|
|
|
【原创】破解Quick Screen Recorder8 t4 s: x5 W- B5 v3 u
【破解作者】 yijun% k3 i9 n( O: F! I
【作者邮箱】 [email protected]
1 H( Q0 J$ O# R9 b( k【使用工具】 OD,PEID
8 ^( U" i& G; ^1 h! Z+ f6 f【破解平台】 WinXP% `& T3 R0 @; p- t1 y
【软件名称】 Quick Screen Recorder. H5 h9 x( Y7 `4 n# q
【下载地址】 天空
/ F" F, b$ I) w4 n. e【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
7 j, p( T% ~. V3 [1 M% b8 B) R. I【软件大小】 540K
" ?! {. W# |) _7 \* A% ?7 d# r【加壳方式】 无" v: v( F$ T; @- H" V" Q/ f. Q
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）; W# `0 q# `2 K- C5 J {. t. _$ H4 @
--------------------------------------------------------------------------------3 o+ Q& v. O, l, \! d
【破解内容】
- d. o0 u& C4 b) |. ~0 F PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：9 w) e3 F) G6 m- O7 m
00404C69 55 push ebp //在此下断
& s) V0 Z! a9 i00404C6A 56 push esi
# n6 ?" {7 P5 L, F! y# |# Z* l00404C6B 57 push edi+ p( w7 b/ \/ X7 M/ p( k
00404C6C 8BE9 mov ebp,ecx0 `* }" b# z( G" ?) i i
00404C6E 6A 01 push 16 N9 c& L" ~, w$ d
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名* ^3 q& G, ]+ n8 S6 m" _
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]2 K& k9 [8 ?( T
00404C78 8BCF mov ecx,edi
J# f* A& F+ n( x- u# k00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
( @* I1 m9 b) f00404C7F 8BCF mov ecx,edi
. l- X# S6 |2 m) n00404C81 E8 A73E0200 call qsr.00428B2D [" |" ?; i, e$ K/ m4 {
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
0 {! Y8 E! a5 K+ R% x( f/ N00404C89 8BCE mov ecx,esi
# |* W5 I8 s2 Z# ?3 R7 ^" e' x00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
- c# L0 x( c+ x0 P x00404C90 8BCE mov ecx,esi5 D5 o9 d/ o0 i/ g- B
00404C92 E8 963E0200 call qsr.00428B2D+ N: {% Y* q4 y; W4 _
00404C97 8B06 mov eax,dword ptr ds:[esi]
) x) J* T# `) N1 M+ x* V( l00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2: H$ S% U& q, B+ P2 h- V* j3 Y
00404C9D 7D 26 jge short qsr.00404CC54 ?" \0 b! V: j) `
00404C9F 6A 40 push 408 c' e. ]5 n& v8 ^0 J
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"( T- f2 _7 N$ l3 n
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
9 ]+ l1 b$ a1 s' M' |" m5 T00404CAB 8BCD mov ecx,ebp
% @, W4 |0 a* b00404CAD E8 C3840200 call qsr.0042D1753 Y i1 R, A5 }' E* C
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]9 e: T o v4 e/ Q! V
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
8 a2 I! L' Y) y- U00404CBD 5F pop edi$ Q$ ^1 S9 g$ |: c; u& }( J
00404CBE 5E pop esi
9 @* y$ g: S* S* o+ n% n b/ c. M- C00404CBF 5D pop ebp
# G. t# B+ t7 c00404CC0 5B pop ebx
6 C# t/ E" B3 r+ {% s |00404CC1 83C4 18 add esp,18
; n% Y9 H5 a; l; R C00404CC4 C3 retn G$ h8 S; O. N0 H4 |& A& g
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
+ k; b$ A6 N$ A4 _& Q00404CC8 84C0 test al,al
& O5 q' [% P1 A) B U0 n) t2 Y2 a/ A' Y00404CCA 0F85 1C010000 jnz qsr.00404DEC) Q/ e/ |& ^5 O; v1 j
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ H: B$ T+ J ]( {0 M00404CD4 E8 87E3FFFF call qsr.00403060
0 i5 q: C' C5 `3 r7 P) a00404CD9 51 push ecx- P) ~2 k+ R/ r
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
! [* p2 r4 \+ x4 K/ v00404CE2 8BCC mov ecx,esp- e# m; I' ~3 |$ v+ l* `
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp5 v1 X: Q& G) ^* j
00404CE8 56 push esi
2 V* R( W- S& o$ P00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是03 t0 q3 e( e+ c6 D) I( \% k# v
00404CEE 51 push ecx
; J9 d! U6 M3 i8 o3 H00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
' C; u1 B; \' h9 ?5 C6 R00404CF4 8BCC mov ecx,esp; q5 {- P" Z& C/ O! i/ G
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
! N7 P% ]9 l# f2 }- A: f) a( N00404CFA 57 push edi
" a0 X0 ?3 r0 f3 h00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0' N7 L% B0 s# M/ [2 v
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 [0 _0 {1 _5 G! Z j& P i9 P- d/ A00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0 B. }8 q1 s+ q: t
