|
|
|
【原创】破解Quick Screen Recorder8 c: H0 }* ~% {, u; X
【破解作者】 yijun3 S& `1 l' n4 m" {
【作者邮箱】 [email protected]
7 W# k8 K: V4 \& K2 i& w【使用工具】 OD,PEID
9 ~: r5 F8 w9 k# ~$ \# u# x【破解平台】 WinXP3 ?5 v& K3 \* S
【软件名称】 Quick Screen Recorder4 J$ t$ J' g) N' A3 {6 s
【下载地址】 天空 V3 \6 L6 S9 U4 W. h0 P
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. / c( }) [6 @% C8 L! |
【软件大小】 540K. S6 k5 G# m6 M% v! a5 F2 j$ N$ W2 W
【加壳方式】 无
/ R H5 H& d* q7 a【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
* M) D }, s$ z+ a' ?--------------------------------------------------------------------------------
: ~+ Z! M, E1 I4 U3 r【破解内容】
: @. `' v% P' q$ A- D) k) f PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
- x' I; L* Y) z! T00404C69 55 push ebp //在此下断
3 \2 Q; a @+ O! _: W00404C6A 56 push esi$ M' _% t4 V& _) V- W$ c
00404C6B 57 push edi+ {* u* @2 a1 O# [8 n
00404C6C 8BE9 mov ebp,ecx5 F# q- c/ i& A! R# @8 _
00404C6E 6A 01 push 1/ N* |1 J& M* F! L# }
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名8 R( r+ |1 }2 K
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]( c0 G2 P, o0 P) t, w
00404C78 8BCF mov ecx,edi
& p" p0 ]6 p. X5 T; o1 i% v00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
o) A" _5 G5 @ P- l00404C7F 8BCF mov ecx,edi
% f2 c$ D) D9 V( E0 A00404C81 E8 A73E0200 call qsr.00428B2D
6 o: L9 i8 q: D/ F00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
8 \: I$ ^" Y) @ p0 v+ R' z k7 _00404C89 8BCE mov ecx,esi
& h) n8 N! Y3 ^4 J. l* C; K- Z' l00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX; ]3 r4 g ]: M& T5 {
00404C90 8BCE mov ecx,esi* U0 W" \% R& j6 t) I# i" U
00404C92 E8 963E0200 call qsr.00428B2D) t+ S. ?7 a2 V
00404C97 8B06 mov eax,dword ptr ds:[esi]
# j2 G( A4 ^( Q- w, p! y2 f; r$ y, @00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],25 O7 ?! _* C$ J! t r& A A
00404C9D 7D 26 jge short qsr.00404CC5
3 J, W& v3 p- O' F' ^& `& H" C00404C9F 6A 40 push 40
3 l1 a* I+ a, V: T, i/ M00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"" z) f8 p# B4 ~0 j7 F7 m1 d
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name." Y2 i+ R+ l+ _
00404CAB 8BCD mov ecx,ebp& W7 {0 D( M; j5 S* W. j
00404CAD E8 C3840200 call qsr.0042D175
1 X9 g. D+ |# o, o" q2 b4 h. Z00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]( w0 ? S$ n. m* Z# `
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
6 l2 K# [2 a) ^& F# Z) A+ Y: w; P00404CBD 5F pop edi4 p8 C1 V n& P* [: @2 G" i
00404CBE 5E pop esi
4 t8 }2 k& D' r$ e* ^0 d& {00404CBF 5D pop ebp
# G9 g' n3 ~2 h3 G+ n" G7 f00404CC0 5B pop ebx
% V! Y0 R2 B6 y. I00404CC1 83C4 18 add esp,18$ W3 N- M& Q D/ U0 R. B2 B) c- d/ R
00404CC4 C3 retn
+ \+ a! T5 j) a7 ]" @00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]# b: i1 Y3 K$ ^" M
00404CC8 84C0 test al,al1 G( V! ?" c. I4 A" k/ z4 C
00404CCA 0F85 1C010000 jnz qsr.00404DEC
/ r# {& j8 Z% {: W$ g' b: M5 U00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
! G- e/ r+ z: ~# R# m e00404CD4 E8 87E3FFFF call qsr.00403060
3 l7 V1 H: b/ V00404CD9 51 push ecx5 }/ ]- P. Q- r r, d, z
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
4 z# [# P- i; J, ~: j00404CE2 8BCC mov ecx,esp3 O" p/ G- h" R
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
) L( B8 V9 M- V0 x2 Z0 \% S00404CE8 56 push esi/ _ D8 e" L6 \5 Q4 v& X5 \
