|
|
|
【原创】破解Quick Screen Recorder
/ K8 `9 H8 }) ~% x1 f$ m【破解作者】 yijun
$ E3 o9 ]; H }7 Y【作者邮箱】 [email protected]
! t, l, o" k8 D. s【使用工具】 OD,PEID8 Q& Q3 Y' i' P7 {" I' `6 K5 x
【破解平台】 WinXP
8 N' T0 x. d. n2 B【软件名称】 Quick Screen Recorder/ F) r0 ?- Q+ x
【下载地址】 天空
2 Z, R/ E2 L9 S7 C4 C【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
& A p7 Y8 a" d" c# Y* T/ C8 o【软件大小】 540K* \( B7 m) v. b3 i8 r& t2 b9 u
【加壳方式】 无
5 x; }+ q* x/ _# V【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）6 Z$ a" e9 c% }
--------------------------------------------------------------------------------; y7 }7 W& d; \3 s! G
【破解内容】1 Z% }' k8 }5 e& w: p
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：: R' }, ], G+ c/ S! A% t$ k
00404C69 55 push ebp //在此下断' p# o( |+ @) S9 q8 Q; A
00404C6A 56 push esi
5 |9 Q6 T5 Q# y00404C6B 57 push edi( z, x: U& B+ H, F! |* e6 ^" M1 L
00404C6C 8BE9 mov ebp,ecx+ l7 h! h# T4 Q* `5 D* A1 K6 h
00404C6E 6A 01 push 1
0 G2 K' L+ T) @4 c0 [6 s+ n00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名) P' R( `( _; N t! p0 X
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]3 A, Z* O* N! U/ z9 W- W
00404C78 8BCF mov ecx,edi) r/ B! |/ r) C) L4 O/ v
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
, m2 F7 B; g0 d# d# ?( z00404C7F 8BCF mov ecx,edi8 q+ B+ o+ H, }7 X; v' \9 g7 ^" C
00404C81 E8 A73E0200 call qsr.00428B2D
& }0 q0 W1 g; n00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
( U4 R1 \" |' [+ h& s' p0 j; n* ?00404C89 8BCE mov ecx,esi4 f# {; d5 p& W; ]: c; R8 Y
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX$ K7 j3 Y: Q2 @+ \" K, Q
00404C90 8BCE mov ecx,esi# K8 E. \* t1 s0 D1 T
00404C92 E8 963E0200 call qsr.00428B2D" i- ?* i$ s0 w6 B; w. D$ n% [
00404C97 8B06 mov eax,dword ptr ds:[esi]3 l1 x8 K# L9 V7 K) p' a
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
. B# w% x% @0 ^8 c( p0 T00404C9D 7D 26 jge short qsr.00404CC5( X1 L4 p# s8 g! t$ T7 j" x O
00404C9F 6A 40 push 408 K; o* x# W/ y
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
! R2 F* x' e2 `3 n00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
2 t# A3 p B: K: U) V7 o3 {- G00404CAB 8BCD mov ecx,ebp
- i: K v0 T( }* Q5 K% j/ ?4 M00404CAD E8 C3840200 call qsr.0042D175
% ~ C% {5 b4 T) g9 F00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]3 q3 H( s3 ?" Z. K& i
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
3 L; `; P* P, }! U D. @- g00404CBD 5F pop edi
, l+ K% Z6 I& @00404CBE 5E pop esi; q8 `) x2 [' \8 `) ^
00404CBF 5D pop ebp2 T/ R, f; s0 y$ g! T
00404CC0 5B pop ebx; [3 q9 E$ Q4 k) a) P% \2 _' ]
00404CC1 83C4 18 add esp,18
' v9 P# h( c" Z* S* ?4 l00404CC4 C3 retn
8 b$ _3 c1 ?" |& H3 Z- \# @' s: n$ R00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]* z) i+ x& N$ u( S$ y$ X
00404CC8 84C0 test al,al
1 Q$ I3 h" r r' ?" q) W$ s00404CCA 0F85 1C010000 jnz qsr.00404DEC
. B/ ~' Y( {5 z6 K) F00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
) q$ I C O9 z00404CD4 E8 87E3FFFF call qsr.00403060' ~* J) D3 @5 |% A& K
00404CD9 51 push ecx3 d( I' b8 v3 @ a9 e8 n! {
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
]4 K, e" ~/ ]* t) u: V00404CE2 8BCC mov ecx,esp. u8 K; o& |" U$ ~4 z
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
