|
|
|
【原创】破解Quick Screen Recorder" e5 U6 v4 u! p w
【破解作者】 yijun' z/ m" b3 \4 m, T
【作者邮箱】 [email protected]4 T+ F; e% ]8 a
【使用工具】 OD,PEID
0 p: z. V+ C; r2 Q2 p3 v& k! l& o【破解平台】 WinXP$ ?. `1 [% @3 g% m" H
【软件名称】 Quick Screen Recorder
6 ^( ]( B0 R L7 z8 X【下载地址】 天空
0 A" T! S* F% g8 d, n& x5 u h9 N. Q【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
" {5 {4 ?! q% n# k9 U【软件大小】 540K$ L) x' k8 C% M3 n- T
【加壳方式】 无$ Q8 w. d" ^+ i0 R8 h0 I O# G: [
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）8 K2 B- A( W1 h; W9 |
--------------------------------------------------------------------------------+ {5 c( q5 e( _+ e
【破解内容】
- \# [2 Z6 d/ | PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
) O$ f, b2 R S8 y# t1 O. v- a4 I00404C69 55 push ebp //在此下断7 `+ h+ `: l" w7 ?3 \
00404C6A 56 push esi
3 P/ e4 E, o, B, ], R& O# g00404C6B 57 push edi3 P4 s* j# w: H
00404C6C 8BE9 mov ebp,ecx) ?; ]# t) }4 L- r D0 M7 y
00404C6E 6A 01 push 16 n+ n* l# U. r) z1 |: b% v. v
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名2 }9 E" o; m3 N$ `
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
* E$ k3 ~* F8 h( {# C00404C78 8BCF mov ecx,edi' A% ]6 g$ p3 [. ]) {8 Y0 c, H: }
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码; Z+ l: G2 w8 K% F
00404C7F 8BCF mov ecx,edi
% E6 a! e- S, Z& d9 {1 t00404C81 E8 A73E0200 call qsr.00428B2D
" S/ A% q3 K1 F& U6 n00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]( _: T! l: z& S, ~% g1 w* K/ }/ b
00404C89 8BCE mov ecx,esi
3 H0 y: b3 \& i+ U8 c- h# l: e00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
f1 I% _$ Z4 S2 c0 P6 `, @00404C90 8BCE mov ecx,esi" f' z# k" W, Q/ O5 e1 ~! A5 W
00404C92 E8 963E0200 call qsr.00428B2D5 h5 R$ W6 e+ H0 G: \
00404C97 8B06 mov eax,dword ptr ds:[esi]
' o! d c( Q% W( N, H00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
8 z: u G i, \4 V00404C9D 7D 26 jge short qsr.00404CC50 ? _& h) G. r( w: `) P6 i& d: ?
00404C9F 6A 40 push 40
) k8 Q- E0 ?9 ?/ o00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"$ K2 [. Z2 W+ H- a( N, y9 T5 N
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
/ l- ]( b$ J3 R$ A. k00404CAB 8BCD mov ecx,ebp9 z2 q$ O2 W: G- O
00404CAD E8 C3840200 call qsr.0042D1753 f$ w! z2 n1 Z; \) G# Q1 e; B
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
% L7 a$ A+ E( {' B9 H2 k5 f00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
; q5 _% }& l' x. L00404CBD 5F pop edi
/ O6 p2 ]7 ~& }- u00404CBE 5E pop esi+ D( d1 d' O' {. G3 {: M
00404CBF 5D pop ebp: d* s9 j3 H) `; k7 d% h. |+ r: T/ L
00404CC0 5B pop ebx
; P2 g% b( z" d; w4 d2 z% ?6 S00404CC1 83C4 18 add esp,18
" R: A# j# d& |1 \1 [" R+ N00404CC4 C3 retn
j5 t! C! [. F [* }1 h. r00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]; y, G$ a* w5 v6 H+ e
00404CC8 84C0 test al,al K5 S' f! w1 g( o$ J
00404CCA 0F85 1C010000 jnz qsr.00404DEC
) ?7 ?2 g6 | Q: c2 Z00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' Y+ Y9 G' }! ]9 l6 q; c- G& [( S
00404CD4 E8 87E3FFFF call qsr.00403060. |- t3 `) e9 _( Y( H) E
00404CD9 51 push ecx' Y2 d/ }/ F) S" w
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
- W1 |7 L/ h1 ?2 x% x00404CE2 8BCC mov ecx,esp8 X7 x2 {" S5 G2 v
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
' g z, H2 ^( K4 {00404CE8 56 push esi
( [7 C9 E$ i3 s00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
" h1 e" R2 r f& Y% w00404CEE 51 push ecx# ]0 K. Z+ i m/ x/ G
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
( \3 w% a2 I! R; \6 B00404CF4 8BCC mov ecx,esp