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~( i! t8 m/ T" Q$ ] }# L* Z
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~: l8 @# T, C) o; Y
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
% L3 ?, T$ }" o q# A+ z; [00404D12 6A 40 push 40
; P% _. a: v% Q5 W8 |: J& {- p00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"+ x9 }) R" i" \0 ^( M. Q
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."2 I' J0 @ `: j, Q
00404D1E 8BCD mov ecx,ebp, n2 ~5 S- G5 ^2 t) `6 l* Z. T4 {
00404D20 E8 50840200 call qsr.0042D1755 P+ q1 R6 v* x$ J- J# A. f
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 Y5 Q7 \0 i% S/ t6 J, v00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1- j, h' \4 G/ H# E
00404D31 E8 5AE3FFFF call qsr.00403090# ?! F' @ \+ B( Z
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]- A! }: r; b( S {% z
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx: V: z4 J8 q, [7 c
00404D41 5F pop edi7 p# P/ a$ Q; ?8 a
00404D42 5E pop esi
0 F2 y4 a G" O' P. L00404D43 5D pop ebp" Z [3 ?$ w' T
00404D44 5B pop ebx
: j6 N9 ~, z: Z6 r00404D45 83C4 18 add esp,18
( s3 r% X# S1 Y3 t+ w00404D48 C3 retn# K$ Q& @2 d' h7 B# z" e7 T R
*********************************************************************************************************************************************************
1 e1 d7 A1 M. D跟进00404D09处CALL来到：6 w- e! G# p9 d+ e
004030A0 6A FF push -1 //一路F8下去~~~~, }) h6 v1 ~2 {% B% I% z( B# P
004030A2 68 C88F4400 push qsr.00448FC8
$ K/ L( j1 ?6 X0 e" `- a004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]& E% h7 p7 q, {* l: B
004030AD 50 push eax# @: }6 R, D7 r* _
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp, D8 n i6 u* O$ t8 |4 ^
004030B5 83EC 24 sub esp,24+ O/ g. ^ b( c3 D* D
004030B8 53 push ebx) n7 e/ C9 y0 y* s: ?, [+ N" c
004030B9 55 push ebp
' }0 c9 J3 K p, |! d6 C004030BA 56 push esi- A4 L$ S* v6 _" V
004030BB 57 push edi$ ~/ y7 q, I2 g& p/ @* Q' ]
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
; |, I" n/ g& w: Z3 G004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
/ K, A7 A0 |2 p# x; z0 U4 \6 }004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1" S" M5 @& x9 g
004030CD E8 27C40200 call qsr.0042F4F9! z! H7 k( D2 w
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
; U4 t3 O; X% I9 E+ ]9 m# h004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
( p/ J6 `( M) Y# S004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]- m& s/ h8 ^% Y7 l: t
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
8 D- V. Z* T5 f1 E5 E3 ~004030E4 E8 905A0200 call qsr.00428B79% ~; b- U5 z! ]9 x0 I. C* p
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]( W0 V. D+ Q. U! l
004030ED E8 3B5A0200 call qsr.00428B2D: |; W; [" j. k! `3 t
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]5 F' A! o- U) G( M* ]8 U/ W$ P4 z
004030F6 E8 7E5A0200 call qsr.00428B79: P- G1 I" j7 j4 Q
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]# E o. ^7 g; }" p0 c! I" W
004030FF E8 295A0200 call qsr.00428B2D
. |, w6 |! B% {; {/ C* X00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
* K$ H/ _6 e& C' a |7 v9 ]$ I00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]; ?2 d& ?7 F% H
0040310B 83F8 02 cmp eax,2, k4 {! G; m2 t
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳" \$ i" h* H; p- t# p
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
) F4 J$ E2 }9 g4 Y" j00403118 837A F8 18 cmp dword ptr ds:[edx-8],18: k& `4 B% w; Y/ v+ z e. z
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳3 ]' j: q3 d% v$ `. p7 N& n0 A
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
6 W4 v f: _" W, z00403126 6A 01 push 17 D. `( F/ H$ s* E! ^" b
00403128 50 push eax: k( } w' T- A. v+ [" F: ~- ?