/ W% W& [' z# m' X, R00404CE8 56 push esi$ i, x D; d* u& W9 K1 X+ ], H
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是09 l+ c- L2 q: e) n# w
00404CEE 51 push ecx5 W( J; E" Z; D
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1 l$ ]% }4 r( v
00404CF4 8BCC mov ecx,esp$ H" {8 r: ~: N; h+ O% @0 o3 O `
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp6 C! q0 Q& p! ~! m9 Y9 C8 B/ G
00404CFA 57 push edi
# t) d) K6 L. K( W+ z* `; j00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是08 W) K( x$ ^! [' T5 }6 K
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
7 A2 E3 @1 T5 ^8 U00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0* w5 p. ^1 n5 L7 }' F( m6 I
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~. H# G: s: G0 Y0 U' }6 D; p2 u
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
$ G. F2 X. C/ X00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~9 _' e* A. U5 e/ o/ O0 `
00404D12 6A 40 push 40
0 ~+ l8 _3 e0 x3 S' M00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
+ y4 I* U: U/ E; g. t, L5 }00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
$ S2 v9 `4 B: C# O; Q$ m- S2 }00404D1E 8BCD mov ecx,ebp2 I! C- ]% M$ L" j/ `
00404D20 E8 50840200 call qsr.0042D175
2 }! E {, D& w00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]! f4 S: U1 i- a7 y
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1- j, T0 M) _* _: q* a
00404D31 E8 5AE3FFFF call qsr.004030909 a( \% x$ ^+ N6 b' [" Z% F
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]. R- G5 e- e, z
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx" A% H! d. `& v2 |: p/ l
00404D41 5F pop edi: u$ }( ^& w+ F- o8 t8 I% I# \
00404D42 5E pop esi
2 E2 M( x* ? N8 K+ S00404D43 5D pop ebp& D8 J( {3 r5 }& c8 w+ U
00404D44 5B pop ebx4 F+ ^( v" s8 T$ n0 ]+ e
00404D45 83C4 18 add esp,188 l" x, `: I& I' p3 u; \/ Y0 k* v- o
00404D48 C3 retn
; w5 n$ ]& w9 q/ K: e7 l*********************************************************************************************************************************************************
4 X; K9 A2 p0 N D跟进00404D09处CALL来到：
5 K) ^/ K' E z3 {* F& w004030A0 6A FF push -1 //一路F8下去~~~~" _. ~) q( S# k& _; {: ~; G% ^$ \; Y! ]
004030A2 68 C88F4400 push qsr.00448FC8; {% ~1 l+ u2 J* i# t; O
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
& V" U( o. t) F! r$ o+ {* p: F0 w( W004030AD 50 push eax
7 D1 |) _3 e$ q. L$ D9 L2 h! V. r004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
2 O0 V& ~1 i! ~4 A( f004030B5 83EC 24 sub esp,24
0 |0 ~' {9 Q1 n& B& [& o! Q: ^- `004030B8 53 push ebx* U* J2 v) z: F0 X+ f( Y
004030B9 55 push ebp
" Z0 p7 z2 Z; U1 `004030BA 56 push esi l' C9 x: e3 B; E! U- w$ o8 C
004030BB 57 push edi% B& M7 m- W0 V. N* @: f
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"+ G2 ^9 y5 C, X9 A# C; u U8 Q, O
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
% m0 @ | @' D; ~/ t, ?$ G" r004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
5 M& u! O6 S: U6 p$ B3 E004030CD E8 27C40200 call qsr.0042F4F9
5 h( ~# }) s! ?5 J9 S2 P0 H. G004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]& [8 l! |3 K/ w# G
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
" U8 Y9 n' ?/ g" s& O! E004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]/ |& D) C' N9 G/ W0 [