; _/ O% }, I- j, M3 ^7 i: F00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
( W: v, d, p p8 Y8 M* `. c# D% `, m00404CFA 57 push edi# r8 X3 O: _+ l
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
* g& k, }) l5 u$ C" ^) G00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# y* G1 c" R# _
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
$ k0 d" J B7 ?: e* V- W9 m% p00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
7 \' f2 y9 N7 t& g$ ?. o- k00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
! x+ H* c5 j8 A' [7 z00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
* S1 {3 I E* I- t' P# ~) f00404D12 6A 40 push 40
* w4 L# M: T; S8 W$ Z# \00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
# m+ R, `$ k2 b1 L9 Y( _00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
/ [- m2 n' J$ l6 a# K X: B3 m$ n1 w00404D1E 8BCD mov ecx,ebp2 r1 d2 f: N! Z+ \$ ?/ ^/ ~6 L9 t
00404D20 E8 50840200 call qsr.0042D175
/ d/ |; n7 o4 x+ f# _- V$ b00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]8 j" [0 d9 Q/ U$ o4 \& C# P
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1# S1 [- M; E3 y2 W
00404D31 E8 5AE3FFFF call qsr.00403090
* K! e- r& a, b00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]* u+ o: ~5 r, L
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
# K: { _! e& A4 e( i00404D41 5F pop edi
* q( L6 i. y" |: [$ A00404D42 5E pop esi
- [* j0 x& C* p' I00404D43 5D pop ebp/ W: {7 a4 \( v! v1 ~7 |1 L( `
00404D44 5B pop ebx
% @, ~, U/ z8 C }: E1 _/ a% ?00404D45 83C4 18 add esp,18; E1 C. Q! u1 y2 ?9 G! w
00404D48 C3 retn
* B1 l2 w$ |3 Z6 d*********************************************************************************************************************************************************8 G1 @/ q0 |: I2 e
跟进00404D09处CALL来到：
1 f) ^6 @0 k+ V4 K004030A0 6A FF push -1 //一路F8下去~~~~0 }) u& Y1 ~, [0 C) v" R
004030A2 68 C88F4400 push qsr.00448FC8
* h: [; }! X U( h8 k$ @# s004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]4 E4 C2 D. m( i# y$ T+ @
004030AD 50 push eax
" H9 N) y m, C0 f( T7 P7 u004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
. N8 B, b# N5 i0 Y004030B5 83EC 24 sub esp,24! O! G, V1 L& p1 b1 h2 Z
004030B8 53 push ebx
! w7 G( z) n N6 U# z+ N3 [004030B9 55 push ebp
! U' W! }: L9 C004030BA 56 push esi8 ~0 ~1 d# o' W$ O7 D! {
004030BB 57 push edi* h$ W$ e- s3 |$ {7 T1 q: G
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
0 H4 A! Y' Q1 j7 [% a: o' l004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]6 N9 }; @: ~' K1 k, k
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1: Q/ N$ `1 L* m; a& b$ P7 I
004030CD E8 27C40200 call qsr.0042F4F9
4 [$ K( H7 T, I004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]6 ]" A) r2 L8 t
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax* Q6 E' l8 E$ @$ Y
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" E, L" a- H+ D# ^
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
; O/ F, j3 P7 R# Z2 E: N004030E4 E8 905A0200 call qsr.00428B79
- B7 s1 ]* e7 @9 a* c0 ^ K004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ T# z- X9 L9 b
004030ED E8 3B5A0200 call qsr.00428B2D
5 e1 C1 c$ s" c+ ^, ~004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]- W+ E$ L8 o9 M' x/ m6 l3 |" S+ C7 U
004030F6 E8 7E5A0200 call qsr.00428B795 Y3 t7 @+ u5 x' d$ ?+ W
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
& b1 m( w( D' Y004030FF E8 295A0200 call qsr.00428B2D" e. u. h8 z# u1 r4 {
