|
|
|
【原创】破解Quick Screen Recorder( J0 k' ^4 K4 M. s! U _7 }+ i
【破解作者】 yijun; A1 e& e6 X4 b8 F" r0 F
【作者邮箱】 [email protected]
' u1 t( t! a) U【使用工具】 OD,PEID" t7 E3 F( u) o: }8 x4 U5 I
【破解平台】 WinXP5 z$ K4 ~( Q' X; s5 o9 R
【软件名称】 Quick Screen Recorder% H1 ?8 ~- Y6 w. C! {& ?
【下载地址】 天空0 d+ H% @- Z* E. n( l) {$ I# j
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 9 @# x1 F" J/ _& ?9 k
【软件大小】 540K* B0 m# ]; T% z3 ^* e( |
【加壳方式】 无
# p! c; n- { R" [【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）3 i! H) B9 P* Q% c) ^9 U; J' x! A* X
--------------------------------------------------------------------------------. G! Y" }9 K+ f3 Y7 u6 {7 e" n/ e
【破解内容】1 z2 q' B) E6 A9 N# _
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：- H4 ^( a4 f4 w/ P. u1 [( _; X
00404C69 55 push ebp //在此下断
. f6 A) z: D5 H( [1 I7 Z00404C6A 56 push esi# x7 D. R& Z( g/ O4 M- K
00404C6B 57 push edi$ X, _; U, r9 E# T$ H# g
00404C6C 8BE9 mov ebp,ecx
& P8 @4 D' G: K" D% t# X& v' p; i00404C6E 6A 01 push 13 T4 B) B+ W; B0 W- B) [0 u
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名$ z4 o" }1 J3 D* Z4 ]1 W6 ?
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
4 K+ H$ J% C. I) Y w5 I; z00404C78 8BCF mov ecx,edi3 ]8 i [) L& ?- i3 ?1 \6 q$ |/ d, A
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码/ y3 E* i# M- [. q" X6 q
00404C7F 8BCF mov ecx,edi2 b% [- J- ?* h9 L( o# g6 x1 G
00404C81 E8 A73E0200 call qsr.00428B2D
5 B2 q1 H. w; d0 U& H00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]4 s' P( s8 G9 h- B4 A- W
00404C89 8BCE mov ecx,esi
( K4 ^6 d6 T) u7 x) i i" v00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
/ l' E- _" r$ E/ d4 \' m. N00404C90 8BCE mov ecx,esi. g: j: Y9 W N
00404C92 E8 963E0200 call qsr.00428B2D
- C% F) I3 h* ]: j# ^00404C97 8B06 mov eax,dword ptr ds:[esi]
, O5 O) G' V- w00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2/ P8 y! t p2 [2 ^9 d% l* L
00404C9D 7D 26 jge short qsr.00404CC5
; [ D# q1 w6 d: M6 l- ?; F9 C" k00404C9F 6A 40 push 40- I6 }+ ]: b5 Z4 i3 R
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"2 |" X* @' \, @6 I! ~$ I, C/ A+ R. H
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
; x5 D4 N a( V. S; }$ j00404CAB 8BCD mov ecx,ebp6 F6 N1 e, s7 p8 d8 t
00404CAD E8 C3840200 call qsr.0042D175
+ i" j6 e6 C s( p0 N, l00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
! u& A# J- @4 t00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
# k: M! x A' B" T2 J+ ^7 x3 v% o0 j00404CBD 5F pop edi( W4 A& N# Z- v1 M% a0 K
00404CBE 5E pop esi: R2 x1 ~) n4 B8 L, Q, q+ \
00404CBF 5D pop ebp9 n' g3 J. U0 N H0 \+ |5 B6 _
00404CC0 5B pop ebx6 g9 p: ]- ]) A# Y" b: p
00404CC1 83C4 18 add esp,189 {0 Y5 S- T# h- ^( a
00404CC4 C3 retn) I+ q8 O* n9 F6 i- v
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
( A) N8 A% y! Z' [, n; H1 o00404CC8 84C0 test al,al# v- p; m H7 L4 B
00404CCA 0F85 1C010000 jnz qsr.00404DEC/ w) g3 f5 ^: H8 D
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ h0 Y& L! y i \5 m$ G/ l& d00404CD4 E8 87E3FFFF call qsr.00403060