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
, I( x. [" @; P2 _" a; U' ]004030E4 E8 905A0200 call qsr.00428B798 j/ n! |8 o6 f
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
" F7 h" ]/ g1 S: j7 x004030ED E8 3B5A0200 call qsr.00428B2D
, s3 }8 i, t* u9 d5 k( ~2 q3 k004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 S% i9 r3 F8 S9 ]004030F6 E8 7E5A0200 call qsr.00428B796 M$ s0 @8 c6 e" c# V
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 S: R' o6 x* |5 Y004030FF E8 295A0200 call qsr.00428B2D4 p% `& w K( F* ]0 a* w
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]. }( \4 Q" k5 H4 g' E2 s" z
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]. A: n9 r, t$ J% _& W$ Y
0040310B 83F8 02 cmp eax,29 H4 u; t D0 r' C! c
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳& _5 F- z6 M" o; A) J4 n5 m
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]2 W# J- C8 t# `6 I% q9 c
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18* j) Z+ { K8 Q6 e, `0 q- k+ I* `
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
6 ]2 \" \/ V2 f+ Z, O00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
2 ~8 g5 k6 S5 }! v: n2 C00403126 6A 01 push 11 |3 v: g; `* s- l# p
00403128 50 push eax
5 p2 O- K" R, R0 x) v2 W00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
) U8 S2 u) V- X. g0040312D E8 C4550200 call qsr.004286F6
: _) `2 n* h- [3 [& F% o7 f00403132 8B00 mov eax,dword ptr ds:[eax]
- B9 h( W9 _% r' b$ k00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]2 x D9 O8 B; D
00403138 50 push eax& m1 W) c2 Y6 O' L* M% T
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
) E+ n- U( V$ c1 w! |* h! K0040313E E8 4D560200 call qsr.00428790
% c) x) B8 D# l7 f7 w y( p00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 t, f$ R( \9 {# ^- C9 _) G% Q1 ]00403147 8BF0 mov esi,eax
' C% X; Q% U! F z1 n. b. A" u00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3! |) s) Q: O0 z3 }2 z: l) N; \
0040314E E8 38C30200 call qsr.0042F48B
/ e' k/ H# G" l& A% n! e; s00403153 8D46 0A lea eax,dword ptr ds:[esi+A]& S# p; L7 F. g9 I+ ^) z. T7 @" w
00403156 B9 3E000000 mov ecx,3E
: }6 f g1 R# k5 I- A9 ]. Z0 S0040315B 99 cdq% s# A( @9 C7 B ` e
0040315C F7F9 idiv ecx
" p# v3 l; K1 D/ n# `$ b0040315E 6A 01 push 15 ]! f; V: K. P- e: E
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]+ V* K( x' Y1 {* U
00403164 8BF2 mov esi,edx
' {; z. [; F$ f00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
; r9 _/ Q6 f, o3 Q* H0040316A 52 push edx
9 z+ H5 Y r5 _" y' n6 Z; \0040316B E8 0A550200 call qsr.0042867A
& _% ~- H5 N+ \' E1 |7 m00403170 8B00 mov eax,dword ptr ds:[eax]' I. {+ j2 ?7 P3 L. h
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 ^% l9 ~* f, ^1 M& E$ O
00403176 50 push eax" m: k1 D1 l8 J8 s3 x( x
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
4 F: ~) A5 M! r0040317C E8 0F560200 call qsr.00428790
" z, ~& |! I% p) S+ }00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 C# b) p- T$ [+ a, v% X7 X00403185 8BF8 mov edi,eax' X9 }" y8 z. [) F3 p' |( h
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 n) Z2 r; W' R6 J% N/ ?. V9 U0040318C E8 FAC20200 call qsr.0042F48B: r5 t" {* G& U7 H# ?