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
- B; B* L( N" F Z. [6 j/ |00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]! {4 g% |: C- ` f1 v7 Z9 a
0040310B 83F8 02 cmp eax,2
' B# d3 F# O8 E1 h7 D) `0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
0 \8 i; B* f. L. N% @+ B00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]9 w" E3 |& L+ z9 O: m; K
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
4 n0 I/ E5 B- q7 [# U+ ] Z0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳: W. z/ x2 D6 V) m
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
2 s* U3 l! X( w8 `- p- T00403126 6A 01 push 1/ J) ~( X) ]$ J3 F4 W& N6 u g
00403128 50 push eax
- q, {2 r7 O. u; }/ t9 U) a6 U; l00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 L6 d) j0 u. B. C, \1 o( P0040312D E8 C4550200 call qsr.004286F66 h# C3 ~; d, c T* b$ O0 {1 P3 w
00403132 8B00 mov eax,dword ptr ds:[eax]+ x& c; z% }4 U) q
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
9 M0 F% O+ ^; B% a9 k00403138 50 push eax
: Z ~ |6 K' L$ T5 U00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
7 U! `) C: ]4 D. r2 W0040313E E8 4D560200 call qsr.00428790/ c+ M$ Z5 }3 m1 } [
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
# |2 P3 O. r8 f4 V' a( D' i7 E6 O00403147 8BF0 mov esi,eax
O7 Z e6 e# N7 y: w1 M0 q00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
3 ]- k& U, A( t; B+ k. q* @0040314E E8 38C30200 call qsr.0042F48B3 h3 G! T$ h( m% W) N' j/ o
00403153 8D46 0A lea eax,dword ptr ds:[esi+A], G6 U b* W. T7 c! C
00403156 B9 3E000000 mov ecx,3E
6 v& I' V8 c* K( o( J0040315B 99 cdq; e" Q& |8 W- _2 [! B
0040315C F7F9 idiv ecx0 n5 `/ E; i$ a% K: l! g3 v6 n
0040315E 6A 01 push 1
$ l2 f( A$ Z# ^1 Q% X00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
4 W3 z) v2 _1 u" r2 A: `00403164 8BF2 mov esi,edx
* i4 z# z7 v8 h# d( P0 I2 X7 L00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]$ f$ v; M8 p$ F. O. i5 V9 q
0040316A 52 push edx
8 v& p1 p0 H9 e, O) [' E0040316B E8 0A550200 call qsr.0042867A' X, _% x8 e$ I. t; h% g
00403170 8B00 mov eax,dword ptr ds:[eax]& l" m! o2 p$ o& I* \7 I5 |
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 S( }& B$ H" n00403176 50 push eax8 F* f" d% \: L1 i G
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
6 y# D3 Z6 y$ s9 _+ @0040317C E8 0F560200 call qsr.00428790
& R; |9 ]7 {3 g$ l00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 ^6 x6 a( \& R6 w0 V9 D, R. h2 |5 v8 l
00403185 8BF8 mov edi,eax
" F3 e: s" U3 q00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
0 ]$ j/ ]$ [1 f6 o2 r4 m0040318C E8 FAC20200 call qsr.0042F48B% d9 n4 K* j: D) l$ B) y0 ]& [
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
, `5 u+ [5 ~5 P# Q" g00403194 B9 3E000000 mov ecx,3E) B, ?4 i- d8 @' a9 K7 D* \
00403199 99 cdq ?5 Q1 W, }6 P/ {% {3 Z
0040319A F7F9 idiv ecx1 J% v0 q1 @4 ]
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
; J8 z2 {9 j4 R004031A1 894424 28 mov dword ptr ss:[esp+28],eax
. n) ^- W) V- ~0 N. S004031A5 8BCA mov ecx,edx8 r2 D7 l P; \' f! [/ `7 d! {
004031A7 894424 24 mov dword ptr ss:[esp+24],eax8 O; w& Q% x- j {# w" J$ _
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax+ i# n4 d& s# u2 u; u
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
, C- v& s# R& a" j9 e004031B3 894424 14 mov dword ptr ss:[esp+14],eax
2 ]/ p. O: D+ ?# j! {7 B3 H004031B7 894424 10 mov dword ptr ss:[esp+10],eax3 o/ b8 ]. `2 B
004031BB 8BC1 mov eax,ecx$ Q- j, A# M: T* t% k3 z
