|
|
|
【原创】破解Quick Screen Recorder0 O: x! y5 j+ s; [
【破解作者】 yijun
- Q) T3 S0 q5 C/ l9 H【作者邮箱】 [email protected]2 ~, @. J" B, V* n; G7 R- A
【使用工具】 OD,PEID
4 L- u& x* D) q. [0 U+ a【破解平台】 WinXP5 d+ T# M! T- u# X' |2 M) ~$ @* E+ _" [
【软件名称】 Quick Screen Recorder$ {2 s2 w! x( L) Q2 r. a/ @
【下载地址】 天空0 g% g( D: r5 B \) V
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
4 [/ P+ ]/ K7 s* ^$ o【软件大小】 540K
7 n3 t1 [7 p. Y( B5 X【加壳方式】 无0 L4 f: k, d. ?. K/ y+ v% E7 o
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）: [0 W. ~4 Y0 ^/ J
--------------------------------------------------------------------------------( A8 \& R# O" v! |+ M) _
【破解内容】
! P) F% c$ I3 [9 V0 Q- P PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
/ U6 ~/ S4 X, z; a0 T00404C69 55 push ebp //在此下断8 f& ~( B8 w! r4 M6 \* a7 T
00404C6A 56 push esi1 G2 E: B7 @& t
00404C6B 57 push edi% n8 r# K' l; Q! ~# D6 s' {
00404C6C 8BE9 mov ebp,ecx
! n+ v% `1 z8 L1 A: O5 V* d00404C6E 6A 01 push 1
. N5 I! i, |, {: k, O g1 G$ r- p00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名" I8 D1 c7 D' ~9 F
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]8 Z! }1 J, y) t, }. d; Y Y
00404C78 8BCF mov ecx,edi1 K; Z$ n$ z T6 Y3 m3 |5 D
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码. \! L- b D5 t3 j6 a, r" ^
00404C7F 8BCF mov ecx,edi+ [3 y' f) Y) e' h# |. P4 N5 D
00404C81 E8 A73E0200 call qsr.00428B2D+ c) b& |8 U' ~( G1 Y
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]1 s3 k3 i' ~3 _# ^
00404C89 8BCE mov ecx,esi
/ [! z* j& ^/ V00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX3 m2 e+ G! h3 Z3 t; n' w
00404C90 8BCE mov ecx,esi
$ ]( J6 V- O1 I6 ]4 B0 Z2 U00404C92 E8 963E0200 call qsr.00428B2D. A- u" a+ w! z$ z. f
00404C97 8B06 mov eax,dword ptr ds:[esi]. p: b) C) f& R8 F/ R0 {4 s% h
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
' H) B$ F w0 a6 j9 r8 K00404C9D 7D 26 jge short qsr.00404CC5# Z- P3 d+ m, q1 L
00404C9F 6A 40 push 40! m* k. y% n/ f. F! F2 {
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"! L7 i6 C7 m- f' j
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."" j2 T% v6 T4 K9 }, r5 j0 p1 g
00404CAB 8BCD mov ecx,ebp
7 N$ }9 \+ _. u5 z* i00404CAD E8 C3840200 call qsr.0042D1756 p' L- s. c5 i7 J9 h
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
1 \6 ?. B) X8 Q& f* J, [# G00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
( ^. z/ \, E7 E2 L" m% E9 {00404CBD 5F pop edi/ l8 T& i& t5 F; V. P6 W: n
00404CBE 5E pop esi+ X* E# @% m2 V; R5 {2 Z% y7 v
00404CBF 5D pop ebp: R; I$ x6 c+ \7 r0 h
00404CC0 5B pop ebx& G& q3 I# N+ G) n- ]5 ~
00404CC1 83C4 18 add esp,18" ]8 u+ x& g$ l; u
00404CC4 C3 retn# t* u5 `6 ]) H
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]9 j. v3 j" L% c
00404CC8 84C0 test al,al
7 x% u+ p" q& q2 |. ]; B00404CCA 0F85 1C010000 jnz qsr.00404DEC
1 C4 ]3 s) S M0 e, E! A00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]% f3 O3 k5 x3 m5 e
00404CD4 E8 87E3FFFF call qsr.00403060
3 m8 \# h9 Y k! `- d00404CD9 51 push ecx# R' X! f' |: m# [: Q& N8 I% ~
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
& H5 M# V4 p+ m00404CE2 8BCC mov ecx,esp
+ ~4 X. f) i" N& }0 h00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
: d: @; l7 k8 m" ?00404CE8 56 push esi
4 N9 I) ~; t: y9 O% E00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