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]( R2 e9 A: J& w. F
00403194 B9 3E000000 mov ecx,3E
- c/ Z9 B; E+ ?. n# ]% ]# M00403199 99 cdq" |' c V- k0 w* q
0040319A F7F9 idiv ecx
) z8 \6 X, Z8 g2 Q7 N( F" J0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]0 Y4 l3 T) d0 y
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
& n2 h1 p, c0 V1 o) b004031A5 8BCA mov ecx,edx9 t+ \9 q- t/ J. s6 I" H' n- q+ F! _
004031A7 894424 24 mov dword ptr ss:[esp+24],eax0 ~9 b+ [8 Y+ ^$ ^1 ^; o/ h+ o
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax; N% `5 N7 U4 a( X% n! [
004031AF 894424 18 mov dword ptr ss:[esp+18],eax: ~+ V# i9 K) T9 H7 f( j
004031B3 894424 14 mov dword ptr ss:[esp+14],eax9 u* V0 B: N$ F4 C$ X* {& H: f7 p
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
8 f* ^; ]9 u9 @/ X; N. _! K8 v. x% x8 C g004031BB 8BC1 mov eax,ecx
# o) W8 ^2 c* s0 P* G004031BD BF 0A000000 mov edi,0A( D0 r) I2 |" H$ K# j5 I
004031C2 99 cdq
% ~/ J0 b1 A" F- W) g& ]* ?004031C3 F7FF idiv edi
+ n! |* ]6 }: B X004031C5 8BC1 mov eax,ecx
d2 h+ k3 H- V h004031C7 B3 0B mov bl,0B& b9 x4 A( t' k) T5 x* y7 [* E5 A' d
004031C9 0FAFC1 imul eax,ecx
% S+ h6 f$ G- ~3 H3 `# E0 d" M004031CC 8BCF mov ecx,edi
; d9 w* {0 V. a O0 v' Q; X8 e: [004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl/ R1 t. x# s0 d6 b8 G7 Y
004031D2 52 push edx8 g$ A6 s5 A0 W" O* k
004031D3 99 cdq
1 v0 Z8 E0 x2 C# x; A0 v4 s5 _004031D4 F7F9 idiv ecx
; c/ S- o! W- Y$ j6 d" u5 b004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]9 @2 c" ]6 K. P( N; _
004031DD 2BC6 sub eax,esi
+ `; q' ~/ G- s( ^; K004031DF 52 push edx S t2 e O- t* O0 J
004031E0 99 cdq c- t. Y3 f$ E- t1 R" R" U
004031E1 F7F9 idiv ecx
( N; x: F V& T$ R004031E3 8BC6 mov eax,esi# Y7 W% O( z3 L) A$ s, B' ^7 [
004031E5 52 push edx
$ |! O% k7 [" v004031E6 99 cdq& i# o& x2 }# h& C% \8 r8 ~
004031E7 F7F9 idiv ecx
( \' [. D7 z( |4 O6 m$ x004031E9 52 push edx
5 x! O2 E7 H% n004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
1 Y; p+ G# c t8 q( ?$ ?% i- ^004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"* g' X$ o. t# P0 E' e% t
004031F3 52 push edx
% h* d% p0 q" U! D2 |, F004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
! a, f+ |" K' ~- S3 b004031F9 83C4 18 add esp,18
9 |5 g3 W0 `$ s# b" q004031FC 6A 04 push 4
& a& I/ I3 n% e6 m+ Y004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]: I& f, q4 R# M4 a( `2 o! [
00403202 6A 00 push 0
& R0 p- D7 _' D6 x7 Z00403204 50 push eax
2 r0 X- e' `4 x% a: c00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 U. T x# |% q1 F; d00403209 E8 D6530200 call qsr.004285E4# v2 Q& e5 Z# s# Z3 t. A1 b
0040320E 50 push eax0 }- w# `* T" E# `3 k
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
. l- ]1 F' G% ^1 U00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
; W- Q# I8 S% T) j& r, e00403218 E8 A7C30200 call qsr.0042F5C48 I/ d/ T) c. B3 t* ~
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 x! q* a" h7 A# a00403221 885C24 3C mov byte ptr ss:[esp+3C],bl" Y) H" b. T$ Y& U. u
00403225 E8 61C20200 call qsr.0042F48B7 o: R3 u S" l$ p4 F
0040322A 6A 04 push 4
9 _, g8 E& l& N u {- O; g( c0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]: F. ]1 n3 T6 L6 r* N' O/ b) S0 N
00403230 6A 05 push 54 f( w$ v) C5 ]$ y4 D! u
00403232 51 push ecx
# E2 ~; M" W- z) ~. F00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 J/ P; O6 s: x( r8 m
00403237 E8 A8530200 call qsr.004285E42 E( Q/ z/ ?4 _1 i% Y) f5 C7 N
0040323C 50 push eax- o" r" X1 W; L1 x/ j3 l; l. R. V" ^
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
6 z9 Z3 R& n& @- l+ n! Z00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
