|
|
|
【原创】破解Quick Screen Recorder
1 d+ ]* J0 p9 w* D- \【破解作者】 yijun2 |. Y; v/ g! \) J- @; F+ a3 ^
【作者邮箱】 [email protected]
6 w! y, r1 Y: c8 o, [【使用工具】 OD,PEID
/ k& C7 Q& z0 `/ ?* Z# q ~! P9 v【破解平台】 WinXP, `7 [' f1 o1 J8 Y) w* e
【软件名称】 Quick Screen Recorder
; y5 |1 y# k6 Q9 W; ?【下载地址】 天空
+ l& R; V: H) o, ]! e' ~【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
# m' O: k# o. W! N) q0 ^: d; n【软件大小】 540K- h6 G9 k* |# g: n+ [0 t o6 U1 z' o% g2 }
【加壳方式】 无: |3 q/ r: s: d3 ~& r
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）2 f5 t8 K5 p8 W5 _8 d1 j
--------------------------------------------------------------------------------) E$ m, a# D$ Q* T
【破解内容】
6 H8 T m7 M4 n: b& J- M PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
& _. f# Q: r2 J, s1 L/ e3 E00404C69 55 push ebp //在此下断3 j! s) C. j4 q
00404C6A 56 push esi! w8 T& \7 {6 V3 S; L0 r% q/ n
00404C6B 57 push edi
o6 W! q4 ]! L9 Y! ]00404C6C 8BE9 mov ebp,ecx
3 E, N: Q7 P: w& O$ a; R1 [" ]00404C6E 6A 01 push 1
: }3 D7 B) ^8 J00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
6 X- H) `5 R: I$ v) z00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]* v! H: S& E2 i5 y" O! `+ M: e
00404C78 8BCF mov ecx,edi
4 U6 ]; M% d1 F00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
; i+ z; N8 j" F00404C7F 8BCF mov ecx,edi1 l' Y% |& M$ x" K0 G7 T
00404C81 E8 A73E0200 call qsr.00428B2D% |; r7 G; h" `# P" I- e( K7 a' q
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
# B# N" r+ S6 J9 P C3 m00404C89 8BCE mov ecx,esi
9 e. a- P8 G) A1 L! P00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX& r [! m# Q& x8 ^" L. j' D/ ]$ Q
00404C90 8BCE mov ecx,esi6 @5 }6 ] _# F5 `# z( y9 r
00404C92 E8 963E0200 call qsr.00428B2D& e/ k0 P0 i' S# k. l& S! D5 E/ u
00404C97 8B06 mov eax,dword ptr ds:[esi]% x. \. i; J, L. Y1 R
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],25 F# g2 j' O+ b4 A3 P( P9 |/ x
00404C9D 7D 26 jge short qsr.00404CC5
* y# f. X4 [* @3 G: N2 { g00404C9F 6A 40 push 40
# a1 \6 _( e2 v- l" D- f9 ?8 {- R00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
* F& N- w/ p" T7 x) m& A) l! e0 B00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
5 a2 q. c# h5 q5 l, e5 |00404CAB 8BCD mov ecx,ebp" V+ o" g5 V. r) _1 f# s
00404CAD E8 C3840200 call qsr.0042D175$ Q N( p1 t; C: D5 Q
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] W1 O. @" N' M2 O
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx- b1 A, `0 } ?$ a
00404CBD 5F pop edi5 @' l G; \4 F& _- z( H3 s# ~+ I/ |0 X
00404CBE 5E pop esi- E6 y2 ^5 A+ d% ?/ B# S
00404CBF 5D pop ebp" t2 a+ f- Q5 A$ l: w
00404CC0 5B pop ebx
9 K$ W t3 V, r8 g' E9 f I00404CC1 83C4 18 add esp,18
: Q/ e/ J1 m5 `" m7 H0 l! f00404CC4 C3 retn
7 x T# G% T; O) p! Y5 K. n00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
2 v1 x8 E9 f! i4 `00404CC8 84C0 test al,al) Q4 K' z& |0 R' S+ |* Q
00404CCA 0F85 1C010000 jnz qsr.00404DEC
# X4 P Q9 m4 T4 k00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
" s7 e1 `, B( u. r1 \& V8 x6 e00404CD4 E8 87E3FFFF call qsr.00403060
; r8 @1 o2 P* V# {! b00404CD9 51 push ecx8 C/ [1 w- N& |
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
: X" e7 g, Z. d! S00404CE2 8BCC mov ecx,esp
5 ?6 E W+ Z, D2 P# l00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
9 a! F, Q% V& m, S" d1 o00404CE8 56 push esi