004031BD BF 0A000000 mov edi,0A1 W* { W# D' i n+ e r" K
004031C2 99 cdq2 \/ w* J" P" ~1 X0 C: Q
004031C3 F7FF idiv edi
- O: D0 Y4 e# n; m& j6 w, s004031C5 8BC1 mov eax,ecx' N; ]2 Y' q+ C
004031C7 B3 0B mov bl,0B& w0 ?2 F( C Y$ e4 B
004031C9 0FAFC1 imul eax,ecx
2 f5 j# a7 G$ s' [004031CC 8BCF mov ecx,edi0 W) X9 l. `" K: X3 k) y# n
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl m0 Y$ p" ~0 n- T. _) w/ f6 K+ p: i
004031D2 52 push edx
1 z$ Q# A* z+ A004031D3 99 cdq
, m& a7 R8 S7 c2 w3 u# _004031D4 F7F9 idiv ecx8 g t; q- r& B1 ?, Z3 Z7 t
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
/ ?9 j; _( c4 W& ~004031DD 2BC6 sub eax,esi
5 i- L. G( p5 J J2 P0 [004031DF 52 push edx' S6 O5 E& t$ ]. E+ L6 [2 w) Z
004031E0 99 cdq
& B: c) M1 ?, Q6 q" N7 F004031E1 F7F9 idiv ecx
; \5 w! J& D4 l/ W004031E3 8BC6 mov eax,esi, }* ~1 B* [6 ^7 Z
004031E5 52 push edx
c$ |( o, m$ n( r/ d) k. A2 M004031E6 99 cdq
! b1 n( e i9 O6 y2 r, y: _% H# N004031E7 F7F9 idiv ecx
3 B8 x" g. [7 f004031E9 52 push edx
% U; u- T. Q R x3 ^( q004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
5 m1 _& W) _6 o: K+ \004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
[1 G3 t* B' W/ o" V, y u+ U% ^004031F3 52 push edx% E1 C, o; H! w# k. {; x; X
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
! ~' `, Y/ n) V& z6 H004031F9 83C4 18 add esp,183 P$ [2 e- ]6 Y
004031FC 6A 04 push 4
" ?, ]* m" A+ H7 `2 b% t004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
% ~; ?/ @5 s9 _00403202 6A 00 push 0
! ^; x& C' G: K4 I9 N4 {# d6 _00403204 50 push eax+ `5 @' n; M$ J) Y. U' d
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]0 c6 @ J5 k0 T; Z; G1 [
00403209 E8 D6530200 call qsr.004285E4
3 x9 W6 z# \; Q! G5 H0040320E 50 push eax0 v- S7 J' K9 Y) }
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
' D% I; \0 \( |' o00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C" x# D: R; s( i. ]: _- ]+ k0 ~
00403218 E8 A7C30200 call qsr.0042F5C4
" P3 I+ m5 N( Y% M$ z( t0 {0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) E6 ~% r/ ]3 m6 E5 A
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
. F/ B7 q. G, K0 M! J7 w1 x00403225 E8 61C20200 call qsr.0042F48B
6 Z0 j& K/ O- q8 r" z L1 H0040322A 6A 04 push 4) a) M* m7 B) [2 Y3 z* K) K
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]. Y; Y Z# ^, C( s5 ?5 d
00403230 6A 05 push 5* P9 ?' a z. L9 q5 G: y
00403232 51 push ecx
5 j' U/ D( ^/ l8 E7 p00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
5 Y( p+ @: o+ i$ q5 \9 @00403237 E8 A8530200 call qsr.004285E4
8 O, C w- A( K: K6 C, O0 ]' k7 s0040323C 50 push eax1 `1 P: t7 y0 t6 K! a- R
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
! H- G6 L/ w% J* M5 Q0 N& |; @/ j- s00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D2 s% W0 X9 A- P" r2 D4 s6 }5 x
00403246 E8 79C30200 call qsr.0042F5C4
: e/ x0 d: C9 o7 k& H% {: q0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 l1 o) d$ ^4 x4 X6 h0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl" i. J+ L$ f& e V. E* R
00403253 E8 33C20200 call qsr.0042F48B9 ?& W* M& F! E/ d
00403258 6A 04 push 43 b* T/ L5 |% Q, J; i
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]- r; u0 y7 Q/ W2 d; d/ R, Z
0040325E 57 push edi# z5 Q- F {2 }
0040325F 52 push edx# v% h" T, T- d% U R
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]$ Y6 `+ j) n2 Y- Z4 {; D! H
00403264 E8 7B530200 call qsr.004285E4
' A m; f1 D& b. i% p00403269 50 push eax7 a( t8 L6 l- `6 y
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