1 Y0 x) w0 {. ^ n5 j/ [: Y5 @& Q00403246 E8 79C30200 call qsr.0042F5C47 t, g0 Y1 B* b) E) p
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. e, Z" [" \' `2 a4 j- Q0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl8 Y' H# O3 {7 e
00403253 E8 33C20200 call qsr.0042F48B2 `3 x( y2 B) V# M Z x( z% c
00403258 6A 04 push 4
" i# g: U' r% t6 @" e( O' E$ T, J0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34], U0 F* ^7 M- x) n+ G
0040325E 57 push edi
1 n# w7 X6 k+ {, ]; ^: O, b# W0040325F 52 push edx
/ }6 e+ y* r/ D00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
, z+ m; V/ a7 e( k00403264 E8 7B530200 call qsr.004285E4+ m x: t1 n$ }/ h
00403269 50 push eax
5 V" l( x0 z+ ?4 \" r0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 C; x$ X: f% ~( S1 A2 B1 n2 b
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E' h, Y( f* m! |
00403273 E8 4CC30200 call qsr.0042F5C49 m, [4 a T* I1 ^. j# y
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ o2 y4 [2 m; o; a* J8 T
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl1 F5 f& B/ [3 s! @( W% v& ~/ k( y
00403280 E8 06C20200 call qsr.0042F48B- u$ r7 l" I3 P/ [
00403285 6A 04 push 4# i p' I& n5 D2 g
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
1 w8 b- t- t" _8 [- D2 v0040328B 6A 0F push 0F9 S- R; U- w) P& t1 n( x
0040328D 50 push eax
+ N, u/ z: R7 u0 ?& O) p0 s0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
, y; R+ l5 q- R( I# g/ r00403292 E8 4D530200 call qsr.004285E4( M" e7 Q/ P6 ^9 g0 x
00403297 50 push eax
- p- `" c0 y% d00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]) G# j) t& X! F4 K
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F2 T& S0 q3 d; G
004032A1 E8 1EC30200 call qsr.0042F5C4
Y9 Q7 y: p! m/ R& z004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 A2 b0 L0 E. V' H004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl0 \/ C8 ^8 Q: n+ H& J
004032AE E8 D8C10200 call qsr.0042F48B$ Z! ]2 {: R+ d
004032B3 6A 04 push 4
0 }3 D8 L( I( Q, Q& C004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]. J' V; L8 k9 t1 |( z# {
004032B9 6A 14 push 149 E9 `( o3 |% V# n. x. o) }
004032BB 51 push ecx( m$ G t& |% e; l5 {' X
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' ~# D' w8 Z( n- ?. y' _3 [ _) Q6 L
004032C0 E8 1F530200 call qsr.004285E4: P9 k4 x% c) V& ]8 b
004032C5 50 push eax
T& [7 K0 R: C1 I d004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& N n* s0 p2 r' U- p$ ]3 d- Q& l004032CA C64424 40 10 mov byte ptr ss:[esp+40],10$ X) Y- w5 s, ^. q6 _
004032CF E8 F0C20200 call qsr.0042F5C4% Y$ ^$ @& E7 A3 f% }' P
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* G4 ?8 y: H/ _/ `- z8 Z$ T7 U004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl: ^+ C [6 ~1 M
004032DC E8 AAC10200 call qsr.0042F48B3 s# t. g# G6 m' I
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
0 R9 d5 _2 q. N( d. ]# Z004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
+ }7 ]/ ]: R% \004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL' l/ I* a1 z! ?+ p, M# b
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
w& L8 J, R, @5 l6 U! J' _5 Q004032ED 8ACA mov cl,dl ; DL送CL
|+ P6 [( I. y* h; F+ I3 c2 c004032EF 3AD3 cmp dl,bl ; DL和BL比较
! w8 U7 P, n+ { q004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）2 _/ Q' B. i4 K {8 C
004032F3 84C9 test cl,cl& A q$ A9 c+ Y5 F6 x0 ]% U6 C" Y
004032F5 74 16 je short qsr.0040330D
1 d8 q! u8 G# W) k$ U004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
2 F5 z) D) [+ L2 [* ]004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
. T7 k' R7 o0 P004032FD 8ACA mov cl,dl# ~: i% J3 Y" y! ?7 V1 r
004032FF 3AD3 cmp dl,bl ; DL和BL比较2 Y7 }2 x \4 a) l0 G