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0! a' ]" s) B( v/ D' e
00404CEE 51 push ecx
% R2 b3 W# z! V8 K; s4 r( a00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
& p& @- G* s, B( O3 _/ U$ P* ?00404CF4 8BCC mov ecx,esp
+ S" z5 b8 a* _3 g! w5 {! s/ S, g4 L$ u00404CF6 896424 20 mov dword ptr ss:[esp+20],esp# J& T( w5 w' |: q4 U2 Y
00404CFA 57 push edi
9 `) H$ K/ q& X5 h3 n _00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是08 l) T; c/ i9 G% O" }
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ t! K% `& E$ b$ K$ T. \% p
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0 z3 a9 L) w& t6 D0 n! ^: T5 H
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
+ u0 A6 n+ c# _/ c! b00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~$ d6 l; k8 G0 V2 |
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~% q+ r' u, A; ^0 K5 M3 ~2 p$ h
00404D12 6A 40 push 409 j, k- q6 T, B- Z7 A; Q! n
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
4 W, j$ Q. |7 ?2 N, h00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."! t3 a" S# ?; g3 M7 S
00404D1E 8BCD mov ecx,ebp
! o" }0 C, y" ]6 ~- B' }% V3 W00404D20 E8 50840200 call qsr.0042D175
- |& Z/ j" [# N( {: s u9 B00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ m; ^, B: y) M" Z
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1( |2 l7 b/ P9 @
00404D31 E8 5AE3FFFF call qsr.00403090
1 l4 Z. Q7 Y5 _% ]$ t" l! L) {% k00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
( j- _# x; ?" O: o00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx( j0 x- q' Z3 A: C7 z
00404D41 5F pop edi
7 Y: Y2 L: {) P00404D42 5E pop esi7 g; ~% H; h- u/ x7 a
00404D43 5D pop ebp
& I& ]) f6 t: T2 E00404D44 5B pop ebx( o% I0 a+ k- d' r7 b; _# @% Q: v. _
00404D45 83C4 18 add esp,18
* | i6 q% P8 o8 f* Q0 o00404D48 C3 retn
. e# K& L3 p) k5 n, i L*********************************************************************************************************************************************************
' [6 D1 U5 v, A6 g" m跟进00404D09处CALL来到：! A% l) T ~# g! Z( }7 t+ Z2 W& ^
004030A0 6A FF push -1 //一路F8下去~~~~
! r6 H4 R! h1 E004030A2 68 C88F4400 push qsr.00448FC8
7 K+ M3 v4 t1 }004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]& P! K4 |" A& Q; S+ A, {" R
004030AD 50 push eax
* S/ x1 n2 @& d2 K" E* ^: ]004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
3 r( q! A& z3 n' h004030B5 83EC 24 sub esp,24
6 b/ C7 ?" o0 Q004030B8 53 push ebx0 w. \: A* a4 e6 H! V y' D
004030B9 55 push ebp
1 o8 q/ K; R, I9 v* E. y004030BA 56 push esi
1 A# a _" y$ m+ L: `0 N004030BB 57 push edi5 Q- ^9 k! }5 P+ G6 _) l' X; T
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"& v5 q7 {: P9 w/ |
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24] V9 ~7 d) F8 d6 b( l
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1. G8 r& M7 l* i' m5 x2 i
004030CD E8 27C40200 call qsr.0042F4F99 P( W) Y+ {/ [: I
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]9 o1 @8 R; T& b( \+ @9 Y% C/ M/ N
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax' A! b2 }- c2 c
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]: D: {) v# E. Y' J3 K9 @. P5 H$ R( r
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
! F) e& G! g5 E# V6 F1 `004030E4 E8 905A0200 call qsr.00428B791 H1 m8 ?, x+ K; \+ B0 T! b