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: R* |8 x( ?5 Z0040312D E8 C4550200 call qsr.004286F6
, U. q3 f5 Y N8 \, k- e# a; j00403132 8B00 mov eax,dword ptr ds:[eax]
2 ~5 r; v* g- Q4 `' E- {6 x00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]: v3 N7 y% L: Z- g( k
00403138 50 push eax3 J. t, A9 K$ B; J+ Z+ ]* N; ~
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
! p( _$ g" [# o+ ?! n0 S% ~0040313E E8 4D560200 call qsr.00428790
8 l6 v3 @, y) ?" l00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ G. a1 @( C- x" l, {
00403147 8BF0 mov esi,eax
4 E) a+ q6 Z7 ^- F00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],32 z( a) |- o6 G1 g. @
0040314E E8 38C30200 call qsr.0042F48B/ R& D- V; N/ B) v: a
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]7 q. z/ f! ~) N. n
00403156 B9 3E000000 mov ecx,3E- e V1 g( i7 c; H
0040315B 99 cdq4 Q1 V: i% G7 r" ?$ ^
0040315C F7F9 idiv ecx/ d. M9 t0 |# F0 e7 }
0040315E 6A 01 push 1
8 r. M& ~7 ~: O7 o00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]: @4 v: H# m, c- {! H$ o ^
00403164 8BF2 mov esi,edx; ?% [( u% v/ S- z0 l- @
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
" L% U2 T6 I ^' j0040316A 52 push edx4 |) r9 C0 y( `: q9 g
0040316B E8 0A550200 call qsr.0042867A/ ? c5 h4 n7 b# N( Z
00403170 8B00 mov eax,dword ptr ds:[eax]9 h# L1 z: n: F! o" f0 _
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
]2 O* h! ]" B00403176 50 push eax- i9 M6 k9 B% l! P' Z
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5" u' k! m. s9 M6 J' ?