8 u: E0 c; `$ S* {0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E$ ?+ R, e K8 ?, M9 g; ]
00403273 E8 4CC30200 call qsr.0042F5C4- D/ Y) w; W' [- T/ o8 {. @4 p
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% P! ~- _- h* H; c4 i1 g0 @0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl0 S) Y6 Z; L9 x' v
00403280 E8 06C20200 call qsr.0042F48B/ U4 S! l* z; J" Y& E: o4 P* u1 Z
00403285 6A 04 push 44 @( f/ c. ^7 W! X) l/ A- W
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
+ B0 f3 Q' s! Q" d' t! O: w0040328B 6A 0F push 0F. b+ I4 \3 I7 K
0040328D 50 push eax
1 u+ H8 a: O; h8 B0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
5 }9 M8 Q2 Q J! H9 {( J& _00403292 E8 4D530200 call qsr.004285E4/ Y& L4 i; d2 K' x4 R- F
00403297 50 push eax6 w- A$ c0 W& {' I. \' V& |
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]/ @* P$ _% l% H9 a0 ?! ~
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
3 {7 A+ X9 C! b7 @; b9 [004032A1 E8 1EC30200 call qsr.0042F5C4
$ o7 B. p" Z, y$ v, F. A7 B0 j004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 ]6 b1 ?, W4 G& X+ d) A% _
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl3 h, ]" g1 G1 p4 a* f- u$ E
004032AE E8 D8C10200 call qsr.0042F48B' n2 O/ t9 P' b6 H
004032B3 6A 04 push 4
& y y, |( [: E& @! \004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]8 _7 Q# J# ]8 f7 f0 p4 }
004032B9 6A 14 push 14( z+ s) Z$ C5 u' j# u
004032BB 51 push ecx
3 T' D3 C- z5 {0 k$ f! R9 T004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
8 X, l7 }" e3 O2 I, u004032C0 E8 1F530200 call qsr.004285E4
: [4 x1 w3 h: y004032C5 50 push eax
5 m. J( N5 J6 F# I% C& F004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
* H: _% S1 ?1 \8 F0 [ _004032CA C64424 40 10 mov byte ptr ss:[esp+40],10" f/ W( |9 ~) O) ~
004032CF E8 F0C20200 call qsr.0042F5C42 g. O, D+ U* }5 p( ]# u& \9 W3 ]2 e0 N
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% F3 U0 c3 ~/ H/ ` B004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
6 ]( a5 X. d0 E, W0 u004032DC E8 AAC10200 call qsr.0042F48B5 z; g4 k' }, q* k
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
& D* w+ t4 l( b; @2 K! q% d$ Y004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
$ t* I) a4 t" B2 j7 E004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
2 t+ C$ @% ]7 a$ N004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
7 S& N* {* e4 `' F( K004032ED 8ACA mov cl,dl ; DL送CL. [0 w3 r/ K; i' S( c6 S; {& Z
004032EF 3AD3 cmp dl,bl ; DL和BL比较) P+ h4 @- ]5 @& K1 }3 _' x% `4 ~
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）! ?3 I. l0 a3 [* T" V
004032F3 84C9 test cl,cl
' M# g# F, P$ ^5 Q& k7 e004032F5 74 16 je short qsr.0040330D
% k) W6 o$ T/ N004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL# o5 |* O( V" g
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
" T- S. y7 i9 f( Q1 v004032FD 8ACA mov cl,dl
+ A6 J- c! e1 t# z0 b+ h! E# A7 I004032FF 3AD3 cmp dl,bl ; DL和BL比较
' f2 ^$ u/ g1 O# _) V+ R+ Q# L00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
8 i- u0 G9 E. q7 ?00403303 83C0 02 add eax,2 ; EAX加2
8 g' r: a" D: N5 f& y7 H4 a00403306 83C6 02 add esi,2 ; ESI加2
6 Q y+ A( d+ i6 V8 t00403309 84C9 test cl,cl
9 I+ B* c( |# N) `. Q# D0 Q- t/ P0040330B ^ 75 DC jnz short qsr.004032E9
) d4 j( q" z0 X3 P+ G0040330D 33C0 xor eax,eax% _4 @ R: s( r) A3 D
0040330F EB 05 jmp short qsr.00403316
( R% U' X8 Z# h+ u W00403311 1BC0 sbb eax,eax; }1 X2 o" Y# S
00403313 83D8 FF sbb eax,-1
