|
|
|
【原创】破解Quick Screen Recorder7 R5 u1 ^$ A1 j) w v
【破解作者】 yijun
0 R0 L: C' K3 f5 \5 X/ P% I/ P【作者邮箱】 [email protected]1 b) W, B% I8 J: E, b
【使用工具】 OD,PEID9 T: T, _+ w( T6 O1 R
【破解平台】 WinXP
/ |3 N1 W8 H( `6 I. P【软件名称】 Quick Screen Recorder3 ^/ g7 F" z: X2 V" R1 h. a/ p
【下载地址】 天空: G7 c- y; F. }4 G+ J
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. $ j/ Y8 H; U1 T2 E* d+ f# @1 [+ X5 t
【软件大小】 540K
! l: {/ Y5 S/ o# G【加壳方式】 无1 V" V1 f- ^" K
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）# n+ W. W6 F* O9 d' e
--------------------------------------------------------------------------------
% n% F+ J9 e4 E% L- R& s6 f# ~【破解内容】) y% C2 Y2 F9 R; M# }; o
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：) a0 y. g9 |, S5 s5 P% t7 B
00404C69 55 push ebp //在此下断- e: t" F& x, b% _- m1 G( }% \
00404C6A 56 push esi5 |! R9 ]" i$ R! }
00404C6B 57 push edi* s4 Z9 W; ?+ c* a5 a
00404C6C 8BE9 mov ebp,ecx
2 R- Z/ M0 W: ]( ~- z9 d; p00404C6E 6A 01 push 1! K6 A+ n$ g- ~7 X
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
& w- L, K' g7 n. u6 j+ e00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]; Z; E# J& a( Q& r
00404C78 8BCF mov ecx,edi
3 ^0 C1 v3 ]+ }8 F0 C00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
: c0 Q5 m( ]% b, U: D: w4 j00404C7F 8BCF mov ecx,edi
# i5 _ u/ o W: d% P4 }00404C81 E8 A73E0200 call qsr.00428B2D
: q% a4 F3 W8 M q00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]& A6 ^1 G1 g7 X' a- p
00404C89 8BCE mov ecx,esi1 z$ p: E6 P5 E
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX+ |5 \7 _3 k$ o2 C+ D# F6 T
00404C90 8BCE mov ecx,esi2 K$ k: q" W; e, w* Q' I
00404C92 E8 963E0200 call qsr.00428B2D% [' S) t6 l9 N# @# N
00404C97 8B06 mov eax,dword ptr ds:[esi]: V0 J5 `# ~5 W" V4 t. D$ u" N
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
! A, f0 j& z$ F. [8 N7 y00404C9D 7D 26 jge short qsr.00404CC5
+ Q& [5 \, W' ]- n; z# m& b( M00404C9F 6A 40 push 40; Y, @# v1 x, ^1 R! k1 Y5 Z7 W
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
' H; m7 c8 r9 n- r0 [; q6 e00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."/ b) U) ?# Z% ]" t5 A
00404CAB 8BCD mov ecx,ebp* J' w0 l& B# o. Q9 L
00404CAD E8 C3840200 call qsr.0042D175
$ F9 O/ q5 c, A00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]. k! U) Z7 E. o
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx2 h- _! @& p+ ^" J2 n
00404CBD 5F pop edi
9 J. U6 t' R1 b# K& \00404CBE 5E pop esi- [/ s5 z( w5 d% B3 c/ L4 n
00404CBF 5D pop ebp
* H# n/ z' x5 C) l/ j# \00404CC0 5B pop ebx
7 `3 k' m4 L5 I+ S G00404CC1 83C4 18 add esp,18# }. M# V" c, y+ J3 p- P! p( w
00404CC4 C3 retn* K4 z( b. a% d) w9 W
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]# I% i* u; `- y. B) s4 T/ g1 [
00404CC8 84C0 test al,al
& W# \! Q! o `9 [" q# V4 u O, m00404CCA 0F85 1C010000 jnz qsr.00404DEC- n5 ]* \. t9 ]2 j. O* ]
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]9 H) f( B7 D2 ?% \/ J
00404CD4 E8 87E3FFFF call qsr.00403060
' J/ t) \/ N f7 I3 u00404CD9 51 push ecx
8 p' x6 O+ r3 [+ o00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
7 K! N4 H- k$ X6 A1 ~5 b00404CE2 8BCC mov ecx,esp
# l$ n5 l3 ^9 G0 V6 B! U00404CE4 896424 14 mov dword ptr ss:[esp+14],esp+ y) G' o2 O2 K: J( v( |9 q5 r% g
00404CE8 56 push esi
: v" i2 d5 u" G- W& ~( ^00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
! `% S! x( y8 h" m! W00404CEE 51 push ecx5 [. Z: ~* X% G: x% y