0040317C E8 0F560200 call qsr.00428790' J/ Z1 Y5 T0 L$ d/ R
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ ?8 o5 u( d/ C00403185 8BF8 mov edi,eax
6 y* _' l, O; S; u4 h00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3' B+ |% |7 G( U1 Y, {6 j
0040318C E8 FAC20200 call qsr.0042F48B
3 D0 S) z. @ O% }3 p6 Z/ n00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
4 W' E& k7 J& B4 @7 L$ P00403194 B9 3E000000 mov ecx,3E1 M3 H! o) D" G- T) U
00403199 99 cdq
" a5 }; f f7 }0040319A F7F9 idiv ecx
, L5 A2 V e3 u0 g+ p0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]7 w9 f- x6 v& P. @% b6 q
004031A1 894424 28 mov dword ptr ss:[esp+28],eax- L# N2 i: U) c) R4 {" t
004031A5 8BCA mov ecx,edx0 @6 z3 h9 g5 l- v8 R
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
P% U% Y0 u" N! p: l$ J004031AB 894424 1C mov dword ptr ss:[esp+1C],eax5 w {4 L8 x4 w" T- o( r2 `6 C
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
) z, }9 i* O+ z0 d. V4 }) P0 T: o004031B3 894424 14 mov dword ptr ss:[esp+14],eax8 Y. {, d) q: i2 V9 Y
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
4 F) |7 z( O$ E' B8 D. z004031BB 8BC1 mov eax,ecx
% x) C% @$ Y) _5 g v, W6 G9 }: I004031BD BF 0A000000 mov edi,0A( M i! M' Q6 `% ~$ m
004031C2 99 cdq. v/ A- ]+ X, r- q2 N U
004031C3 F7FF idiv edi7 |- G, S* ~! _' D3 `% s% N
004031C5 8BC1 mov eax,ecx! h0 \$ d1 u1 M% W; A
004031C7 B3 0B mov bl,0B
0 x' B4 j* e: O004031C9 0FAFC1 imul eax,ecx" f2 ?" P' o3 {8 _& j- K" g
004031CC 8BCF mov ecx,edi0 y, P' o+ w- N& E) }7 ~; {
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
4 v# `3 A6 c3 _; ~) u3 U% i. z004031D2 52 push edx
3 a5 p# S1 ?0 c) j! k6 b5 @8 `' G004031D3 99 cdq
0 G4 V1 }5 F9 L9 x7 U. Y8 W1 E004031D4 F7F9 idiv ecx
3 |# [3 ~3 @# T1 k- B004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
# j/ L& E N; c004031DD 2BC6 sub eax,esi
1 V4 d1 W3 ^1 F _4 m# B0 @/ @004031DF 52 push edx* i3 }0 D5 a6 i& f A
004031E0 99 cdq
' w+ D( k) Z+ I, C! X004031E1 F7F9 idiv ecx8 e% r) j& u3 T- z, b5 y
004031E3 8BC6 mov eax,esi
" i3 q! S9 Z$ e |8 r. Y004031E5 52 push edx
4 x0 r! R: X9 N004031E6 99 cdq3 k6 R' t/ W' i/ Z& ^; T2 w3 a
004031E7 F7F9 idiv ecx& W) U: t( U4 @8 P& f" n; \
004031E9 52 push edx4 u' h5 I$ S5 P. {: e
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
& r8 g0 ~4 h. I- V. X' O$ v004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"! p( e% T- D/ U6 Q. l& m
004031F3 52 push edx: } l8 ]/ ], U9 z7 p. O. I# R( w
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
# d7 G1 |$ C k6 l5 B/ `1 h004031F9 83C4 18 add esp,18
. `1 u4 ~9 N7 L; n004031FC 6A 04 push 4
! ]8 @# e5 z5 U4 e+ h004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]6 ^& k" [8 @& ]& H8 H/ Z
00403202 6A 00 push 0
- y2 U% Y# z& j. K6 _) a' S00403204 50 push eax8 [1 [5 t8 t z& ` | F
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: x& x. r" G! F( H* A/ _00403209 E8 D6530200 call qsr.004285E46 c. f+ c$ l7 i: n$ S, v% Y. m
0040320E 50 push eax/ }4 b9 O! O5 I- M% F
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]( U* D/ v! U- y* o" F, t# t- J/ W
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C W; t! S$ U) Q, p C/ e( i/ h/ ~
00403218 E8 A7C30200 call qsr.0042F5C4
3 z# Q0 _, L. {+ A. v3 [0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" E6 |( o! Q7 N0 ~) r( d" B
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
( m1 _0 I1 ?/ f% c1 L00403225 E8 61C20200 call qsr.0042F48B
7 Y/ d! s3 ~% J3 y0040322A 6A 04 push 41 U# C* t X/ U0 S2 Q- C
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]( ?6 T+ W0 [2 f: v) ^- o5 U
00403230 6A 05 push 51 j8 c; s/ O0 u
00403232 51 push ecx! d% j( n" P( X5 p0 h
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]& w" |4 A* G* |6 H0 z2 w
00403237 E8 A8530200 call qsr.004285E4
