|
|
|
【原创】破解Quick Screen Recorder
6 A1 i" P j0 `9 j4 T$ c【破解作者】 yijun; I3 X+ p- g# m
【作者邮箱】 [email protected]5 F/ C/ Z X, L+ h# ?8 A6 ?% R
【使用工具】 OD,PEID. y. H- X- B0 Y8 a$ n# h2 r
【破解平台】 WinXP- Z7 P: i" U+ ~* C
【软件名称】 Quick Screen Recorder$ |8 I# h" @+ }. p1 F
【下载地址】 天空
, Z: E" K! T3 e/ q* \; [# w- N, U& Z4 |【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
. F/ ]/ _) }4 I! i3 H【软件大小】 540K# y2 w7 ^2 r/ @% ?( |
【加壳方式】 无( y6 M# |! W$ ?5 u! h' B
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
$ n" p# I4 X A! O--------------------------------------------------------------------------------
4 ~( r- _4 ^, z: k8 |【破解内容】
+ s, N# D) E6 n$ d% l% w PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：' i; z5 H( x' B
00404C69 55 push ebp //在此下断
4 ~& E8 x( [7 a00404C6A 56 push esi2 h, E% q5 o- Q6 G1 \, G) n1 m
00404C6B 57 push edi
2 C4 [1 @# {; q' K- ~00404C6C 8BE9 mov ebp,ecx+ Z0 g: |; f' c* P& w% I
00404C6E 6A 01 push 1
* S- K9 U+ Z) V# ^* |; F00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名$ V& B5 \7 q/ l5 p* N
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60], [ x9 K# y' j0 `
00404C78 8BCF mov ecx,edi8 p' V* ~! n9 D X% F
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码$ A+ Y) `- \1 P3 A/ s" l7 ?; d
00404C7F 8BCF mov ecx,edi
m: Q t G" o% e, T6 P00404C81 E8 A73E0200 call qsr.00428B2D
# Z, q& m" J' H! }00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64], U8 Q+ l7 m% p# `: o( K5 Q
00404C89 8BCE mov ecx,esi) b9 D6 }% t1 u/ _; V
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
" ~/ k1 I+ ?8 Z. C' [( Z o& {00404C90 8BCE mov ecx,esi
( M# N9 U9 D) }% a# T00404C92 E8 963E0200 call qsr.00428B2D4 n' g5 O0 a [0 M6 i' }* F
00404C97 8B06 mov eax,dword ptr ds:[esi]
; Y8 R' v B2 P" S00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],28 E8 a2 k8 |. q" z% \
00404C9D 7D 26 jge short qsr.00404CC5# g7 w4 c1 U1 R% Z3 i* A3 z
00404C9F 6A 40 push 406 U2 Y3 X( K8 C6 C' }* p
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"7 Y0 Z& h2 H* o' \% Y; e, @6 i5 K F
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."4 e+ c- R" }5 W3 Q. }3 Q& _
00404CAB 8BCD mov ecx,ebp
2 f, N1 c* P- s! e; k+ J5 D00404CAD E8 C3840200 call qsr.0042D175
( i3 `! l7 t0 j# T h6 ^9 D00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
9 o0 U2 F9 y4 e( c. D( i* D/ F00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx5 I. Q3 O: T( r$ ?4 S
00404CBD 5F pop edi
: n& e6 ]- U" ~" ^" T00404CBE 5E pop esi
, _4 m+ D2 y* T1 E00404CBF 5D pop ebp+ P5 G$ T8 @3 ?. U! {% [3 O' Z1 U
00404CC0 5B pop ebx
$ Q( x( W2 A6 J, s ~& L' }7 c00404CC1 83C4 18 add esp,18
0 {: V, J, u- u1 m$ L9 E00404CC4 C3 retn
( K6 R( n* R+ l. W0 o0 D00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]# p8 G9 ?4 h$ o! m/ g# O
00404CC8 84C0 test al,al
8 w) b8 \$ e# [/ Z3 }00404CCA 0F85 1C010000 jnz qsr.00404DEC
( p% V& x" O1 \ F! q0 Z00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]2 y3 l- k+ v9 |2 L
00404CD4 E8 87E3FFFF call qsr.00403060
, T' y6 m# V: I" L8 v1 g00404CD9 51 push ecx
' U+ Z9 y B. u2 Z4 f0 S00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0. {; E' o {- I6 A4 j' {2 @
00404CE2 8BCC mov ecx,esp& Y9 Z$ z8 m m) Y- Z& a
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp8 S8 G) w3 g" N
00404CE8 56 push esi: z+ ~+ G% t. ?# `) N* W9 l) @
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0+ J: R5 ^) \' E! a: H
00404CEE 51 push ecx
\1 e* h8 q/ V00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],13 `8 }% U7 d. m8 f. h& a
00404CF4 8BCC mov ecx,esp
0 d6 q, r3 S9 m$ W: V00404CF6 896424 20 mov dword ptr ss:[esp+20],esp$ J }, F+ m% r% o/ A0 l% I
00404CFA 57 push edi
) N' [6 B0 r! g00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0' H! ]" r$ H8 P9 s) E P8 R