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
& x1 V% z; }0 M8 U6 h# i* w00404CF4 8BCC mov ecx,esp
9 g% M8 P% W* I! s' ^00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
8 L" w2 }5 T' d: B0 O00404CFA 57 push edi: i( B7 W- C9 r$ @0 k' O
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
& h: Z$ k6 A; A' @* p00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]% j% j' H9 o% ?7 t7 f- `
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
% Q/ c) E5 b9 R2 p- b00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
. i' M, G; O! C0 ?8 j& g00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~9 P+ E9 h( J: }* U
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~; Y. p* }0 s4 I# B; z3 U3 {8 e
00404D12 6A 40 push 40
+ `2 J( w( C$ T$ E# G% X* Y8 w& U$ [00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder") A9 Q1 z. Y0 E4 I( T1 g
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."9 v' R T4 f: |2 s; [& U/ |
00404D1E 8BCD mov ecx,ebp
h4 r% B8 h( o W/ b7 T3 V00404D20 E8 50840200 call qsr.0042D175
( ^1 J5 T5 q# b2 k6 g, K00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' u3 k4 V( k j4 [$ D4 m
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1/ Z' T0 C7 P3 S: C8 q
00404D31 E8 5AE3FFFF call qsr.00403090' d' \3 O, s9 t$ D# M$ g
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
- ?* ?! V! x1 m- S. R( a# w& ^00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx5 U) k) l I J) h) R
00404D41 5F pop edi
2 }) [! c* A( D" r; N1 |, T! I00404D42 5E pop esi
" P9 j& p) v* }' F$ b: b6 u: q00404D43 5D pop ebp
) T) u. M8 v) K$ t! G( t3 _' `00404D44 5B pop ebx; L, |7 X3 k& e" N
00404D45 83C4 18 add esp,18
. V. g6 U; k4 E! A6 L7 `7 v00404D48 C3 retn4 y! N+ k8 D0 n$ h" B7 V l% Y* N
*********************************************************************************************************************************************************
- {# Q% g/ X; Y) |; Y+ D: X2 D跟进00404D09处CALL来到：7 V! |* u" ]( i. E$ j
004030A0 6A FF push -1 //一路F8下去~~~~8 i6 j' t* ~5 t1 `- D7 m9 \6 k
004030A2 68 C88F4400 push qsr.00448FC8- V* e7 Q: {' R
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
! R2 |4 _% o% R) ?9 E$ g004030AD 50 push eax7 v" V1 U- E) M9 M0 H
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
5 ^1 v; w e& l" A8 U# j& q004030B5 83EC 24 sub esp,24
" @; B& S! n9 ~, ^004030B8 53 push ebx: L" v' A+ q' o; v: _
004030B9 55 push ebp
6 O* W- H' b) \1 J) \004030BA 56 push esi
f' a/ j; `5 j8 m004030BB 57 push edi. A; W$ V' x# C
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
( U0 {& q7 \! w" d" T. F) E1 p004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
( P; I& R+ s. P" Z3 l1 S. A% o004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
; z. D9 ~ X5 U' \) b004030CD E8 27C40200 call qsr.0042F4F9
# I {- A, E$ \. w, Y, C004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]1 j. `+ q5 x; M
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
1 b# k/ ^- H# I9 T* N004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 t3 T$ n+ \. x9 z, P
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
; R* q7 |9 V) s& d/ V004030E4 E8 905A0200 call qsr.00428B79
% Q- x4 p1 p/ ]004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]. g1 ~: g8 S1 c, Z `2 x
004030ED E8 3B5A0200 call qsr.00428B2D
; F! r. n) V+ W+ ^8 X004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]3 b) }7 P1 d- H. q/ U" X+ g# o* ?