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# j2 I& H* E! i/ x8 ^% j004030ED E8 3B5A0200 call qsr.00428B2D
" Z) Q/ F8 `/ ~1 s% |0 ^- a004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]; a( e2 C* T( q. \5 a
004030F6 E8 7E5A0200 call qsr.00428B79, C; T7 F; M S5 B" l5 B
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
( M8 b: F. E6 k% J. k4 i& P2 d- G z004030FF E8 295A0200 call qsr.00428B2D
& K ?$ r" L/ t+ z00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
; O: q+ z) x5 K' y00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]$ E6 }! Z; \' L0 C# U d# l& n
0040310B 83F8 02 cmp eax,2
* [& L8 n2 w+ `0 U/ l5 R0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳 t1 n% q* T' Z3 \: n6 [
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]3 {$ k0 a5 O) w1 S2 L
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18, }4 ?3 x4 E3 t9 l& [ d
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳7 k6 ^5 w5 l2 ^2 ^! R
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
& X' v) D, W- w. e00403126 6A 01 push 1$ o, H" A9 E* N
00403128 50 push eax
7 R2 O% d: h8 E0 ^$ w00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% b$ C+ u4 T4 A& K, ` R0040312D E8 C4550200 call qsr.004286F6/ V' }( h* d9 q2 Y& a1 w5 Y
00403132 8B00 mov eax,dword ptr ds:[eax]
# I6 r3 p, ]8 S/ l& R( c$ b& i) W2 y00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]# \6 V1 {/ z1 ?$ }; T' V# Y
00403138 50 push eax/ k3 M0 b" B1 Z3 x2 {+ W1 V, ^
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
0 y8 e8 q+ T) A \! x B; v0040313E E8 4D560200 call qsr.00428790
' T( v5 [5 p; O# v- b00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]. {$ F4 d5 i# Q- o
00403147 8BF0 mov esi,eax
1 O+ R; A5 F9 Q3 l% _. b00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3- K/ H5 z0 j# p' N- }
0040314E E8 38C30200 call qsr.0042F48B
& [$ [$ W: L) S/ j. Y- `00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
' _+ x, n! D* X6 s) Y ~& @3 V00403156 B9 3E000000 mov ecx,3E6 \2 e( Y7 ^( ]( @
0040315B 99 cdq
: z* g9 U( q# d4 x' F9 z7 a0040315C F7F9 idiv ecx' J/ z. u \! Y
0040315E 6A 01 push 1* U1 m( ]. u/ i' P9 D
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]) S) r* V! @/ \- ^$ V: |4 x/ t2 k
00403164 8BF2 mov esi,edx' A6 I$ k: Q m. A9 x5 E
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
9 }- k K% u8 A0040316A 52 push edx
( H; x& @' z. C1 D9 s0040316B E8 0A550200 call qsr.0042867A: L- H. w7 ? j$ ^% C! r0 w
00403170 8B00 mov eax,dword ptr ds:[eax]
+ \+ n& U3 r" ^' a+ f c00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ v/ V q1 l, H3 `. H/ U
00403176 50 push eax
$ q5 J$ H4 P$ \5 @4 E00403177 C64424 40 05 mov byte ptr ss:[esp+40],5$ Y- u5 b7 b R, O3 z T- y
0040317C E8 0F560200 call qsr.004287904 w& C; Q9 l& Q2 S* O
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 i5 p" t t8 a4 Q+ M6 B! D00403185 8BF8 mov edi,eax, j& h- j8 j' [2 ^0 h+ u0 y( a. X
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],32 d4 h4 K1 @2 v. E2 g# e
0040318C E8 FAC20200 call qsr.0042F48B
$ x% D! t+ y: P% q9 U; X00403191 8D47 0A lea eax,dword ptr ds:[edi+A]) a0 r! L C+ j8 R5 D
00403194 B9 3E000000 mov ecx,3E9 D; l- N' S4 a& Z2 f6 V, q8 t$ @
00403199 99 cdq1 o! p; @/ F; h; |3 S
0040319A F7F9 idiv ecx+ r/ j* u0 a, ?: {3 q
