|
|
|
【原创】破解Quick Screen Recorder6 k7 e3 S3 a6 S5 B! b
【破解作者】 yijun$ Y) X' q' c8 H Q+ c
【作者邮箱】 [email protected]
: H( H1 F: G. ]【使用工具】 OD,PEID
& l9 @* i; f- U2 I/ Y【破解平台】 WinXP
3 |$ M" H/ A4 i- ]: a【软件名称】 Quick Screen Recorder. Z* s# }4 P" d8 d
【下载地址】 天空- d! o! y5 g7 [$ e0 f) A; e# e. P
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
- S0 Q9 P- J" l. ]# D【软件大小】 540K0 f2 N2 q, ?9 g& [' K$ N
【加壳方式】 无
1 s8 F. I) {4 d' p7 Q3 ]' q【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）/ Z1 L5 ~9 _5 a5 u
--------------------------------------------------------------------------------5 _4 L2 Z* @- v* T+ @
【破解内容】- I- O x8 a7 S- u2 t F/ ~8 J. K2 ~
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：4 W5 n3 u2 P: I# K0 ]
00404C69 55 push ebp //在此下断* N; w' `; G( l2 F! ]
00404C6A 56 push esi4 P2 [3 k& V. `
00404C6B 57 push edi, T. Q! E+ ^% U6 X, _) E$ q
00404C6C 8BE9 mov ebp,ecx
6 j7 E1 P% _% O00404C6E 6A 01 push 1
# z* n! R: w$ o: g1 ]00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名, z+ {6 w0 @% F9 ?5 G" M; r' A$ N
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]* U. n! g% O, I
00404C78 8BCF mov ecx,edi
9 l) R& ~" \. U9 q00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码& l- p3 b6 F: v1 ~# J' i
00404C7F 8BCF mov ecx,edi
- j2 g6 ]+ e( `0 [00404C81 E8 A73E0200 call qsr.00428B2D) O7 ^0 ~9 M$ V! @3 [! m
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
( D( j$ p* K8 A3 @" ]3 w- c4 B' \# {00404C89 8BCE mov ecx,esi! V9 q# b* p, w* _) x, _
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
$ m/ }9 B" j, c2 z00404C90 8BCE mov ecx,esi- M( F& [3 l+ _( C; g: ?
00404C92 E8 963E0200 call qsr.00428B2D. a( ^6 e& h# |9 v7 O6 m+ x E
00404C97 8B06 mov eax,dword ptr ds:[esi]( g$ |1 {% L( C& f: ]
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2- D& s9 `( V$ A; V. K9 E9 I! O- T
00404C9D 7D 26 jge short qsr.00404CC5
- N1 J0 |3 ^2 v" C00404C9F 6A 40 push 403 |9 V& D& W) ?" b% v4 F7 {6 q, y
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
3 n2 A3 k7 H1 i$ O+ ?9 S% k5 W( n00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
$ M; F3 |9 W1 U00404CAB 8BCD mov ecx,ebp
' V& O/ E# u. v. c00404CAD E8 C3840200 call qsr.0042D175
9 t* M2 _5 n& m4 J; J( q00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]- k/ s: a5 v- g% T- U8 V3 Z+ r
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx. v/ ]6 n1 z& l: B$ g
00404CBD 5F pop edi
( e6 c7 \ R0 s1 _+ s00404CBE 5E pop esi
/ |4 y* N2 @ `8 C00404CBF 5D pop ebp
0 a) y3 k7 N* G2 Z00404CC0 5B pop ebx
6 o: ?" s0 @9 K F9 _1 o00404CC1 83C4 18 add esp,186 R' _ V; i5 `* N
00404CC4 C3 retn7 f0 X4 z. b" q; A4 L
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C] C3 A2 j0 E7 r, P5 p* B
00404CC8 84C0 test al,al
. J5 d1 o: [" B5 r" P1 a# I5 Y7 R00404CCA 0F85 1C010000 jnz qsr.00404DEC
. Q; Q2 X$ q2 c9 P5 V00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 ~9 d M4 ^6 k% n, `* s* |
00404CD4 E8 87E3FFFF call qsr.00403060
" I9 r j$ e* q. h00404CD9 51 push ecx! H# R1 r7 | x" W9 B! k
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