004030F6 E8 7E5A0200 call qsr.00428B792 D7 B$ B- g, e/ D
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]6 c/ k U X! \8 m9 ~
004030FF E8 295A0200 call qsr.00428B2D
& O( F- V- ?4 O+ l00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
' v- t8 M( K/ {$ t% H7 o4 Y00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
1 n4 _0 L I8 D( f8 O/ S0040310B 83F8 02 cmp eax,2- C4 r7 F* l- j
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳& \( d4 q4 I3 ~
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]4 e- A& [/ {! T, y I2 E2 T z
00403118 837A F8 18 cmp dword ptr ds:[edx-8],185 Z+ Y8 k% j5 k. b9 m1 z
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳1 i2 `& f. N# o- U7 N+ N) h
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30] s9 Z/ k( G- b+ B( j7 _0 k
00403126 6A 01 push 1
6 u W K3 y& ]! o00403128 50 push eax
q3 G1 d. P% {. H00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ C- U3 W* |8 N" g: W. q' }0040312D E8 C4550200 call qsr.004286F6
- \- U3 O* J; y. i00403132 8B00 mov eax,dword ptr ds:[eax]
+ P. v' ^4 M/ V. s% z, b" Y% B- l00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- C* z+ a+ }$ O* A ?- B
00403138 50 push eax8 J7 V( q$ i" ?- z& z
00403139 C64424 40 04 mov byte ptr ss:[esp+40],48 F0 n5 _8 u9 X' t S
0040313E E8 4D560200 call qsr.004287901 ?* W, x. S/ @$ Q% ~3 q
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 ?% C3 z w6 W Q# L00403147 8BF0 mov esi,eax' |* A' n7 K }" k
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 z1 p. L& z6 k( z0040314E E8 38C30200 call qsr.0042F48B8 F, W: E4 i; g& Z# k+ g
00403153 8D46 0A lea eax,dword ptr ds:[esi+A] u% p& y% d) M
00403156 B9 3E000000 mov ecx,3E
; [7 T [2 l2 c( F+ N) b6 z0040315B 99 cdq
2 T2 |4 m$ q* h0040315C F7F9 idiv ecx
% c0 s: ]0 n2 s, A; O4 B0040315E 6A 01 push 1* b- Y- y& p3 H; h) d
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
; V. J2 M5 ~4 z; s: `9 w00403164 8BF2 mov esi,edx
. N3 r' X, j, d0 {" S00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
# E& i6 g& K4 j7 v0 V0 A2 \* z0040316A 52 push edx
% d6 i: V! t- o& t5 M0040316B E8 0A550200 call qsr.0042867A5 r% @! I2 K6 i; N7 k* ]! i
00403170 8B00 mov eax,dword ptr ds:[eax]
) ]/ p t$ [$ e0 A3 ?4 @/ z+ g, ]0 V00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]$ j2 Z2 f& Y' `) o
00403176 50 push eax, `+ N8 j$ {8 U8 g# `2 [8 H
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
8 t! v+ [ @ U; u0 m0040317C E8 0F560200 call qsr.00428790
- |5 u9 K! X `1 g; Y00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- s4 |; b; J0 d& C% _' E, R00403185 8BF8 mov edi,eax1 i. u8 ]5 R& z: Z5 Z; a2 C4 }
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ h. {. O. y" Y Y0040318C E8 FAC20200 call qsr.0042F48B' v5 @- H7 v( _
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]7 q/ d" K# H' ~/ ~ C6 |. _( A1 ~
00403194 B9 3E000000 mov ecx,3E
2 J6 ^ j: e3 I. X' ] ?! W! V00403199 99 cdq
' l( t; {4 [7 v6 D0040319A F7F9 idiv ecx. l% q2 f4 F! y! G8 g: `
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
4 A- I. z! Q* H( ]004031A1 894424 28 mov dword ptr ss:[esp+28],eax9 k& U8 V' t5 K, b1 x$ M
004031A5 8BCA mov ecx,edx6 O: \9 R# x& s
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
9 U/ ?; @; z" k/ J004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
/ G% T' Z' [" F4 M004031AF 894424 18 mov dword ptr ss:[esp+18],eax+ ?$ r2 Y3 B% D( {; s
004031B3 894424 14 mov dword ptr ss:[esp+14],eax# m/ m- O- @& [) j" s# E
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