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
3 i1 `" q) }) F' L00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
0 L4 L _. _ B9 w# b; _0 Q$ O$ c00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~. w' D0 M! g1 M% w0 p# ?
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~% D5 @- Z' Z% t* o/ Q' V
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
/ M+ E* Y$ k0 Q4 ]8 g00404D12 6A 40 push 40
% D. l; n& y0 k! q00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
: |+ ?0 i/ z& q6 O00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."$ G7 ~! K7 @6 \5 I6 l8 b
00404D1E 8BCD mov ecx,ebp
! \3 r* i+ l, ^: n00404D20 E8 50840200 call qsr.0042D175# }: t" ^/ }5 R) l7 }; A
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
9 P: Y. X; _9 `: H4 B00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-11 ]4 w) [- K2 X7 O/ a
00404D31 E8 5AE3FFFF call qsr.00403090
% r, l: R, ^, s& z" o2 S; }00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
, p" }% E9 M2 n: E! p: z00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx$ H! m. N/ t- K
00404D41 5F pop edi
; J: F3 w, @# C. G' r6 X) H. o, M00404D42 5E pop esi
" J/ }9 w) `, B, o, P% p) `9 C7 g00404D43 5D pop ebp
9 A$ f8 C |/ S- B2 L; l! _00404D44 5B pop ebx
$ B' O$ B2 A% l% L+ Q00404D45 83C4 18 add esp,18
8 |! R& ^1 P6 d: D# a00404D48 C3 retn( ] \! O& F7 [" `: K1 [
*********************************************************************************************************************************************************- j4 F6 b' q" k! B6 p
跟进00404D09处CALL来到：. J1 [2 _: Q2 L7 m% m+ w
004030A0 6A FF push -1 //一路F8下去~~~~
' ?: `1 f. B E4 R3 a004030A2 68 C88F4400 push qsr.00448FC8- E6 ~/ Q1 g* p3 t- K' f1 t
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
; o- [' U* ?- d2 v2 ? o* M004030AD 50 push eax0 F: S3 [9 Y8 a
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp# x" E* l n# m
004030B5 83EC 24 sub esp,24( Y0 X& o4 M) l) I+ k1 A- G7 g
004030B8 53 push ebx7 u8 {; r: k7 b9 W; u5 L* I1 d
004030B9 55 push ebp
! T. @ b7 ]4 X p6 {. d! j2 j2 X004030BA 56 push esi8 H7 u3 q# O% E6 p% k
004030BB 57 push edi
) o/ i$ s3 f$ t' r; V& W+ {. @! E! L: V004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
: j) }" m, p) Q6 ?004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
' |6 {/ r7 Y! s5 ?- ~& ?6 A004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
( r5 _$ K( ^( H6 n004030CD E8 27C40200 call qsr.0042F4F9; X! h, Z! W8 d/ z* ~
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]% ^' R, g" i" k- [. ~( J
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
; k$ F: U& [- S3 O( {/ o* r004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48], o9 y2 u. O- f- q5 {- B6 u
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
: [/ v& g' l+ }$ V, ^7 \/ G- u& U004030E4 E8 905A0200 call qsr.00428B79/ H9 l2 Z1 b+ ]- |& G, M' m8 L$ ?6 p
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
- ^2 M Q0 m3 U/ v5 z& j# k1 ^8 `004030ED E8 3B5A0200 call qsr.00428B2D4 Z0 i% f, T' L0 r. A
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]$ ~! M7 k+ z& ^% T
004030F6 E8 7E5A0200 call qsr.00428B79