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]+ y* [+ w: p# x D8 O/ ~) J
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
6 K. u" T- h6 q% D004031A5 8BCA mov ecx,edx
6 X: u# @& }5 n; z; d) _/ V004031A7 894424 24 mov dword ptr ss:[esp+24],eax
}, J# R! L9 ~7 h004031AB 894424 1C mov dword ptr ss:[esp+1C],eax# u5 W7 c& M' _4 h) }7 F
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
, i* V4 S& F. s004031B3 894424 14 mov dword ptr ss:[esp+14],eax
6 W8 W. T. t" u; u1 `004031B7 894424 10 mov dword ptr ss:[esp+10],eax
; \- m# `, c: m/ C004031BB 8BC1 mov eax,ecx
! |2 w7 ]0 d5 ^* g004031BD BF 0A000000 mov edi,0A Q9 g2 o: z0 c# a! P! u" n/ X
004031C2 99 cdq
8 i/ U' J ^: C f. f004031C3 F7FF idiv edi6 l- Q! z! q1 E4 ~" f$ k
004031C5 8BC1 mov eax,ecx
( ~$ O! o- }8 A8 b1 h1 g4 K9 m004031C7 B3 0B mov bl,0B
( l7 Q# W$ t X2 V. ~004031C9 0FAFC1 imul eax,ecx
' a3 S- w% k4 {$ g+ Z) Z004031CC 8BCF mov ecx,edi
: v Y1 P/ w1 u* u! y6 J b: U004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
& }# X4 d* w2 h3 @+ I0 i) Q; h004031D2 52 push edx
( E* }" a3 H! ]004031D3 99 cdq
t' s' v0 G6 ? W004031D4 F7F9 idiv ecx
- N1 G* c6 e% F7 q0 _004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]/ }8 Z6 J n% r. U4 F6 s
004031DD 2BC6 sub eax,esi
7 f- b& S' u" F( P004031DF 52 push edx1 R$ {9 _) ~. }4 q' ]
004031E0 99 cdq$ M. P% q$ G: E0 Z1 s
004031E1 F7F9 idiv ecx& ~6 k* ^+ ~+ b% T9 L7 a
004031E3 8BC6 mov eax,esi% S5 O. |5 y$ H0 R7 T
004031E5 52 push edx
1 x) @7 u- Q1 U+ G004031E6 99 cdq
0 d& A5 `; ^1 D: Y004031E7 F7F9 idiv ecx
8 w8 k4 _$ g4 T3 A" Y, c004031E9 52 push edx. W6 @0 @3 T {) @1 M% Q
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
2 n1 T6 N, X- m& N! L004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
" U$ Q5 j. i( ~; ]- a/ W; R" _$ I! O004031F3 52 push edx" G6 A" f4 n$ N7 G8 R3 O
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
J6 b' L1 W# \% B% p( E b2 T& I004031F9 83C4 18 add esp,186 y$ F% _! }: q2 j" S- F' L
004031FC 6A 04 push 4 f; v" b! r1 k5 U/ p# y; o
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]+ M, [1 v I4 c3 N5 g
00403202 6A 00 push 0
8 U- F. X0 T0 |$ l! H* E' S( P00403204 50 push eax
( C1 w4 T5 R, C+ i0 r P b0 J00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]6 \$ W$ C+ b! S6 \* c+ V
00403209 E8 D6530200 call qsr.004285E4" e2 ^1 k( i% h8 g
0040320E 50 push eax2 x- B; o" o$ \8 k. h2 i
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]; U3 D9 G1 T: M! J* v$ [
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C# l! D) `- O" Z7 l" h- ?# t& `' @9 g
00403218 E8 A7C30200 call qsr.0042F5C4* _/ l' V& E/ G( w) f8 l
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 L( J4 {* F/ t+ L, C$ @
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl7 o7 ]) c. `. O# d& b: B) I: r
00403225 E8 61C20200 call qsr.0042F48B
' T5 c2 P3 g; F. J% N0040322A 6A 04 push 4
5 I4 x1 g8 M/ O/ b1 ^+ L# c0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
, f5 x) R/ r1 s+ O5 u00403230 6A 05 push 5
9 x; M0 ]" D# Z9 x' a/ T4 _00403232 51 push ecx
! u/ K x7 m8 c& C& }- ?% |6 j00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]0 {" F; l! P8 h/ t5 h& B# q
00403237 E8 A8530200 call qsr.004285E4
0 q" y. \4 p" E! v% F5 q0 Z% V5 q0040323C 50 push eax; \. ?5 r+ R7 ^2 r* t