& i- u# F, {' o$ C- t6 ~ b00404CD9 51 push ecx
' E9 O7 ~6 ~) X00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
7 K" g! `/ v2 P/ L) j. D4 B) H4 l00404CE2 8BCC mov ecx,esp
7 z" b8 _+ _# W( j2 m00404CE4 896424 14 mov dword ptr ss:[esp+14],esp& C( l$ G1 {6 j& ~2 O1 P+ Q
00404CE8 56 push esi, b+ T7 S; m; K# K' G& J2 X
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0; _2 K9 r$ j) h
00404CEE 51 push ecx' T( @0 C/ O! c9 S F m
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1: N. {6 P5 `" O+ T
00404CF4 8BCC mov ecx,esp
- D0 U( ~$ Y! h6 |00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
# ? h9 s6 \9 O00404CFA 57 push edi
4 J* ?8 A2 r" }6 [; P4 C+ G' n00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是02 F% ~/ @+ V# i7 M# W2 t0 C( ~8 m& {
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] i1 _- G# A$ p6 U8 E) F
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
. K( b! s% D3 w" l00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~( J/ D7 v Q- g
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
6 ~' Y9 n& F7 M5 H% z) N: N00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
, |# v( H2 ~2 j1 k( f7 D3 U00404D12 6A 40 push 408 J' s0 m, L7 A7 f/ C5 a
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"4 [8 P" U2 S& ]) V) o
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again.". M- g! H. K. ~) f ~7 q1 V
00404D1E 8BCD mov ecx,ebp- L) z/ r" Q8 S6 D1 |& s" T4 I
00404D20 E8 50840200 call qsr.0042D175) n- G$ V/ o" t4 @# ?) G
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
% O' t; b8 v F6 Z+ R, s/ B' J% C7 P00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-12 I8 G% G, p0 _
00404D31 E8 5AE3FFFF call qsr.004030908 a8 y, s5 e: C m$ a5 {. a" t
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
}' q) y% b" A& ?' @9 E00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx. }* w$ l) b$ \
00404D41 5F pop edi! ?2 Y0 h/ b/ J1 Z% W
00404D42 5E pop esi
3 x. A A9 ?7 f; X+ h00404D43 5D pop ebp
+ ?5 ^& d _& e! m00404D44 5B pop ebx% }- v0 r1 P! R( c( h: S1 C
00404D45 83C4 18 add esp,18
4 h2 w, g5 n$ ~* W5 L00404D48 C3 retn
0 Q' _3 [- I6 C; i/ b" ~1 u4 `*********************************************************************************************************************************************************7 B' N' a7 ^7 T# Z( n! j9 h
跟进00404D09处CALL来到：
& d# F) K3 V& v( s, s$ U/ G004030A0 6A FF push -1 //一路F8下去~~~~
* j" g2 o2 I2 _' P: k004030A2 68 C88F4400 push qsr.00448FC8
: P8 z) Y7 w/ @& N$ \$ r2 n! Z, A004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]3 G$ n# M d$ D' t& \
004030AD 50 push eax1 D, ]( Q: B7 m! \2 B. O
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp8 s" Z" B6 ]3 D' n/ R5 h
004030B5 83EC 24 sub esp,24
: d3 r# P& e1 C; Q6 e; M3 e4 |004030B8 53 push ebx: ?# d# E5 }: S% d6 A0 @
004030B9 55 push ebp) `) k- R! H( Q+ S @$ D
004030BA 56 push esi3 a1 [ h; Q9 C- U# D" w; Z+ O
004030BB 57 push edi0 k8 T' Z, Y9 w; X
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