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
( x" ?. q, Z6 ~8 Q$ Z00403303 83C0 02 add eax,2 ; EAX加2
# R# ?9 v/ h0 p9 A! H00403306 83C6 02 add esi,2 ; ESI加2
/ ~$ O. K, A& ~, t) @3 R0 Z& t5 K+ j00403309 84C9 test cl,cl
4 i! T, `6 N+ ~7 ?- d W2 I0040330B ^ 75 DC jnz short qsr.004032E9- ]7 L1 S( R4 x5 s* }
0040330D 33C0 xor eax,eax
0 z) O/ |( q/ U; \7 T0040330F EB 05 jmp short qsr.00403316$ ], ?% P: Q2 w
00403311 1BC0 sbb eax,eax- c D$ K% N. X1 z: C4 P
00403313 83D8 FF sbb eax,-12 n* c' `! M0 E% H% _$ O+ j
00403316 85C0 test eax,eax
$ k m4 o5 C! [3 y00403318 74 0E je short qsr.004033289 I% k; }8 o) d- g; `: \
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A+ ?& }4 j9 N$ L H; G/ ^
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]8 m! m6 r7 v2 ^7 M: V) e
00403323 E9 F0000000 jmp qsr.00403418( O! T, ]! r/ w# j5 a6 }
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
9 j' v4 z: J5 r$ V6 R; P! n0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 J# N2 X3 I# r/ K
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]$ ]5 F0 m: q4 B& q; i
00403333 50 push eax
& F5 X$ ]9 |0 r6 E) E6 Y4 a) ~" ?00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX7 I- g2 ]. [8 J4 X, ^: q
00403339 50 push eax
0 c; @* p$ P P$ J0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
4 C, s q0 I! p ^! y" l6 r3 I; k0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX$ v4 k y+ ] L! i: m
00403343 83C4 04 add esp,4: |4 N8 W! v1 ?% ?/ J6 I0 k
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
3 i- u& o# e# y. X7 Q, A( p/ G00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
; b0 k1 l, a4 `- J. Z. y0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]6 n, A$ M# I. |. T9 G. C- t
0040334F 50 push eax
. w( o+ A9 B/ T1 K. g00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
- P$ S! G" e! q/ s2 V00403355 50 push eax
" e |+ x/ v4 _# e: |3 K( ?% j j00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX$ j! h7 F* F n0 D
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
) d! D7 S3 O$ w2 M& L0040335F 83C4 04 add esp,4
8 L2 o q: R! r9 r! S: c" b00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI8 \# _0 J7 J% }2 R; k4 \" x
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
( c: D+ S) y/ i. v4 Z00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
! P4 R2 f$ k G9 Y0040336B 50 push eax4 S5 U- ]8 A l9 L. z k7 p
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
# B) S. t w9 Z, x7 V0 U7 a00403371 50 push eax" }; v1 s n4 z
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
* ` Q# T9 D6 ~1 i" K00403377 8BD8 mov ebx,eax ; EAX送EBX" g$ k! ~6 O' j' b1 {
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
" c# n( l' [3 c, o" [8 Y/ C0040337D 83C4 04 add esp,4$ p; t8 v9 j$ {8 p+ M
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
% C- K, R5 m, N( ^00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]/ J0 H# G1 ~& {7 {3 e
00403387 50 push eax+ v: X7 T5 n8 b: }) N# s
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX" k$ [ a1 Y) I' U3 L1 R9 ]
0040338D 50 push eax* F1 t- T2 z5 p3 q7 r1 t O
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
9 f" B" q t+ C00403393 83C4 04 add esp,4
( r: A& a. l4 r: A& y/ e' l4 {00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]/ S7 o! C3 k8 p+ {+ j1 n
0040339A 8BE8 mov ebp,eax ; EAX送EBP; b+ s. ^! z' W& V0 K1 |
0040339C 6A FF push -1
2 v' e$ R* g. \+ o3 j: C0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
! |4 P6 c+ S$ G" j+ ?004033A3 6A FF push -1
3 c4 d4 n9 C& V- t2 {( G004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
2 \$ v- v7 j2 H8 O+ j* I004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX, F- [6 s' l% T# ]