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 Y( `0 e/ H6 o1 y0 k- r00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D0 {$ J! U0 |$ N7 m* n
00403246 E8 79C30200 call qsr.0042F5C40 j- R# e6 v7 O. I, M2 g; {1 @
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& G9 R8 y% d7 f2 ~- W4 ^0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
- ^" o! U, v. Y4 j' [5 t00403253 E8 33C20200 call qsr.0042F48B7 i: F" n/ \3 n) a) h# R
00403258 6A 04 push 48 R( F$ r, z- y, k. l. T' q
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
. A' }0 s" Z3 R# y0040325E 57 push edi) g7 B, S) z4 s l1 n+ I* E9 x
0040325F 52 push edx& I( V9 i) @1 @2 r* C% @. }
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
& D; v5 `) J% z00403264 E8 7B530200 call qsr.004285E4( B4 H* Y$ t% r6 A
00403269 50 push eax
6 a; f/ d1 W7 \0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ t; s1 @6 w0 C1 u0 v0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
& |/ l0 d2 i' }00403273 E8 4CC30200 call qsr.0042F5C4
3 U" ^* u, d) |5 Q00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 a# \, F3 |- q5 I& E) w" c0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl3 |% P" M6 e1 S- }6 B j# m
00403280 E8 06C20200 call qsr.0042F48B
2 W, ^ z2 d5 S3 e00403285 6A 04 push 4
* r1 |9 u8 ^0 \. b( w6 g00403287 8D4424 34 lea eax,dword ptr ss:[esp+34] c( ]* ^6 H$ U/ V$ h2 s
0040328B 6A 0F push 0F
# w5 [/ Z# Y( k0040328D 50 push eax2 i+ j) r4 I) n" |, l8 Z
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" n0 Q$ r/ U5 y; s+ j
00403292 E8 4D530200 call qsr.004285E4
) x' g7 M/ ^9 _; D7 t; @00403297 50 push eax
5 d! s: f, I! k; I2 F$ x00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]6 i4 D* Y7 O$ L/ w) V
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
% w$ V. g: p- N" }; A6 ?004032A1 E8 1EC30200 call qsr.0042F5C4' j; s5 l# z3 v( u+ a) q! ~
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 I' f6 d/ j3 E A/ b5 |# }004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl! m% ~. E* K9 [" B8 d: ~6 |
004032AE E8 D8C10200 call qsr.0042F48B
8 {) ^+ j5 A! M* F! m004032B3 6A 04 push 4) A/ k I8 D( q; @3 m" W
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]% w9 |( N( Q8 u3 U( z5 l3 h9 P& _5 A
004032B9 6A 14 push 14" ?- p' F+ h. ~
004032BB 51 push ecx
9 |3 J% @0 m/ J! B4 f* ?004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]& p/ ^0 W7 @' }, \7 {$ H
004032C0 E8 1F530200 call qsr.004285E48 \# o* @# ]0 R5 O* q' E5 X
004032C5 50 push eax
( C+ p- i9 a# I; v; F4 h! }004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
( R( D% |5 n$ K: x$ h8 {2 t$ ^004032CA C64424 40 10 mov byte ptr ss:[esp+40],10$ C6 [6 R, G3 Z) n3 S {
004032CF E8 F0C20200 call qsr.0042F5C4
* H$ U) X/ z5 d$ [9 D2 \004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% N" O+ S4 F( v% [: y0 r+ L; Q004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl# u0 ]5 C: Q' U! L
004032DC E8 AAC10200 call qsr.0042F48B
6 ]8 v) [. }2 [004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI0 \ \, L/ O9 i2 ]5 n
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX: b3 E5 m" A) B. x
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
2 I7 x$ I, \. |4 C004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
+ p6 Z) [$ ~/ D( ]) }004032ED 8ACA mov cl,dl ; DL送CL
2 O ~) Z! G; c$ f! G a004032EF 3AD3 cmp dl,bl ; DL和BL比较