# R: j9 P! y) J$ G6 d5 Q00403316 85C0 test eax,eax
6 r- v4 v: S s- b00403318 74 0E je short qsr.004033285 R8 v) t! ^! d D- o* x
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
5 o! ^" a# j- F1 w0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]- o3 `8 g( o/ \6 W' N
00403323 E9 F0000000 jmp qsr.00403418- j# S6 c; Y7 ~
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX1 a. Z) @# x* t0 c) Z! k" y3 o
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: M E1 |: f8 @0 j
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]2 Z" A3 Z2 Q; ^8 n. B
00403333 50 push eax
7 ]7 N% O) R) d3 W2 J4 s" f00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
9 ~ f# e$ ?! x; s* v: }6 q00403339 50 push eax- I& q1 w; W9 z4 m+ y
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX, L$ J+ r5 O$ [
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX1 f4 _. w8 X y* e, T% _$ ?, E9 q
00403343 83C4 04 add esp,4' K2 S- f& s7 X0 Q) c
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
) e. ^7 u4 b& B# G8 [. {00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
+ W1 R& `0 u6 r, W0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: V' v9 F( N9 g* P0040334F 50 push eax; P5 K b" a$ @1 N* n5 l' b8 W1 R
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX8 S$ J1 t2 ~+ m( S9 I8 h
00403355 50 push eax* Z w/ I8 U9 y% F% J$ G O3 E
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX6 Q; A$ c5 j3 O0 h
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
$ x( V* y8 w' O% R0040335F 83C4 04 add esp,4
& S; K' c+ b9 j, p! E4 `: ~& M3 e5 Z00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
# J9 _3 d5 A8 Z" \00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 @7 o1 K( c) \2 u5 d) y3 \00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]% t& w' W1 L1 A/ J0 U8 e
0040336B 50 push eax
/ i* p) `* Z5 a9 T9 M0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX$ S! U' k" i& _4 H3 Q
00403371 50 push eax& c% c+ a% w0 G v$ a Q2 K
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
, B9 j/ H+ d) \# s6 P00403377 8BD8 mov ebx,eax ; EAX送EBX, j, I4 y+ l y( k: t& b
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX8 H' U0 N4 @. h( i+ F8 g
0040337D 83C4 04 add esp,46 m' K, ]+ ]' G* Y6 w" L
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
' i* z. @6 P: s1 x* t# Y# p00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]/ \$ d) ]. S: C6 v$ z8 x5 F4 M
00403387 50 push eax
3 L% z! S6 Q% u/ U$ Y00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
6 V" _0 z1 V/ r6 a" V2 j; _6 f0040338D 50 push eax0 ?' j6 {8 ]. y; t; |- j
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
: H/ d. r; B4 n" J0 [4 [00403393 83C4 04 add esp,4# U) @5 P6 d( t. D( h* B5 R! C% }
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 V: n6 Q( i3 H
0040339A 8BE8 mov ebp,eax ; EAX送EBP3 C ~ J- {! `0 v
0040339C 6A FF push -1
[0 t3 ]7 b- i7 E0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX+ R r M O$ v0 a8 x3 a
004033A3 6A FF push -1
H) g7 ?/ l9 p, c5 P. t) N, T004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
+ j g+ W) |8 L" u o004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX& Q' R0 ?) S" Z9 h" H
004033AE 6A FF push -14 ?1 t/ O( d7 j% t# o
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
+ U. u9 |) J" D: F3 V004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
% j3 J5 }) [. J- Y! u004033B9 6A FF push -1! I# ]+ z3 i; c: w Y
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX' d% r* C) [: Q0 q1 w8 z/ {