7 `# ^6 G% }$ {" O- L00404CEE 51 push ecx
}8 B2 e3 ?3 I. c00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1* ~+ n! w8 c- ]+ |% n% b+ F ]- X
00404CF4 8BCC mov ecx,esp" U7 Y& o3 a$ z
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
( w3 K' M4 g; ~9 x$ U00404CFA 57 push edi
: V5 l: W+ s! \00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
( I* I$ H3 i+ I7 ^4 G00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
- S5 G$ @7 P4 _& |00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
; |. O! c. M3 ?6 z4 r- [5 u/ x& S- g00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~" L4 \* l" r: ]5 u6 T3 J2 t. Y' S
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~4 k( f" T+ T* |: t$ s
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~* P* Q6 H3 D( C: B( y6 I$ j
00404D12 6A 40 push 40 {! r6 G/ u8 b. [7 K" I, {! D
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"+ r8 u- K0 k/ P2 m8 c
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
1 U( _+ Z f+ V ^; |00404D1E 8BCD mov ecx,ebp
$ E* w" r: A, T1 w& v/ ]00404D20 E8 50840200 call qsr.0042D1756 ]+ `2 a A: ?/ G/ B5 J' t& u
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: \2 p0 U! k+ K0 h& F) t% [00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1) c7 L5 l1 J1 [- C# b; b2 C! O g" B
00404D31 E8 5AE3FFFF call qsr.00403090
8 B, s8 R9 \) C6 E8 ^$ o2 G00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
0 x* H. F. A4 q( b- z00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx! j3 X9 b( p( M8 ?" x6 J& G2 E
00404D41 5F pop edi' [; v6 U3 Z; J6 V0 s
00404D42 5E pop esi4 R2 B* |; k( r$ z1 T/ E
00404D43 5D pop ebp
+ Z* w9 I+ B$ c8 S4 Y1 D# N& w00404D44 5B pop ebx3 `, U# v$ }1 E' C; d2 i
00404D45 83C4 18 add esp,18' d0 X5 d7 i; i9 A& L; Z3 L& ?$ v3 v
00404D48 C3 retn
/ \: T% ]1 g" B' r*********************************************************************************************************************************************************4 a5 h' [4 {3 Z( F+ D
跟进00404D09处CALL来到：2 @/ R: {1 r! Y. ?% Y
004030A0 6A FF push -1 //一路F8下去~~~~
6 w7 ?/ d# z6 G. B8 H004030A2 68 C88F4400 push qsr.00448FC8
1 {5 S& k8 S$ C8 b0 \( R004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
* e i0 [; w3 {3 m: g004030AD 50 push eax
4 K. W' W$ {) Y004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
0 m+ U" l+ N) s: G* c0 W1 x004030B5 83EC 24 sub esp,247 L" V# B% _2 ^4 m5 R$ `. z/ e
004030B8 53 push ebx
2 x( z. L; K. x* I004030B9 55 push ebp4 Z" I: [* ?+ o8 U( ?: l- J: g
004030BA 56 push esi
: L6 {# H; x& M% M0 M8 U" f6 L, w4 J004030BB 57 push edi; d4 d8 }( j: {8 D" @
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"3 u* u* \# A- A
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]5 F7 I6 O, `+ ?- k; n2 x, n% E. d% t
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
: z* W2 j9 j5 `" t9 u3 B0 t1 s2 I004030CD E8 27C40200 call qsr.0042F4F9+ R& W y2 {$ V$ T1 [' [) i! c
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
( \1 D0 @9 K/ q/ M004030D7 894424 2C mov dword ptr ss:[esp+2C],eax) h7 Q) i! v' E6 T! I) W7 X0 W# F+ e
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]' r8 W; i) Q2 b! j
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
5 |4 N+ H! H( m" T. z/ I' ~004030E4 E8 905A0200 call qsr.00428B79% A( u8 u7 j' F2 Y+ X