) y2 t' J9 B5 m3 {! J5 D& R004031BB 8BC1 mov eax,ecx& \8 \: b: p w. b) `5 f9 g, u
004031BD BF 0A000000 mov edi,0A
0 r6 B: `) R, S004031C2 99 cdq# Y% R4 y6 U" T: m7 g7 t
004031C3 F7FF idiv edi* O1 c1 G$ }5 c/ O
004031C5 8BC1 mov eax,ecx
# K6 o c$ h' t/ R6 b! S; z; Y' n" P004031C7 B3 0B mov bl,0B# j# ]* Z: l1 ]% Z8 M) @
004031C9 0FAFC1 imul eax,ecx& h6 i3 e2 u( {9 L" C8 h4 s
004031CC 8BCF mov ecx,edi
$ Y$ _$ r* G4 G8 \004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl& R% y2 a4 `) R) s& X$ o
004031D2 52 push edx( k3 T! Q* y; `. v- h" t" Q3 ~5 A
004031D3 99 cdq
' I% Z) i5 l! d+ T- e- N# u004031D4 F7F9 idiv ecx0 }, |& k* z. C9 M
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]& m( T4 v" a, S3 T- n
004031DD 2BC6 sub eax,esi
" K9 u6 q9 ]9 }* t/ D9 A004031DF 52 push edx+ l2 m; [# f e7 x* t2 d
004031E0 99 cdq" | k: f1 j; q v
004031E1 F7F9 idiv ecx0 v) z& k3 f) Y3 M
004031E3 8BC6 mov eax,esi& q( j9 Q b6 Z3 k$ C" h1 ]$ ]2 d
004031E5 52 push edx- D. d4 N3 |, }+ g3 B3 H
004031E6 99 cdq- s7 J2 K% ^! v6 s. y: R
004031E7 F7F9 idiv ecx5 c" K* ~; W# H3 n5 A
004031E9 52 push edx! v. m, R" ~2 C# A9 f/ ~4 g
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
k7 L, W- L7 d2 H1 O- t3 ^5 h004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"$ {) b |4 n+ l# h9 j- |
004031F3 52 push edx
' w/ o/ \. b2 z' i; o+ ` Q004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893' o: W, p4 f! y# Z
004031F9 83C4 18 add esp,18" ]; q5 k3 r( i5 R3 \4 j- l r
004031FC 6A 04 push 4
% \4 o! P8 m& P. L" n/ j004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34], _! ]4 g9 M4 ]! ~
00403202 6A 00 push 03 F# f- O0 ?4 m3 b8 t" d- `6 g1 X1 e: W
00403204 50 push eax. y0 r6 m7 E( u' z" S& Q$ Y
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( T" v/ {# s8 x# V& a00403209 E8 D6530200 call qsr.004285E4 {! X4 F) Y# [6 w' u
0040320E 50 push eax7 ]- b( \/ {8 c7 Q
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
: q2 S3 [- \0 F00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C, B5 V) B. g; T6 D
00403218 E8 A7C30200 call qsr.0042F5C4
* V. P2 n o" T2 l1 Z0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- R5 ~5 \' q$ E/ R$ V00403221 885C24 3C mov byte ptr ss:[esp+3C],bl9 O H& b2 y6 D- [$ K# N
00403225 E8 61C20200 call qsr.0042F48B
+ P, I( T: p9 _* T" h0040322A 6A 04 push 4
1 W7 R: o# \9 r$ d0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]/ p+ t. D$ q7 k+ b
00403230 6A 05 push 5
( C7 g% T6 g+ K, Z$ f00403232 51 push ecx, Y k t: s% ]# a, \2 R
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
0 ~7 M' K' _3 r" u @00403237 E8 A8530200 call qsr.004285E46 D; T* `( n7 Q
0040323C 50 push eax
6 t& [# |% K' }0 J0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]( ?6 r' g) U. J8 J7 P
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
) n2 ?+ E, F* _" s- _0 s00403246 E8 79C30200 call qsr.0042F5C40 U3 i% ?& E. b& g
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ M, x. k: \! `$ z( `" J
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl. H" t! Q8 k( C" l
00403253 E8 33C20200 call qsr.0042F48B
4 F8 k, C0 U3 u) i4 Y4 F00403258 6A 04 push 4& b" e. y1 S# Y; W; [/ O
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]3 U8 p, |' O, s1 i g1 p4 [
0040325E 57 push edi
3 t2 }! k, z' h; i7 H6 s4 p0040325F 52 push edx6 B. U( I/ S/ c: c- m/ B
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( [) \' A. d; ]( \4 C00403264 E8 7B530200 call qsr.004285E4 T+ f1 `: L% V9 J
00403269 50 push eax6 \" b' c& }# n8 g8 x