( }3 p5 d3 h7 Q# [& A6 F00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
! h5 a6 n+ V% i! a! M00404CEE 51 push ecx
1 V8 \1 ~5 I ?% j5 R00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
+ u: d6 @' O. r3 z00404CF4 8BCC mov ecx,esp
{# ?+ J9 [8 x0 _0 r* H00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
' `4 K, r1 g& I: l00404CFA 57 push edi* ~$ h* K0 _) ~8 z8 r. }! |. C
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0" G7 [. C0 I2 T! f' F7 E% l3 f" v
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
! n+ j- n$ n( Z4 `; D00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
9 D$ p; B, X% G+ b! u: @! [* F$ U00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~, i4 M# V1 o( `) x U& X
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~, |$ A) y; S& \
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~6 u3 F& \0 |+ j$ M$ g$ ^. P
00404D12 6A 40 push 40
8 t( E! U/ j0 ~5 ~00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
5 O9 k8 Z" C8 E( b6 i2 f9 v00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
+ e) i/ {0 a& _& Y# D. j00404D1E 8BCD mov ecx,ebp) T( h: [/ L) k$ L: W; B
00404D20 E8 50840200 call qsr.0042D175! Y4 n8 e2 x7 o
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& c0 f3 [6 `- u2 |
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1' D6 @& E% S& h9 U2 k2 G" M. V
00404D31 E8 5AE3FFFF call qsr.00403090
, }# A0 n; U9 l# I% K6 I! z8 z00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]# i) t7 l+ G4 U' v
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
0 T' x( Q5 ^! \- g5 n00404D41 5F pop edi% e: \8 k* r( ~( k) t
00404D42 5E pop esi
1 \ U$ H$ r7 G( K1 a' T+ V00404D43 5D pop ebp% [) T# s4 E) F9 T9 m1 T7 s
00404D44 5B pop ebx$ K. S [( J$ c
00404D45 83C4 18 add esp,18
9 a8 k q# ?4 X# w' H& Z- R+ P' t00404D48 C3 retn2 ]6 [4 r- {3 ]! ~+ S
*********************************************************************************************************************************************************
: }" r+ I; W7 ^5 g |- j跟进00404D09处CALL来到：
7 q9 r I8 I- p) F2 e) L004030A0 6A FF push -1 //一路F8下去~~~~
9 `. C! I3 y6 U }8 a" r4 [! O, m004030A2 68 C88F4400 push qsr.00448FC8
+ S: M- @. y$ j/ l$ r4 W004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]; e; {& g, o0 T
004030AD 50 push eax- n5 t& O' U& f1 r& x6 l
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp+ f& x) \$ M& U5 s7 Y$ A# W
004030B5 83EC 24 sub esp,24$ E" E3 o w* U$ w$ b" X$ S
004030B8 53 push ebx
- x1 x6 H5 Y2 V0 ~0 {2 x004030B9 55 push ebp
( G) d+ s3 n7 [7 I, s3 L) L004030BA 56 push esi
. a6 F& Y3 m) Y004030BB 57 push edi% p2 o8 I$ U; K/ E. E
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
2 z: R5 E7 S) z& R2 y) x1 A/ C6 Q004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 H- i' Q7 X" T# P4 o004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
; ?/ E2 Q" b# O6 P004030CD E8 27C40200 call qsr.0042F4F90 _8 ^" r+ e3 ~' u
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
$ a5 [# C. V0 i004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
5 y+ f W$ i# J% J- r' N; Y, k- ^9 V004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 _* h9 r9 N) w- x6 w004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
% L# c. K' f( G: Z004030E4 E8 905A0200 call qsr.00428B79
0 d) A- `! F% O' ^004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 _2 K9 z5 I) S3 v& `/ M