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]8 k. N, |2 J2 k" Z' Z. c
004030ED E8 3B5A0200 call qsr.00428B2D
' v' ]& Y& C$ v2 H) {004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]* z6 H) T/ {# Q0 o
004030F6 E8 7E5A0200 call qsr.00428B79
5 ~" c$ g% M0 X, F004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
4 l0 z& y* o5 K: |# `( d( O4 h6 W004030FF E8 295A0200 call qsr.00428B2D6 A, F5 o% e! v9 m6 Y1 y+ z2 n, m6 u
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]1 I; n) s8 [2 e; T6 S; g# S4 W
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
( U# K& C; X& t4 }0040310B 83F8 02 cmp eax,2
6 W, n' {( a: x" N$ T( f# P0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳1 f' ~0 Q& N; ]) C
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]6 g* U3 z/ B9 e9 f" S; W
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18/ q' t" o; h9 _! Z3 u
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳3 T5 g5 g3 n+ Q7 v
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30], G( R6 D8 k# S, s% r
00403126 6A 01 push 1, b3 z1 I- R! } J) x
00403128 50 push eax
! I6 g: U" S; E8 x' \* j0 M S00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ }( r) B* U) E0 j0040312D E8 C4550200 call qsr.004286F6
9 n' X. o: \ {1 r6 H4 m00403132 8B00 mov eax,dword ptr ds:[eax]
2 z8 b' W( Q( f' N: g& E+ c: w00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
: w/ ^- i8 w5 S o: [1 N5 G) o- K$ I00403138 50 push eax' S0 F& d1 e6 |, L
00403139 C64424 40 04 mov byte ptr ss:[esp+40],44 b5 j. s$ h+ g7 A @
0040313E E8 4D560200 call qsr.00428790
! r( R, Y, T- @. d: B00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 D% Q, x4 X1 b7 z+ u3 M/ J
00403147 8BF0 mov esi,eax
2 A9 L8 |! w3 m3 ]! g1 x: z# y00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3% p% I) P& b, R. Q: l, Z4 b9 y
0040314E E8 38C30200 call qsr.0042F48B) g! s* b1 A3 L3 [2 p
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]0 x: G8 B& r! G0 J: M3 q
00403156 B9 3E000000 mov ecx,3E
: y+ [1 Y/ [: Y- H0040315B 99 cdq6 J0 ?4 d a8 ~* f h% h
0040315C F7F9 idiv ecx
" S6 a. h% v: W3 @# m+ ?5 ?0040315E 6A 01 push 1: t/ ~# Y( N2 U; |3 Y: w
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
/ B- o* n& Z, y00403164 8BF2 mov esi,edx
) U6 U/ H( }/ s, M1 W/ ?( V2 {00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
3 Y$ u' F& `. D0040316A 52 push edx9 m/ b, e# P- m7 T% ]
0040316B E8 0A550200 call qsr.0042867A
% r& L, w3 V! E: U; A: D00403170 8B00 mov eax,dword ptr ds:[eax]
/ W7 ^. U2 V! E6 F, I00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
/ W7 n+ B) `0 q0 Y% o" Q00403176 50 push eax
6 K" I# p. W: z00403177 C64424 40 05 mov byte ptr ss:[esp+40],5& L4 @/ }8 q+ J5 M% T1 b
0040317C E8 0F560200 call qsr.00428790
0 j1 T$ X( X- S# s00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]/ C: g; w |' W) a# ^$ Q# D* R
00403185 8BF8 mov edi,eax( a+ S/ K" h2 P' ]- v2 O. F) c
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3- ~, V `8 r$ \6 A& `: X
0040318C E8 FAC20200 call qsr.0042F48B, M9 D+ O9 @( q# w- B
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
' j' K. o0 b: f' M8 l* S7 n: w0 L00403194 B9 3E000000 mov ecx,3E) Q0 ^. h( H, G/ [
00403199 99 cdq
( l4 m2 q. e& i/ b# Z8 V' V. f0040319A F7F9 idiv ecx
4 D6 R, R6 {+ }% s0 O; T U0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
