|
|
|
【原创】破解Quick Screen Recorder
) @2 p% b* j o8 D* ?, l【破解作者】 yijun
" @) w7 I+ x( G# V* M& h【作者邮箱】 [email protected]
& G8 a" j0 z; x1 T3 b【使用工具】 OD,PEID
& }+ U9 d- @$ ?% n: L【破解平台】 WinXP% C' j8 z! q' E& X/ z
【软件名称】 Quick Screen Recorder
( l5 H) K* w* e1 s T% h【下载地址】 天空
3 q' z- d: b* Y- A- }3 k2 l1 D【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. % X" x6 Z$ R4 c6 Q: K
【软件大小】 540K Q' i1 k! }! A& g0 G2 @" e" {
【加壳方式】 无
7 d! u/ W7 J& {+ z7 L! b8 D- F" c【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）4 [( H7 [0 e! z' A
--------------------------------------------------------------------------------1 n) s5 w9 G" W0 r
【破解内容】
' w6 Z8 |6 {: O, Q8 m: }- }9 X! C PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
$ L9 Z: m# F. n8 m" Z$ \' ~+ s2 C00404C69 55 push ebp //在此下断$ [ j: @6 n* x! O/ T3 Z
00404C6A 56 push esi# ]2 g, d! V) m5 v3 b
00404C6B 57 push edi
: f" r- }; q2 X% R" T3 A, `: |, Q00404C6C 8BE9 mov ebp,ecx
6 S+ ]& _, _. r& r3 }& f# o8 i0 R, \00404C6E 6A 01 push 1
( }1 E6 Z/ [4 r) b" N, u00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名4 l' A3 h# y+ S, ]7 _; B2 ?( ]" i
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]( I* O; [3 u4 Q7 \& K0 ?) _
00404C78 8BCF mov ecx,edi
F! [3 w: b- `/ ~00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
/ Y% G3 a {' ~' t& `00404C7F 8BCF mov ecx,edi! d8 T l% z6 j/ W: v9 _8 f" W
00404C81 E8 A73E0200 call qsr.00428B2D, y) q) z i7 n; S$ w; a7 y0 _
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
2 J' P' F$ q7 t00404C89 8BCE mov ecx,esi
+ p' N J9 |8 ]; H: i00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
3 `- F+ @7 T& @# t00404C90 8BCE mov ecx,esi
# R' \( G; x' l2 j00404C92 E8 963E0200 call qsr.00428B2D
. h: G$ Z, o* m' o0 u00404C97 8B06 mov eax,dword ptr ds:[esi], b7 h7 ]. k( |2 P; I H" k
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
" \( ]/ ], ]% o3 y; _. D00404C9D 7D 26 jge short qsr.00404CC5/ p+ {4 M/ ^* J- m' I! D
00404C9F 6A 40 push 40$ j! X2 q: q W: m* i: P: `
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
. m8 S* J" f* L" X00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name.") H* U( V* c" D3 t4 d
00404CAB 8BCD mov ecx,ebp
: Z8 w2 Q0 d3 n: v6 F00404CAD E8 C3840200 call qsr.0042D175/ V$ E# a. j* z/ L: _3 [ v9 k
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]9 _4 d3 K2 f5 B I8 Y4 r3 M
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx- e; q" m% ~4 k! i" Z3 d6 P, C
00404CBD 5F pop edi
; Q( m; H9 ^+ ]00404CBE 5E pop esi
' a: T7 {6 ~. k00404CBF 5D pop ebp
: y6 V& a; w8 F# m4 ?( t00404CC0 5B pop ebx
D* t/ L% N8 ]- }( q, b00404CC1 83C4 18 add esp,18
9 m3 @ a! Y+ P00404CC4 C3 retn3 E% M1 [7 {* e% O( c) d
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]4 L, Q. [5 j+ S$ H( |1 s9 V/ Y
00404CC8 84C0 test al,al
. N4 C4 z" x" a" r4 ]00404CCA 0F85 1C010000 jnz qsr.00404DEC
- Y R& H% T- w% q& L$ `; H00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 T4 p; t5 K1 G7 J& J& O00404CD4 E8 87E3FFFF call qsr.00403060
+ d. K% K+ r' D1 H! a' ~7 g00404CD9 51 push ecx7 H1 ^/ @- z ^+ k) Z8 ~, c
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
8 |7 Z! i3 A" h* ~ T00404CE2 8BCC mov ecx,esp% A" x4 G5 O2 p; E# Y" Z& U8 t
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
7 q8 z, L- Q% j4 N l- J5 ]00404CE8 56 push esi% ?6 k. u* f7 Q6 ]
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是08 I, D0 D$ Z% h. t' w6 ^