# i0 r2 H% I! u$ U- S( g8 f( }: m004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
5 ?) a/ W# v/ {; Y004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1/ y7 w. d$ ~9 ~: P& g# {2 p$ }
004030CD E8 27C40200 call qsr.0042F4F9
1 A( ^' J3 Y6 t% P004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]! U+ q& ~5 q# h+ _
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
9 D: U0 B; I! j, i7 c+ Z004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( J( K- m+ w, K1 n S) D7 R0 m004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
0 F2 x; ~- X7 J; v) }- Y" Z004030E4 E8 905A0200 call qsr.00428B79% ^" \% D, ~' h" ]" Y! y3 w
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]# K* y- X5 g8 a' F: V
004030ED E8 3B5A0200 call qsr.00428B2D
; \# V! k& V6 R" a2 q( k( u2 Z& W( N9 H004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
?3 E) B0 Z2 u. ?0 o9 I. c6 n2 O004030F6 E8 7E5A0200 call qsr.00428B790 P8 R% m2 Q1 L5 l
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
& M& r& j4 |' K7 ]0 @# _004030FF E8 295A0200 call qsr.00428B2D
0 a, T5 e- T1 Y! u00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]( K3 X+ u" y1 V
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
( k/ m8 g9 z2 }+ w E1 I0040310B 83F8 02 cmp eax,2! u, x2 s2 Q! }( d% e9 N. k
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
8 r9 n" o" b7 ]00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
4 W: G2 g9 T4 z00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
1 H9 z b4 [- e) r' W* s0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
% z8 x: j& G1 X, K; W/ t1 x3 F00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
- n9 _- z( |! R4 o* Y( \00403126 6A 01 push 1
4 }( U+ x6 p/ V& k6 ^6 @00403128 50 push eax
" N2 O3 E) k4 Y* B9 y# N00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
|/ z! ?# P1 w. g1 l0040312D E8 C4550200 call qsr.004286F6
8 Z; ^) l9 s3 q( L$ `& E O* q7 h+ `00403132 8B00 mov eax,dword ptr ds:[eax]: B) k! u) M( Y& ?5 U3 r
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]1 m" C) E `# ?. n1 h/ V. L9 H
00403138 50 push eax
$ j& G, w2 X- @! H, v* X3 d) v) P00403139 C64424 40 04 mov byte ptr ss:[esp+40],4" P8 L. G* m& e- Z7 p: S: O& U# P4 P
0040313E E8 4D560200 call qsr.00428790# u/ T/ j8 E6 S# P. t2 x) w1 L; v( W: N
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& o/ }* g) B t" r00403147 8BF0 mov esi,eax
2 S& }) U) k1 W2 E- x" [00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
- m2 z& V- F0 h0040314E E8 38C30200 call qsr.0042F48B( C. k5 t: `- b- F: X. N* j
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
* d! \3 V4 g5 L! N! {00403156 B9 3E000000 mov ecx,3E1 @" V, s5 [$ h* ?$ C- W
0040315B 99 cdq. M5 F4 P/ P. C% i4 S6 J
0040315C F7F9 idiv ecx8 `& o) }1 G$ m# l6 p
0040315E 6A 01 push 1 ~8 [. _6 z+ S2 j I' {
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]9 l9 f' K E' w$ T1 t, M, V1 b
00403164 8BF2 mov esi,edx9 ~. D: ]" X: `* U0 p. N
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]3 B" Z8 U; c- d! ^7 t; ?