4 L5 ?' G3 e# |3 \& r0 {" |! F ]004031A1 894424 28 mov dword ptr ss:[esp+28],eax6 n5 f. M$ M5 a6 y
004031A5 8BCA mov ecx,edx
& N2 R$ i& x2 a; r' i( u004031A7 894424 24 mov dword ptr ss:[esp+24],eax
# @2 L- y( P- o' X2 ]& S% g4 z004031AB 894424 1C mov dword ptr ss:[esp+1C],eax" c, C* A: ?' p8 [* J' h; C7 P& N
004031AF 894424 18 mov dword ptr ss:[esp+18],eax) B/ C* @1 {& Z3 e7 C
004031B3 894424 14 mov dword ptr ss:[esp+14],eax+ Z$ a8 J% I* |/ B) R# Z8 @
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
+ p" X% w a) \5 b, K- M J004031BB 8BC1 mov eax,ecx, J6 g; j( q1 S- U2 f) G$ ?2 Q
004031BD BF 0A000000 mov edi,0A- ]! [2 e* b5 ^* M8 a0 p0 |& `
004031C2 99 cdq
7 k3 K! g& b& _004031C3 F7FF idiv edi0 V0 y6 [) r: a/ U. \+ r
004031C5 8BC1 mov eax,ecx
- b( E& k& {7 _004031C7 B3 0B mov bl,0B
, g. K# Z& ]2 O' D( p; j! U004031C9 0FAFC1 imul eax,ecx
) ]3 d6 @- i; ?* `5 O004031CC 8BCF mov ecx,edi
3 H4 V5 u2 i9 r* ?004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
4 c9 o5 x5 x1 Y004031D2 52 push edx
) B- A5 F% Q. M$ H) Q004031D3 99 cdq
* k7 Q; l; y2 u* y8 `. O004031D4 F7F9 idiv ecx
$ |: m5 u g) J: j1 \004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
$ D9 J" j: A) j# H4 R1 B004031DD 2BC6 sub eax,esi
7 T1 {5 V7 x. o, t7 ~& d' R. ^8 v# M004031DF 52 push edx/ J1 `1 Y% s r. ~
004031E0 99 cdq
0 h1 W: S% r5 `004031E1 F7F9 idiv ecx# _+ i% h& p. u; U; i7 L6 Y! ~+ J
004031E3 8BC6 mov eax,esi5 q n1 m" L* W6 s/ y3 i
004031E5 52 push edx
" d! d' C" H7 B D) V004031E6 99 cdq
$ p7 C' l G' c004031E7 F7F9 idiv ecx
& N; \( ^+ B5 g; P1 U# h9 a004031E9 52 push edx
4 t" l2 R; w8 Y$ K8 u8 \% p/ F8 g+ N004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]6 v& A9 |/ X1 H
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
' T4 C! r& B( P. s5 Y- h0 j7 s8 B+ v004031F3 52 push edx
: ]; ^- W' f+ S004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893! y7 s V. b2 R
004031F9 83C4 18 add esp,18" V% Y# v" x* e; t5 R7 C; q
004031FC 6A 04 push 4- i9 j3 O) o/ h, A6 K0 \6 M
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]7 b) F- I, S |1 r+ ^
00403202 6A 00 push 0
: y% s! `, V2 Q00403204 50 push eax
/ _ v' \7 @' V( A+ ^! s00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]7 @( ]3 R. u3 N g1 }5 f
00403209 E8 D6530200 call qsr.004285E4
, J" G# b# B0 |9 O; z0 X0040320E 50 push eax
2 k& _+ U$ {! J$ R4 k2 M }! f0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]' w- U7 B1 L# s( U8 s3 [ J
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
2 E- ?# f: \8 B6 T* @00403218 E8 A7C30200 call qsr.0042F5C4
$ A+ a+ r! [7 ], S/ Q9 V2 |! T0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 p! L' }: I" E9 Y l& z7 z
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl+ q( v' e9 n$ V# I/ B
00403225 E8 61C20200 call qsr.0042F48B6 v a$ @& l7 H7 ?$ {6 u* u
0040322A 6A 04 push 4
Y/ Q& o. E' I* z9 @0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]+ J4 ?. S" T# v- h2 p3 E; n
00403230 6A 05 push 5
4 Z. u# y: L5 i( m, T! u00403232 51 push ecx, `. Z$ J" A3 t% H7 D% [/ J8 T
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" F" [* m) j n5 o; I8 L00403237 E8 A8530200 call qsr.004285E4" N+ J V" n: Q# E4 R
0040323C 50 push eax
$ N$ M. x2 U$ ^' f3 v% D0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]6 @% O. s: p$ s& t G
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