) g/ E% q' i. ]( D% y004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* P! Q& W5 R* T# P% R( q- N004030FF E8 295A0200 call qsr.00428B2D0 s/ m" {) w6 R/ i4 v' A' o
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
/ S# b: S8 e, f3 N4 v: [( ?00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
1 z9 F: E5 w5 |4 b4 d3 T3 d0040310B 83F8 02 cmp eax,2
! _% D6 Z9 J; ^; z7 n, {/ y/ D) l0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
( ?1 k- W' g! d$ {# y00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]/ b( b* K' s* x! { F
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18. n& l; N+ x) Y+ R1 g' e3 e6 ]3 }* P, `
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
$ v/ ?3 F( H' l1 t6 y( b00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]- y* @1 f, ~/ z$ D3 V1 c2 p) Q
00403126 6A 01 push 1
5 V2 t H" d* I1 {2 Y00403128 50 push eax1 k- }) t7 X: `) ?; j1 t% r
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]- q# y0 R: X' v+ r5 ~: g
0040312D E8 C4550200 call qsr.004286F62 [: m* M5 z# s6 ^
00403132 8B00 mov eax,dword ptr ds:[eax]8 b! _6 h, y0 v- p9 C8 P7 j
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ U+ S# }9 t8 H3 q' V" C
00403138 50 push eax
$ t# F5 j8 p! F00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
3 n U6 \ H. j6 g- w* u, Z# N0040313E E8 4D560200 call qsr.004287905 v# I0 r, F3 e
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
! P1 p/ k0 W4 X: V& O% @5 C00403147 8BF0 mov esi,eax
* N% C" `; D L% t" }00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],35 q) E% Z+ n: m# a: _7 O$ b
0040314E E8 38C30200 call qsr.0042F48B: v7 k7 d/ Q9 o: y( H2 R! I7 X# u4 I0 X
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]8 x, D2 ?5 T1 n2 x& F; u
00403156 B9 3E000000 mov ecx,3E
6 I; Z* Q, c- N9 C" ^7 r0040315B 99 cdq4 D) A+ B8 U, ?
0040315C F7F9 idiv ecx
4 y. P+ u, I0 T1 R: n0040315E 6A 01 push 11 Q8 [3 ^2 S J9 W
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]4 ]' S9 h+ ~ r+ `
00403164 8BF2 mov esi,edx3 Y& n* S7 v( G3 @; |
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]0 X( _! x0 U: e
0040316A 52 push edx
2 R8 z. G# {* j4 S% B0040316B E8 0A550200 call qsr.0042867A, |6 P8 T1 u" l/ A0 p
00403170 8B00 mov eax,dword ptr ds:[eax]
" p. Q3 C [; p6 L/ I& S$ O00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
: ?, O+ d. n) J' x4 s# ^. M00403176 50 push eax7 _* A3 w1 w4 d+ F& ?9 f) U; F; v/ o
00403177 C64424 40 05 mov byte ptr ss:[esp+40],59 c" A/ m! A7 @) R2 T
0040317C E8 0F560200 call qsr.004287904 _8 `9 @% J- R u F
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' V" U9 g/ K7 y4 G+ t
00403185 8BF8 mov edi,eax6 C& J; N' q! _$ q) |. p2 _- x
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
( w; ]- C8 s/ r' E' A7 U0040318C E8 FAC20200 call qsr.0042F48B
1 T7 U7 d) g. G; w2 U. b00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
6 s! ?0 l. i4 n. \+ d00403194 B9 3E000000 mov ecx,3E
: s6 T y, w/ k4 r- o00403199 99 cdq* i9 q" M F+ o, i/ [3 k% A4 L4 z4 y
0040319A F7F9 idiv ecx
p2 |- ]' b0 v: a( w; G$ p0 V0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]8 W; M# I3 F0 T! j6 I& z