( A) u6 N r, N00404CE2 8BCC mov ecx,esp
4 c/ @3 t. R. {& M00404CE4 896424 14 mov dword ptr ss:[esp+14],esp7 @0 t$ Y; K$ l5 b, O; i6 T( I; j
00404CE8 56 push esi/ c# r2 y5 D' z5 g5 | O
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是03 z8 `# O' |% C# ]- K
00404CEE 51 push ecx6 P1 ^! z# I3 v8 Y8 [$ H
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1 a; G+ \7 I3 V( D5 {- G
00404CF4 8BCC mov ecx,esp
* ?2 t" t8 _9 ?) }7 ^/ U! Y; n! U00404CF6 896424 20 mov dword ptr ss:[esp+20],esp6 f( [8 ]% ~4 B" @" W8 n
00404CFA 57 push edi
! ` K. i' T3 f* _00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
: }- J9 Y: |* i% L' z; C00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ B2 h: Y1 w8 @
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
( ^! y9 i! ~/ f, J( d8 ?00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
! n4 c2 W+ b3 w00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~! K' N: M9 b3 \: R( A& z
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~: ~4 W2 E4 I! g, @: d j( y
00404D12 6A 40 push 40# d% r, T' F, u( `
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"7 O: h7 U+ X# M! `8 d+ {
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
" Y% A9 U; ^$ C+ b00404D1E 8BCD mov ecx,ebp
! q% |5 B/ a- H7 o1 y4 `( f& a9 Z00404D20 E8 50840200 call qsr.0042D1755 S* O$ V+ Z9 O: S6 `! Q
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]) t4 Z- p& ^+ Y- D6 y8 C
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-19 G/ ^ P2 S# [$ _& y2 v& i
00404D31 E8 5AE3FFFF call qsr.004030903 m$ F. ]1 {' m3 f% r1 D$ R3 H4 c
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]: y/ Z9 I) h v& }7 u: {. s t
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
9 s9 ?) i: Y+ W% \; R1 I8 f7 U00404D41 5F pop edi
( H# E5 ^- Y3 C00404D42 5E pop esi
$ g8 ~2 O# d2 i00404D43 5D pop ebp3 v' c* @- ]: y# m; e+ J
00404D44 5B pop ebx
( |2 L2 D3 l; Q7 E2 X- D00404D45 83C4 18 add esp,18
/ W! M l1 \ j% k' I- \" q+ A) G00404D48 C3 retn
1 q/ h6 ?: \0 v' G; t*********************************************************************************************************************************************************# v$ W* ~3 X+ V" _
跟进00404D09处CALL来到：: B& q' G$ ^% i0 Y
004030A0 6A FF push -1 //一路F8下去~~~~
: X/ d% }5 x5 p# U004030A2 68 C88F4400 push qsr.00448FC8
( y# w. M! C9 A" ?: [1 _004030A7 64:A1 00000000 mov eax,dword ptr fs:[0], @) G$ j, a8 y6 r& {
004030AD 50 push eax7 ?9 V9 S1 X m% i6 r
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
$ z1 [" y2 a! C/ m7 w2 E. `004030B5 83EC 24 sub esp,24
# l8 b' T1 @2 |7 \8 Z004030B8 53 push ebx
6 p) K: o: \, I6 B' b( u% m004030B9 55 push ebp9 e# V$ b! Y- t8 a. ?, j
004030BA 56 push esi
* ?2 k; H% t' v7 M4 x% ]: Z004030BB 57 push edi9 u9 ^1 [9 \2 ?
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
+ x9 f) ^& @$ Z: d+ r; p" L" b9 _004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& G% t2 N) [4 T( y$ N; [004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1! P9 n8 a0 d) y4 G W+ _
004030CD E8 27C40200 call qsr.0042F4F99 n/ w% V3 n* q6 r9 a# v! ?