4 n: j9 ~& `# {$ n {00403246 E8 79C30200 call qsr.0042F5C4$ K* V4 o2 M) @+ k( H) V+ B: E2 K1 @
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 S! y& \% U/ M8 \7 C! r0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
; [* y, Q# |( V; k00403253 E8 33C20200 call qsr.0042F48B1 B0 |- A% x. U, I6 n3 y# Y$ H9 Z
00403258 6A 04 push 4$ ~: H; O/ A- o' ^( N9 q
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]7 m8 r4 r! [# g$ Y
0040325E 57 push edi
. e9 D1 v& j% b3 i) H0040325F 52 push edx
, V: G! x* g5 i00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]8 O: ^0 ~9 T2 d
00403264 E8 7B530200 call qsr.004285E48 t c) ?" m! N# ]# A! Y( Z
00403269 50 push eax
+ ~" w3 [& H/ J% r0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 I# R, }6 r l) R4 o& o0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
) f8 O8 M9 ]/ J( @" a2 _+ v5 M00403273 E8 4CC30200 call qsr.0042F5C4/ }) v* }0 l; g* d) \& w* f
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
( p' ~( c- @' _' d5 q' X0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
# l; U% s6 I3 H, Y+ C1 s) f2 L9 g00403280 E8 06C20200 call qsr.0042F48B4 [7 [# Y# \& T* i/ A
00403285 6A 04 push 4
9 V' Z5 i, f4 k/ P) l00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]( L A' T3 ]7 M* f4 q* a( p
0040328B 6A 0F push 0F8 D& a, N- z: L* |
0040328D 50 push eax
* T @: B+ Y: V. ]& s5 L( ^0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( q$ \7 I/ E9 M* x8 ]* a- b B8 C00403292 E8 4D530200 call qsr.004285E48 M9 E0 N! U% \4 c
00403297 50 push eax/ A2 { i P: P7 E* `- L5 t
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]- D9 N% x# w- Z( I: h0 y2 e
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F) W3 a, t6 n4 y1 S! u( _
004032A1 E8 1EC30200 call qsr.0042F5C42 E9 q' F- v7 t3 Q4 w) p/ D
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% A, F& o. ^# u: l$ a/ Z- d004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl4 k8 { [8 j# N* y
004032AE E8 D8C10200 call qsr.0042F48B
. ? i# Q3 @) N3 v' w/ n* Z& m- b9 X/ F. q8 ~004032B3 6A 04 push 4
1 o! [* z3 A$ @$ p: o2 M004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
6 y; l9 m" m; z. k/ q& F004032B9 6A 14 push 14
" s D: A; [9 f004032BB 51 push ecx
; c: b8 \# u6 W4 x3 E5 @/ g004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ ~3 G) m2 c" c( \; {004032C0 E8 1F530200 call qsr.004285E4: G9 n$ L# ^( l5 [, S4 B0 B+ B
004032C5 50 push eax5 l( n5 ~% f( g7 w3 W) Y. ~4 @0 A. A* \
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ e' O+ _1 |0 }# C004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
, G0 F* I0 J' a0 a/ Y004032CF E8 F0C20200 call qsr.0042F5C4
! O+ K1 C, V0 i4 T004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]. N/ p7 {9 k; `1 g
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
0 z; k, p3 N- v( ]$ x2 u5 D3 R004032DC E8 AAC10200 call qsr.0042F48B
) g" i; V- |( r4 P( m8 @! u7 p: Y9 r004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI4 m" ~1 S! t, d" ] m. c( n3 X3 c
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX% l* w' z, x4 J% a+ e! _
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL u: @. T& Z- p0 F1 `; R% L
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
, R& K6 h5 ~8 \7 C004032ED 8ACA mov cl,dl ; DL送CL
6 Q- Y2 f/ [; L, B9 ]004032EF 3AD3 cmp dl,bl ; DL和BL比较 i: P7 a+ r! L! `; m W