004031A1 894424 28 mov dword ptr ss:[esp+28],eax. J0 G% T4 [; A1 v5 Z9 [
004031A5 8BCA mov ecx,edx: V' a2 x7 u% O2 c
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
3 p2 E# L* m) T; Z' G004031AB 894424 1C mov dword ptr ss:[esp+1C],eax0 s" P+ w7 V( @7 t! c6 I
004031AF 894424 18 mov dword ptr ss:[esp+18],eax# t* m2 d! d1 R, h! G2 U1 {
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
/ D& l7 {' R% ^/ }9 k6 L& ~004031B7 894424 10 mov dword ptr ss:[esp+10],eax( \% r' a ^' g+ N9 k, t2 K
004031BB 8BC1 mov eax,ecx \/ P1 \5 q, i8 H
004031BD BF 0A000000 mov edi,0A
: g- [9 V" a5 G8 x) v004031C2 99 cdq
" L Q8 o8 ]5 w; `004031C3 F7FF idiv edi
. p0 I3 P; V4 W3 _, _+ O004031C5 8BC1 mov eax,ecx
! y/ b, ^& y r4 k, v004031C7 B3 0B mov bl,0B2 T5 Z' P2 N3 R& ~4 c
004031C9 0FAFC1 imul eax,ecx3 d- m4 t" k) \& w+ O
004031CC 8BCF mov ecx,edi
& L# _$ q5 W6 `" ]7 o004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl3 Q }( t9 P0 u" [8 s+ D
004031D2 52 push edx2 k& s7 P) P+ t8 J
004031D3 99 cdq
$ `1 }1 _1 m5 @( |5 G004031D4 F7F9 idiv ecx
6 Q* ~6 R; [: D$ M' t004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]/ u- {) s' [, [) l: U: _8 ~
004031DD 2BC6 sub eax,esi
3 Z+ |% ]* c1 o004031DF 52 push edx) D$ l3 b, i( r% t# l
004031E0 99 cdq( A( I9 Z- F* _6 v7 g9 D
004031E1 F7F9 idiv ecx3 O( b- {3 g; }. B
004031E3 8BC6 mov eax,esi
1 R5 } p8 c6 L. b9 ~- R& z004031E5 52 push edx
" B$ T8 n. l2 R0 i004031E6 99 cdq" D; F2 d+ Z1 j; _& n$ z8 A
004031E7 F7F9 idiv ecx
" g, _9 \! E w" z3 m! H+ C004031E9 52 push edx
( A5 f! @1 u& s" q Z; M004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
3 `' T7 H5 I3 a( } c004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d". N8 E6 E. U3 p' P6 q
004031F3 52 push edx: ]$ z9 @1 T" C! ]7 I9 V/ c
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893& i6 z6 F ^( o) N
004031F9 83C4 18 add esp,18
. W+ p. m4 X6 d( U. h004031FC 6A 04 push 4
, P$ L J) a2 [9 l0 x3 u004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34], ]; K% N- P8 j' S$ h% P% }* G
00403202 6A 00 push 0
1 L% Y- E. z6 B5 _. p00403204 50 push eax
2 L9 p- {0 z. M* D8 o00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]) W1 F& U( X- z# C7 R( @: X
00403209 E8 D6530200 call qsr.004285E4
$ Y, ~* ]5 F* S+ P0040320E 50 push eax$ c+ s3 h, E: L' w9 w8 h) e
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
1 w6 c) K6 z6 T( s5 T$ a6 o+ s7 o, A00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C) X' M9 O; x1 ?) }5 z' J% B( b L4 m
00403218 E8 A7C30200 call qsr.0042F5C4
( v& Y- L0 R% V7 h4 o( D0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' g8 R6 _1 H( ]) D* f" W
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl+ x3 \" e. R/ m8 a. y' W9 B
00403225 E8 61C20200 call qsr.0042F48B0 g( n0 n% j* X6 }
0040322A 6A 04 push 4/ y/ j# T$ b: G- i" g- \4 `$ n# u( c
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]" |, V9 c# B9 Z# M( Q7 Q
00403230 6A 05 push 5
* o% G. @ Z' _6 k00403232 51 push ecx
" `5 S7 m; h6 E* |5 A- E- B' r00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 L8 }% P; Q4 O( _+ e( x8 C( p2 Q, R% S% j
00403237 E8 A8530200 call qsr.004285E4