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]; P D7 A. Q! N K8 x7 T
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax+ ^% ]- S5 q# y! n! Y$ `% Y
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
6 n) D& t ~/ [/ H/ C004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
5 v: H) S6 Y- U" L9 y2 ^1 a! [004030E4 E8 905A0200 call qsr.00428B79' |( G2 ?; l+ P; O8 g
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]6 G$ u$ |9 _4 U0 L/ i1 F9 p$ i; U2 n
004030ED E8 3B5A0200 call qsr.00428B2D
" x, m! Q5 y# B6 u004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
, }* ^( d. M) ?$ v- F, n( C0 ~004030F6 E8 7E5A0200 call qsr.00428B79* E& `7 y* O0 W' u/ s* |
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]9 M, A' k0 H- a8 I% N! G6 r
004030FF E8 295A0200 call qsr.00428B2D6 G0 Z6 X8 D2 Y2 ~- v
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]2 \1 V4 B$ D7 d5 k9 Y
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
/ h( u' {% p. \2 G0040310B 83F8 02 cmp eax,2
5 L3 y3 U6 i7 K, q$ P0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
+ Y1 P/ w) F) T+ t00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
2 ^- C* Q0 @5 `8 S& X00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
% S! z1 m. P! W8 Q; T0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳6 N# e Q: s7 o; b2 M6 m
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
1 d8 H# F1 d0 R0 s, v8 h" z00403126 6A 01 push 1
) x W% f5 N1 n9 `8 |* G00403128 50 push eax
! R. Z6 n0 `3 u% T00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]) }# r& P: y. O8 S( r& U3 m
0040312D E8 C4550200 call qsr.004286F6
3 K' t/ r, T1 x% G( @00403132 8B00 mov eax,dword ptr ds:[eax] M) l& J3 |+ `/ o1 k
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
* y* z; ^- y' {( j& G" s00403138 50 push eax
) W# ?" q5 }2 B, \% @/ j2 p8 v! Q00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
$ Y1 p. q1 U' @0 O0040313E E8 4D560200 call qsr.00428790
) J3 z F' U4 u. V1 M2 p$ X: v00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 Q) |: m; ^ w* [! e$ w
00403147 8BF0 mov esi,eax) b" M P* w: L2 O# _3 S% D6 Z; ^
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3$ q2 A& v' o8 e4 k9 G: n* b
0040314E E8 38C30200 call qsr.0042F48B
! _( j& g0 u. e) D- G4 O" F00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
9 B+ q! u! \) g# v00403156 B9 3E000000 mov ecx,3E
" c1 O3 v# D+ H* m0040315B 99 cdq
& Z. P, V0 Q! C) @; Y+ m: U0040315C F7F9 idiv ecx. x7 r& Y* h1 V
0040315E 6A 01 push 1
5 s( W* A, t- k/ ~, J00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
, I1 {" f1 ]; P00403164 8BF2 mov esi,edx
1 o' ~& r6 C4 R00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
6 M" f4 H+ q7 @, R. h3 W+ q0040316A 52 push edx% e+ T/ M4 C% X% o$ N6 e7 |
0040316B E8 0A550200 call qsr.0042867A
1 a0 Y: A( b3 q7 r. S00403170 8B00 mov eax,dword ptr ds:[eax]5 n& f: O/ ~" c+ f, t3 N
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
$ R; {, u$ |. C6 d' `: j00403176 50 push eax
: B6 A3 |9 g! {00403177 C64424 40 05 mov byte ptr ss:[esp+40],5$ s" x$ ?8 B+ g$ J
0040317C E8 0F560200 call qsr.00428790
' ? U6 V1 C5 [/ h00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ z; k6 o- I$ d6 E! z8 ~6 {
00403185 8BF8 mov edi,eax
' Q: E( r9 h; @$ a- v: X1 g% [. e' t00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],36 o5 h4 G2 F' T
