Quality AutoPDF_GrayAutoPDF_PageCentered AutoPDF_Top,AutoPDF_Bottom,AutoPDF_Left, AutoPDF_Right,AutoPDF_Landscape AutoPDF_ShowPageNAutoPDF_ShowDateAutoPDF_ShowTimePDF_Andrew_PageSizePDF_Andrew_Quality PDF_Andrew_GrayPDF_Andrew_PageCentered PDF_Andrew_Top,PDF_Andrew_Bottom,PDF_Andrew_Left,PDF_Andrew_Right,PDF_Andrew_Landscape PDF_Andrew_ShowPageNPDF_Andrew_ShowDatePDF_Andrew_ShowTime ScannerID ScanDest ScanFormat ScanJpegQ ScanTiffQ ScanJpeg2QScanPDFQ ScanMPage ScanFN ScanImage ScanStartScanIncScanNumScanSkip ScanRemember ScanOrderScanZoomMode ScanOpenFolder ScanWidth ScanHeight ScanWinMax LastSharpFun LastSharpBlur LastUnSharpAmt SBKeepSettings LastOilifyAmountOilKeepSettings LastEdgeAmountEdgeKeepSettings LastFillLight LastFLHi LastFLCon LastFLSat FLKeepSettings LastZoomSize ReflectRotate ReflectDist ReflectSize2ReflectOpac2 ReflectBKclWhite ReflectSD AutoDisplayMessageAutoDisplaySaving SupportToDraw RotateBKColorclWhite RotateCropRotateAspect AutoHide BiggerButtons MagnifierHelper HideFSCWhenRecord AHWidth2AHHeightAHColor貼> AHMatchWidthAHShadow CHColorclRedCHZoomCHSize CHThin CHStyleCHMouse CHSmoothCHMagnifyMouse CHHotkeyPause JoinDirection JoinShadowJoinSN JoinResizeJoinSize JoinDistanceJoinUseTitleJoinFontNameArialJoinFontSize JoinFontStylefsBold JoinFontColorclBlack PDFShadowPDFUseTitlePDFFontNameArialPDFFontSizePDFFontStylefsBold PDFFontColorclBlack SpotlightEdge SpotlightDark?SpotlightBlur SpotlightGrayNewImageUnit NewImagePxW NewImagePxHX NewImagePageW? NewImagePageH4!NewImageDPI? NewImageColorclWhiteNotShowHotkeyConflict RecreateDesktopShortcut |
|
[求助]请把这个壳脱去,谢谢!
再有把fsc.db 放到主程序目录下就不用注册了。 0063926A . B8 90956300 mov eax,FSCaptur.00639590 ; 用户名不能为空。 0063926F . E8 8C4B0D00 call FSCaptur.0070DE00 00639274 . 8B86 04030000 mov eax,dword ptr ds:[esi+0x304] 0063927A . 8B10 mov edx,dword ptr ds:[eax] 0063927C . FF92 C0000000 call dword ptr ds:[edx+0xC0] 00639282 . 33C0 xor eax,eax 00639284 . 5A pop edx 00639285 . 59 pop ecx 00639286 . 59 pop ecx 00639287 . 64:8910 mov dword ptr fs:[eax],edx 0063928A . E9 99020000 jmp FSCaptur.00639528 0063928F > 8B55 F8 mov edx,dword ptr ss:[ebp-0x8] 00639292 . 8BC6 mov eax,esi 00639294 . E8 DFEFFFFF call FSCaptur.00638278 00639299 . 84C0 test al,al 0063929B . 0F85 4C020000 jnz FSCaptur.006394ED 这样的地方 ; goto over 006392A1 . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 006392A4 . 8BC6 mov eax,esi 006392A6 . E8 7DF0FFFF call FSCaptur.00638328 006392AB . 84C0 test al,al 006392AD . 0F85 3A020000 jnz FSCaptur.006394ED 006392B3 . 8B4D F8 mov ecx,dword ptr ss:[ebp-0x8] 006392B6 . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 006392B9 . 8BC6 mov eax,esi 006392BB . E8 60FBFFFF call FSCaptur.00638E20 006392C0 . 84C0 test al,al 006392C2 . 0F84 25020000 je FSCaptur.006394ED 006392C8 . 