004030ED E8 3B5A0200 call qsr.00428B2D
' C4 J/ B) q: S L6 K O! D004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]7 I+ r" _+ `" [( O/ v, V
004030F6 E8 7E5A0200 call qsr.00428B79
; a+ t& P, F( U# F9 _ A3 d3 N+ j: \0 D" _004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]/ h5 a" U$ Z9 x+ r" Q! \) H* r Y
004030FF E8 295A0200 call qsr.00428B2D2 s" o2 [) e5 c# x% V# x+ ~
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]; U5 n8 L; l. s" Q* u( t! `
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
+ n$ c7 ~9 D ~/ V: K$ }6 r1 a0040310B 83F8 02 cmp eax,22 L. D) q6 z. y; k' R# F
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
/ ]7 s) g7 H s1 W6 E00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
" J% g6 } G0 K3 h5 G00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
/ C i; @: w) ]; u0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳4 ?' a8 _8 ~- H, X5 @
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]+ K4 h+ R$ J! S; Z
00403126 6A 01 push 1
, n% L& j- v+ z6 h( q/ {00403128 50 push eax
+ O, ~: s0 P3 x/ u/ @* Z0 W( P2 L00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 g0 ^2 i5 X+ w- i1 n
0040312D E8 C4550200 call qsr.004286F6
5 v: D: T1 e% \. ]00403132 8B00 mov eax,dword ptr ds:[eax]& g3 @% [/ k: D8 y
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]5 L( h& T3 S+ q# ^
00403138 50 push eax$ v) W. W3 B# x" A
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
$ {; d$ g* p9 s. v: Z1 A0040313E E8 4D560200 call qsr.004287904 v" L8 q# L' C7 ]
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]/ H/ O) c7 y* O. V4 _2 z% d
00403147 8BF0 mov esi,eax2 z1 K. D, Z9 a/ h, D
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3* R+ t+ J, e7 h( s1 D
0040314E E8 38C30200 call qsr.0042F48B
& A4 Q5 f3 b& B00403153 8D46 0A lea eax,dword ptr ds:[esi+A]1 o' n* Y6 ?$ f( l& ^$ E
00403156 B9 3E000000 mov ecx,3E
+ O, l; J3 n" }, n: [& }0040315B 99 cdq
+ D" W% q$ D, T8 S: u0040315C F7F9 idiv ecx7 f+ V/ r# r% J7 m0 p3 p b$ i1 U, U
0040315E 6A 01 push 1
* C |- k+ W/ j00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
+ i; q; \/ k. q: h O5 v# F; E00403164 8BF2 mov esi,edx9 Y. S6 o: J. I5 L. b
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
, U. n |, m$ K9 o* S1 v0040316A 52 push edx& J7 ]8 Y1 a5 W& J
0040316B E8 0A550200 call qsr.0042867A2 Z5 p' t) @9 a4 n
00403170 8B00 mov eax,dword ptr ds:[eax]+ a" ]2 V) e0 r$ L5 \8 C
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
! {+ ?. I* R6 u2 l3 @# Q, u4 ]00403176 50 push eax
6 Y1 _. _1 Q x* y* I, q00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
6 m( Q# k# W) p4 U4 ~/ |0 l0040317C E8 0F560200 call qsr.004287904 e' u2 s7 A% n8 O# m, S. R
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
8 j. ]- b; n6 H7 f9 S! s9 m$ ~00403185 8BF8 mov edi,eax4 z1 Y% `: [2 c5 t6 \
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3, l, W0 n+ L" E9 t7 m) k
0040318C E8 FAC20200 call qsr.0042F48B
& s1 i! E* \' t8 g00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
, I6 o/ g" M/ w+ r2 M- U00403194 B9 3E000000 mov ecx,3E/ y" A) d, \. ^( z, M
00403199 99 cdq
% C, M( J; L) B% \1 P; _& L) i0040319A F7F9 idiv ecx
8 @" d8 l& C* I& N/ a( p/ x: _0040319C A1 38F44500 mov eax,dword ptr ds:[45F438], S1 j/ b1 v5 e- E9 T- P