" N4 }. A; b J9 T, d2 }004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）7 f# c% s' C" G! X+ L5 m
004032F3 84C9 test cl,cl
: P5 X2 p- c" g4 P( z5 A( y' [+ i# p004032F5 74 16 je short qsr.0040330D
! \4 Y% W7 f; f, m: {* l004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
+ h( X3 m2 h+ {' k6 E5 C. |, R004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL+ A( _7 t3 C- c( u, F- v
004032FD 8ACA mov cl,dl( q* s% {1 n( U1 A3 |$ {# Q* [2 L
004032FF 3AD3 cmp dl,bl ; DL和BL比较- _& r/ E* g3 R1 _, q
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
( Q) t0 M V. {/ ~- T+ ^( `00403303 83C0 02 add eax,2 ; EAX加20 X. N# B% ^# d
00403306 83C6 02 add esi,2 ; ESI加27 J' f. {2 K1 V6 h# ~" N
00403309 84C9 test cl,cl
" t8 x/ S# R) T {$ ]/ J; N0040330B ^ 75 DC jnz short qsr.004032E9
0 z4 X- q6 ~3 y8 ~1 L! ^& U% B0040330D 33C0 xor eax,eax. c% I& N3 e0 @/ Y! `4 r
0040330F EB 05 jmp short qsr.00403316
) ?; G+ Y: S w4 n00403311 1BC0 sbb eax,eax: ~- [8 X4 O( O. c) b
00403313 83D8 FF sbb eax,-13 U I' Y7 f+ m- E# I
00403316 85C0 test eax,eax
! `* ]( s: R( S, I; U+ D8 q+ ]00403318 74 0E je short qsr.00403328# r8 b& {/ p) b& z/ d
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A$ h, U8 U3 P ~, g1 o& O& `
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]+ D/ w2 |2 E2 d r0 H; M
00403323 E9 F0000000 jmp qsr.004034181 o/ u# k: l/ b) C' F) {
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX6 Y" j9 S b1 z
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
2 ^ w) @9 A# H# l. o00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
6 W' C; ?; |, ~ ]00403333 50 push eax } M- L" U% w
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX6 z9 s$ ^: F' W. d9 L
00403339 50 push eax; l& T7 Z% \8 B3 n
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX4 E s Q% h& j* u
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
4 \3 ]& \' H, M# b0 a* C00403343 83C4 04 add esp,4" R' v. y( [( f: d) c1 h
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
3 s2 T6 N( a7 Y% x00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]2 N4 @3 J% ~7 e$ z4 h8 {( I
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
1 ?& K+ s: `4 J' V0040334F 50 push eax; C2 f/ ^$ E% w- T
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX& h7 S2 s3 H, r. o/ e
00403355 50 push eax2 `8 [' _9 i+ U$ y/ Q
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX6 a+ ]# T# D: @" j5 j" ~
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
' v+ k2 X- G# b6 m( m0040335F 83C4 04 add esp,4
! c/ i# J; j, @+ C% c" C0 K00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
- r2 [1 w; I l7 ?. E6 R6 U2 ]00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
! }9 A( F3 q& M; f! p9 Y00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]3 T4 N7 u W8 \6 @; g9 t
0040336B 50 push eax
/ _7 [9 n j$ X$ o0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
8 J K5 U- l, ?9 P2 F! a* x00403371 50 push eax- w$ `. O" ^% g. u
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
D W& f7 B$ E. Z& q8 [. s: J00403377 8BD8 mov ebx,eax ; EAX送EBX/ ?; K) R% o) t0 M" |9 ?7 e
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX/ ]2 a1 S. v) e# F
0040337D 83C4 04 add esp,4
& V$ q6 |( H _' m4 o% K6 \00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]. c; B1 D7 L2 Q