0040316A 52 push edx
% O: W! B x" S* @* s) v% G0040316B E8 0A550200 call qsr.0042867A2 O8 L" A. }4 m1 |
00403170 8B00 mov eax,dword ptr ds:[eax]/ a B b( I: P/ w, w* f5 m
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* U2 c. `" E2 } O
00403176 50 push eax
# u! b1 ^. z$ b$ w# g" ?00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
- W3 v3 ]& M1 t7 r0040317C E8 0F560200 call qsr.00428790
# [" _2 n: ]9 k1 b; w00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]4 n( y/ i6 o5 N
00403185 8BF8 mov edi,eax
2 C( D+ w- ^* G. ]; u5 V00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
& E. B" v( H" V& G# Y1 y0040318C E8 FAC20200 call qsr.0042F48B2 q+ x9 A: o& h6 r
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
3 o& p) k3 U/ y& F; i5 e$ z- B$ C00403194 B9 3E000000 mov ecx,3E" b& ^% D0 F& H) M
00403199 99 cdq
" Q; ~' t2 s9 G" I% c0040319A F7F9 idiv ecx
$ ?$ q; u0 f! n% k0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]5 a9 H/ n& ^& B P6 v
004031A1 894424 28 mov dword ptr ss:[esp+28],eax3 P3 T& Q4 d9 P" c- N* T
004031A5 8BCA mov ecx,edx
- n8 w# e7 V% m3 n* K+ Y004031A7 894424 24 mov dword ptr ss:[esp+24],eax
- B6 w4 e0 X& u$ X004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
: K3 Q4 g' h0 C/ ~004031AF 894424 18 mov dword ptr ss:[esp+18],eax( V2 Q- \3 d: e1 S; M$ G
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
( P h; N( d8 C6 L F" w004031B7 894424 10 mov dword ptr ss:[esp+10],eax
b, O) Y3 ]7 f `3 g0 \004031BB 8BC1 mov eax,ecx
! S8 r" f I- L: t' O1 L004031BD BF 0A000000 mov edi,0A
0 A- T% y8 _+ y004031C2 99 cdq+ |( s. i7 g8 u3 g. @( b3 a
004031C3 F7FF idiv edi
7 K; s4 W a. i- E" G! q' K004031C5 8BC1 mov eax,ecx. }3 l7 B5 \- X4 |
004031C7 B3 0B mov bl,0B
! z# T- U/ d9 z6 z004031C9 0FAFC1 imul eax,ecx5 b+ ?3 w( w; G2 H( i2 S- F
004031CC 8BCF mov ecx,edi" R$ t: [# i H0 R! A6 O3 N
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
0 R9 A$ F* _" N" @. z/ ]1 V004031D2 52 push edx# f# L5 T2 G5 w9 Y, F+ ?; a) _5 G
004031D3 99 cdq2 F4 j8 G2 |. C% o
004031D4 F7F9 idiv ecx
/ z: w8 j. B8 D) Z004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
' Y; Q: ?7 U- m0 w0 W004031DD 2BC6 sub eax,esi; N3 I5 y( J. g6 b; n6 N& S
004031DF 52 push edx/ `) c+ a. ?' z8 @& r
004031E0 99 cdq
/ {8 D$ y1 C4 M: @004031E1 F7F9 idiv ecx
G" B! ~6 P9 B, x* p004031E3 8BC6 mov eax,esi
/ t. }0 ]5 b& Q8 J( D/ D004031E5 52 push edx
4 F. v) q5 Q4 Y, Q8 H0 N! r004031E6 99 cdq
( ?9 f; k3 x( M3 S004031E7 F7F9 idiv ecx! _3 W# E2 `( v, }+ x
004031E9 52 push edx" k. P3 K9 m+ T( ^( N. @2 C3 m
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38] I) u% o( J8 e2 m6 P
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"! ?. i$ G# ` M6 E9 e
004031F3 52 push edx
: \+ C# B4 K( v6 i% U6 i004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48938 X" Z& T% E* A3 K! A7 {
004031F9 83C4 18 add esp,18! _% s; P; V( c1 C* e
004031FC 6A 04 push 4
l2 [8 P' w- ]+ j7 P9 F1 e4 F004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]2 z7 w! q& g; X- l3 A, x
00403202 6A 00 push 0; s% `- w9 U$ O2 d& u$ K
00403204 50 push eax
$ c/ L; x1 T2 ?: `: N00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]9 l5 k n6 P& g1 H% S' E
00403209 E8 D6530200 call qsr.004285E4) v+ W6 u3 U5 m: c- _: M; e$ E$ @
0040320E 50 push eax
' ]. i# z# A: _4 L5 m0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]7 M6 ^1 `$ m [5 y
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C+ x( ^ K. q; f2 e2 g* e/ W
00403218 E8 A7C30200 call qsr.0042F5C4
" Z3 o) z- J: e! i0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- Q2 d4 x" c; o, X+ w00403221 885C24 3C mov byte ptr ss:[esp+3C],bl0 N2 `8 H& Q- U( j- F, D
00403225 E8 61C20200 call qsr.0042F48B$ [ Z+ e- _: Z& w0 @$ p4 I: R
0040322A 6A 04 push 4
$ b% I1 i: p. U8 e3 D* k7 A0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]; X( b) H0 u4 o/ {/ e
00403230 6A 05 push 5
! b9 ?: i) Z% w& T U6 k00403232 51 push ecx
! ^& w4 b" d+ { h+ T g. G( r00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- D! W% a r! t: E1 V00403237 E8 A8530200 call qsr.004285E42 _0 v. n2 w! M. Q7 J2 u/ M
0040323C 50 push eax
7 `1 V" w3 t( |. P7 @% M* r* R8 I0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]( {# N7 U! W$ {+ Y# }; ?