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 S3 J9 S# A) B0 W
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
( z% Z1 i; W; J; l6 H: X00403273 E8 4CC30200 call qsr.0042F5C46 |) L$ w! e9 g; m
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
! j4 ?" E3 ]1 j$ r% e' _0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
0 b X. B9 W$ t$ H& H3 T& o" C9 u. A00403280 E8 06C20200 call qsr.0042F48B
7 ^. R; x b% s% p; \+ A; h5 W00403285 6A 04 push 41 v9 a' N9 g: E, N' z
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
3 ^( e4 a6 X7 D! Q0040328B 6A 0F push 0F
' ^+ G7 |. J( i/ ]8 L2 m0 _0040328D 50 push eax
% d& s* k8 g9 @" i$ G: g0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 c. f: A h, k; z7 C
00403292 E8 4D530200 call qsr.004285E45 L. ~8 P: }% W% v/ d$ i
00403297 50 push eax
9 v, R$ M0 p( q* W1 X00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
1 R, f: W- Z& }* M4 o4 x3 { f9 ^9 ?0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
: {* s& W$ S5 Q' q7 l4 J6 Q5 Z004032A1 E8 1EC30200 call qsr.0042F5C4: Y# n" X* k- a! ^ j W7 S
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 P& k+ C: D. X! N; w4 M004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
- [2 O/ l$ O* E( S0 B' F004032AE E8 D8C10200 call qsr.0042F48B$ k3 e( k' k$ {: B+ L9 n! m) B. U
004032B3 6A 04 push 4* f4 x# q: K U& [
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
4 T% Z7 l7 S6 i ]# m004032B9 6A 14 push 14
) w, Y; w. {& Y4 _) K# _004032BB 51 push ecx( ^$ z* ~7 Y' r' }
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]/ z8 N7 i1 v) s7 u% V# b7 z! j
004032C0 E8 1F530200 call qsr.004285E4
! c7 t8 N4 P& {4 o1 J# P004032C5 50 push eax
) Z; w. |! z/ ] c004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ O" C3 [' k8 b) S7 T$ Q4 ~8 q
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
. g4 g. z h( \0 e! d7 a( Q* z004032CF E8 F0C20200 call qsr.0042F5C4
1 C3 s1 \+ \% w u- k004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 ?; ~& `$ [1 f( K" H
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
# m5 A( c7 `9 z, C5 |# h004032DC E8 AAC10200 call qsr.0042F48B, z6 {0 K% R) c' \" ]/ a
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
0 ^) h; _, R* e4 K& o2 E; e004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
% u1 y/ K, p: @# ~8 l5 ?004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL1 N+ M! C. z8 V+ Y, ^1 b
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
. q7 L5 C% R+ M' x; U6 |004032ED 8ACA mov cl,dl ; DL送CL
& Z7 G& b) T" P6 C7 o) S004032EF 3AD3 cmp dl,bl ; DL和BL比较) a/ @ W) }2 M; \- f: ^
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）9 f9 C$ M/ T6 P# J) O. R3 _9 `) g
004032F3 84C9 test cl,cl0 Y% a9 y+ [' I' C# L: l0 M1 y+ r
004032F5 74 16 je short qsr.0040330D. m7 {. V9 r7 r5 x
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL( M- q$ Y* A7 M+ c
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL' W2 _! |0 W4 O1 {
004032FD 8ACA mov cl,dl/ r- U1 K: b5 k" y5 D% U
004032FF 3AD3 cmp dl,bl ; DL和BL比较 i V& i' o% s9 P) Q( V0 Y
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
9 `- }. Z& Y$ a! F) J00403303 83C0 02 add eax,2 ; EAX加2
& K' A& ]) {/ r- ~1 C# z) B00403306 83C6 02 add esi,2 ; ESI加2
5 l. T/ r4 V( Q: K+ V. y00403309 84C9 test cl,cl! W+ b0 M, f" K" j/ Q$ V z P, H
0040330B ^ 75 DC jnz short qsr.004032E9# C5 B) R/ Q7 o7 u
0040330D 33C0 xor eax,eax
4 d. [/ z* g1 q+ k0040330F EB 05 jmp short qsr.00403316