0040318C E8 FAC20200 call qsr.0042F48B
' @; Z @# J- H& e1 R/ G00403191 8D47 0A lea eax,dword ptr ds:[edi+A]' q3 u+ N0 x3 ^& y9 f
00403194 B9 3E000000 mov ecx,3E
8 f2 u! `/ n) l2 C00403199 99 cdq
0 s# j9 q2 Y5 i: a; `$ E! P0040319A F7F9 idiv ecx
6 q+ d1 V, C" k: U a m0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
* u; h* l( n. s6 e8 I8 k9 y004031A1 894424 28 mov dword ptr ss:[esp+28],eax1 R' q) [& n" @' R& f
004031A5 8BCA mov ecx,edx
( n! y k9 r* g" F004031A7 894424 24 mov dword ptr ss:[esp+24],eax
/ n. W& {7 q: Z: H4 W' M004031AB 894424 1C mov dword ptr ss:[esp+1C],eax$ Q1 \! I% V( w9 l- S4 Q
004031AF 894424 18 mov dword ptr ss:[esp+18],eax5 v8 T% n. i6 S, g
004031B3 894424 14 mov dword ptr ss:[esp+14],eax/ P/ x i4 ]8 E1 @2 e
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
; S+ {9 C; y6 p* @& L) |004031BB 8BC1 mov eax,ecx$ h% m) U! p( @( X
004031BD BF 0A000000 mov edi,0A
* ]- l6 ~ C \/ S2 m004031C2 99 cdq% p: t% K' a. q6 f' d' G
004031C3 F7FF idiv edi
4 F5 w" s* U: O* g004031C5 8BC1 mov eax,ecx9 {" q3 n* S* W. R" A e% B. D
004031C7 B3 0B mov bl,0B% E$ f: Q2 D; O N# v
004031C9 0FAFC1 imul eax,ecx4 Z2 C+ Y9 ^) q6 ?! C2 I
004031CC 8BCF mov ecx,edi' p5 C3 D* H; M
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl* W3 ?$ ?( l) f3 [! N- g
004031D2 52 push edx
+ q3 R' v* w6 a004031D3 99 cdq. _8 Z/ N6 ?: h5 r! V0 b
004031D4 F7F9 idiv ecx
. n2 o1 ~$ \$ ^3 [! N004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]& c( C3 P) u0 C: j; M% n7 N
004031DD 2BC6 sub eax,esi
+ S8 t) Q6 Q9 w8 c9 X- `004031DF 52 push edx+ G# N5 A0 ^" H1 ~
004031E0 99 cdq
6 ~% \+ p- W9 J004031E1 F7F9 idiv ecx0 U& _4 @' e9 E/ W8 u' J
004031E3 8BC6 mov eax,esi& q5 Z; Z, b9 {. k' q
004031E5 52 push edx) m+ o3 E. N- S% X8 i
004031E6 99 cdq0 z: Z/ S; _0 z5 @
004031E7 F7F9 idiv ecx1 N8 O( N$ L0 W
004031E9 52 push edx
9 Z' g* h% D( T9 s' W( Q004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
, L( W' _# j; w0 ~+ ?7 l1 }8 |004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d": g8 g( b6 f4 g6 n- c
004031F3 52 push edx& G4 ]% P5 `/ n8 K+ J
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
1 _+ S: j, X9 o: u" L4 a004031F9 83C4 18 add esp,18
/ M: `+ ^* q. W004031FC 6A 04 push 4
" N9 [& |& k8 Z4 s' L004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]$ r: Q; d# J& U$ P( H. _
00403202 6A 00 push 0
% ~. b9 s7 q& O00403204 50 push eax
7 ^0 g) Y& E, \2 h1 s3 m, W00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; i* Z+ b& i( |# Q; Z" `+ R" x00403209 E8 D6530200 call qsr.004285E4% [ D' i* U8 N8 I
0040320E 50 push eax
: N) L5 D) Q: c$ d& @' e0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
: U p9 P7 ?: c, Q+ I" o00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C& k; I A- ?4 P. x1 U! M) K( ~
00403218 E8 A7C30200 call qsr.0042F5C4* [$ p+ x" C; P% ^/ S
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ Y: s/ S- \! C00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
+ B F2 z. F" O/ K. L' F00403225 E8 61C20200 call qsr.0042F48B& S3 y/ g4 o: z
0040322A 6A 04 push 49 R5 [; T2 q2 b. @# i K
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
7 M; b5 V1 H$ a3 q% t! f) x! I00403230 6A 05 push 5+ {2 u7 | E: D: |2 w ?3 S
00403232 51 push ecx