00404CEE 51 push ecx0 z5 D+ Q9 d9 Q$ z4 X0 h
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
2 d5 G3 t6 s t! P00404CF4 8BCC mov ecx,esp
$ c$ O1 Q! r" `. ?4 W& V00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
1 Z$ @ v& j$ N: }9 L00404CFA 57 push edi
' ^8 R1 I$ Y( \( L) @5 v: q00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0, A4 N ]1 v1 w# O9 L
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ j! v. N5 `1 o! u( X00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
: q8 E0 L# K& H, Q( K00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
; ~. j& ]* k2 {' |) n00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~4 A- i' V9 c! J' i, G
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~* T& D& J9 k/ v1 r1 ^- N5 B6 j
00404D12 6A 40 push 40" X& S) k; U, c. U( b/ R8 Z) m2 S( L( x
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
- L$ r2 T( ^* I: A- f4 M: r00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."5 ]9 i- c; m/ F+ _
00404D1E 8BCD mov ecx,ebp
: [( b* t( x2 J" E00404D20 E8 50840200 call qsr.0042D175
) _2 q5 r) ?2 ]* b4 z* \00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]7 e) K; u) y& S! g; Q9 F
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
7 e% V1 d: b0 u ~$ j00404D31 E8 5AE3FFFF call qsr.00403090
8 |, D# w- V G& c) Z& o00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
: e8 j4 h6 M; ^( @' G4 ?* b00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx, ^9 a [* J; H" b% W# d
00404D41 5F pop edi
% p) o& @5 P% e7 s9 k* ]3 M00404D42 5E pop esi
+ T* h$ d. n6 {- n+ }00404D43 5D pop ebp
/ R9 S2 |5 u! e3 \. E K00404D44 5B pop ebx5 ^( G- [7 r F
00404D45 83C4 18 add esp,18
& `8 g& `: e# h3 Q4 d5 }00404D48 C3 retn
, N( F* r$ d( V* X*********************************************************************************************************************************************************
* W* ]7 J8 w5 X: N跟进00404D09处CALL来到：
- i0 U4 E5 F U: s/ R004030A0 6A FF push -1 //一路F8下去~~~~" I8 w+ e& O2 M @
004030A2 68 C88F4400 push qsr.00448FC8: E- ^3 g) e( T+ H* P& w
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
@4 Y: @. M9 X. W; Q0 D004030AD 50 push eax# S3 H7 H& Q# N6 V
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
: Z3 m0 ~3 y k004030B5 83EC 24 sub esp,240 V/ j% |' E% D6 O
004030B8 53 push ebx
" y3 b) t) e$ B0 G- I* R. C$ b004030B9 55 push ebp4 m& ~3 H& I- c( a8 Y: b, D
004030BA 56 push esi
5 R% P5 ~: ^2 C0 T% }, w! U004030BB 57 push edi+ W4 k1 t p8 K. X0 O+ J
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
) D5 @7 a$ D1 b$ O8 k004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
7 O; M# Q, T- G4 ^" u004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1- S' B# T+ O2 n4 c2 A
004030CD E8 27C40200 call qsr.0042F4F9/ I7 i f R9 P2 _* g( P( B, o
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
( q( w2 [ C- u% u% p004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
% @* Q9 _1 S, _( D' @: T! P004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]9 q( ]) T. @& G; Y& B
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
5 v8 Z4 R" F$ B* Z9 H, {" r004030E4 E8 905A0200 call qsr.00428B79
( d+ g# q+ g- {& j- ?004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]; g; z- W; `5 E" h
004030ED E8 3B5A0200 call qsr.00428B2D
, ?+ ^" M+ o4 I1 F- _4 {004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]% h0 h5 a1 W; b8 b- _6 X
004030F6 E8 7E5A0200 call qsr.00428B79
