程序安装后直接用cracked.exe替换掉quickbfc.exe即可成为注册版。如果想修改注册名,直接编辑注册.reg
修改”user”=”obaby” 后的值,然后重新导入即可。猛击此处下载程序!
部分关键代码以及注释,感兴趣的可以自己研究下:
004FCB4C |. E8 1FB5F8FF call 00488070
004FCB51 |. BA 88CE4F00 mov edx, 004FCE88 ; ASCII "Ghost Application"
004FCB56 |. E8 71B4F8FF call 00487FCC
004FCB5B |> 8B57 04 mov edx, dword ptr [edi+4]
004FCB5E |. 8B07 mov eax, dword ptr [edi]
004FCB60 |. E8 27ECFFFF call 004FB78C ; 关键call
004FCB65 |. 84C0 test al, al
004FCB67 74 20 je short 004FCB89 ; 关键跳转,修改此处是达不到破解效果的。
004FCB69 |. 8B83 D8030000 mov eax, dword ptr [ebx+3D8]
004FCB6F |. 8B80 50020000 mov eax, dword ptr [eax+250]
004FCB75 |. BA 02000000 mov edx, 2
004FCB7A |. E8 F1B4F8FF call 00488070
004FCB7F |. BA A4CE4F00 mov edx, 004FCEA4 ; ASCII "Registered Version"
004FCB84 |. E8 43B4F8FF call 00487FCC
跟入关键call后的代码:
004FB78C /$ 55 push ebp
004FB78D |. 8BEC mov ebp, esp
004FB78F |. 33C9 xor ecx, ecx
004FB791 |. 51 push ecx
004FB792 |. 51 push ecx
004FB793 |. 51 push ecx
004FB794 |. 51 push ecx
004FB795 |. 53 push ebx
004FB796 |. 56 push esi
004FB797 |. 57 push edi
004FB798 |. 8955 FC mov dword ptr [ebp-4], edx
004FB79B |. 8B45 FC mov eax, dword ptr [ebp-4]
004FB79E |. E8 759DF0FF call 00405518
004FB7A3 |. 33C0 xor eax, eax
004FB7A5 |. 55 push ebp
004FB7A6 |. 68 18B84F00 push 004FB818
004FB7AB |. 64:FF30 push dword ptr fs:[eax]
004FB7AE |. 64:8920 mov dword ptr fs:[eax], esp
004FB7B1 |. 33DB xor ebx, ebx
004FB7B3 |. BE 90F64800 mov esi, 0048F690 ; ASCII "2ce78c0a5aaf440ace43c74773b98d6d04d0298c41e427e32980b94faf0be564562a865b05444575a88d6d8d36ca7138bad5e6c1c7bd8d59e4300d3b9c9a5823766b1c393e9c7cc19fde2bc0c060da9b4e4c8040a042856d18fe1f6b2fbdd1dced5ab2648267e95105985a16e37d6ef964901a8094dfe"...
004FB7B8 |. 8D45 F8 lea eax, dword ptr [ebp-8]
004FB7BB |. E8 D898F0FF call 00405098
004FB7C0 |. 8D4D F4 lea ecx, dword ptr [ebp-C]
004FB7C3 |. 8B55 FC mov edx, dword ptr [ebp-4]
004FB7C6 |. B8 03010000 mov eax, 103
004FB7CB |. E8 3013F8FF call 0047CB00
004FB7D0 |. 33FF xor edi, edi
004FB7D2 |> 8D45 F0 /lea eax, dword ptr [ebp-10]
004FB7D5 |. 8BD7 |mov edx, edi
004FB7D7 |. 03D2 |add edx, edx
004FB7D9 |. 03D2 |add edx, edx
004FB7DB |. 8D14D6 |lea edx, dword ptr [esi+edx*8]
004FB7DE |. B9 20000000 |mov ecx, 20
004FB7E3 |. E8 209BF0FF |call 00405308
004FB7E8 |. 8B45 F0 |mov eax, dword ptr [ebp-10]
004FB7EB |. 8B55 F4 |mov edx, dword ptr [ebp-C]
004FB7EE |. E8 CD9CF0FF |call 004054C0
004FB7F3 |. 75 02 |jnz short 004FB7F7
004FB7F5 |. B3 01 |mov bl, 1
004FB7F7 |> 47 |inc edi
004FB7F8 |. 83FF 64 |cmp edi, 64
004FB7FB |.^ 75 D5 \jnz short 004FB7D2
004FB7FD |. 33C0 xor eax, eax
004FB7FF |. 5A pop edx
004FB800 |. 59 pop ecx
004FB801 |. 59 pop ecx
004FB802 |. 64:8910 mov dword ptr fs:[eax], edx
004FB805 |. 68 1FB84F00 push 004FB81F
004FB80A |> 8D45 F0 lea eax, dword ptr [ebp-10]
004FB80D |. BA 04000000 mov edx, 4
004FB812 |. E8 A598F0FF call 004050BC
004FB817 \. C3 retn
004FB818 .^ E9 2F90F0FF jmp 0040484C
004FB81D .^ EB EB jmp short 004FB80A
004FB81F 8BC3 mov eax, ebx ; 修改此处al值即可。
004FB821 5F pop edi
004FB822 5E pop esi
004FB823 5B pop ebx
004FB824 . 8BE5 mov esp, ebp
004FB826 . 5D pop ebp
004FB827 . C3 retn