8B4D F8 mov ecx,dword ptr ss:[ebp-0x8] 006392CB . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 006392CE . 8BC6 mov eax,esi 006392D0 . E8 DBFBFFFF call FSCaptur.00638EB0 006392D5 . 84C0 test al,al 006392D7 . 0F84 10020000 je FSCaptur.006394ED 006392DD . 8B55 F8 mov edx,dword ptr ss:[ebp-0x8] 006392E0 . 8BC6 mov eax,esi 006392E2 . E8 59FCFFFF call FSCaptur.00638F40 006392E7 . 48 dec eax 006392E8 . 0F8C FF010000 jl FSCaptur.006394ED 006392EE . 8B55 F8 mov edx,dword ptr ss:[ebp-0x8] 006392F1 . 8BC6 mov eax,esi 006392F3 . E8 48FCFFFF call FSCaptur.00638F40 006392F8 . 8BD8 mov ebx,eax 006392FA . 83FB 01 cmp ebx,0x1 ; Switch (cases 457..1387) 006392FD . 7F 35 jg XFSCaptur.00639334 006392FF . 6A 00 push 0x0 00639301 . 8BC6 mov eax,esi 00639303 . E8 4068E2FF call FSCaptur.0045FB48 00639308 . 50 push eax 00639309 . 6A 00 push 0x0 0063930B . 8D45 D8 lea eax,dword ptr ss:[ebp-0x28] 0063930E . 50 push eax 0063930F . 33C9 xor ecx,ecx 00639311 . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 00639314 . B8 B4956300 mov eax,FSCaptur.006395B4 ; 祝贺!\r\r此程序已注册给: %1% (单用户许可)。 00639319 . E8 A2BC0C00 call FSCaptur.00704FC0 0063931E . 8B45 D8 mov eax,dword ptr ss:[ebp-0x28] 00639321 . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 00639328 . B2 02 mov dl,0x2 0063932A . E8 D14A0D00 call FSCaptur.0070DE00 0063932F . E9 66010000 jmp FSCaptur.0063949A 00639334 > 81FB 57040000 cmp ebx,0x457 0063933A . 75 35 jnz XFSCaptur.00639371 0063933C . 6A 00 push 0x0 ; Case 457 of switch 006392FA 0063933E . 8BC6 mov eax,esi 00639340 . E8 0368E2FF call FSCaptur.0045FB48 00639345 . 50 push eax 00639346 . 6A 00 push 0x0 00639348 . 8D45 D4 lea eax,dword ptr ss:[ebp-0x2C] 0063934B . 50 push eax 0063934C . 33C9 xor ecx,ecx 0063934E . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 00639351 . B8 10966300 mov eax,FSCaptur.00639610 ; 祝贺!\r\r此程序已注册给: %1% (家庭许可限 5 台计算机)。 00639356 . E8 65BC0C00 call FSCaptur.00704FC0 0063935B . 8B45 D4 mov eax,dword ptr ss:[ebp-0x2C] 0063935E . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 00639365 . B2 02 mov dl,0x2 00639367 . E8 944A0D00 call FSCaptur.0070DE00 0063936C . E9 29010000 jmp FSCaptur.0063949A 00639371 > 81FB 85130000 cmp ebx,0x1385 00639377 . 75 35 jnz XFSCaptur.006393AE 00639379 . 6A 00 push 0x0 ; Case 1385 of switch 006392FA 0063937B . 8BC6 mov eax,esi 0063937D . E8 C667E2FF call FSCaptur.0045FB48 00639382 . 50 push eax 00639383 . 6A 00 push 0x0 00639385 . 8D45 D0 lea eax,dword ptr ss:[ebp-0x30] 00639388 . 50 push eax 00639389 . 33C9 xor ecx,ecx 0063938B . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 0063938E . B8 84966300 mov eax,FSCaptur.00639684 ; 祝贺!\r\r此程序已注册给: %1% (教学许可)。 00639393 . E8 28BC0C00 call FSCaptur.00704FC0 00639398 . 8B45 D0 mov eax,dword ptr ss:[ebp-0x30] 0063939B . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 006393A2 . B2 02 mov dl,0x2 006393A4 . E8 574A0D00 call FSCaptur.0070DE00 006393A9 . E9 EC000000 jmp FSCaptur.0063949A 006393AE > 81FB 86130000 cmp ebx,0x1386 006393B4 . 75 35 jnz XFSCaptur.006393EB 006393B6 . 6A 00 push 0x0 ; Case 1386 of switch 006392FA 006393B8 . 8BC6 mov eax,esi 006393BA . E8 8967E2FF call FSCaptur.0045FB48 006393BF . 50 push eax 006393C0 . 6A 00 push 0x0 006393C2 . 8D45 CC lea eax,dword ptr ss:[ebp-0x34] 006393C5 . 50 push eax 006393C6 . 33C9 xor ecx,ecx 006393C8 . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 006393CB . B8 E4966300 mov eax,FSCaptur.006396E4 ; 祝贺!\r\r此程序已注册给: %1% (教学批量许可)。 006393D0 . E8 EBBB0C00 call FSCaptur.00704FC0 006393D5 . 8B45 CC mov eax,dword ptr ss:[ebp-0x34] 006393D8 . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 006393DF . B2 02 mov dl,0x2 006393E1 . E8 1A4A0D00 call FSCaptur.0070DE00 006393E6 . E9 AF000000 jmp FSCaptur.0063949A 006393EB > 81FB 87130000 cmp ebx,0x1387 006393F1 . 75 32 jnz XFSCaptur.00639425 006393F3 . 6A 00 push 0x0 ; Case 1387 of switch 006392FA 006393F5 . 8BC6 mov eax,esi 006393F7 . E8 4C67E2FF call FSCaptur.0045FB48 006393FC . 50 push eax 006393FD . 6A 00 push 0x0 006393FF . 8D45 C8 lea eax,dword ptr ss:[ebp-0x38] 00639402 . 50 push eax 00639403 . 33C9 xor ecx,ecx 00639405 . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 00639408 . B8 48976300 mov eax,FSCaptur.00639748 ; 祝贺!\r\r此程序已注册给: %1% (企业许可)。 0063940D . E8 AEBB0C00 call FSCaptur.00704FC0 00639412 . 8B45 C8 mov eax,dword ptr ss:[ebp-0x38] 00639415 . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 0063941C . B2 02 mov dl,0x2 0063941E . E8 DD490D00 call FSCaptur.0070DE00 00639423 . EB 75 jmp XFSCaptur.0063949A 00639425 > 81FB 88130000 cmp ebx,0x1388 0063942B . 7D 3D jge XFSCaptur.0063946A 0063942D . 6A 00 push 0x0 0063942F . 8BC6 mov eax,esi 00639431 . E8 1267E2FF call FSCaptur.0045FB48 00639436 . 50 push eax 00639437 . 6A 00 push 0x0 00639439 . 8D45 C4 lea eax,dword ptr ss:[ebp-0x3C] 0063943C . 50 push eax 0063943D . 8D55 C0 lea edx,dword ptr ss:[ebp-0x40] 00639440 . 8BC3 mov eax,ebx 00639442 . E8 6102DDFF call FSCaptur.004096A8 00639447 . 8B4D C0 mov ecx,dword ptr ss:[ebp-0x40] 0063944A . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 0063944D . B8 A8976300 mov eax,FSCaptur.006397A8 ; 祝贺!\r\r此程序已注册给: %1% (%2% 许可)。 00639452 . E8 69BB0C00 call FSCaptur.00704FC0 00639457 . 8B45 C4 mov eax,dword ptr ss:[ebp-0x3C] 0063945A . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 00639461 . B2 02 mov dl,0x2 00639463 . E8 98490D00 call FSCaptur.0070DE00 00639468 . EB 30 jmp XFSCaptur.0063949A 0063946A > 6A 00 push 0x0 0063946C . 8BC6 mov eax,esi 0063946E . E8 D566E2FF call FSCaptur.0045FB48 00639473 . 