+ G5 d# i1 _* O$ j004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]) a: u9 Y4 E6 `
004030FF E8 295A0200 call qsr.00428B2D
0 f, d: r5 Y/ R7 S/ N7 s" K00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
, N! t* l% N8 P8 R00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
9 H4 q" T t8 P+ u5 Q& G% f0040310B 83F8 02 cmp eax,2. J+ n: r) ~- @) z! E' \4 O" H% W
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
& [0 s% u8 S7 a$ p00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]) Q7 V! w5 F1 A$ C' G* D6 w+ x- r
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
i+ x8 A0 [ \0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳2 r6 n3 r7 n; [! L& Y; J
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
o$ A4 I' q3 |( R! F8 J; n00403126 6A 01 push 1$ d% P: S2 \+ i: L Z
00403128 50 push eax
( H4 n! n3 m' F# T3 l& [00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]$ {* o% C% f. D! A) Z4 Y# d
0040312D E8 C4550200 call qsr.004286F6$ i3 U/ `& x( L( W, V: R" L" h7 q
00403132 8B00 mov eax,dword ptr ds:[eax] ~4 a. J+ T6 |8 L ]( X& l( u' M
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 @* |, ^3 l3 S" I q00403138 50 push eax/ E) |# \( H9 E3 J4 O
00403139 C64424 40 04 mov byte ptr ss:[esp+40],40 L0 q/ s* f# o; _3 `0 e
0040313E E8 4D560200 call qsr.00428790) p3 d2 p% K# M! U& k) u; {: j7 [
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. P6 I# _4 b5 J; e, T00403147 8BF0 mov esi,eax. h x- G2 [# I1 Y( b! x' L! ^7 d
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3* Q9 d% y* h/ X$ j& _
0040314E E8 38C30200 call qsr.0042F48B3 h4 W) S5 D& k0 b4 X; z. v
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
4 W$ G" m5 R# ~/ P- y) j+ T" h! U00403156 B9 3E000000 mov ecx,3E; M& e; N, g% e7 u5 t- Z
0040315B 99 cdq
" x" A. q* I: b+ V' l% Q2 K0040315C F7F9 idiv ecx
. N6 ~ _& }4 y+ N) y, f9 L0040315E 6A 01 push 1% \2 ~& D, U+ }/ d
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
9 P& W! H3 f& Y: j00403164 8BF2 mov esi,edx
7 @, x# H% K, S- K00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
w5 ~* C. Z& L/ d) ]0040316A 52 push edx
7 R" K: j" d% W$ H: l6 u0040316B E8 0A550200 call qsr.0042867A
/ o- ^# O, _: K( C' n K00403170 8B00 mov eax,dword ptr ds:[eax]
$ P, E( n. T( n U1 k3 h" [00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]; a* K; T4 j% {: D. e$ S
00403176 50 push eax
2 w0 S6 p( s, c" S ?, o7 A" D2 y00403177 C64424 40 05 mov byte ptr ss:[esp+40],5* \" F2 F5 g9 u# h* P; N8 R
0040317C E8 0F560200 call qsr.00428790' }/ i0 F J% V/ C
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
3 ~2 \7 z9 {3 n# x( _' w) Q00403185 8BF8 mov edi,eax- j7 R, }& J! a. K
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3* O$ c" j* E8 f# W
0040318C E8 FAC20200 call qsr.0042F48B
; [# j! T, d d- \00403191 8D47 0A lea eax,dword ptr ds:[edi+A]# k/ l6 m. S# J2 T, ?
00403194 B9 3E000000 mov ecx,3E
$ b$ b2 I7 j+ `7 p/ X6 ?6 s00403199 99 cdq" Y5 L# U' a" u- k. z A
0040319A F7F9 idiv ecx
8 f2 g6 t# g2 b! W* M( ?$ g2 I0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
. }# n9 `6 U' L5 S- L004031A1 894424 28 mov dword ptr ss:[esp+28],eax
7 [+ ~( _& P$ c0 _2 ~004031A5 8BCA mov ecx,edx* S7 I% j5 f* c5 N5 d/ W
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
, { N$ ] W+ E! C004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
( h2 A Z7 M! n; N7 r# X4 M004031AF 894424 18 mov dword ptr ss:[esp+18],eax' O' F e/ l; m0 K2 ?