( G6 F" W) N4 m0 E; d9 o4 N00403311 1BC0 sbb eax,eax3 X* W0 z, V% |9 l2 q* Y9 `
00403313 83D8 FF sbb eax,-1. ^. s7 \5 F; y6 s
00403316 85C0 test eax,eax0 y3 |; w8 p y- h
00403318 74 0E je short qsr.00403328' X& P" e4 S+ d4 i! ^' k1 n. _3 W6 ]
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A A, U2 W, n/ E7 S
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]9 M- a" z$ ?1 P/ a% c" J
00403323 E9 F0000000 jmp qsr.00403418
' N' ?( A0 n, W6 `9 D00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
4 N$ f$ P5 M+ C9 n' h0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]( ?6 s. W, T2 ^. e
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8], f" z& N) T$ A0 [
00403333 50 push eax
0 G$ q$ M2 |# w8 \; e00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
% T$ G% s7 S# P00403339 50 push eax( E" W" ]* [) `2 @$ K; I& @
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
! |8 U8 |2 |$ Z9 `, U+ S0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX3 K% u7 n0 s( @" y5 G$ [ K& {
00403343 83C4 04 add esp,4
}6 d/ p% h R9 H$ Y2 x00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
7 k9 N5 D; m" ]8 @6 \( _1 C00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8], h& `& w) [: o5 k+ T9 w( V( {
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
5 b8 ?7 m8 J P0040334F 50 push eax3 M. c9 K6 V, l5 t6 f3 }4 U
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
8 M( f* ?9 s, X9 x/ O5 H* ?; ^00403355 50 push eax
6 h" F5 V# B% N# y& E' q00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX3 g/ [& e- E8 ^
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
' E6 d+ q) r" l% K r6 ]7 n0040335F 83C4 04 add esp,42 f4 A$ d, Q: V, Q
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
4 `9 _& O& N2 n' V" T6 }) G00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
% {' ]$ }- w- N6 `# R9 v8 e+ b00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
3 A S0 \* m9 K' y0040336B 50 push eax0 a. U4 i# ?- ^( y6 u
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
. z4 W: r2 s$ u& ~00403371 50 push eax
( c. H- Z4 z4 y. u! h00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
9 O3 h& z( o7 [00403377 8BD8 mov ebx,eax ; EAX送EBX
5 Y+ O/ F+ i" Y7 W' a0 j d1 r; O00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
) T# i" U$ c; Y: n/ M( |0040337D 83C4 04 add esp,4
. G7 {" S% G. Z' h% H00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]$ a5 o" O! R D
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]- s7 O+ L) D* O8 E6 g
00403387 50 push eax
( K% B; a; c. H$ u% \00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX' r& x% C% b) K8 s2 Y
0040338D 50 push eax, Y7 X1 a3 J8 ]- W
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX, h. Y& w1 K4 g
00403393 83C4 04 add esp,4
2 k1 x( n' [) Z4 ], T( ^0 t; @00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
' p6 I+ m8 S8 s, n0040339A 8BE8 mov ebp,eax ; EAX送EBP
9 H, L8 V+ K! z! [( P4 |+ W4 Q0040339C 6A FF push -1
Y# x. [- l4 C/ J0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX8 i! w9 x2 V' V- w3 l/ O
004033A3 6A FF push -1
7 A4 L6 n0 {/ G8 {* Y! i004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX; I B6 J! ]: J+ N7 Y- `# K% @7 s) @$ Z
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
+ o# S) b3 y8 @; p& @% y004033AE 6A FF push -1, Q$ |* M# m+ l% z
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX; h; j! e& E1 }+ E% N" s
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
' A- g6 P4 J! f" i9 Q# }004033B9 6A FF push -1