* D$ Z8 B( D" j3 v0040323C 50 push eax2 y, [( L8 i) |1 o7 }- f
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]8 W6 }$ i5 {/ q; Y4 M" E, E F2 z& m" d
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D, U' z1 X& S5 Y3 G& p0 @ E
00403246 E8 79C30200 call qsr.0042F5C4
7 y6 M' z* i4 m6 M& A( \0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]; M9 n; Z4 }) g& v
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl u1 N" n! R6 x. f
00403253 E8 33C20200 call qsr.0042F48B8 M1 g1 S+ ~$ B; R
00403258 6A 04 push 4
C7 j. f! H: q3 O$ V7 x0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]) w- e# Y/ K, ^" ?8 U
0040325E 57 push edi" _# ~8 c2 }4 A& @: i% F
0040325F 52 push edx/ O+ @: s( D) i, S
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
5 K! w7 D) J4 x00403264 E8 7B530200 call qsr.004285E4% w4 k _5 |2 e3 p
00403269 50 push eax) h. y: I) ]2 i( h
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 ^" [3 x1 I* b I
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
. S9 C& m) C% t2 b2 r, Q/ M, A00403273 E8 4CC30200 call qsr.0042F5C4
( m2 U, X+ X1 o; x* p* g00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
$ ]5 c; j9 j, e- g0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
* Q& Y' P% E% _& k2 i00403280 E8 06C20200 call qsr.0042F48B; F- p5 o9 b/ d7 c/ N* A
00403285 6A 04 push 4+ M9 k: v; h- q8 M8 o* L& d: V
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]1 ~% P+ |$ [* Q
0040328B 6A 0F push 0F, F, I0 j, c( r/ @( q4 D @+ [
0040328D 50 push eax
& G7 L: C3 W/ D0 b9 _- S; ~0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]6 f0 P/ ~$ Y; r6 a* O6 i2 v6 S9 t
00403292 E8 4D530200 call qsr.004285E4" z- C0 C% D! E4 G$ a
00403297 50 push eax* Z: l+ B# z: u
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]; }& v( n. o- F+ M! W0 M$ T$ ~/ D' L
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
" p, D9 I9 m. k0 [. ~) Y6 D1 Z004032A1 E8 1EC30200 call qsr.0042F5C46 {: o x5 W1 t+ D
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# G5 S! j- N: t4 p' p+ e
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl3 p5 F" m L( Y: n$ @, i6 }) {
004032AE E8 D8C10200 call qsr.0042F48B7 \- d' W- Y3 t. Y$ x
004032B3 6A 04 push 4" [% c `7 U6 I4 |
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]- y0 A: D* _4 `
004032B9 6A 14 push 14( d4 m4 u8 L+ c- K+ c
004032BB 51 push ecx
; n/ U( Y: r" r1 S004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]8 w( [( {& C5 @5 i
004032C0 E8 1F530200 call qsr.004285E4
1 r5 o/ l7 O: i/ Q0 o1 z: [004032C5 50 push eax" T3 k/ P6 p1 Z% j# b9 _
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
9 u8 X W! t' v; s( W5 S! ?+ t004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
1 }, r+ d* q% B: F; l* z8 u004032CF E8 F0C20200 call qsr.0042F5C4
: ]* a A4 \' g; z+ N# \' B- I' I004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
" R' ]- Z6 V. T3 N0 R- W004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl8 f+ h, Q& N. H( c$ S0 O7 A
004032DC E8 AAC10200 call qsr.0042F48B
# B% g$ }/ e8 }& V7 X" K9 [004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI7 F! t" i* ^5 C' j! p% \
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
- O' }# ?$ _2 d8 c- j# P2 d004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
# z1 ~6 i& E) b5 y& ~004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL ^ d! E( B( k1 R _& M2 E
004032ED 8ACA mov cl,dl ; DL送CL
) E6 V ~- h5 n) _6 f004032EF 3AD3 cmp dl,bl ; DL和BL比较
* Q! b! v2 h; E" P# I004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
7 ]% s+ ?% d3 t Z) U! {1 X. V004032F3 84C9 test cl,cl( s! G2 b5 p: u" C& A& Y
004032F5 74 16 je short qsr.0040330D3 A' k7 H9 w- D- T5 b' a2 X' K0 A
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