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D( S3 R9 A- x3 T0 E# g- y
00403246 E8 79C30200 call qsr.0042F5C4
: K$ \; \9 I" g3 j1 E0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* ]* z$ p- c$ ]% C
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl- _% Y, r' i% j$ o" P* B6 a, m
00403253 E8 33C20200 call qsr.0042F48B
, u9 e/ k0 d. W5 _( [; o00403258 6A 04 push 45 c& k& q" q6 Y0 t D# D
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
; j p6 T8 l' {- c0040325E 57 push edi) B1 d$ e1 z7 X' ?
0040325F 52 push edx0 g% E. z6 s: }/ {9 I
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 G& \0 B2 F$ y8 L$ W x00403264 E8 7B530200 call qsr.004285E4
' b) K' c+ o8 r9 V {# ~6 u& \) ]00403269 50 push eax% N8 }; }" U3 o9 C) M1 _
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
# Z( s; ^ [# `$ v0 \0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
E$ H" m( |: y w, ~2 n: X00403273 E8 4CC30200 call qsr.0042F5C4
- U2 B& d0 Q4 D00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
" \' k/ ^* [2 a% g! W! J O3 ^6 f0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
& O# [/ K# b8 C' V00403280 E8 06C20200 call qsr.0042F48B
7 X. ^# ^3 v: {00403285 6A 04 push 4
5 V0 ]8 c) f6 d) Y. N, \1 Y00403287 8D4424 34 lea eax,dword ptr ss:[esp+34], b% E; b% B. N6 ~
0040328B 6A 0F push 0F
A9 f* E( ~1 e, q [& x0040328D 50 push eax
/ d4 H+ s1 E4 s& L% R0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]8 Z4 X& E% I6 t0 c2 \ H; p8 B! f
00403292 E8 4D530200 call qsr.004285E4
/ o5 a; H/ x/ o, f00403297 50 push eax
2 t# J# P: A9 u% x00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
8 x- t0 {% T% k8 [0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
3 `/ `8 [) R+ h3 k5 C004032A1 E8 1EC30200 call qsr.0042F5C4
4 R6 z K4 `' M7 V4 O004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 V P9 O' j5 z& E$ I+ n
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl- h3 m! |: I4 r0 G: W" ^$ Y& c6 X
004032AE E8 D8C10200 call qsr.0042F48B1 t' z8 q( R/ L9 @( e1 G
004032B3 6A 04 push 4. K. b5 Z4 p: J1 N
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34] A f% u1 O: W; P
004032B9 6A 14 push 14
6 ~- V8 n6 V: S( [# @1 c! j: [004032BB 51 push ecx n' c5 z! T1 B/ r& \0 N6 l
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
) H5 Y: S) ?8 w$ R- X! e5 I004032C0 E8 1F530200 call qsr.004285E4
& t' _- ~& N6 A4 N* Z5 J0 t, ^, d: ^004032C5 50 push eax
+ {0 n, g" G1 I5 v+ Q# |, a) u004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( I. n9 A: p% v# y
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10' y$ E1 q% S$ q/ i
004032CF E8 F0C20200 call qsr.0042F5C4
. s+ | C9 x4 O/ s. R004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 q3 V9 ? Z& \1 { I1 S9 @004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl0 q4 W6 v( W1 ]% t+ @ g
004032DC E8 AAC10200 call qsr.0042F48B+ L+ I$ R$ n# {' X- l1 ^1 V
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI+ T; f2 m/ ?+ b4 w8 z- k; o
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
8 d, V9 g- u9 M# |2 q1 M z004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
- [1 I& T% T( N% \004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
- p( w) Z% c9 p v+ N4 J004032ED 8ACA mov cl,dl ; DL送CL
/ F' R$ f4 V: b! K& Q004032EF 3AD3 cmp dl,bl ; DL和BL比较
) ~* X$ Y; H1 m7 h004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
3 d9 G. E# w* _% e' D# ?% K8 B( Z004032F3 84C9 test cl,cl- r4 R8 f9 {8 U5 s1 A' A2 ] k/ O+ F
004032F5 74 16 je short qsr.0040330D
R& |1 ]4 P6 l! P+ m$ |2 O+ [004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL, I" i" k0 Z( M& k9 F
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL+ s* `% l0 M5 ^& G1 ` `' s
004032FD 8ACA mov cl,dl% B2 R; `9 m4 o1 ?% J