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
3 G/ l* O/ n( c' `7 U004031A5 8BCA mov ecx,edx$ Z; `3 H; C" k6 F. j3 ?
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
/ ~3 \+ t2 w9 F! _. y004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
4 T: C1 U2 G8 |7 k, t. q; r004031AF 894424 18 mov dword ptr ss:[esp+18],eax
) Z) l$ i2 Y" E# P004031B3 894424 14 mov dword ptr ss:[esp+14],eax3 ^% y k% b/ [. |# @6 {1 _5 ]7 G& U
004031B7 894424 10 mov dword ptr ss:[esp+10],eax5 Z9 i) m+ e1 V" U/ F0 Q
004031BB 8BC1 mov eax,ecx
* J" n Z9 Q$ o1 i4 ~. x/ K004031BD BF 0A000000 mov edi,0A- A3 a" v5 F% S4 K6 t8 Y$ X1 J
004031C2 99 cdq0 |* r" j) k8 w! i6 K
004031C3 F7FF idiv edi: S" f; U4 }( R Y3 z0 r& B
004031C5 8BC1 mov eax,ecx1 G$ J$ i( _: e( \( c
004031C7 B3 0B mov bl,0B( Q- S: I& _' ]1 s$ a! {$ m/ }
004031C9 0FAFC1 imul eax,ecx5 F2 o5 p8 A( g2 ~; B/ T* Q$ f( \
004031CC 8BCF mov ecx,edi
* L/ d, _3 a5 e5 K004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
- [( u' b6 A4 |5 |7 Z8 R004031D2 52 push edx( S! b+ l" b3 ?
004031D3 99 cdq2 m2 ~, |+ ^+ _( g
004031D4 F7F9 idiv ecx& |0 n2 \% n- G5 l, v1 F+ Z
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]! `% ?! n- \! U; t6 L6 P
004031DD 2BC6 sub eax,esi
' i$ P i& p; A! ]8 q004031DF 52 push edx5 [) F, Q9 [0 J0 @
004031E0 99 cdq* A, I- i7 ~* Y; R1 L8 P2 a0 N3 ?
004031E1 F7F9 idiv ecx0 y3 v# E9 \5 U: m
004031E3 8BC6 mov eax,esi8 e- `8 g v# C4 }! D5 t
004031E5 52 push edx3 G7 w$ F3 w: Q1 k( \( H% [
004031E6 99 cdq
! K, s7 b$ F7 f* ]' b004031E7 F7F9 idiv ecx
9 |! e" M* H) `( M7 {$ ^# `& M004031E9 52 push edx1 o; }/ b- l4 x( q
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]0 W/ h Z* }4 q e+ E- ?7 y6 x0 f
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
/ @: ] u1 F2 k004031F3 52 push edx" P9 g: X/ @# G5 S* p1 u
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
* L9 ]) ?( H& B004031F9 83C4 18 add esp,184 G% [8 u9 q9 u$ P, j: w$ [! c
004031FC 6A 04 push 49 s! d$ ^8 ]* `' B4 A ]; A# b% Q
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
% s" n0 t3 r8 u1 ?: s00403202 6A 00 push 0# Y( U3 X2 {; o; ^
00403204 50 push eax
, r% B, B- T; U$ d, u3 G00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 V# J5 V# E/ H9 E00403209 E8 D6530200 call qsr.004285E4
9 G( Q2 n( z7 j, V! a& n6 H0040320E 50 push eax
" }' L* m+ K8 z. V7 x/ S$ w- j0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
% g" f- ^0 S0 b00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C* ]$ ~* q9 _- N, t! r; h
00403218 E8 A7C30200 call qsr.0042F5C4& ~1 a$ c% T4 r: _: D1 B% V
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
: U. G- O. x: I, _ s1 |00403221 885C24 3C mov byte ptr ss:[esp+3C],bl, n- x4 P' W5 e
00403225 E8 61C20200 call qsr.0042F48B
( v3 @+ B% }6 l4 A0040322A 6A 04 push 47 n& V, W1 ^& K6 Q8 B* {& F/ V
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
6 n4 b, [1 N0 X! w4 w" b00403230 6A 05 push 56 t% v+ c) R: T V( F% N
00403232 51 push ecx2 E( U z# N/ g& M* J0 L' w* ~
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" E- }$ M: A" q6 l( g. T00403237 E8 A8530200 call qsr.004285E4' R g( u. I) K) a6 a1 x
0040323C 50 push eax8 L2 d+ S* U; F/ b3 x+ t f
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) c' a. t8 J. \( e/ ^' a; U* e
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