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX$ ~' x ^( o$ K
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX+ [9 Z5 @7 C3 G
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
8 k! z# R4 \. o! E9 b7 z004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
- Z- x. E$ P2 B j- E& ^4 h004033D7 D1E0 shl eax,1 ; EAX左移1位! o6 T! V. e; Z6 I
004033D9 99 cdq ; EAX扩展0 ]+ U7 J) f5 }' {4 T; L* {; W
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中* \6 S' C1 H, p8 d% {; r6 W H
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较# B1 S# h0 s/ f
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）9 y4 {+ |/ D; X( |1 d
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
2 }- b$ ]: m% o6 D" j! D; s004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]6 ~, f% k7 `$ J( V
004033E9 EB 2D jmp short qsr.00403418! Y; c8 I. M6 e) o( q
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX& Q2 u5 z9 S: }6 q
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2/ I6 h6 W, s, u% y5 ]
004033F7 99 cdq ; EBX扩展
z4 |* C! i( P# V004033F8 33C2 xor eax,edx ; EAX和EDX取异或0 }$ P2 ]$ z' \$ i6 j
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
. k, S% a% ~! G* o( K2 O& p004033FF 2BC2 sub eax,edx ; EAX减去EDX. ^4 e' h) N7 M5 I
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
* ]# o7 A% T) `+ b& ?3 [00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX& E8 D: T- q! w" ~ ~
00403409 99 cdq# {/ D4 N0 I- [" E6 |, G
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中5 i# P4 W, |6 [. J- Z( j s
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
! {8 F& I/ l; x00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
8 v: n! T( y' U; d0 G4 d# d00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）" P. c* O/ B: b4 n
00403418 E8 6EC00200 call qsr.0042F48B ; 8 j2 P( W0 A4 p F5 `# J
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ p1 D" e3 N1 V' A+ F6 V0 \" d00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
) \+ R! n" K! {* ^- g# [00403426 E8 60C00200 call qsr.0042F48B$ ^' n3 S+ H' s) _. D
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]1 T9 p+ R5 W5 a: h* P3 ^
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8+ h- s( f) Q2 _3 _" H* O
00403434 E8 52C00200 call qsr.0042F48B. @ Y F0 f0 b8 X
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
4 A8 z4 \! Y$ |6 S" C0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
0 j1 Y1 I+ Q/ C' @) L& q+ L. a00403442 E8 44C00200 call qsr.0042F48B0 e* Y7 a' W: A. W* X) P
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
9 s7 d9 B z% |& [; ?+ E, g, _! \0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],60 e- u+ k2 t# h' F
00403450 E8 36C00200 call qsr.0042F48B
( L3 q4 z- v" \; V8 w* B0 M6 k/ d1 r00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
2 P- ^2 t, ?; B1 L8 k j; H- M7 B00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
) o5 C' F6 I! { |1 E0040345E E8 28C00200 call qsr.0042F48B
x6 l7 ~0 o, r+ X2 x, B. s00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]. H4 e6 i: B1 _' X$ `0 }& t
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2' G' y1 @+ A* d: p! a& w
0040346C E8 1AC00200 call qsr.0042F48B5 q8 R; s8 G. Q
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]2 F* l! u5 J: }# o6 S
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1. f, C; o& p* o% |5 f
0040347A E8 0CC00200 call qsr.0042F48B
. r+ L% x* a- L0 M0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]5 X( q z* P* h5 s( |$ V
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