004031B3 894424 14 mov dword ptr ss:[esp+14],eax' q( ?2 p, U3 k
004031B7 894424 10 mov dword ptr ss:[esp+10],eax. Q; V# u. F, h8 z7 T4 c3 h ^
004031BB 8BC1 mov eax,ecx \8 N* Z) ?; K# t) f
004031BD BF 0A000000 mov edi,0A1 m! r. }6 ^9 h% B
004031C2 99 cdq
6 L* Z/ ^5 J8 ^5 |& F3 J2 U- f& R004031C3 F7FF idiv edi
( ~# I- } @: C l004031C5 8BC1 mov eax,ecx/ v2 J, H1 l- L4 w0 Z( H7 e! x# u+ n
004031C7 B3 0B mov bl,0B
- p, r& ~ j! u# d6 [" V; Q2 C5 _004031C9 0FAFC1 imul eax,ecx, h( u8 N: t ]5 P1 g. W
004031CC 8BCF mov ecx,edi9 ] h% a- @. f9 r
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
Z r6 C1 P9 Q, n# ]$ U: a004031D2 52 push edx
; l8 S B3 ]2 k8 s$ e8 B) S$ w004031D3 99 cdq
" m; O- Y: u- i7 r3 F U004031D4 F7F9 idiv ecx+ } s `9 x7 B C! \; @
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]9 o9 G8 C$ J9 q6 B0 z
004031DD 2BC6 sub eax,esi
F* S2 h1 Q, I* K( O1 s, f3 J004031DF 52 push edx
" \) }+ X/ ]; i; ]' Y4 E004031E0 99 cdq
) \! ?, e* t/ |0 G4 J! s+ x- {004031E1 F7F9 idiv ecx% T$ {2 b6 ^! l
004031E3 8BC6 mov eax,esi
/ J# r! X" Q+ n9 B7 F+ L! O004031E5 52 push edx
1 B+ a8 ]7 ]3 X6 M/ r6 I/ r- ^004031E6 99 cdq6 Z8 J! H7 y, F0 d5 h
004031E7 F7F9 idiv ecx6 e% L$ d% l# [
004031E9 52 push edx
9 C4 M- m4 E* V8 P# a; M1 j4 x, J004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
. J; p$ L- d! j$ {% f004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"7 X: i; h/ r* I9 ]
004031F3 52 push edx
! Y! I( ?9 n. j0 {) u% T1 o( j004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893# E+ Q9 P" s$ R0 c/ { k% f( \& I0 B
004031F9 83C4 18 add esp,182 m4 C/ H! y, g
004031FC 6A 04 push 4
1 d: y# X* s$ X8 e: L: [& B004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]* D5 k5 X0 f, b3 Z! A
00403202 6A 00 push 0
8 Q& C: F) C& G# c, y4 T00403204 50 push eax
4 x1 x% Z/ n7 C2 G. x( \00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50] b. S+ P) y& A* j4 l4 [9 e& U
00403209 E8 D6530200 call qsr.004285E4
; C: j7 Z& J- v0040320E 50 push eax/ c- r: l2 H3 A" K5 Z! j$ g5 Z
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
5 r5 X2 b% y! g& N# x00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
# P# m7 H, f5 B1 y# @00403218 E8 A7C30200 call qsr.0042F5C42 s+ `% y4 @/ h8 B' w
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]: p! [- l+ @7 V3 q9 u, B2 C% v! |
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl( ?1 j# w2 _" V1 I9 C' a: u
00403225 E8 61C20200 call qsr.0042F48B3 j! w- n& |+ T& V: t" B
0040322A 6A 04 push 4' f7 E% T/ a) n
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
3 Q3 @. f8 ~5 u7 h" ~/ T00403230 6A 05 push 5
( b+ P5 c5 m; T( t) H/ g00403232 51 push ecx4 U9 {' r8 R. T/ i. N
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( ]. q+ R; `; k' X7 y00403237 E8 A8530200 call qsr.004285E4
& I. l: |4 _" B' t: |0040323C 50 push eax
2 x9 y0 ^6 [% Z2 d0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]1 B4 ^3 X0 ^1 C7 Q3 L7 ]
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D4 d$ M1 _* ]; q/ |
00403246 E8 79C30200 call qsr.0042F5C42 _3 I2 w+ t8 x/ ]
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ l4 J5 x! A' e& P* m+ c) K' n6 T2 t9 ?9 [0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
9 u/ f4 p/ E" ?4 D, m00403253 E8 33C20200 call qsr.0042F48B% }! c; a" s* E4 ?) W- ?" D6 K0 Z
00403258 6A 04 push 4
. ^* h6 ]2 {, [9 [2 i) T0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
9 ?1 F* a' p$ d( h( Z! | O' @0040325E 57 push edi
* `& D6 N1 T( `& l' ]5 t# t" y0040325F 52 push edx) Z; o6 |6 X6 u. A5 h9 j l
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]3 `5 y$ M; h1 R9 T% ]