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
$ b- S; T' w; C004032F3 84C9 test cl,cl
* h. M2 e* |1 D* E; H004032F5 74 16 je short qsr.0040330D( N. w4 a% k' I+ `
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL5 C5 s+ Z7 ~- O2 |
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
3 B* V4 g+ w4 Z8 ]. _% j0 E004032FD 8ACA mov cl,dl
! k2 r) w3 N$ v2 F, c: R004032FF 3AD3 cmp dl,bl ; DL和BL比较0 g! l3 x$ o1 Q9 H2 _' ~5 x/ O; f1 }7 [
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）5 I& v" Y) l) f+ n; I* t9 D1 v! q
00403303 83C0 02 add eax,2 ; EAX加20 X( ^0 o5 E; m7 |: {( ^
00403306 83C6 02 add esi,2 ; ESI加2
* r, G0 }% s$ Z# L$ p' P+ }7 W00403309 84C9 test cl,cl8 m% m( Y( t/ ?2 X+ _5 h
0040330B ^ 75 DC jnz short qsr.004032E9
5 w) v. O% G; j0040330D 33C0 xor eax,eax2 v( d: ]7 F7 s! j' ?9 s
0040330F EB 05 jmp short qsr.00403316
! n9 j ~, B1 [6 l00403311 1BC0 sbb eax,eax
/ f$ @- P5 X: T/ |4 L00403313 83D8 FF sbb eax,-18 \0 W/ x) \6 T, j; Y/ e
00403316 85C0 test eax,eax
5 v' p4 y6 p2 x$ t* @9 x# p( S( n8 g00403318 74 0E je short qsr.00403328
* s, }4 d, h! n. R3 t. F0 T0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
8 e; m3 t8 _0 s+ S3 X0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]% x' \, K* e3 U$ X6 h$ D. ^3 f# x
00403323 E9 F0000000 jmp qsr.00403418# V% e5 P5 Q; C d7 B
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
, z! j! \) y, o G4 Q, n0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
4 E% r- G% H n+ Z/ ~7 C00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]0 Z. S# |( n+ L( c/ Z! G
00403333 50 push eax/ D/ L$ V$ j3 v4 Z
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
; N# K+ k4 S0 j t00403339 50 push eax
( s, e! n# y* p/ B: Z! k0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
3 G2 W5 X* n, v8 N0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
; ], N' _: \1 ]6 C' P: P00403343 83C4 04 add esp,4# u( a3 I( E% p) c+ ]
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI. {) C: \9 m' m/ I6 \$ ]" w
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
4 j3 i: _. S& V& P0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]5 z# R9 C% M* U- _1 N$ Q
0040334F 50 push eax( v- u4 |' q# K2 w. v1 l% I
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX: ]! C# g5 U- P% D' h
00403355 50 push eax6 R8 b% F5 }5 W6 D5 n- B7 O! p
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX$ |: E+ [" D9 `
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
; h% l2 t: M5 a: ~& M1 c0040335F 83C4 04 add esp,4
" d$ V* z1 N- U4 D$ C2 B00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
# B0 r) |) X5 k; k( i2 `00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
% o/ z8 }7 K# D+ J" v( b00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]8 D% J& K; ^& D# }$ D0 K
0040336B 50 push eax
% {+ \* J! s0 b o. {+ d0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX; k1 u8 t, m! _* w
00403371 50 push eax7 Q" ?' a: ^7 q* ^% W
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
, {. C" n% V- L7 r6 a00403377 8BD8 mov ebx,eax ; EAX送EBX
, Y4 Y* x7 Z$ L) m$ n8 _00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
9 h: d: B- L9 r5 n0040337D 83C4 04 add esp,4
# H6 O1 \* o+ w/ L4 _5 _* {00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
& Z0 r! H! R( s' }00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]7 f4 t" d: J% Y4 N