004033AE 6A FF push -1+ C. y- D8 m, N
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX$ w% W3 q8 l' M/ C( C' {
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
7 Z4 b+ h$ ^6 v+ a: z004033B9 6A FF push -16 v$ T0 [8 F8 a5 L2 I# Y; A
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
# F! s4 p) `1 L" M004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
2 s( C Y2 c* n$ n4 m' z004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
0 |0 t6 r4 L2 q% h3 Z+ s004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX2 |% _( }& y" U& L4 Z$ C0 U9 g) T7 B; K
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX4 g- L/ F t! w1 { f& ]
004033D7 D1E0 shl eax,1 ; EAX左移1位
2 r! T2 H9 \' p" ~8 F0 U004033D9 99 cdq ; EAX扩展5 q* J4 S% d5 e: H- x/ J# i
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中% I; k4 H) i: t M. Y* a6 S; @
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较7 X; W: W9 v2 g5 A! ]" z3 B- T7 s1 ?
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
- Y9 m7 `7 Y w& _0 s004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A" D5 k" n! S0 K9 ]" M
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]. T, Z/ R" Z& v) [1 {
004033E9 EB 2D jmp short qsr.00403418* l, K3 m: W) K* d; E5 I3 _6 P& q
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
{# f! H( v h r0 F1 Y004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
( `1 T. T" i8 W004033F7 99 cdq ; EBX扩展
$ r. y E/ \' W' h2 k: B004033F8 33C2 xor eax,edx ; EAX和EDX取异或
* D: B. b; U# F004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX$ Y/ N" w1 d7 v6 ]( h
004033FF 2BC2 sub eax,edx ; EAX减去EDX
) k2 c( O* C& y* d( B. a6 r00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
1 t. v6 M. J& v) A2 T! L8 v6 v00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX! }5 W0 @4 @7 G' `' \& K/ v
00403409 99 cdq
* O" Z" W0 x' S, ]0 v0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中3 O4 _- j" I' X$ Z
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX- S. o! k2 c/ c$ N( y0 l) {
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较$ ]1 n" Z _2 r* s1 ]
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
" r& E) s6 j& P. U" S00403418 E8 6EC00200 call qsr.0042F48B ; 3 b/ v+ x' W5 j$ ^ i
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]" F& r3 \0 |/ s! I+ P9 d3 G2 V
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9" Y; O" H }) h& c, C- n# A$ }+ }
00403426 E8 60C00200 call qsr.0042F48B
A K- x, c% ?* Q. l5 Q0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]2 z( M$ C' `' f% B3 T
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
5 W2 O" m5 s% `3 t. F00403434 E8 52C00200 call qsr.0042F48B
$ b7 U' r( V, r00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]2 ^7 Y5 v) q& Y4 G
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
2 Y! @7 a% S& @2 S L/ h8 @$ v00403442 E8 44C00200 call qsr.0042F48B! G& R }% f( K9 y6 ?7 L" C- R# }
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]1 W4 x: D: Z: v4 o. q
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
3 C, G* b1 A# B% \& e4 H00403450 E8 36C00200 call qsr.0042F48B
6 f f, j- a' A00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]( u0 p1 I4 V/ O# \3 `$ i
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 l5 V' \$ ]: x, k/ K0040345E E8 28C00200 call qsr.0042F48B
$ w" X4 J$ t7 e+ k4 j1 z- z00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
' i" Z H4 E' t% B9 M# y( }! D00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
, [% r, D' C! y2 E" B( z. o8 |0040346C E8 1AC00200 call qsr.0042F48B
4 y+ S7 t5 i/ R- k! l- j3 L$ x00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
. A s& |# V' {% M% B+ a00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