00403264 E8 7B530200 call qsr.004285E4
& c8 m) @ @" [: {00403269 50 push eax
. U# J9 @, Z( k% v& H0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] C0 J8 W* W8 s
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E' @+ z, P( m S1 _
00403273 E8 4CC30200 call qsr.0042F5C4
* g' f* C- ^' V6 m00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- k+ S r, T. \2 v4 q& a0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
+ S# y* [$ b/ _! J00403280 E8 06C20200 call qsr.0042F48B. G) j1 {2 o# G. u$ |
00403285 6A 04 push 4# A: @+ u# \6 E# w
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
( w. I' R& {! q' {3 {0 u3 d; [0040328B 6A 0F push 0F% S! Q/ n2 h6 W
0040328D 50 push eax: x4 V6 T- A7 z4 h1 @& t/ W- i
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50] b+ q( C# V) k
00403292 E8 4D530200 call qsr.004285E45 N, ]* G- x' b& W1 H
00403297 50 push eax2 y+ n$ e4 R5 b [ e
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
) I& R* [: U9 r! } [2 Q/ s. w8 M0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
1 h4 z- W* v' A1 p% A004032A1 E8 1EC30200 call qsr.0042F5C46 a5 E& v9 a# {! r0 I* h- ]
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ I! z V C/ K& c
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
2 h5 A+ B! q4 e+ r, j$ V004032AE E8 D8C10200 call qsr.0042F48B
; H7 \8 A7 Y+ R* J004032B3 6A 04 push 4
# ~8 l& [+ J" ?4 D7 O5 b" S004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
$ |) V9 y" q+ _0 }( @, {% x004032B9 6A 14 push 14
* d9 \0 Z1 g2 h004032BB 51 push ecx
% i0 C1 f" b! N2 L1 {( E004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: o* c" W7 }* ^
004032C0 E8 1F530200 call qsr.004285E4
I; {3 K, ~& H& _4 D& S4 {004032C5 50 push eax
3 c& [% Y6 `( Z# c8 ?) I3 {6 ?004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 b! `. U! K/ M2 o- q" J004032CA C64424 40 10 mov byte ptr ss:[esp+40],101 e% S5 D; B+ A- @( X! h9 S" [
004032CF E8 F0C20200 call qsr.0042F5C48 y% k8 Q) M9 Y T
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]1 P# h! R: J- Z& s. ^. L
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
8 X$ b% Z* r8 f" n004032DC E8 AAC10200 call qsr.0042F48B8 d" F% o2 A4 M3 F. M# X( V" i
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
, B$ t* X, u+ r/ l2 M004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
Z) Y4 T8 y, c* ~0 d }004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL5 ~) s7 g$ i4 x2 G! w0 F
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL0 W+ }+ ~5 { P6 B) j6 {
004032ED 8ACA mov cl,dl ; DL送CL
; ^; C* {+ P; F' x L004032EF 3AD3 cmp dl,bl ; DL和BL比较( p" y' ?5 j! h0 @0 T: Z4 q
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）( Q6 M C. t- e2 G, V6 A+ D
004032F3 84C9 test cl,cl$ S! a( }& A+ D, P; K1 i! }0 Z S
004032F5 74 16 je short qsr.0040330D% B3 l4 y$ ]' E5 s$ w' ^
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
0 W5 Z3 \# e, {8 I0 ? Z6 U004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL- z5 J7 I4 f* z2 n( j
004032FD 8ACA mov cl,dl
( I$ t5 _1 m! Q4 `7 p2 G# m1 V004032FF 3AD3 cmp dl,bl ; DL和BL比较4 W" d7 U+ D! a5 R0 M5 w: I
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）5 |2 d" p* U! o! V; ~
00403303 83C0 02 add eax,2 ; EAX加2
8 _& x! g+ y/ v; o; r" d& k* |00403306 83C6 02 add esi,2 ; ESI加2
% G8 Y l$ l2 F' @: T) \- z00403309 84C9 test cl,cl
- P6 @# o* J o6 t* w0040330B ^ 75 DC jnz short qsr.004032E9
) C- e" A7 E; R8 V0040330D 33C0 xor eax,eax
. z8 K* Y0 u4 x1 R5 f3 v! S0040330F EB 05 jmp short qsr.00403316
' b0 Z5 O* E* w, J9 ~) O* M4 |00403311 1BC0 sbb eax,eax; \, s/ w: i1 t0 m
00403313 83D8 FF sbb eax,-1
5 J# E1 H- o q& h3 B00403316 85C0 test eax,eax