004032FF 3AD3 cmp dl,bl ; DL和BL比较" B$ b/ j6 J7 Z3 k2 z$ o4 M! \
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）. O7 d9 R# ?1 F$ t0 X
00403303 83C0 02 add eax,2 ; EAX加28 m; ^9 J8 S5 k, h# u
00403306 83C6 02 add esi,2 ; ESI加29 b0 O: V3 ~3 c Y
00403309 84C9 test cl,cl
# M4 }# @4 h, h9 u b0 k* X0040330B ^ 75 DC jnz short qsr.004032E9$ O6 P4 G# { u) b, _
0040330D 33C0 xor eax,eax
) F# c7 j9 m+ m2 o5 d9 ]0040330F EB 05 jmp short qsr.00403316: ~5 }& H- @/ Q6 L5 e$ t7 j8 D
00403311 1BC0 sbb eax,eax
2 L0 g% S! o! z! Q8 b; l- T00403313 83D8 FF sbb eax,-1* U6 T7 W O8 }8 G
00403316 85C0 test eax,eax( C' d& T5 \( A& d% A1 s
00403318 74 0E je short qsr.00403328
1 ]& s; W; X8 u) E5 I5 ^0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A3 }+ f) g. u, t" |. N
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]* U, M% y# s! y. z
00403323 E9 F0000000 jmp qsr.00403418
0 n: z" v$ h% k( A5 E% [' e( e00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
" [5 S( o4 m, s2 N4 W3 J2 j0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
' G3 i, J2 x; ?. E, W00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
( i$ j* s+ F9 ~, B4 q00403333 50 push eax2 {) o) { T5 v% h6 u
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX: V& M1 J$ k# g
00403339 50 push eax A: B* s' m7 K8 r* D
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
% e* Q2 b) d7 k8 M& }* q y0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX/ U0 b1 p7 F1 o8 }- ]+ w
00403343 83C4 04 add esp,4% A6 m, y2 _: g J
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI) R; a% ?& _3 F
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
5 {2 j( O% I; P! a; y S$ B# i0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
* U9 ~5 O5 R1 i. d( A4 j! {0040334F 50 push eax
2 @- r) M+ Z* e/ ]( S00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX! }+ v: @) s4 b% c( t
00403355 50 push eax# r' k4 e, f8 j4 ?8 o0 O
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
0 M1 I6 [7 S# u8 ]0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX- U6 D0 P" J% ~$ n6 D
0040335F 83C4 04 add esp,47 S0 o: L- ~# S, [ a3 _0 \$ G: x
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
- l, a( p) @( p# J. [6 x$ V) b00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& O+ F3 s8 H- i( X, x: u8 O4 [
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]7 ~2 c/ q7 u- c/ g5 N
0040336B 50 push eax
% f5 j* V. W) e7 i% L0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
: a- A) Y a) \! o' W; S5 {) w; i, Q* ^00403371 50 push eax# @& d1 s8 u$ @; z; p/ s( ^3 R
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
% l6 Q% w% ^) Z00403377 8BD8 mov ebx,eax ; EAX送EBX- u$ y, K, `1 w/ T: D# A
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX. |3 V, e, s6 j# A: c# Q9 C
0040337D 83C4 04 add esp,4' x. `* ?) Q1 _2 X
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]. Q% i0 j6 f9 n. V) h
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
9 C5 ]8 d0 f7 D00403387 50 push eax+ c5 S% L# O6 }2 S' I
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX* t' j% u! f3 x& I S
0040338D 50 push eax
" f! V$ [" n B0 Y9 F, Y0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX. L- q& S# R. h5 z* U- ]
00403393 83C4 04 add esp,4. a2 _3 x; C! r. g
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]5 q* W4 h: J. Q7 c
0040339A 8BE8 mov ebp,eax ; EAX送EBP
. C2 S! U: x0 H+ o& u0040339C 6A FF push -1% r W' R; A$ K7 w' n9 t; N
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
% J! |* s+ F+ y: A- n- t004033A3 6A FF push -1
1 B8 O* z0 Q, w: t. v& }3 ?004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
' A; d: j! q* S004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