+ d8 {% \/ X2 U. G8 g( ^004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX+ A7 i1 o! m' q( Z" ?' o
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
% Y- u7 e i3 Z6 O004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX+ B3 v* N# [- }6 G8 B
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX7 P4 p: Y: L1 P& r1 M
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX/ c& i9 w' h& F6 _ I3 j" ^" B
004033D7 D1E0 shl eax,1 ; EAX左移1位
u9 C6 Z s( R M3 y) ]004033D9 99 cdq ; EAX扩展
W2 K2 ?' C; x; i004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
2 b) p7 ^ h8 Y' [: v( w004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较0 d$ o7 l) ]5 r* n
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）9 ^# ]0 l) u8 t" K6 q( ]
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A7 v5 `+ u( W4 f& i& V; z5 s
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
7 h6 T* S, O7 u( y004033E9 EB 2D jmp short qsr.00403418
9 W( K( ]# E, x1 @004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX' [; |. |+ x* N# L5 g- c
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
# W0 K1 _4 T8 B! K" z3 z004033F7 99 cdq ; EBX扩展
9 M9 e( Y! T/ E! Q- f, @5 T004033F8 33C2 xor eax,edx ; EAX和EDX取异或
# \) X* F6 i9 [/ `5 v9 l004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
. z* n2 o) A+ l4 ?! o004033FF 2BC2 sub eax,edx ; EAX减去EDX/ N9 R# C+ u8 s+ B- B
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]0 K; m* h3 [/ t. t* p
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
' g9 N4 ~0 p& E00403409 99 cdq
7 x, S- g7 m3 \/ p$ S8 Y9 ? b7 O0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
( X9 [* o! m2 U. ?# \, S; _0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
! E Q( P( V5 K5 ?, j/ R00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
; }9 a1 R8 k" L1 N00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）; X" J9 }3 ^4 i1 |, C9 t
00403418 E8 6EC00200 call qsr.0042F48B ; + d- K, A% z* \2 a. A
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]5 d0 r1 `5 D: b r# B
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
) m/ j# ?9 O/ J00403426 E8 60C00200 call qsr.0042F48B# t" l/ g) C. n. s
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]8 u' V% a& X8 Z: S. _
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],84 G/ t7 N+ M2 F4 N; O
00403434 E8 52C00200 call qsr.0042F48B
+ m4 E, q5 ~( v$ @5 Q00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* Y; @1 `4 Z' t6 j- R
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7% [' \+ t8 w) t
00403442 E8 44C00200 call qsr.0042F48B4 W' k, c. |/ w3 c: n4 [0 N2 X% w- U
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
3 l# f, H( ^+ C' a; o3 [: w; o0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],64 u7 |( N; X: q* U5 }+ a- l
00403450 E8 36C00200 call qsr.0042F48B
0 U0 d" y$ I8 j( x9 M! j! n00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
2 N3 E. h6 B* i# n) \# }00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],38 \3 `2 U2 w. U6 \# C* C6 }5 J: y
0040345E E8 28C00200 call qsr.0042F48B2 ~/ u- M* O2 ]" b
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
3 X: p; l* H" N6 g( U00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
7 m+ r" G) G7 v- W, o6 ^% }* K4 v0040346C E8 1AC00200 call qsr.0042F48B
) \: J- \/ w/ N" G( H5 Z00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
1 W6 b& h. R6 o) D9 X4 s) K00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],16 V9 f1 p6 I) |3 d. Q x
0040347A E8 0CC00200 call qsr.0042F48B. B5 d' f( p* ^/ ?