, d' N. S/ Z# u# h1 N% ^% a0040323C 50 push eax
4 X* y t( I% C+ U3 x! w; t0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]! L) A, I( f( ^/ c
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
/ m1 c$ T% o% g3 e. o7 ~7 H' D00403246 E8 79C30200 call qsr.0042F5C4
* P# V6 ?3 U; B2 ^- F0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 `' n) h2 y4 T$ d) u0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
0 j" T# o) Q4 y/ M0 `, O* ^( x00403253 E8 33C20200 call qsr.0042F48B
$ d1 b! ]/ N& `; \, }00403258 6A 04 push 4
' V9 Q" U. q$ _. }0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
9 m7 J% G( @ M9 h/ W0040325E 57 push edi5 j6 }! ^; n* s1 S' d$ Y
0040325F 52 push edx
0 J( j! T7 H" m& v' _8 c4 R00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# H; m) S( [( s5 q+ o
00403264 E8 7B530200 call qsr.004285E4
! [7 h, N' {0 L4 P2 u6 d00403269 50 push eax' b* D R: s: N0 C6 T4 U% M+ r2 M
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
# |6 ^, W# h# y# K; _% [0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
* \9 U. c2 ~/ T; N0 \' }( q00403273 E8 4CC30200 call qsr.0042F5C4
! }) Q! {" X9 X3 H1 H) S2 s$ U00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 n/ Q1 N. L) W2 @! [! |0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl1 V; B/ h/ y, G9 l: D& z; l
00403280 E8 06C20200 call qsr.0042F48B
* U9 V) E: L- r5 k6 M+ a/ r00403285 6A 04 push 4
7 R$ ?; |8 Q4 s+ j- [" D4 C. t00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
. X' T+ D$ n) S2 N! g2 p Z0040328B 6A 0F push 0F
1 T0 E2 K: `% Q1 X0 o/ z' J+ Y. Z0040328D 50 push eax
' Z- e }, g3 K" Y* p' u @8 ~- E0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 u3 G4 H+ z) F00403292 E8 4D530200 call qsr.004285E4
$ m8 m, b7 ^; K' ]( K00403297 50 push eax
9 D {) I2 Q' t- f( f( c00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
; j! y" k; e- \$ c. U: C; b0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F3 O# d+ u* \ H3 l
004032A1 E8 1EC30200 call qsr.0042F5C4
8 k# L, T; ?4 n N$ C; Q7 E: x W004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
q: r. b( \" A8 C/ Z% j004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl9 }# R6 ~( x- s1 Z) w
004032AE E8 D8C10200 call qsr.0042F48B/ t& |+ B* m \: k. d
004032B3 6A 04 push 4/ T+ X; I" A* V6 l i. m- a
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
6 Y4 ~* b1 {/ i5 L" n004032B9 6A 14 push 14( W& ?' P: f: d3 r# j
004032BB 51 push ecx y" g, k4 U* I& H
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% @. ~) J" r) H004032C0 E8 1F530200 call qsr.004285E4/ H. I" ^( n, U. _2 }
004032C5 50 push eax; N; Z) F7 q' V. U# z4 N& _
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' f9 @- @2 _3 M: z+ T! M+ K
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
% V% B- p' n& ?4 c004032CF E8 F0C20200 call qsr.0042F5C45 h, Y% b! p1 j1 i0 M6 ]$ C
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
l5 t _& Q+ }+ c7 F: ~004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
) A+ _8 h( p% S# N5 m; ~004032DC E8 AAC10200 call qsr.0042F48B
3 |$ t d9 h6 s# D004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