' _- [' d; V: ?( s004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
$ N4 Z3 w8 M0 c: a. s8 l004032FD 8ACA mov cl,dl
( Q$ I, H$ T8 v: U" \004032FF 3AD3 cmp dl,bl ; DL和BL比较
5 ~, m& X# s0 C; r$ v& x6 Y. o00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
! N; G. N4 Y4 l( L00403303 83C0 02 add eax,2 ; EAX加2# R; X1 R4 e9 w' b- k# q
00403306 83C6 02 add esi,2 ; ESI加21 z9 {$ D9 T) r+ f Q. e9 g) T" [& U
00403309 84C9 test cl,cl
1 n5 e& M2 C( B0040330B ^ 75 DC jnz short qsr.004032E9
# P! v- b Y) }' `0040330D 33C0 xor eax,eax3 K6 j" A3 |2 \9 S2 G& O, V' X
0040330F EB 05 jmp short qsr.00403316! H9 N, `! h/ O* E+ E( A6 p
00403311 1BC0 sbb eax,eax
3 g; n& E% _7 V8 M" p9 M00403313 83D8 FF sbb eax,-1
- t4 k5 [' U( d* |' R! s00403316 85C0 test eax,eax* q4 h3 O# E6 C2 l. H7 p3 p
00403318 74 0E je short qsr.00403328
; A) Y* [! A8 j. O" t8 Z4 h2 H0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A, t1 N, h, \' i
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]3 t. O1 [) @$ H
00403323 E9 F0000000 jmp qsr.00403418
( f2 g: f" V8 o6 K+ X, E! N2 f, U00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
9 g, X+ w2 E" Y# l# v: o0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
* }5 @$ O+ x0 b* N00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]# N# }) q6 |" a( u: I! _ F
00403333 50 push eax6 O* t9 ] `, `8 e+ L. d
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX1 g7 y, k6 m0 M+ M0 ^: w
00403339 50 push eax
9 O* s/ j, g4 M+ z1 S2 |0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
* @$ L0 k* T. {" |, B0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
' ^4 W( l& O* @9 Z' H ?8 i$ R00403343 83C4 04 add esp,43 B- C4 o1 D8 A0 E1 x# m8 J
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
$ c* F3 z+ p2 n+ w00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]& K; Z, E! ?( s7 w3 d
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
' Z G4 o6 O8 {1 b8 c' N4 C0040334F 50 push eax# K/ J8 M2 C: ]1 J2 I7 ?
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
9 T* i3 c6 `& B2 U2 B00403355 50 push eax
# N$ I- U! U9 h2 [3 c00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
0 K3 l" I" T0 P& t# _0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX9 n# h2 I4 J4 F: R
0040335F 83C4 04 add esp,4
3 U- T7 s4 |& ?+ S* s: Z: Q. `00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
8 C& ^: T5 ~. b% F00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]1 U* e$ @. Y( @
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]$ M4 i% u' t7 z9 G, B0 r
0040336B 50 push eax5 L1 s/ @ ]) y2 Y, u
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX. O: ^ O! B% _# o# N p# Y
00403371 50 push eax' G8 T$ v& j9 \2 \, d
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
4 m! f$ u h- w" v) [00403377 8BD8 mov ebx,eax ; EAX送EBX
9 C m4 m( o, X& ~3 G' G7 D00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX# B% C& s! j9 S# Q7 o5 j
0040337D 83C4 04 add esp,4
; b# G1 J$ n9 d K0 a) g00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
" r1 H% ?; E# e% m) v00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
' l' E' K# n3 |. M" Y00403387 50 push eax/ s; c: R3 c& ~' a8 U* o
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
/ i! R. R6 g4 s+ u3 p" u- M1 t1 l6 ? \0040338D 50 push eax- S# h; T" ?9 T8 Y% B
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
! ?+ w# S4 ]2 c _00403393 83C4 04 add esp,4
4 x' h- o. S7 b2 _! R7 D00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] [7 n( @% c" @/ _
0040339A 8BE8 mov ebp,eax ; EAX送EBP
3 H+ N+ F) |5 F, }, r0040339C 6A FF push -17 ^6 r- g& @- }( b% Z7 I
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX- {% h% D; w9 G! G2 l! f# s1 P
004033A3 6A FF push -1
4 q1 p! l. D$ p004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