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]2 h6 H/ N j# W! E" J3 I3 C0 j
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
7 [! Q( F4 P3 B: |/ [/ q/ _9 F5 @00403488 E8 FEBF0200 call qsr.0042F48B8 X" a; g5 Y; H, I% g, [& p
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# Z- q! r* h9 ~. o) t `3 a X) f: S, F00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1# z3 [5 c9 F! ]/ D# _) U! m
00403499 E8 EDBF0200 call qsr.0042F48B
! Y* F& g ?; H8 t5 B6 G0040349E 32C0 xor al,al ; AL清0" O- S8 ^$ q4 c
004034A0 E9 88000000 jmp qsr.0040352D k* P8 j7 G8 f. L# ?# m
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~) H5 o2 Z3 N+ f
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& S# K% p' h+ e
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
1 v. M% U! n0 K004034B3 E8 D3BF0200 call qsr.0042F48B
; {, ?4 n( R0 F: P3 p( r' p004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]4 L! Y) J# {1 B' w
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
8 x' ]2 [0 @, e' b- j6 H7 X/ m& |004034C1 E8 C5BF0200 call qsr.0042F48B3 m8 Q& |+ Y- ]2 _& m
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 Q& r) j) C0 s% s: O0 c
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
9 k$ x U) y" b% q# l2 e( H004034CF E8 B7BF0200 call qsr.0042F48B
0 ^2 Q& ~. g* [" P* ?5 L004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
) h% M0 o3 F: n004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
4 [4 z& j1 X# l& o/ J7 j004034DD E8 A9BF0200 call qsr.0042F48B
( V7 d# Q. K2 [# Z0 E& N004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
/ c: j+ p9 e' h1 t004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
5 G0 t# H& h6 L. R' P' M: H004034EB E8 9BBF0200 call qsr.0042F48B
K; U2 X' B" a5 i. C004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
: S2 Q7 e& T2 \: t004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
, j Y' A! M% M2 C9 w. u004034F9 E8 8DBF0200 call qsr.0042F48B9 `: b3 ~3 r: ^; ^5 D2 e. X {
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 t& x3 `/ ?2 Z7 d4 |( R8 e00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1. I t5 q* {/ z2 H/ [$ H* a4 Y" Q
00403507 E8 7FBF0200 call qsr.0042F48B! f- O* D9 l- g: n6 @- ^
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]' B4 a, \ F: f& L! y
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
- d1 T) f- W. m- I7 c$ ~00403515 E8 71BF0200 call qsr.0042F48B9 m+ K* l+ E+ c4 \. A( H) o
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ m4 w5 N! R8 Z& @1 B
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-10 A( L- I- D3 ?, u2 ~3 W
00403526 E8 60BF0200 call qsr.0042F48B
. H/ e% u" a; S# Y; h1 B- J ?1 `0040352B B0 01 mov al,1) K C, k- D5 ^( r- J
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]4 a2 h7 G4 s2 |, W( P/ H! g
00403531 5F pop edi% f1 l6 Q5 v! r; u
00403532 5E pop esi
( B: X9 c! L2 i! J% L& J+ b5 Z00403533 5D pop ebp
) H9 H( T% [, @8 T00403534 5B pop ebx+ b v4 X+ b- W/ s* O# D9 m
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
- u# a) ]8 V9 i2 | g1 f9 Q0040353C 83C4 30 add esp,30# G" [* a8 B1 e0 ~
0040353F C2 0800 retn 8
* y- ` Q" w B( [--------------------------------------------------------------------------------) D& Y5 D0 C+ D% j. f* M
【破解总结】
! B. m" q! R. u6 c7 A7 c 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^$ b' v, k7 l% W2 {
用户名：yijun
: f7 ?7 d7 Y1 Q+ C0 B4 m3 Z3 P+ @注册码：4893*7777*3726*7777*0529
; N- B' i/ ^' \" l9 |7 D--------------------------------------------------------------------------------
6 [0 N2 u4 v# F9 t% S+ `5 l+ |【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