# u9 W; B8 r! Q- ?1 P' s00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: u- {% i" O7 ?7 w2 k1 S
00403237 E8 A8530200 call qsr.004285E4& G; T' o0 V8 }8 ]( v( R
0040323C 50 push eax: y5 }) V* i7 I6 e' x+ I
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 D2 S8 z% E9 g% ^7 J H
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
* C- ? b9 q4 Q) \$ Y00403246 E8 79C30200 call qsr.0042F5C4
" C; {$ D+ z; J7 ?0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
8 F: O5 O! ?- ^( k \# h: Z0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
% b# u1 v$ q7 `! F00403253 E8 33C20200 call qsr.0042F48B
* \- ^3 `' c- H0 T00403258 6A 04 push 4* M! z# Z1 n0 a" R( B
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
' A* G! [) w: x8 i, _" S O0040325E 57 push edi6 B/ Q2 D' A8 H: e: `
0040325F 52 push edx: K1 T/ e7 T/ F0 y
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' Z+ a, r2 Z5 R0 c" R) S* X( ?% X
00403264 E8 7B530200 call qsr.004285E4
+ ]9 ~8 O9 u5 _+ M, ~& y7 I* G00403269 50 push eax& m0 M Q' ]% o- U5 c2 Z
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
- Q* l: g* P# A/ l; M& c0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E9 {) O* l/ R8 p% c: @. U2 Y
00403273 E8 4CC30200 call qsr.0042F5C48 ^' H$ i. B8 k
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 Y& A% D3 K0 [0 @/ x0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl* ]! e0 I/ w' T
00403280 E8 06C20200 call qsr.0042F48B
1 j/ |. d G2 ^$ c& i6 m00403285 6A 04 push 41 G; t2 d, E+ c' M
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
* R, B: v4 o4 t0 l0040328B 6A 0F push 0F0 ? U" N/ I# L& t) z
0040328D 50 push eax# ?9 G' m- f, [# ?; ]& M' I
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]/ p6 P4 j: f$ C% R0 I+ f' f
00403292 E8 4D530200 call qsr.004285E4
: L; p" E1 j; c3 R& g00403297 50 push eax
; E) v3 `5 G4 f8 Q1 ^00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]& w1 e1 U/ g, U7 Q( N6 z
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
0 m' r( u/ W9 U& K, l' a004032A1 E8 1EC30200 call qsr.0042F5C45 s8 Q, m( @% ~8 ^- X* s
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, P& u8 c+ u2 q" N004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl2 y) b6 X2 g! }) K/ S
004032AE E8 D8C10200 call qsr.0042F48B" R1 ?( y! F+ }$ M
004032B3 6A 04 push 4
0 J# `5 K s5 x% A$ E004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]& n; P, A/ ]5 E& g. v
004032B9 6A 14 push 14$ F; I/ _$ I5 Z
004032BB 51 push ecx; {! _8 m" r% e* o1 N$ m0 ?6 {
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
. z- l6 |' ?- `$ ^4 F004032C0 E8 1F530200 call qsr.004285E44 M" d' Z5 h6 o6 Q. R
004032C5 50 push eax
0 X! m4 O5 \! W+ T& q/ j' S004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ x/ c; i& w1 A, h/ J ?004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
" j6 K+ T& E7 G6 ~2 v3 w004032CF E8 F0C20200 call qsr.0042F5C4: x) H0 K# H0 K' ?# C2 X3 }/ h
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]9 I% q* ?; c: t
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl. {2 o- s0 M$ ?3 O; v, d" b5 z0 J6 E
004032DC E8 AAC10200 call qsr.0042F48B2 I$ }/ ^) J0 P; V
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
- `% H9 V1 f8 T- H8 ?4 q/ ?# m( p004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX. h+ P T2 c, Q8 F V) [