+ I0 i2 d3 _/ T# A+ b004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
# d( e. a0 z) s$ s# n. H004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL; d8 H4 ~4 V, P' @8 O3 E! n
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL7 x% K8 J( T3 l" M5 M% ]* C
004032ED 8ACA mov cl,dl ; DL送CL
. `' n6 {2 N" S# a- j004032EF 3AD3 cmp dl,bl ; DL和BL比较
7 i Q3 x# A6 z( C% v1 @004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
) [4 n% a" ]% _# ~; g004032F3 84C9 test cl,cl
+ Q/ w& U1 _7 F) u! @4 D004032F5 74 16 je short qsr.0040330D
+ X5 M+ p9 H5 s4 Z# S004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL' c! f3 |' l; ]! x7 O5 N
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL: ]0 r& I$ J2 W# f, n
004032FD 8ACA mov cl,dl
6 y9 |5 G% c, r: [004032FF 3AD3 cmp dl,bl ; DL和BL比较) N' [' A5 n1 W* E( S/ C. v
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）9 @- k K, B0 m5 ?: K
00403303 83C0 02 add eax,2 ; EAX加2& ]0 ^% [0 _$ {2 {
00403306 83C6 02 add esi,2 ; ESI加2
9 [! t# ?' g- H | O' m. q00403309 84C9 test cl,cl9 K" m7 x' O% P. H& |
0040330B ^ 75 DC jnz short qsr.004032E9
+ C( F, x7 n9 s" V; ` J) F0040330D 33C0 xor eax,eax3 a4 f$ g7 N7 ?3 z
0040330F EB 05 jmp short qsr.00403316
0 z4 N1 d& x+ W; A6 m00403311 1BC0 sbb eax,eax
" l. ?8 k, Z: o: b, G3 N; Y00403313 83D8 FF sbb eax,-1
2 c$ i7 O8 c$ u" L7 i' ~. V00403316 85C0 test eax,eax' j. X9 _# W% q' \/ l
00403318 74 0E je short qsr.00403328
0 d8 x9 u7 b) ~; p- P! \0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
* Y" ]2 L' k. m$ a) x- w( [0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
8 w2 A/ t, P/ {: G- O3 M! L00403323 E9 F0000000 jmp qsr.00403418
1 S+ u* }: H! S; c) \5 C00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX m/ N( W' {# r* q
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 d3 w1 b+ H1 F$ W
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
! J& J( k8 V& p# I# B7 S3 s00403333 50 push eax
! T8 g" C+ _7 D) r& z$ C00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX" Z8 \6 J( i' j- N k# B- r0 @; b
00403339 50 push eax# p u! x- E8 D& e
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
4 I# g z! d' R, u0 R0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX# ?* S0 J# z& M/ l @
00403343 83C4 04 add esp,4 z" P9 N% W% C
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI4 U( @ d3 H1 M9 e1 {1 T
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
. i6 g8 Z" A2 W0 F% R- \8 l( M0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]1 m8 ~" q3 `' s* c0 q5 Q% H
0040334F 50 push eax
+ R( Z5 g7 j- a: j$ h00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
: A' T- `: i$ N2 b00403355 50 push eax
. p2 e# w6 r7 p; v5 A2 f0 T' A) D00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX" O Z' {- a! s5 s# @
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX- `1 o$ L. T! ~# H" Q2 M
0040335F 83C4 04 add esp,4
. V; C- r8 }. R2 f00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI6 M& V% d9 |% w& E/ ]
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& E) k' R5 j' w3 k00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]+ t: J) E! q4 ?