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]7 L. i1 }0 B/ U& _
00403387 50 push eax
" h# I1 n4 _" O! K* M8 O00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
1 x0 [# |1 ~3 x" N! _/ D6 `, C0040338D 50 push eax
1 N0 f8 V2 l& x& I w0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX, m& s- R; h5 m# h; b. j! }6 T9 r/ ?
00403393 83C4 04 add esp,4, Q: K; A7 V6 h9 c
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
! Q4 G- i) B# a* g1 U) j. Q) f7 x0040339A 8BE8 mov ebp,eax ; EAX送EBP) G4 R$ _8 N5 ^' N% O: C* e
0040339C 6A FF push -15 i9 \' s5 b' q; Y, Y- Z% t' J) h
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
) z, j$ ?: ]# l- e004033A3 6A FF push -1
& A0 n7 Q% {6 M- P' @3 Y5 Z3 P004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
2 Q1 u6 ~5 y; T" E4 {004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX. y: ?6 C$ J& |* ]2 }- {& _/ d
004033AE 6A FF push -18 x0 a6 j0 r; z% l
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX& \# f6 G2 R6 z1 R& x+ H3 S
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX4 u5 R/ V3 T3 U6 x+ g# D3 m
004033B9 6A FF push -10 q0 K% m0 ]( `. q
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
2 Y t0 v0 n# S3 A0 \, E7 h4 e2 N7 r004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX# J: R2 i( \4 K5 l- Z) Q. n
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX; B& [; y/ U# v+ T
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
& ?" u2 N+ Z" a/ M: ?004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
- w5 U' s7 C; Z) `3 S004033D7 D1E0 shl eax,1 ; EAX左移1位, `' v: }- N. J2 M8 H& w" {: s
004033D9 99 cdq ; EAX扩展 c; {1 O- m7 ~( Y t
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
3 L$ r8 i8 O& {9 k: ^7 m004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
( U) l+ P# u* C004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
! `/ f5 `. V# _004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A9 b* L" e9 _6 F8 _2 y9 H4 C! U
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
/ D) d, R& l& N9 `004033E9 EB 2D jmp short qsr.00403418
/ _: J/ ?1 Z/ [( x; x0 p) d004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX" ?: [: ^- M1 W6 M/ m7 H/ L
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E29 F- L5 }2 d& R& }- S
004033F7 99 cdq ; EBX扩展
1 T4 D4 |7 ?8 W004033F8 33C2 xor eax,edx ; EAX和EDX取异或. ?) W! z T$ b- }
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
+ \5 v& L3 D/ G- B004033FF 2BC2 sub eax,edx ; EAX减去EDX: c9 ^7 {2 q& p% H/ R
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]1 m0 ]: `' v8 o
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX0 }6 X; K! J; K% m- y: n7 n
00403409 99 cdq
2 k$ n/ j+ R1 k2 k/ \$ W" B9 w; X0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
* S3 i: W) B5 W; k0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
' d9 t; P7 T( R# x4 s* f00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较$ w& o$ U# G; y6 u0 a
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）( y; _1 A5 i" Y
00403418 E8 6EC00200 call qsr.0042F48B ;
7 M6 `5 F! O* c0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ Y& ]! U8 ~9 ^2 e5 V00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9# N6 H1 e+ X0 {) {
00403426 E8 60C00200 call qsr.0042F48B
2 U; @ ` Y6 X4 \: @' C% H0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
r! K# _# j. V+ G- B0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
; W9 A! p# \& i- ^# |* ?00403434 E8 52C00200 call qsr.0042F48B
8 ~' B9 _2 u( `2 H) N, W0 \8 P) v" g% S00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] x% d" d+ o3 m! C3 z! D
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
! W* H( }+ U4 `% f* U( t" N2 x00403442 E8 44C00200 call qsr.0042F48B& C E& e) \! N" v
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]0 b2 r1 N9 q! b c
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6( h8 ]( e0 [/ Z
00403450 E8 36C00200 call qsr.0042F48B
: c n2 ?/ m3 o1 J/ a$ B00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]9 j- u6 @# ^1 s. Q9 `7 m3 x6 o7 ~
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3, ]3 U( q0 s( A/ X2 u