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
4 k" e7 G; G& Q; j p) w004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL9 E( c0 F" H ]+ n
004032ED 8ACA mov cl,dl ; DL送CL
8 T& o) |0 m p5 r$ K004032EF 3AD3 cmp dl,bl ; DL和BL比较
$ u( c: O2 S: M. D004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
8 J4 _6 q# \5 m004032F3 84C9 test cl,cl
3 _ Q5 Z1 K# R7 w; k% S% k004032F5 74 16 je short qsr.0040330D4 k6 @" E& Y' K+ ~* y# X. `: c
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL5 j' J) I7 D( J& r$ A9 K8 d+ f* F
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL/ {8 A6 y% T6 N( v6 p1 E
004032FD 8ACA mov cl,dl
, q( u+ d0 M& P' z4 T- d4 ]- [004032FF 3AD3 cmp dl,bl ; DL和BL比较
: p3 V" u9 y# v- S, A6 K4 o00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）; U1 h# ^# c* i/ c6 c
00403303 83C0 02 add eax,2 ; EAX加21 V; f' s$ d. t! a/ g0 U: d
00403306 83C6 02 add esi,2 ; ESI加2
! n. q4 l Y- g- K- b o# N00403309 84C9 test cl,cl4 Q5 W5 i; C7 ?/ q$ B* t4 R
0040330B ^ 75 DC jnz short qsr.004032E9
' d: x! W( j1 [. V8 u& x0040330D 33C0 xor eax,eax
, T. s- k" n5 S5 F0 ~0040330F EB 05 jmp short qsr.00403316
9 |* O0 C* G. r( ~& P; W00403311 1BC0 sbb eax,eax
- G. H2 z* G8 t) E* g( @00403313 83D8 FF sbb eax,-19 K% K$ K0 [4 T) I4 x2 F0 F( K
00403316 85C0 test eax,eax4 {, v4 M+ V P
00403318 74 0E je short qsr.004033288 I; C2 D2 e3 G
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A/ h! ~( _) p" V. x& P: g
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
5 Q6 N, ^* g0 Q g' V8 ~4 t m; |" Y00403323 E9 F0000000 jmp qsr.00403418+ [$ C8 Y, S: S1 e( r% N7 W
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
8 C# j. q. ~# o+ \0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ W$ x7 ]' j, k, F) N8 U
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
3 X. F' r: }! W9 a) `% i) P' b00403333 50 push eax0 k2 n% W7 [9 E: H
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX( H. [ U9 u: Z9 f
00403339 50 push eax
3 ^8 M' }* B% K2 o0 ~4 a8 |0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
/ ^$ ~! _2 E5 |' f+ L0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX t) t! x9 g& @/ ?
00403343 83C4 04 add esp,4
5 t- F4 Z: S* R2 L3 i8 r4 V00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI A3 P: |1 N- i' p) u0 v
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
" L0 W5 U/ U; t9 g6 n$ K0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]8 s) t- |1 n, O. X1 ]) r. D
0040334F 50 push eax
- [. Y4 t; F/ Y5 ]2 x, g00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
( F6 L' S9 |4 E" h2 P* g00403355 50 push eax X# o. s7 J% V# o6 v. j; D2 m
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX& v2 ~$ p; f, p3 e
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX K4 W, L& H; s
0040335F 83C4 04 add esp,44 S- H( n3 M, c* e+ ~) w
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
) X% g6 G$ K5 u5 `$ e6 u: s00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
2 \) D7 n H3 Q) j; e0 B7 E- d( H00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]7 x* z3 y' v$ p2 X# t9 k* [
0040336B 50 push eax3 H- Q9 O, ?5 P$ j3 }- U8 S
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX1 O& M3 {8 w; C, [1 _2 o! B. v0 v
00403371 50 push eax
6 g z, N7 u- g1 G00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX' C3 Y% c5 Q# S; p; Q& ?