0040336B 50 push eax
" C& D! z& F% M6 f6 G' J* |/ t2 b$ h0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX( {% S; D% C1 g8 W, p
00403371 50 push eax
1 z0 C: l7 q2 R00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX* L8 }# G Y$ U
00403377 8BD8 mov ebx,eax ; EAX送EBX9 _& F& m1 Q$ w! @$ ?8 |; P. v
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
' G5 A. f A7 F6 G B# r/ U0040337D 83C4 04 add esp,4
0 ?0 R' V; T/ `( x# y: X; t00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]! m, O' ]3 i7 ]0 [: F
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
8 j/ T1 `& o, ~4 c, y. E8 l00403387 50 push eax
3 r i# J4 @: g& n j00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
+ A$ Y7 T G3 }# K: I9 L8 p0040338D 50 push eax
+ M) C; `( O6 K3 p( ]3 r0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
7 d: }! _8 g6 l7 {' Q00403393 83C4 04 add esp,4
; F3 G! \3 A+ l _9 G2 ^, D00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 q2 t6 C; R- Q# [; E0 [
0040339A 8BE8 mov ebp,eax ; EAX送EBP. |6 Q/ B6 b f
0040339C 6A FF push -1
( }6 `+ p; K$ Q( U" ?! T$ K0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
6 o/ u" Z2 Q7 f% p% S5 t8 }, ^004033A3 6A FF push -1$ K& ~3 h$ w P' s. N
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX6 Z( d! j7 \, `$ _3 s3 B
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX* r9 j V7 @- m
004033AE 6A FF push -1
$ f9 U6 i& l& O& K& N* j004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
/ l+ I% F/ o6 I& r' W' `004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
C7 B" W+ }: P6 \# R. } u004033B9 6A FF push -1& S6 b9 f+ e( t* P4 }
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX3 u6 l L T/ a# S4 x- `
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
1 G k3 J8 }: E7 k004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX: X* C% J! X4 [% w# o3 q
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX( G* ~1 s+ ^2 S G
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
8 q: W& {; ]2 C7 _9 X004033D7 D1E0 shl eax,1 ; EAX左移1位# ~% x5 H% ~! W$ ?
004033D9 99 cdq ; EAX扩展
2 ~& C2 V" h9 F/ i. d: D004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
- T, c( W6 R( A! E: k6 F004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
5 j4 }9 I6 r8 K4 V1 C7 h1 n/ \004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
1 W. V4 Z+ Y1 z; q, K004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A2 x& f* r5 \" O7 j5 r# g: I, p2 R
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
5 i* N, [$ U* V# @" s004033E9 EB 2D jmp short qsr.00403418
+ s: N) {" x T# B; t004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
7 j. @/ G6 \1 S* K004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2( _& q) i; v! N- v4 k
004033F7 99 cdq ; EBX扩展
# u% m( l7 `+ F9 Q2 L* J004033F8 33C2 xor eax,edx ; EAX和EDX取异或
5 q9 K4 `6 t9 s6 O% t. W! O004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
5 K" ~' S( P! c* r5 Y/ o004033FF 2BC2 sub eax,edx ; EAX减去EDX" }0 g! E9 e5 ~2 S
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
3 N3 \! Q. {- T7 h8 G00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
0 Q' h* k% P9 U9 W; n1 Q6 {0 N00403409 99 cdq y r( G$ f1 t( l' [- s
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中& u' t- D& H- `) o- G, S
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX3 _; {6 M1 j5 `1 z
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较! ?8 n0 h( D- A& I+ A2 q7 n8 o! C
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
/ J- t0 b9 l8 b0 i5 z" f00403418 E8 6EC00200 call qsr.0042F48B ; x& H! r4 C8 E' |
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 E9 r6 i4 |* z( M2 ] {4 Q00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
: O7 q- ]( l7 }1 E00403426 E8 60C00200 call qsr.0042F48B# I1 y3 ]8 X' ]2 Q7 Z
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]4 k y2 L. `- \4 t! M
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8- v) a7 A- ?) E4 w4 _+ N% a" Y
00403434 E8 52C00200 call qsr.0042F48B
' Y1 o4 r& ?) T2 d00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 M. U* S$ u6 E5 x3 ^# o+ c
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7) x- O+ Z' i" x: X- u1 b
00403442 E8 44C00200 call qsr.0042F48B
! i, K+ S d/ Q% ~+ C% P& w00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
% M6 P) v+ `0 \$ m' t# m ^8 ?0 k0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6 E$ D7 s- d$ M3 |' y( L