00403387 50 push eax
Y# q7 z* r& k. i1 V00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
; l$ @! @& m4 z* y* ] b' s0040338D 50 push eax: W0 ~5 q( F* V6 ~ C( `$ H3 z
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX! x3 M F$ S* W" c) f5 C3 B$ B. }2 V% J
00403393 83C4 04 add esp,4
}0 s% P% ]( t) h- w00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) @$ r- A. t( W: Z" t0040339A 8BE8 mov ebp,eax ; EAX送EBP9 {' ~6 C2 o/ c+ g
0040339C 6A FF push -1
8 I' ~# @: B" x7 | _0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX) J. I- F1 ]+ K' g% d
004033A3 6A FF push -12 S+ E' c. ]* z- t8 u K& B
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
% c: K" y7 T) J004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX6 L% M3 M% p! o/ }! P5 @
004033AE 6A FF push -19 k2 h; ^2 z# V, w. J
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
5 j( I7 J9 A! R/ d' h1 G# h. T0 r- Z004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
( z( H9 R' Y9 Z004033B9 6A FF push -1
6 v/ u( B$ O4 ]0 q* y5 x) c004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX- |' r0 v, b. t( s# W
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX! d3 H$ H6 P) I% q7 l6 Z9 z
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX5 B4 \/ r! k% x; m" t) b
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
! T% z9 s) l6 A. l3 `1 |: G004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX, I: w" @9 A3 R" H' f0 i
004033D7 D1E0 shl eax,1 ; EAX左移1位
9 v* C7 ?0 c: t% A004033D9 99 cdq ; EAX扩展
6 |* W. x% a2 C& C8 {! k004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
$ v* X5 g+ _, @2 n) w0 j004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较6 f7 d% {( e5 @' F$ ]' ~$ C# f
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）+ `2 Q+ X; v [- e- s! S$ u
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
, X a* A0 m9 c) f3 t3 I004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
4 a! E. V2 W. n) P2 d f3 }004033E9 EB 2D jmp short qsr.00403418
& t6 T; B0 a+ z- F004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX* t- g& p' M- j- R+ }
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2+ @& E) f# q6 C9 `) v5 W
004033F7 99 cdq ; EBX扩展" ?% _# O8 J w7 R+ m
004033F8 33C2 xor eax,edx ; EAX和EDX取异或. |5 {# m$ X' D+ N( |) n7 O$ t
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX7 x* l3 W' Z7 L1 t1 ]/ j
004033FF 2BC2 sub eax,edx ; EAX减去EDX7 s+ y) D( J" D/ B3 U6 C
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]3 W7 _- K) h# x, m; o( a8 z
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
) Y* d7 @# B) G) V00403409 99 cdq- P8 b1 S% {" K: Z' D
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中6 t0 g9 x% a% H: f3 v2 M; U, v
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
# x5 I1 ^% _, g$ \% E7 r* b# J00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
l7 t! |, _7 [# R00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）: v9 W. t. f1 x: E, ^. m8 d% j5 ~
00403418 E8 6EC00200 call qsr.0042F48B ; 0 C) h/ n. g- T
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
2 g9 G& b, u J* C* N: s00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
, w4 D, `/ `" A" f2 z: I4 o S00403426 E8 60C00200 call qsr.0042F48B1 n$ }) q# j7 Q4 v/ s% E
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# g) U/ f' ^$ E% j/ H' ?