00403377 8BD8 mov ebx,eax ; EAX送EBX+ T5 D$ \0 J" j- `# v
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
2 `1 f- U5 \: g: m O: ^2 k! y% ?! L0040337D 83C4 04 add esp,4" |" Z6 c7 S. A, _
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]# g1 \6 E1 I5 D) v- i# l% M
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
1 V* U8 V% j+ y" Y( w R! F1 r) H( M1 U( K00403387 50 push eax
* s2 O2 y& }2 Z* O% }00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX3 m/ O. q9 X3 J! T9 J$ i+ o( @0 A
0040338D 50 push eax
2 }: ~, [! g! c$ d/ {0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX# n& Q5 Y" f( y
00403393 83C4 04 add esp,4
$ p$ q- h9 i5 b00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
8 G7 s! h' Y6 U$ B5 w7 \; n5 O2 q9 o0040339A 8BE8 mov ebp,eax ; EAX送EBP0 A5 Y( O2 B/ a7 F2 ?) r' E4 n
0040339C 6A FF push -1/ R$ m$ B; T( X6 C& `* [# h
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX" K0 R& R; J4 L% y y, Y9 h. o1 c
004033A3 6A FF push -1" X; o% z' n' D3 i" @+ Y$ z
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
, T, t6 f' J- }& q6 w/ S004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX1 J' y9 R6 v& K1 B
004033AE 6A FF push -1' s" z+ ?) r& {4 J& {8 F l. p+ L
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
. ?6 _% _! b G/ @- i' D004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
/ q+ o. p. H1 o8 R004033B9 6A FF push -1
7 k s7 o, T" H {0 R% ]& [8 l004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX- P3 \4 b; P% y: z" M
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
" M3 z! p. k. |. U* o004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX- _* i) U& x1 F9 _
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX9 [) y2 o, j2 l2 E
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX% H9 B. g) L9 {
004033D7 D1E0 shl eax,1 ; EAX左移1位
+ w* e: _) N. P. U- N4 q004033D9 99 cdq ; EAX扩展
1 v4 i" C m! H# L2 f004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
8 k* ~2 b: p+ @/ A2 a: z: s4 ^004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较1 P5 A/ u& }+ ~/ X4 o
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
6 Y6 z1 o4 \0 P' m: A004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A) d" y7 Q: U5 v& X1 M! \
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
/ x8 I3 V0 Z* x& h6 H- K6 D004033E9 EB 2D jmp short qsr.004034187 ]7 R' o8 {1 k# ?: U) `( o
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX. O5 [; K6 N% X. L; z# u0 A/ n
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
; V# ?" M2 H+ O0 Q% m$ Y6 g004033F7 99 cdq ; EBX扩展; ]$ z- m' N& I
004033F8 33C2 xor eax,edx ; EAX和EDX取异或4 {0 z3 N3 o- M+ O6 z! b K" R1 ~
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX z7 ^' X! D/ V4 S' b) G
004033FF 2BC2 sub eax,edx ; EAX减去EDX
/ l* t( \7 l/ e& c/ H3 J' y00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]2 T7 ^0 G5 ^" [6 b3 ^5 H2 _" P0 M
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
% M# [( s# S. C) i00403409 99 cdq5 t. d0 g$ ?- E, S& b; k% D
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中3 v7 x' y3 J, o/ m5 E+ w) f7 F( |
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
# T7 v" M: A% F* U00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较! d( Z# b( Q f
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）. ?( o1 N& U ? {
00403418 E8 6EC00200 call qsr.0042F48B ;
( I8 b* P! l* M: i0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( K. M4 {5 L$ B* v/ k4 z! P6 V
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],93 J1 k) s% Y7 }1 U4 a$ T
00403426 E8 60C00200 call qsr.0042F48B
- \! v' C- L5 C" L* g9 ^0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
' P5 T. W0 t. y3 O# g. j" m' M4 |0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8) a* U2 {, O5 C; L5 q8 F; Z0 F4 S: K
00403434 E8 52C00200 call qsr.0042F48B$ C" M! a. r2 R. ?, U" \, K1 V6 O
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 a, I) F* v( O6 V+ [: h
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7) [4 J7 b" w5 F% r3 s5 W
00403442 E8 44C00200 call qsr.0042F48B" e9 s* u* U5 F; m: h
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24] J5 {' ] b' I5 e6 t9 g7 v
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
7 d% E! E2 c) M00403450 E8 36C00200 call qsr.0042F48B