# ~: s" Y& h& M* b: N; J$ w004033AE 6A FF push -1* {! Q" |5 d: R {! R2 f' j
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
4 q* C8 @2 O! U. L( H/ \" N004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX, J. D+ F% Y; ]+ r! ]) x: s3 b
004033B9 6A FF push -1& W$ u/ p1 r' d- }2 \
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
! J5 o. p$ |) G" `" r004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
/ i) m1 u0 z# t- u004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
- d/ t5 I0 h5 X% D5 @8 L004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
% W. |. h. D% V3 R( O J! @004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX; a# G6 f0 j, c9 W3 _9 k( S( I
004033D7 D1E0 shl eax,1 ; EAX左移1位, R$ b: C3 k4 F$ J9 v1 U9 S
004033D9 99 cdq ; EAX扩展
: m" s: K2 R) _' ]7 O004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
i1 @ @6 W4 T8 U8 m004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较. R8 O+ I) R- |* @( Q" }
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）# p" f+ m# [9 D+ }1 R# ~, e, w
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
' c7 l$ `% S; V3 s1 V! C; S004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
. z* d( [! G( V! G# D x004033E9 EB 2D jmp short qsr.00403418
) L9 X0 V, c" z; k u6 [7 G, \004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX V( r4 a. ?* p. D5 C
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
- G; T4 Q9 x n$ {0 {- y3 T) J, p* A004033F7 99 cdq ; EBX扩展4 W9 ~- b: I2 Z6 ], }% d
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
, t, k* h2 P& a |2 N004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
' O9 b3 c8 p1 m004033FF 2BC2 sub eax,edx ; EAX减去EDX
5 ^) e6 z D6 t6 M00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
9 k, p) V) _: ?* x$ C00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX$ r2 C6 h- S/ Y. w0 S; |; s: F
00403409 99 cdq
7 Q$ C- v* w# N8 V3 ^* D0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中% g5 R8 v2 z, P7 ?
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
9 }: }" G9 N7 A$ Q2 U, c00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较: r6 o5 x( B; B! u k
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）; q9 s6 H8 j! O- \ d, l9 o
00403418 E8 6EC00200 call qsr.0042F48B ; / D3 x4 g! X) T% I" k2 S" \
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
- l+ I$ Q9 O- k" y0 j00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9( B* _$ k0 X( w6 `; H0 z5 J
00403426 E8 60C00200 call qsr.0042F48B( N2 Z+ F. l7 D. P
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
& I' N( Z5 W8 h7 T0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
0 o- p% N& m/ W3 _4 p0 M00403434 E8 52C00200 call qsr.0042F48B
1 O6 t) a. W/ c0 Y7 N* M00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]5 ^+ y- e1 W0 z
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7& g- B+ Z; h2 z7 s
00403442 E8 44C00200 call qsr.0042F48B
7 i4 H) q/ k& P0 v' x% T5 n4 `00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
( m* N, q c3 z4 {& t& n0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],67 L) F1 A; a8 s6 N5 j; ~7 g2 x
00403450 E8 36C00200 call qsr.0042F48B
! Z" @. @" J4 M3 }00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
+ E" g0 d2 H$ P6 w6 y: g00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
2 r( y( l% T5 `' |0040345E E8 28C00200 call qsr.0042F48B6 n* c( K/ q: E% r* d+ A; G
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
5 O. _6 S$ K0 P3 I! |' y; W00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2$ c: u) m: G& ~
0040346C E8 1AC00200 call qsr.0042F48B
6 ^' j: \( e6 x; R00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
! A7 t; _3 A) [, ^; W7 _) @00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