00403450 E8 36C00200 call qsr.0042F48B' V( K9 T' I: U' ^: E: q* O/ m+ `* g
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
4 r( K6 ]2 e/ ?8 e e0 K; p00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],37 m( C. u* _5 m7 @7 |5 C% m
0040345E E8 28C00200 call qsr.0042F48B% X5 g; b3 q: L. X
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
$ U3 j3 r5 l# J00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
; x. y: l7 ]; s* F0040346C E8 1AC00200 call qsr.0042F48B
x5 V9 h! s2 j, O* W: U) P00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
! R6 V9 e K: O! a" w00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1! ?3 ^# w( J- T' D: W
0040347A E8 0CC00200 call qsr.0042F48B! {5 j) m' Z7 ^/ a4 X7 f- s
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
3 v) G' x2 W- g5 t+ r/ Q* N$ T! u00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],07 \. l+ a: ]2 |1 v+ c
00403488 E8 FEBF0200 call qsr.0042F48B8 Y, G- d; X0 G
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]1 y' \7 c5 c: k( W6 O& }/ ?! e
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
9 \, D1 m3 Z( g0 S$ \# k- R' |00403499 E8 EDBF0200 call qsr.0042F48B
2 W k$ I3 N( R8 J0040349E 32C0 xor al,al ; AL清0; @; j# @2 I S; [' H+ z6 P
004034A0 E9 88000000 jmp qsr.0040352D7 G& _# x8 Q. t$ L c/ x( W; n
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~ u' v7 g* v; [( N0 r3 D4 i
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
- d% m/ a, i& c% O! L+ N004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9! F. |6 T1 k5 b) E7 G7 x
004034B3 E8 D3BF0200 call qsr.0042F48B L: O- k& B4 b5 K: l& z( n- L
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
% r# B* _% M& v) X% U004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8: z. _! a( x# v" S
004034C1 E8 C5BF0200 call qsr.0042F48B
: P7 w3 Q0 x+ r004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( [. K7 f' ]7 g1 n9 `. E0 W004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7: p. D. M/ d9 A( h& g, T
004034CF E8 B7BF0200 call qsr.0042F48B. ^6 @3 P! g' A" g; m1 `
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
$ J& v, S1 t7 c0 J004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
/ b/ [+ L1 `9 e* S004034DD E8 A9BF0200 call qsr.0042F48B" t6 J5 _( Z; H& t5 m) s& V0 @
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
+ _1 J% G" U$ h4 F: M! d004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
- y9 _6 S8 R0 }5 {5 P" P004034EB E8 9BBF0200 call qsr.0042F48B
* a$ k* k& d# Q* T, h004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]! K: l/ |, |: v4 `, l' e
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],23 n& V3 i8 c3 c7 Z8 y- x/ X
004034F9 E8 8DBF0200 call qsr.0042F48B6 X. q: z& I, X/ ~6 M) ^
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- z! I# t5 E' V3 f9 A2 D+ A1 E
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
6 Y4 K1 W/ C, y, h00403507 E8 7FBF0200 call qsr.0042F48B
( d# ]) T6 m. j9 W4 p8 Q( h0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
0 P8 H4 W. Z9 \" o. h+ Y5 A00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
7 q% C3 T a0 v- F00403515 E8 71BF0200 call qsr.0042F48B8 i( w" o% K" [: L
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( X7 X2 G5 I/ ^/ p: h0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
+ t- U4 {4 J2 n3 R3 @ I, d: A* p. f00403526 E8 60BF0200 call qsr.0042F48B
* i; I* e* [. [. b0040352B B0 01 mov al,1
$ g2 n" w* w) e" a) y: c2 v0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
0 Z- T7 s& D6 O' o00403531 5F pop edi6 |! d* b8 j+ D" M
00403532 5E pop esi5 U' E6 U' U8 z
00403533 5D pop ebp
% }3 J3 ], f2 u; \7 E00403534 5B pop ebx+ z# K: A% }$ {2 z _
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx7 `# o9 m8 l* Z
0040353C 83C4 30 add esp,30
" Z4 B0 ?6 L- u* T, f0040353F C2 0800 retn 8
/ Z. s/ |+ ]* S0 }+ ]--------------------------------------------------------------------------------- Y) v9 Y" E$ i% e7 Z5 Z
【破解总结】
0 m' q, C- L: i 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
1 x3 R$ q$ U% n7 u用户名：yijun" a- ], C+ g! ?& X7 s+ j
注册码：4893*7777*3726*7777*0529
$ b- r- d- z$ j% q d1 E--------------------------------------------------------------------------------
: a# M( s$ N: ?8 O# g. F【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