3 F9 J% j+ b, C1 N00403488 E8 FEBF0200 call qsr.0042F48B( ?# g1 K- S3 l( v- I S
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]. L8 I: F, H' U+ ^4 C9 x) H1 e
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1' m; y! e. p+ q1 ~& W9 G3 D* d# z
00403499 E8 EDBF0200 call qsr.0042F48B5 F2 l3 ?/ F* Y( D% s2 a
0040349E 32C0 xor al,al ; AL清0
$ U$ L9 z3 Y$ m. w3 ?* q004034A0 E9 88000000 jmp qsr.0040352D
- m7 f( h m k7 O) \+ ^7 |0 p/ E004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~0 u( t% [" p1 n2 W9 k
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
; G( a0 M* e6 H! l1 {004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9: p! Z% B7 W6 J! c E. Q
004034B3 E8 D3BF0200 call qsr.0042F48B
) A. Z" I1 ~0 R: ?' ~3 I004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
% K$ x3 `* }* r/ O004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
! l C2 f, O1 h) f% R004034C1 E8 C5BF0200 call qsr.0042F48B
" ~% P( \& R. l, o2 p. f004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]. f; m8 i" F6 j# w5 I
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7% z6 h: W% G% h' g/ A; I
004034CF E8 B7BF0200 call qsr.0042F48B" j' l& D; t9 {
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
4 b9 @( |5 }$ t5 `! r004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
# l$ p7 Q; a1 N# R; m' p+ n( q004034DD E8 A9BF0200 call qsr.0042F48B! D' d1 H5 `$ F) A, M3 W
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
0 s5 f; T/ u: ?' f1 Q& K4 [004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3! z5 v/ K" I L
004034EB E8 9BBF0200 call qsr.0042F48B$ ]/ d( U1 g7 @$ n5 c
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
5 G" _5 V& ]; L/ b* Y004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2. F+ k1 P, h) u0 X# l7 y
004034F9 E8 8DBF0200 call qsr.0042F48B1 ^2 i& q: k9 _9 L1 p+ e! O
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]0 O( ~/ E; g0 {- f& i
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1# B: e; y% J; f$ n
00403507 E8 7FBF0200 call qsr.0042F48B. S) K3 a! a1 F' R" h1 e# Y/ m
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
8 X1 p9 |$ ` \" [( D00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],00 J( l3 V% Y+ h" b% p4 q* l4 v
00403515 E8 71BF0200 call qsr.0042F48B& w4 v% u/ L3 h/ \5 H6 N$ y' ~
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]3 u# J+ z u2 y/ j
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1$ C$ v# [3 W1 \; K( Y+ ]: F
00403526 E8 60BF0200 call qsr.0042F48B4 H% ], h+ V& F S+ U- K+ {4 @) l
0040352B B0 01 mov al,1& [8 J9 J) y* m, R! }/ P
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
$ w* M! Q* i9 L7 M9 n& i+ {8 ]5 |00403531 5F pop edi
/ Q9 {! U6 I% E! j; k00403532 5E pop esi
; {, a* z5 r+ |00403533 5D pop ebp( G. k* l3 _6 A, E b: L3 R
00403534 5B pop ebx
5 A6 b7 u, l$ j) H U2 z0 B! ?00403535 64:890D 0000000>mov dword ptr fs:[0],ecx. N$ y; N& i& L6 R7 f ^$ p
0040353C 83C4 30 add esp,30
" W* C& ? ^# G | N, x! H0040353F C2 0800 retn 8
" s0 l, A; X7 L# `--------------------------------------------------------------------------------
! u! i8 h; Q. Q/ u" e【破解总结】1 E' e) i: U, v) N; H
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
' E* r) z- d* ?" o5 n- t用户名：yijun6 `3 B1 v8 A: v2 H
注册码：4893*7777*3726*7777*05296 A1 x3 ~$ h3 n8 E5 W% D
--------------------------------------------------------------------------------0 `3 O8 H/ c: N' s5 W( I& Y1 n" Z
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