+ O5 }# W D" y6 @' a004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX" y7 o. }4 @4 o9 K: D
004033AE 6A FF push -1
, d2 O( M1 F+ t7 M& a5 V3 w004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX5 v) n! s- o5 {' a
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
3 r) Z( L: E8 p$ q, `4 X9 ^3 o% _004033B9 6A FF push -1! |! Y6 G- E# t0 g4 R9 m& K! G
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX$ C# L& I8 o) k, {4 D! q
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
# c9 E1 Z$ Z6 W/ L. w2 g004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX; b( x6 o( B0 |# w/ O: w7 P
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX2 g1 I6 A6 r' |0 _+ E
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX2 w& I- A, P3 s0 W+ u6 t4 v6 {
004033D7 D1E0 shl eax,1 ; EAX左移1位
' i# T9 ~: U2 ~8 z2 I' h004033D9 99 cdq ; EAX扩展
; L# ?* n) E( T% A: v( h004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中0 S. R% P0 i# f1 _
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较* c& x" t8 [9 |
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
, Z) j' G9 Y/ t& x4 S) N4 T. {004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
- G" A: Q0 Y& }4 ^8 Z% `" d i004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
# \- Y5 k) o1 u) n7 M/ D( ^5 j004033E9 EB 2D jmp short qsr.00403418
$ I* ~# R0 `% y004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX# M8 G* ?) R2 d3 e
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E25 ?$ R9 h9 ~& \) }; Z( } N
004033F7 99 cdq ; EBX扩展
7 S( Z: x( }* \! a004033F8 33C2 xor eax,edx ; EAX和EDX取异或
) U& [. T2 z9 ~004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
* J$ z, A# Y d5 `) L5 k004033FF 2BC2 sub eax,edx ; EAX减去EDX# [; ^6 O0 s$ z9 s# e `4 K
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]# r# |) r/ X, T' p8 j; F8 i
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
+ l: `! e6 n4 s0 W6 M9 |) F00403409 99 cdq
8 G$ y: ^# T ~ k5 |% v: _0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
j1 p% P! L4 G d4 n7 j. f/ c0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX- B) J. w: W: ?6 P+ `6 W$ s
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较! f! I* Q( M" U$ \: @
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）' O* C$ ^/ Y6 }! r) c
00403418 E8 6EC00200 call qsr.0042F48B ; , ?+ J# k8 @: j/ n' }
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
9 V; Z! s2 {, B9 D# a00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],99 C! o6 j2 t7 h9 b) r- j5 N/ y
00403426 E8 60C00200 call qsr.0042F48B
6 c f1 u0 _. _; ]5 Y) i0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]5 J' _) r6 o$ c- j) E
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
" {+ ]$ q9 g0 w$ J+ M2 F, m00403434 E8 52C00200 call qsr.0042F48B* U; a4 K$ W7 w+ l& [/ p
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
; {4 s* V. t6 O1 v. k0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7$ W) P9 u4 w4 [( B# E
00403442 E8 44C00200 call qsr.0042F48B$ @1 G) l. p3 I1 S; E5 B5 _1 ?5 g
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]1 k9 I& b- x( c& {* s( G
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6( U/ {6 Z3 {8 Y% w
00403450 E8 36C00200 call qsr.0042F48B
7 Z1 @; U" [7 u/ c00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
9 m, ^8 P$ h' u' c! j( g00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
8 |9 Q& F" A/ F2 B7 V! u& ^0040345E E8 28C00200 call qsr.0042F48B
4 [4 P _" u1 ?+ e00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C] L3 ]3 [; T: ?) g6 R& c u+ z9 o
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2& H7 r8 w1 s6 E( H; F. n1 A
0040346C E8 1AC00200 call qsr.0042F48B& z/ v: P* b: {( q) L( @
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