% t+ ~. q% p8 D/ k, r W D0040347A E8 0CC00200 call qsr.0042F48B+ C( A$ ~% k) `. P
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
1 k( N6 q% O% u* w3 d- H7 `2 b) n00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
7 { F3 B3 m+ M' s00403488 E8 FEBF0200 call qsr.0042F48B
- J0 x8 B7 y0 k6 n4 R0 [6 g0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]/ W$ C: a; T7 ?+ Z
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
4 X% x3 p$ Y- N* N00403499 E8 EDBF0200 call qsr.0042F48B
0 x2 B/ L5 f7 Z/ J# t( _1 Z0040349E 32C0 xor al,al ; AL清0
1 m' L' ^' b) o5 E, s0 W, X. q% f, |004034A0 E9 88000000 jmp qsr.0040352D
4 ?# ~ b, P; a+ O1 B004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~0 u) K' {: ^7 H7 k: _
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ n9 j0 F$ p n$ P
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
& d' n9 b& s4 m1 f& a( G004034B3 E8 D3BF0200 call qsr.0042F48B
7 v# @5 e1 H- S004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18] |6 I/ i5 |( b* L
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
$ p7 Y" g& G! N; J: ~: ^7 u004034C1 E8 C5BF0200 call qsr.0042F48B4 y* W* `! ^& C- O0 A+ \% L
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], H0 _5 m" `6 ^# o3 `
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
- F, u) `) v/ _! v( L+ k$ }3 \$ k% w004034CF E8 B7BF0200 call qsr.0042F48B) [ Q! x5 Q% g" K7 `1 ?
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]/ H3 P+ M c! `! G4 B& q
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
8 M% x8 ?, B3 G0 l: C2 X* J004034DD E8 A9BF0200 call qsr.0042F48B$ E, d# I* u9 T6 E+ [
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]$ G% f% q) }! V6 k
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
+ J5 T: S, {4 t0 X& E8 c004034EB E8 9BBF0200 call qsr.0042F48B/ T- g5 x! x, o5 Z% n
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]3 f& W$ M4 O: l% E
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],25 M' H& u+ |. X {# ~
004034F9 E8 8DBF0200 call qsr.0042F48B
7 E2 u' P: V* i, e/ K! B004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
; `7 j! @- u1 Q00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],18 T# Z7 b9 ]) O" ?1 l [1 ~, Q
00403507 E8 7FBF0200 call qsr.0042F48B: E3 v6 S; s0 Z* G% `' ]( P0 M
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# E5 ]% P3 L6 H1 Q00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0/ ~8 z" @" e; s. y7 r( G( X0 i s
00403515 E8 71BF0200 call qsr.0042F48B
( C( D1 u( U5 t) m0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 n( _+ e! R; w0 h' j0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
1 M, f' P+ G7 `! U0 |00403526 E8 60BF0200 call qsr.0042F48B: W( t$ A a5 Y4 I
0040352B B0 01 mov al,14 x- P' L1 ~+ n G+ v
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]$ l- J6 u* i3 ?4 a1 T/ e! Z
00403531 5F pop edi# m/ I1 l) G: z3 R4 x Q
00403532 5E pop esi7 ^- Y' i# s8 I$ L m
00403533 5D pop ebp
1 h2 u* u) I2 t6 s3 P( `00403534 5B pop ebx
) f, l5 n; J1 A( }/ y7 D0 h" D+ A% W00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
! s# O6 z. P+ I {& T0 `$ J6 A0040353C 83C4 30 add esp,307 T5 L0 N; d0 ]# F8 O* L$ s' N
0040353F C2 0800 retn 8: c8 M, D6 W9 c
--------------------------------------------------------------------------------- c. z* X; g$ H
【破解总结】
1 }6 d4 Z0 R' ~6 |* Y 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
+ q% C* y0 u$ x! b8 D1 {3 B% E用户名：yijun% _" F$ p8 A z. E2 Q' ^3 s
注册码：4893*7777*3726*7777*0529
5 D6 d2 M' u) g, s$ _! v+ i( u# R--------------------------------------------------------------------------------
+ w% L# a" N3 y7 s5 \' T! d' U6 C【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