0040345E E8 28C00200 call qsr.0042F48B
+ `. L) F7 l% L( Q8 a" k00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
9 `4 Q) _6 f: K$ Y0 X/ Z$ r$ `00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
" n) N% y" F1 i z0040346C E8 1AC00200 call qsr.0042F48B
9 X' ?7 S, u* n00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20] [# h( @6 }7 d' a2 ]
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
" }" r' F1 L+ B% C O% \( T0040347A E8 0CC00200 call qsr.0042F48B; C; |; _7 Z: T7 D
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
: [8 f5 X; y& w8 h3 C9 Y00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
8 O$ R3 _$ q; ~3 c: L00403488 E8 FEBF0200 call qsr.0042F48B
. ~. O8 B$ I& v9 K3 I0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% g7 ^8 J3 Q0 w% D* r' K
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
5 b" D" L0 ^- ?$ u# n00403499 E8 EDBF0200 call qsr.0042F48B
8 y J, ~' F! U7 R4 _* o& F0040349E 32C0 xor al,al ; AL清0
0 k4 i! r. ]" q( a# y/ y004034A0 E9 88000000 jmp qsr.0040352D
- {5 k5 ~" j) Y. f004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
! P$ x9 u( ]& h! Y; n004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
- L$ H4 G3 ^/ p* F004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],93 |; X2 W. K5 F, ]
004034B3 E8 D3BF0200 call qsr.0042F48B8 d( p2 k; [1 e- v2 P
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]! N. i0 S. W! P" q" A$ |; g$ L
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
( u% V& X9 G# V004034C1 E8 C5BF0200 call qsr.0042F48B5 [6 k Y" b! H+ M& x- s5 t
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]; ]. b# G. C# ^- C4 {7 l5 D$ n
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7- U" U4 x! N/ ~+ x6 o% u6 i
004034CF E8 B7BF0200 call qsr.0042F48B
: ^- F( d. i8 i, \; p! Q, l; e004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
! i; P6 a1 e, @; V& Q5 ]004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
8 v6 a1 x' Z1 P# T) ]004034DD E8 A9BF0200 call qsr.0042F48B* u" R6 x4 k1 Y# _( g9 E+ M
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
. N( }7 ]( x x% Q004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3" Q7 B2 Q G) L
004034EB E8 9BBF0200 call qsr.0042F48B
( t- q# O0 U; F1 y0 r004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]. E/ d' w6 v) c* d: D& q y4 O; O2 c
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
: y( P" ^; O; h& R004034F9 E8 8DBF0200 call qsr.0042F48B
: C+ b) b W) y8 `1 D- a004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]0 J' A4 B/ z; Q$ D: w
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],13 ?- v3 Q" _' U1 U2 m3 ^
00403507 E8 7FBF0200 call qsr.0042F48B
" u, y( l: |, }! ]0 v* y0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]+ ~9 Z" d' C) P: d0 T
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
, T- Q( ?2 [: ]6 B8 j7 ?/ |00403515 E8 71BF0200 call qsr.0042F48B0 |) [5 A: |# C! ?3 ?. x1 ^
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# P. q# }) x: v; @: P0 M" |; P, n0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-19 a* `5 K7 P, N [) [
00403526 E8 60BF0200 call qsr.0042F48B" U9 R4 Y3 Q. X% c7 H0 S% L
0040352B B0 01 mov al,1
: \6 {. R8 G" U" e( z f% b* p0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
2 t1 @" n5 U4 J$ @4 B1 Y00403531 5F pop edi
0 E9 W5 n$ r; ~00403532 5E pop esi4 W2 t- A: M5 u; f9 ]
00403533 5D pop ebp
l2 y' F4 H" X4 s2 |- T7 G00403534 5B pop ebx X4 I6 _& Y, A3 ~3 j( L, c3 s, U
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx+ l* t' ^- w' P, d" w6 i
0040353C 83C4 30 add esp,30+ {: S* f1 {' y) {6 C8 r# F! e
0040353F C2 0800 retn 8
$ H$ {/ e: X0 O" t9 Z1 u--------------------------------------------------------------------------------5 Y5 F4 O9 B* O& L. v8 \& {
【破解总结】' A6 N8 G2 ^6 h$ i
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^- E# y x1 b6 W: M
用户名：yijun
4 d8 Y4 p1 R) S% a/ w3 I5 v2 ^注册码：4893*7777*3726*7777*0529
s9 s" s$ A w--------------------------------------------------------------------------------
K, l1 b9 L* k; f) a. _【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