' l5 P2 a/ y; V/ D& b5 Z H00403246 E8 79C30200 call qsr.0042F5C4
3 X+ F7 U1 U7 a8 d( T4 L4 |( r1 j0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& w1 v8 c. _1 z* u. Q: }3 x2 O0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl9 @( w) M4 G, i: N( g! X+ u4 D9 h
00403253 E8 33C20200 call qsr.0042F48B
3 G# A! `5 V+ j9 H' T9 q& U% M00403258 6A 04 push 40 I: j* V* X+ v6 h* Y1 y3 K2 b# b
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]3 |4 m& c' ], K1 S [' r/ @6 a
0040325E 57 push edi
/ f4 F2 r8 [& J! m) x- `' b0040325F 52 push edx
5 c0 K Y) l0 L- X$ m+ Y00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 ^7 r3 Z4 c7 M1 k! O4 d00403264 E8 7B530200 call qsr.004285E4
8 d& d% ^) B9 Z# R00403269 50 push eax- s# q- ?& ~4 W( z3 L5 v# y
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 T8 a0 R# D/ y
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E, }# x7 W" n9 y! z! K0 y
00403273 E8 4CC30200 call qsr.0042F5C4
" s# { L {% S/ N5 v3 y# \00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ z: y3 Z: [, F; h5 M
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
2 \5 E( C5 L! N1 i h: r00403280 E8 06C20200 call qsr.0042F48B8 B$ y7 u7 v7 k* |6 e; Y8 ?
00403285 6A 04 push 4
) f1 V, Z, {! A5 T$ P00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
1 R: o# y" e6 A; j0 B0040328B 6A 0F push 0F
: h( Z# b/ q8 ^% h! T0040328D 50 push eax
* m% _) I6 l# `1 V/ I( Q0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
! p+ X( W; q% t: }, h00403292 E8 4D530200 call qsr.004285E47 }( `" j$ M5 w; i2 j* @9 `% I
00403297 50 push eax# n T& M) j7 g( E' m
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]) N( S. j8 ~7 u" Z0 O# q
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F3 m4 @4 H* N. L; _ n
004032A1 E8 1EC30200 call qsr.0042F5C40 \: }/ W( ^% H8 n( J; g* `0 ]; r
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" g6 q' s' t* D4 M' N
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
0 s; N" N5 |% V+ @! u" w* f004032AE E8 D8C10200 call qsr.0042F48B
# ]% @ f7 |& _( G3 C004032B3 6A 04 push 4 A, i, G- t; {' u% ]" E- z. m
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34] H* h+ Q0 d& q$ Y) z' s' r
004032B9 6A 14 push 14
8 I4 V( t2 I: {' G004032BB 51 push ecx" Z) `' N& z% y1 k# W
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
s! h L" D7 q; f; S5 C9 J004032C0 E8 1F530200 call qsr.004285E4
/ u) |% H. Q" ^' Z9 [; T004032C5 50 push eax- m, \8 P# w5 _ J
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14] k7 a- j0 r/ ^
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
* p& Q3 z9 X6 L; v% u004032CF E8 F0C20200 call qsr.0042F5C4
* C# A, _) e. C' V# F004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]/ k; n# P3 h6 h/ X4 a1 Y
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
. x* m& A3 U. l9 l' c8 s! o004032DC E8 AAC10200 call qsr.0042F48B
. x% x. W) M1 F( q8 F7 R) Y) S. t% a004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
) d0 k, T6 m( o+ c4 b- Q# n. W. B+ G004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
5 n* `2 C' b0 ^004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
; Q0 l3 V& |- }( H! `( l004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL# w2 k" C. v: b5 ]
004032ED 8ACA mov cl,dl ; DL送CL
0 r4 t/ V: O/ b4 i004032EF 3AD3 cmp dl,bl ; DL和BL比较2 `3 c* F( n' R8 x! c
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）. [0 i7 c& w0 h0 B5 U+ s