& _! Y4 n3 ]1 N8 S' }8 r3 a00403318 74 0E je short qsr.00403328
2 d2 w2 T) }2 g: P% Q# a( I0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
. h6 d. |' k6 R; V3 D0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]1 v" w1 o s; v9 L3 l" a4 y
00403323 E9 F0000000 jmp qsr.004034180 @! \$ ]7 C6 A* Z$ d4 B
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX* {' z4 i& U9 y2 @
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
. [ h Y4 g8 l; x00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
, Z1 ?; _8 e% d* l00403333 50 push eax
- N" b9 ?; G3 o) \2 K00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
6 o0 U d; L/ m7 @0 j- X2 _00403339 50 push eax
2 H" @$ m1 G4 g1 Q( l; n, o& D0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
: Q& o3 C* W( e3 a: P5 B" w. m0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX# N( [, x+ D* N; J
00403343 83C4 04 add esp,4, u$ e! H g( h# o- z9 b+ s
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI" N6 _: D2 {9 c) X& S- J! }7 v
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
. P- T0 h% l9 @% C0 M: v8 | D* E' f0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
) N1 D4 R# I# P2 l9 F0 H" X0040334F 50 push eax7 {' x! M9 P4 j1 Q2 i) t. Y
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX- x3 c' o, ~" W6 R, _2 _
00403355 50 push eax( ]( E, s3 |; T9 t6 X. `, {: j8 F2 ?
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
& {9 y3 F4 W8 A5 g- f7 O0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
; a/ V" m' y# i0040335F 83C4 04 add esp,4, t! F( A8 y! T f$ `( q& @, h
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI6 r3 U0 a* X9 O! A) G9 V: [. `
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' g+ n% ]( g9 X
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]" |+ F; h* v1 ^6 \% J' m/ ?& C
0040336B 50 push eax( N9 l- f% s. O2 p7 D
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX0 L1 D e+ t* b; Z% P3 S6 o
00403371 50 push eax
/ J S% `& B H0 Q: ]% g) `8 \6 N00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
0 z8 B: [: {* ]9 b00403377 8BD8 mov ebx,eax ; EAX送EBX; g/ p& n$ h4 a! L7 A5 B
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX( U w& w* H% T E
0040337D 83C4 04 add esp,46 E4 x' s0 X( O+ P2 N* V) J
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]9 [ H! R" p3 `/ t
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]( t$ y' j& c3 h) g
00403387 50 push eax6 b6 `1 B5 {: Q1 A6 A+ _/ Q
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
. u; }, U( _0 q8 O. ~4 D b0040338D 50 push eax
. X) I9 d4 f8 r" h. v& {- u0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX% ?- `9 F* t8 O4 G* O9 w
00403393 83C4 04 add esp,4' ]# U% [+ H4 \% h0 ^
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) A9 A6 j! J/ L2 b- Z0040339A 8BE8 mov ebp,eax ; EAX送EBP
7 D2 s/ d! m1 f& N, j3 E+ y5 z0040339C 6A FF push -1
2 u- V6 j7 t# `: V0 d5 i0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
5 _5 F0 H0 U% v004033A3 6A FF push -12 ]- m+ j: z& T
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX& R. @& Z2 M1 A/ e/ {
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
/ @4 N7 w' ?; }. Q" M0 o004033AE 6A FF push -1
7 A) G. w2 N4 E) p7 F$ F004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
: P! p8 K* r# d$ |, K# T) i# S d004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX) `: S8 q: Z' s. z1 Q
004033B9 6A FF push -1( e$ }3 l" f3 Z9 Y, |. J
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
; v) G% s4 r8 i9 P2 [8 s004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
4 B' o1 J+ M- H3 E004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