; v+ \# a+ Q6 m O4 h00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]1 h" t3 s1 ?( I8 l4 q+ ^
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],37 B* s" G9 g0 Z7 h! w
0040345E E8 28C00200 call qsr.0042F48B$ s; }8 { R; V/ B& g
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]" T0 _/ `2 f8 s& y
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2$ R5 K9 P5 K3 i% z
0040346C E8 1AC00200 call qsr.0042F48B3 M' B+ \$ \% [8 L
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ Y3 f+ n8 d8 A. w5 L& d
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1 w2 L$ p, N2 e
0040347A E8 0CC00200 call qsr.0042F48B% C! h" k8 L' h/ ^4 @$ `: t7 g
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
) a' O- g- ]3 y2 {00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
) T. X3 M7 D- K' n! {' h3 s9 @00403488 E8 FEBF0200 call qsr.0042F48B
9 l, Z9 e1 B; d1 I0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# s, o6 V+ u& e' R& [0 k3 S00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-19 H0 ^% R& j, L$ i
00403499 E8 EDBF0200 call qsr.0042F48B
1 s( o1 `* p# i1 ?2 j0040349E 32C0 xor al,al ; AL清0$ ^6 D* Y3 F5 {# Q& ]$ S
004034A0 E9 88000000 jmp qsr.0040352D
# l! y5 s* Q+ U+ p004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
' q, j. ]: o& d$ Z' c& _004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; f& `7 ?& C6 j
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],94 H& P9 z' |0 w5 C# z( C8 |
004034B3 E8 D3BF0200 call qsr.0042F48B" |7 G1 ^0 C2 K& f% E0 |& G( v
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]6 Z. n9 L9 o( H+ t& A( g
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8/ _4 E6 g: E) w- g5 w4 Y8 S9 |: c
004034C1 E8 C5BF0200 call qsr.0042F48B% A6 B$ o# Y6 m
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]5 q3 S! ]/ q) y/ b/ U
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
4 h( q' i" s+ B3 l" E+ T004034CF E8 B7BF0200 call qsr.0042F48B1 |& @: U5 K& C. n
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]. V; z2 B, y7 K3 q. U8 j
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
* }" l/ _, |0 w004034DD E8 A9BF0200 call qsr.0042F48B
6 R4 K2 `' u6 v3 g* f6 C* J004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
6 s, Z& ~1 h D3 z004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
+ A9 ^" ~$ W3 z0 d7 F9 ^004034EB E8 9BBF0200 call qsr.0042F48B
* P# B' T5 R$ u) j& V004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]" A3 ^/ E2 P- h/ N/ I9 e
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
1 _1 M' q5 \$ }) b0 ~1 O004034F9 E8 8DBF0200 call qsr.0042F48B; |) a3 A) O: v, L# c
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) ?4 N& ~$ l# l! e. W
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1( H4 e# g7 H7 U# c6 Y6 s
00403507 E8 7FBF0200 call qsr.0042F48B
: B( y( ~# U1 M- j0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]* U; C1 G% o- J( S
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
1 c0 h: E" \5 [ X$ y4 u4 X' ]00403515 E8 71BF0200 call qsr.0042F48B }2 U$ z, J$ m
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]8 {* r& W* [, s1 n7 Z* C2 X9 j3 h e
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1$ y1 |# ~) a: X2 A! X$ x9 r- d. y; H# K
00403526 E8 60BF0200 call qsr.0042F48B1 B- {- S! \9 J* v- @
0040352B B0 01 mov al,1
9 m& L" n9 ~4 C, B0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
6 i# t; \- E' Y9 y6 V, X! @00403531 5F pop edi
5 }+ p' \) C; d W00403532 5E pop esi
3 {9 o, b/ f+ F3 M2 R00403533 5D pop ebp
: K4 P: z! j4 _6 ]$ K00403534 5B pop ebx' A* H8 A1 r) V+ z
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx+ _ X/ D) a: ?$ L( R. a* y5 ^
0040353C 83C4 30 add esp,30
* O2 W3 N }+ l9 ^5 ^' ^; x1 F" O0040353F C2 0800 retn 8 T, Z9 t% A& M( f) u8 {
--------------------------------------------------------------------------------% B3 d/ O5 E: c- E
【破解总结】7 `% y7 A0 O+ m* O" D
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
& ^& d$ f' h9 F6 d, o, P用户名：yijun
- I* Q. `0 A$ e N( T& |注册码：4893*7777*3726*7777*0529( x/ w# V9 e; Y8 Z' [. l/ b
--------------------------------------------------------------------------------1 k/ _" J9 [- z& I) ?$ M. ^+ R
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