004032F3 84C9 test cl,cl' K9 d& Q3 x3 U& i' R8 d
004032F5 74 16 je short qsr.0040330D. }- }/ K0 W7 ^0 }
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL% g P, @" C P& y- {6 P: {
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL& n; t: N' U7 b3 m0 ]
004032FD 8ACA mov cl,dl$ g' i3 z* {; d9 l& N
004032FF 3AD3 cmp dl,bl ; DL和BL比较) O$ B2 J$ z. p o9 |3 O' `$ n
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
; a0 s# L# b) s( T00403303 83C0 02 add eax,2 ; EAX加2
. u' w" }" k0 Y! ?1 b* X& c00403306 83C6 02 add esi,2 ; ESI加21 ?! p7 [; ^: d4 z4 A H7 W
00403309 84C9 test cl,cl) B+ E- @; a$ u N0 x
0040330B ^ 75 DC jnz short qsr.004032E9
" P4 l [+ `6 @. Q' a6 u0040330D 33C0 xor eax,eax; R7 e e( N& c' Q
0040330F EB 05 jmp short qsr.00403316
2 E& D" p5 h& c7 {00403311 1BC0 sbb eax,eax3 c5 I/ _; y" B5 W( h' k
00403313 83D8 FF sbb eax,-1# \* C; Y9 G# H* R
00403316 85C0 test eax,eax# P- o8 L+ R8 E# l
00403318 74 0E je short qsr.00403328/ C: H% Y& ^- U* k# Y6 T
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A/ E: T1 k s% M
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
7 t8 \# }5 Q, {+ D* T: }" w& g% n00403323 E9 F0000000 jmp qsr.00403418
6 Y3 ]0 h0 r4 e* L8 f00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
& T5 l. ^. g1 [( K, B8 F6 p0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ {9 s$ M: l+ l& h+ E
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]* N0 d2 w9 O" ~
00403333 50 push eax. P3 L5 z+ C: {: p
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX+ d9 e2 h. p4 L2 j+ I8 v
00403339 50 push eax S( N7 N$ g x, j8 ^1 P d9 |
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX2 g$ A% T( q0 T e5 `' y
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX7 o$ Y8 r/ ~) a, C4 D0 I; _
00403343 83C4 04 add esp,4
; Q' H3 S+ ^ I( C7 L00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI8 G6 C3 q$ g' v, J" e
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]# T1 e$ P1 G# t: n
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
* Y. T7 w+ G; V7 Z0040334F 50 push eax
& B7 ?( R( M4 ?" a00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
" A6 D/ N7 | }- v- J t# m. i00403355 50 push eax$ R. o2 @& ?2 j& L/ w' [
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
* j+ S/ r, \" J7 p5 A; ]- z. c0 y0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX }6 L" f. H0 N+ |% v# C
0040335F 83C4 04 add esp,4
( a r- ]) P( V0 Q! [00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI9 g1 k6 L N- D5 ]/ X. h! {
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# X0 }/ v3 I/ C00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]1 H) S2 o: h# L
0040336B 50 push eax9 G D1 G8 W9 A, Y/ c
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
; o3 \7 w( R2 w00403371 50 push eax6 s8 @7 }: t( T/ Q
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX0 O/ k9 s9 v4 h p. z
00403377 8BD8 mov ebx,eax ; EAX送EBX# |5 r- W+ m4 B) m o" a( F
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX) U7 V- b- Z9 [! q2 b
0040337D 83C4 04 add esp,4
) w! P c U* D1 m2 S! p) |00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]! M, I5 J8 ]6 E. b
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]6 g/ J E. x# v
00403387 50 push eax' c5 q* t1 T9 } A
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX' N0 B7 r7 W. e* n+ ~4 V2 ?