; s1 r- ~8 j8 k% ]- `0040347A E8 0CC00200 call qsr.0042F48B
3 u- U: N" \6 ]4 {0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
0 H: q* R- `' S$ o% B. \& N h8 G00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
; N5 R) }: {) D9 E00403488 E8 FEBF0200 call qsr.0042F48B
+ o; ~% z7 I: {3 ]: W0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
1 k! @ S m6 j7 g00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
# j1 _ P' w; |/ K! M00403499 E8 EDBF0200 call qsr.0042F48B
4 G4 ^5 U! Z) t2 p; G; q9 r- f1 A `0040349E 32C0 xor al,al ; AL清06 R) V' j3 w& R8 k0 m: B/ n3 d
004034A0 E9 88000000 jmp qsr.0040352D
; n0 L4 L j6 ]6 ~: p004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~4 W5 q0 l, P) V L5 m
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' u L* ^ h1 M0 J" F( r
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
7 t) O6 M6 c5 a- E! J004034B3 E8 D3BF0200 call qsr.0042F48B* }& b0 ]' d, d3 F! S
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
6 }& ^2 Y8 ^) I+ A1 h# z8 P: O004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8% T/ ?" v7 O5 i8 W5 r* d/ \/ A0 a
004034C1 E8 C5BF0200 call qsr.0042F48B1 }. K4 a# u$ f& y( Z
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
" q. [! E* K/ H% ?004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
, V+ ^5 _& W7 r4 b" s1 [004034CF E8 B7BF0200 call qsr.0042F48B- k# l! ?4 Z% |, @# I- b
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
: ` ^" z5 e" g0 _004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],61 a O( R8 h) K6 N$ S- ?9 q# ]* Y
004034DD E8 A9BF0200 call qsr.0042F48B
$ M" }: a0 H7 c; M2 H; Q5 l: ~004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
- E4 `' K9 v3 b! ], X: v9 K5 Y% G/ f+ E004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3! e2 u( a- J. [& y; O7 @
004034EB E8 9BBF0200 call qsr.0042F48B$ J4 S/ E5 S: q0 r4 s& g. i6 h7 ?4 c
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]) |( `5 k. Q' ?( T6 E& v0 p, k
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
8 X) |: t s+ [7 d! W$ A3 F004034F9 E8 8DBF0200 call qsr.0042F48B0 ^* |& V+ a) `$ Y! a& L* b+ p
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 L& a% t8 I( K! _% w. [00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1' J9 N% [" Y$ c, |, ]8 @
00403507 E8 7FBF0200 call qsr.0042F48B
# _5 F( Z2 T/ u& F k, r1 O+ E0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: e {3 W7 G% z( b+ B+ F" u* Y
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0( t6 j& B W* R' [4 r
00403515 E8 71BF0200 call qsr.0042F48B3 `4 m9 m- X2 H) ]
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 h% _0 C, i$ C2 d3 p( A0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
1 z3 G m w/ e* G& k% r00403526 E8 60BF0200 call qsr.0042F48B9 H/ K- Z3 u% s9 _
0040352B B0 01 mov al,15 C1 X; l) L, ]$ R5 r4 ]: s
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
5 I0 m3 a( A7 t1 ^, P- ~00403531 5F pop edi
9 F2 \& h% G9 t c$ S3 }: S00403532 5E pop esi
/ V8 K5 E9 W: H6 p `00403533 5D pop ebp
$ q. }4 S2 @: B) p: J00403534 5B pop ebx- m1 c6 o- A8 X. l, t2 Q: z
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx5 ^. f& G$ q" }" E7 {9 _) P
0040353C 83C4 30 add esp,30
" {5 k) m' v, @5 E* @, V0 r0040353F C2 0800 retn 8* y5 y, N" h- Y5 ] C6 g
--------------------------------------------------------------------------------
; L" E+ J7 u% C( V0 U2 `【破解总结】( `: b: j3 b; X+ Z* \
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^4 [. d |+ W- i- ~5 D
用户名：yijun
( p# ]$ p4 R# ?注册码：4893*7777*3726*7777*0529
0 U, u% F9 C+ ` l( s2 @! x--------------------------------------------------------------------------------5 H( W' Y6 U r1 K
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