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
4 E7 y+ h& f/ O' v* O& {00403434 E8 52C00200 call qsr.0042F48B
7 F2 ~4 R& k1 B1 B00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
3 O% q5 }! G# V3 t" O# |) _$ A0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],70 _5 W! {* x/ z Q
00403442 E8 44C00200 call qsr.0042F48B3 s7 R' k0 {1 ^# ]
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]' u$ z6 D* s6 l8 B0 R3 J3 l; n T D
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
2 K6 u e' d$ L% L7 _00403450 E8 36C00200 call qsr.0042F48B
& z d, |0 u! R! D% e00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]8 n& A3 Z8 V1 G8 I! `
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3, P+ ^9 s2 d) |1 _
0040345E E8 28C00200 call qsr.0042F48B* J9 q, Z7 S. h2 M- n! f( }7 N4 `. K
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
3 Q2 b8 o9 m- J' X% u00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2( W- h: s% g$ F5 g. f' |
0040346C E8 1AC00200 call qsr.0042F48B$ K& C- h7 c, z* X" t/ F! A" Y
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 h* O) d/ n( }3 A2 D* A# q
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
8 d& x4 j, `* o; N8 F" e4 K0040347A E8 0CC00200 call qsr.0042F48B f, O- a* ?# }9 L) ]* I
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]# ]% _' C% D2 d4 ]7 H3 X J
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
1 a2 z8 f8 \5 q$ q00403488 E8 FEBF0200 call qsr.0042F48B
. h4 ~& ^& t" e7 h' N% D0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 C* H- i$ Q6 }3 J# ^) u
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
2 x6 O; x% w% o! U* Q- d00403499 E8 EDBF0200 call qsr.0042F48B
) x0 S7 M8 ]6 f9 w% `( F0040349E 32C0 xor al,al ; AL清0
2 v+ f1 l$ j' U% j7 O" O8 E6 V004034A0 E9 88000000 jmp qsr.0040352D
. O' ^8 d2 P k004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~7 {$ u0 u9 ^$ b6 L+ t B+ v
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
; l. A% U) {8 S y9 Z7 c" d004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9: P9 r8 a5 H- x3 `) \! h
004034B3 E8 D3BF0200 call qsr.0042F48B
+ f6 f) m2 {0 t; v6 O9 v- D, O2 x004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]8 V/ r# a k; [. G$ w; r9 Q$ w. u- @
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],81 I! b% M7 t$ W* J" U2 y" A
004034C1 E8 C5BF0200 call qsr.0042F48B
* b9 W; x0 v- B: H/ s004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
4 `5 s: t! o% A6 ?7 j004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7& a d/ m2 P6 v
004034CF E8 B7BF0200 call qsr.0042F48B6 g7 C" t: U5 `* D
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]# ^. V7 D. Q$ w$ U; U
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
& N; k4 F4 u% U' Q" D3 o- z004034DD E8 A9BF0200 call qsr.0042F48B
, p- y5 K- T& y: L) x004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
- j8 H! Y& Z+ c) {- Q004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3# u. O6 K8 c8 f- a/ U
004034EB E8 9BBF0200 call qsr.0042F48B) s5 h# t7 \; I% X/ D: b5 K9 t; v: a
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]$ V' @# h& W' Y8 R3 I9 e
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2# Z1 B% d0 I, A
004034F9 E8 8DBF0200 call qsr.0042F48B
- h! R: L% j8 b, _8 _7 i( C( K004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
; U) ^& I7 z+ H6 n0 r8 ?; O00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],19 F, r8 z7 f& R$ ]
00403507 E8 7FBF0200 call qsr.0042F48B, | S! f8 A! u
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
$ Q) ^- C3 x+ d* M5 ^00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0" G! v4 H2 \& b8 }, ?- L g* b) G+ x
00403515 E8 71BF0200 call qsr.0042F48B& ~; f! P, C& i2 z
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" X$ V) U+ J: a
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1; H+ r' k0 d* Y3 h
00403526 E8 60BF0200 call qsr.0042F48B
3 b* |, X) N! l# U0040352B B0 01 mov al,1
0 y3 g1 S' v2 a# B( Z" ^7 A0 O0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]) M$ W6 ^8 R$ R1 @1 Q6 k2 u$ S" u8 c
00403531 5F pop edi0 G* |7 |; u& b4 Q* X. `; p% Z
00403532 5E pop esi5 s/ C* f: Q" D' B" j( q D6 S+ ~4 e
00403533 5D pop ebp5 o" I4 K* X* i3 e+ H
00403534 5B pop ebx
# e f; J1 s7 f9 h1 X8 R$ z9 @7 \6 L00403535 64:890D 0000000>mov dword ptr fs:[0],ecx: e$ F, b) H% H; d5 V7 O
0040353C 83C4 30 add esp,30
6 y- [' Q- P% V2 p0040353F C2 0800 retn 8
[+ j9 o+ Z7 {! v! r; X3 @- i# }--------------------------------------------------------------------------------
6 U, o' Q4 e/ x& Y: \【破解总结】, k& `+ ~' d0 k- H7 t# i
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^4 ?! p0 y; g0 i7 l% N. b3 c% Q
用户名：yijun h" j9 }- C, ?2 @% M9 K# h- O
注册码：4893*7777*3726*7777*0529
& g- E& [" G% V- p( m$ p' j--------------------------------------------------------------------------------, N( W6 d1 m$ {) e$ F: \% R
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