, j4 }* y! k \5 L00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
& l' a% h. z; \. d# B3 D& _0040347A E8 0CC00200 call qsr.0042F48B
2 [/ X* V$ e: G N0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
- h0 K& I; G8 s/ g" h: Q% g M00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
9 U; U3 {; d8 K b# E00403488 E8 FEBF0200 call qsr.0042F48B
/ i. d! p+ E9 g4 T- @6 w0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]6 v- A: o% M0 F9 Y1 z) j2 {
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
) n9 y; p$ R" H. h00403499 E8 EDBF0200 call qsr.0042F48B
& ? ^' S1 p" n: f2 u6 X i0040349E 32C0 xor al,al ; AL清0
7 v+ a# U' ^3 N3 ~2 `* n& X004034A0 E9 88000000 jmp qsr.0040352D
2 |" D! D0 [+ Q1 k( m% ?/ j004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~+ ]0 n( r8 q% N: |0 g( u! |
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
4 C$ Z5 L9 s3 }4 t. a9 E4 y9 Z4 x" |004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
, J0 a+ R! D' I% Y8 |004034B3 E8 D3BF0200 call qsr.0042F48B
/ k2 t8 B; V$ d( ^) A) J, w004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
4 R6 j: |& J" T9 H# l3 N1 v9 B004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],82 |! P; m. J( `4 y# Y5 T. p
004034C1 E8 C5BF0200 call qsr.0042F48B h! c: j9 d5 U3 P6 A
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( t5 [& T3 v/ M5 ]004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
4 E7 E& J0 Q2 k" v% ^* i! o L004034CF E8 B7BF0200 call qsr.0042F48B6 v0 ]9 B+ x- T( T
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
. }& R, k, \4 l# @2 G& w004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],68 j. T& e! V7 ~$ i# }" {
004034DD E8 A9BF0200 call qsr.0042F48B) {+ J& W6 Z: k8 }8 U; s
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
/ i8 _1 h- h4 |8 F004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
' R5 v- z9 D e3 y1 C004034EB E8 9BBF0200 call qsr.0042F48B
! p- s" k: o, f h$ a- W004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
* r5 Y, D' M$ g0 G) D$ W004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2: S- @: Y! F& G/ ?. s9 u
004034F9 E8 8DBF0200 call qsr.0042F48B
/ U) @, ?3 S. \, @% r6 O) ?) ^+ `004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20], H4 Z7 e0 p6 L2 N% _' C2 p! q: z
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1- P: S$ A1 M4 `5 g$ s/ D
00403507 E8 7FBF0200 call qsr.0042F48B
/ t3 R* [5 [6 A3 ]3 x0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
5 J% i+ K% z- E) V! E) c& O00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
# q3 _4 C' o: P) v" a/ n# N% N5 B00403515 E8 71BF0200 call qsr.0042F48B$ S0 x. {2 Y1 o
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]* L+ p* q0 {; @1 ^- W8 [. M# j: z
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
7 y3 X& Q# q3 X; K# j) D00403526 E8 60BF0200 call qsr.0042F48B
- v; m. {9 E% U0 Q% E, d1 w0040352B B0 01 mov al,1
: p8 G& W$ S, H n$ ~! i0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34], K/ t5 A$ R* [, e$ K
00403531 5F pop edi2 Q |& o7 x( Y
00403532 5E pop esi
4 `+ H, ^' `7 o, z00403533 5D pop ebp; V. X9 x) k9 @
00403534 5B pop ebx7 q* B Y9 O9 E" x& S6 k8 q9 H
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
/ K# |, h6 F! i* q! _0040353C 83C4 30 add esp,30
7 ^- ?: u: N( \, N$ M+ h+ ]1 _0040353F C2 0800 retn 8
5 }4 h+ V; o9 E8 \--------------------------------------------------------------------------------
5 X5 c+ j5 ^1 o0 I2 W& B: v9 c* n【破解总结】# a( `5 l& N2 T$ m
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^. I/ n; S: s' g. R
用户名：yijun
% v( u ?- [2 z4 Y5 x注册码：4893*7777*3726*7777*0529+ u! p9 m( [1 V
--------------------------------------------------------------------------------
) L# s0 g p' R1 p7 |8 B8 \3 |【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