0040338D 50 push eax) @5 x, R, h S- }1 d% X
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
" ^' }, h# w6 ?5 U00403393 83C4 04 add esp,4, Q6 ^7 k, ~% w: J% m
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], V6 n U; z' @( A0 `- d
0040339A 8BE8 mov ebp,eax ; EAX送EBP5 N! V) f7 R# R/ e4 j
0040339C 6A FF push -1
5 A% T; F8 G: w0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX: `7 P' w- f, y1 a
004033A3 6A FF push -16 C) O7 f+ x5 u- P7 [
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX' B9 H# h) {. G l1 @& V p |) x
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
; B8 E+ D% r+ b$ q/ ] y004033AE 6A FF push -1
9 j7 _. q1 A( N+ e7 _+ k004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
7 F" [3 m% E# f3 e1 _! {004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX# Y6 D" q$ `7 t1 k
004033B9 6A FF push -1+ G/ G9 B7 w, t0 g6 ^2 E# i
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
: L" W( l8 Q0 S$ P0 i! F2 O004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
: l/ K( W, O, h) x" x004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX# j$ K8 c* l2 V8 O- U4 P' `
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX9 O# J) T+ V2 p7 G! z) O& c
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
2 s( k9 [) D* p) \0 P004033D7 D1E0 shl eax,1 ; EAX左移1位8 e3 p$ k. I/ G4 M8 e% B3 H
004033D9 99 cdq ; EAX扩展, l# x* w: w/ _1 o8 s. o
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中; S/ R R4 O' w) i$ q/ L
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较' A9 [# ]. C( d' \
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）& ?7 W+ W* l$ m# [6 {+ @! E" L* [
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
/ @) k% v/ U# h& X6 w$ G/ B004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
. A4 W; b" Z- C d* r004033E9 EB 2D jmp short qsr.00403418% D: k. s* v1 O8 W. e
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
4 I3 [" A0 k6 v/ d% e6 x( |004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E25 I7 }( y. w+ Q8 h0 E$ l
004033F7 99 cdq ; EBX扩展
2 U; n/ g8 x, s: x3 o [; @004033F8 33C2 xor eax,edx ; EAX和EDX取异或
( g2 N3 T/ H- n/ c7 m2 T004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX' T* S @) J+ M4 x' @
004033FF 2BC2 sub eax,edx ; EAX减去EDX8 r( ?, T7 ~6 C1 H+ F
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C], M, K% s& @- J) ?1 d6 r
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
" O8 f9 N2 k# ]) R7 r00403409 99 cdq$ \0 X8 @5 Q# O! ^. Q' K9 T) V3 k
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
6 I5 c! r8 `5 W$ _! s( F0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX9 A) c1 B o6 G8 i. d. P5 g; c- W* }( K
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较! W' c1 s6 v7 \/ p) W9 T$ b9 o
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
3 u2 O8 m) |3 a9 {% x0 ^00403418 E8 6EC00200 call qsr.0042F48B ; 8 X- ` J# H* ~+ ^7 b" _" \8 `- L
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]8 {) r, J, M% L) u$ I2 W
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
7 }' V8 z! t: d- l5 a$ p00403426 E8 60C00200 call qsr.0042F48B
* r- I& y1 M6 b+ |0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]1 z2 ?8 s& [# Z
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
& l4 _% @5 N. \/ c8 H00403434 E8 52C00200 call qsr.0042F48B- f, e& f! R8 l& K- o
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ X4 v5 i5 B( K. j6 q) W0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
7 T6 E7 q6 u5 L) l, B( V00403442 E8 44C00200 call qsr.0042F48B
5 J2 B; b" z1 X5 X00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, p4 B) I8 J; E: ^2 g! m$ k0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
0 ]1 `4 q0 a+ o! k00403450 E8 36C00200 call qsr.0042F48B
: M) G. H) Q* s# E& l2 }4 }00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
( [( h' {+ {5 ?) t3 W( P2 f00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
2 T7 L- b2 P$ |& [0040345E E8 28C00200 call qsr.0042F48B* T+ i; F' i- a7 u( Z6 c" ^
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]1 F$ D( D+ H1 E r