50 push eax 00639474 . 6A 00 push 0x0 00639476 . 8D45 BC lea eax,dword ptr ss:[ebp-0x44] 00639479 . 50 push eax 0063947A . 33C9 xor ecx,ecx 0063947C . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 0063947F . B8 FC976300 mov eax,FSCaptur.006397FC ; 祝贺!\r\r此程序已注册给: %1% (企业批量许可)。 00639484 . E8 37BB0C00 call FSCaptur.00704FC0 00639489 . 8B45 BC mov eax,dword ptr ss:[ebp-0x44] 0063948C . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 00639493 . B2 02 mov dl,0x2 00639495 . E8 66490D00 call FSCaptur.0070DE00 0063949A > A1 50537200 mov eax,dword ptr ds:[0x725350] 0063949F . 8B00 mov eax,dword ptr ds:[eax] 006394A1 . 8B80 40060000 mov eax,dword ptr ds:[eax+0x640] 006394A7 . 83C0 30 add eax,0x30 006394AA . 8B55 FC mov edx,dword ptr ss:[ebp-0x4] 006394AD . E8 16B4DCFF call FSCaptur.004048C8 006394B2 . A1 50537200 mov eax,dword ptr ds:[0x725350] 006394B7 . 8B00 mov eax,dword ptr ds:[eax] 006394B9 . 8B80 40060000 mov eax,dword ptr ds:[eax+0x640] 006394BF . 83C0 34 add eax,0x34 006394C2 . 8B55 F8 mov edx,dword ptr ss:[ebp-0x8] 006394C5 . E8 FEB3DCFF call FSCaptur.004048C8 006394CA . A1 50537200 mov eax,dword ptr ds:[0x725350] 006394CF . 8B00 mov eax,dword ptr ds:[eax] 006394D1 . C680 1C060000>mov byte ptr ds:[eax+0x61C],0x1 006394D8 . A1 50537200 mov eax,dword ptr ds:[0x725350] 006394DD . 8B00 mov eax,dword ptr ds:[eax] 006394DF . E8 BCFA0500 call FSCaptur.00698FA0 006394E4 . 8BC6 mov eax,esi 006394E6 . E8 995BE1FF call FSCaptur.0044F084 006394EB . EB 27 jmp XFSCaptur.00639514 006394ED > 6A 00 push 0x0 006394EF . 8BC6 mov eax,esi 006394F1 . E8 5266E2FF call FSCaptur.0045FB48 006394F6 . 50 push eax 006394F7 . 66:8B0D 84956>mov cx,word ptr ds:[0x639584] 006394FE . B2 02 mov dl,0x2 00639500 . B8 60986300 mov eax,FSCaptur.00639860 ; 无效的用户名或注册码!\r\r用户名和注册码必须同时输入在注册界面上。\r建议使用复制和粘贴的方法输入注册信息。 |
|
[求助]请把这个壳脱去,谢谢!
这个程序有个bug 一旦强行爆破,注册后,无论真假就会生成以下文件(貌似是配置和注册相关)那个启动提醒框就不再会出来了,而不论注册的对与错 c:\ProgramData\FastStone\FSC\Administrator\fsc.db c:\Users\Administrator\AppData\Local\FastStone\FSC\fsc.db c:\Users\Administrator\AppData\Roaming\FastStone\FSC\fsc.db c:\Users\All Users\FastStone\FSC\Administrator\fsc.db 生成了多份,占着地方。 |
|
安于此生 同学翻译的从零系列确实不错
看哥用PowerPro定义的强力菜单够牛吧 支持拖放运行操作,windows下的操作真就没几个动作完成不了。 连wm_command事件都能控制,别的真想不出有啥不能解决的,关键是作者的设计理念 |
|
|
|
|
|
安于此生 同学翻译的从零系列确实不错
天啊,全是强壳系列啊,我终于读懂为啥你撸下来的原因了,确实真有油水啊,看我都搀死了 |
|
|
|
|
|
安于此生 同学翻译的从零系列确实不错
我得努力 把落下的课赶上来,赶在大神前面翻译英文版的 |
|
|
|
|
|
为什么你们不写个OD插件,实现OD的大数据,及分析流程自动上传共享
死的脑细胞有人给报销,也许才可能有人去做。 |
|
[讨论]网络上为何有那么多破解软件?为何商业软件也被破解了?任何加密手段都无法防止被破解么?
IDA这东西确实很厉害,可静可动可隔山打牛 世上只要有人惦记的软件,永远都是人类间的对抗 估计国外人家有专门的组织,不象天潮啥他娘的都管 弄个航母都二手,盗版自然不提也罢,皆是法制2流导致的,服务上不去,该有的不该有的都有。 |
|
|
|
|
|
看OD的右键菜单不顺眼,求高手指教如何动手术?
还有菜单中的 Hit跟踪 是啥意思,求视频教程 启蒙下。 |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值