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2& U8 s$ Z, p) T: `% P. o z2 F
0040346C E8 1AC00200 call qsr.0042F48B
" f' n( ?1 \+ {: d# ^7 O. F00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
! m! A& e! ]- p& \. u3 k. B00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
8 K- u5 T7 V. }/ }0040347A E8 0CC00200 call qsr.0042F48B
. |( U/ ]0 T( y4 X* V$ I2 f! b0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]" ?, @# X& u' W+ _, c5 Z7 k4 z4 w* |
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],00 f+ s$ V! G2 ] N$ d! ]& `
00403488 E8 FEBF0200 call qsr.0042F48B% a3 z- b) t( ~! z, b
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]( {/ o; s/ }6 n- N6 R# }4 X
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1! j, ]$ y$ C; Q2 ^6 O! D3 q
00403499 E8 EDBF0200 call qsr.0042F48B
0 G! M' g& Z0 j, q8 |0 I- U6 R0040349E 32C0 xor al,al ; AL清0
- m; [5 M. \! U4 i004034A0 E9 88000000 jmp qsr.0040352D) w* e+ W4 a# N( A/ ^" o
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
5 l5 l. Q# v+ D. M P% @" {% Q) a004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]" y# R- \& k V8 A" Q3 `' e* m
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
8 i. u3 p. z9 a: j) [9 T004034B3 E8 D3BF0200 call qsr.0042F48B ?7 L& u3 e# _6 D8 y6 @2 v0 z! B' Q
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]+ `; d! u" x5 N. [+ S! r
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],86 c% X* F- t* l+ n. C
004034C1 E8 C5BF0200 call qsr.0042F48B
: y; T( I6 @8 c! q! A5 }6 X004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
9 a1 A' V L7 K004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7- i) A% R0 {3 V+ V9 L
004034CF E8 B7BF0200 call qsr.0042F48B6 {0 g. b! v$ o3 Y
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, t; P4 r m. v; s B3 D1 f004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],67 n! J% \& q% M3 D
004034DD E8 A9BF0200 call qsr.0042F48B( R! P- H" `( y; D7 N
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]5 }" }6 n5 E! J) f
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3# |7 A$ ?: Y2 w8 ^; k( ?3 c: A
004034EB E8 9BBF0200 call qsr.0042F48B
7 ?, m+ T9 ]7 b# q, G' N) C$ V; I004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]$ _. n: k+ ~0 O
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2/ K( j6 t' E) B
004034F9 E8 8DBF0200 call qsr.0042F48B$ ^# q3 `& }# R
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ R Z8 E. D: U+ q! ~$ ~! s
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1+ Z* Y! Q# G& ]/ b4 y5 e$ E! a
00403507 E8 7FBF0200 call qsr.0042F48B
: _/ f( J0 n& K2 N; C, k% o0 l0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
% t! Z- d+ A% \7 O) a) x7 D00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0. K5 x: b9 r, G7 Y5 h% l* f
00403515 E8 71BF0200 call qsr.0042F48B0 g& p( o6 t+ n' k: w- }
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]' K3 Z0 w; y7 K% B1 C; _* k1 [
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1+ ]- `' x' o. R) U
00403526 E8 60BF0200 call qsr.0042F48B
$ t. s' f9 f8 `9 [0040352B B0 01 mov al,1
0 k& U. {4 p& P" Y0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
4 j* n* o1 v" f3 O1 m3 |9 e00403531 5F pop edi, I& \5 U5 Q% U' E
00403532 5E pop esi2 V/ u+ P" }+ H$ t
00403533 5D pop ebp6 n; n; o! E6 e4 F9 z
00403534 5B pop ebx
' l& |- e5 q4 Y. J1 N4 h8 ?; O& n0 a00403535 64:890D 0000000>mov dword ptr fs:[0],ecx. q4 M6 S. d/ `* m* M7 y- C
0040353C 83C4 30 add esp,30* r2 G! H5 E5 M- l0 Z2 S
0040353F C2 0800 retn 8# E3 ~( o7 q+ e; A7 U p6 D
--------------------------------------------------------------------------------, h3 X7 p+ |- n7 d, h6 [. E# E; i) x
【破解总结】: I% W4 q$ Q+ e4 o K: I
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^) X: t1 P8 I) T- a o1 l" P" @
用户名：yijun
4 J. T6 P: M; a6 m3 \注册码：4893*7777*3726*7777*0529( P# f: n$ ~& ~) S
--------------------------------------------------------------------------------
+ S+ q, w7 J0 X0 w! ]【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