3 o+ T2 _& u9 t# e004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
) |7 |, h# E* C004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
; U3 z3 w( h5 _4 _' L% L) N004033D7 D1E0 shl eax,1 ; EAX左移1位
: h& O, ]3 o) N0 ^) v+ t004033D9 99 cdq ; EAX扩展4 J; d( O/ z% |7 _# c; o0 ~
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
' k) \% H# T9 {: D004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较1 K1 k1 ]2 i: j/ a; ^# c
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
2 a% L) _& c' }% D% f' d- w; o004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A7 y; ]% |# C7 ~& G( J: R
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10], F+ ^3 b( J. |, I( m+ f# |
004033E9 EB 2D jmp short qsr.004034182 _& p7 ]5 X! I# {, L
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX( c O, U x7 \7 V& m# e2 ^
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2/ @8 N5 w' _; K5 L5 `/ {; O* Y
004033F7 99 cdq ; EBX扩展6 F% ]3 H9 P. p+ |+ q
004033F8 33C2 xor eax,edx ; EAX和EDX取异或, B. Z. S* i2 F" f; L
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX( w U) t/ H) V' J6 k
004033FF 2BC2 sub eax,edx ; EAX减去EDX$ x$ u5 f% @! \% X0 `- b$ t. x8 I
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
+ n- ~/ X2 [7 _# {; i00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
! S" `' ?! c& c7 G' \00403409 99 cdq+ A% v2 d" D: D0 R
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中2 `7 F& C5 J' t( Z9 H
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX3 X- @' ~. T5 `. q9 j& y
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较# S+ X1 k2 X+ [* i
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
7 `, e" H; ^6 s. C5 G' D00403418 E8 6EC00200 call qsr.0042F48B ;
5 I! k- }0 J) T' t# `& Y0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. d% F* l8 L# u# b, E2 e2 V
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
$ L W5 d0 d: [1 S7 {4 D5 T3 G00403426 E8 60C00200 call qsr.0042F48B
6 ?2 F1 a! N" H% n8 W3 A' @% T* g' f0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
" g6 t/ x! Z5 ?& l2 U. S7 N0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],83 |; P! o" {. _6 @; L
00403434 E8 52C00200 call qsr.0042F48B5 {9 d: ]: h4 g& o
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
J& T$ s- O9 _' z5 f0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],72 l8 B& ?" z6 l+ M% N6 G
00403442 E8 44C00200 call qsr.0042F48B1 S3 Y' U5 w7 s0 ]
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 _6 i: m0 X: B4 ?0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
2 b2 D) w0 `3 E% u$ d00403450 E8 36C00200 call qsr.0042F48B
( r5 C' v$ y1 ]5 S7 Z00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]& S, Z: O9 A! k( O( q/ B. _
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3: e; y5 ~7 s# l
0040345E E8 28C00200 call qsr.0042F48B
$ I6 e4 P% \. |, Y! {7 r00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
4 T5 M0 F1 K0 c. k00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],25 c/ g1 @" ?" J7 b: }
0040346C E8 1AC00200 call qsr.0042F48B
2 b2 R- K. r, [& w& `5 d$ f00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 [5 r8 C* i' L3 S* X- P00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1, _" o6 S- j H: l7 e. @3 e7 G
0040347A E8 0CC00200 call qsr.0042F48B* M4 C6 L2 B+ K4 p7 g' J
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
7 I! b7 p+ d/ W00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
* J; V8 [* _: L' ?/ d1 q: }% P( f. z00403488 E8 FEBF0200 call qsr.0042F48B
7 [! k- u6 c8 `, M. a+ b0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& l) _) G' p- o+ U- ^5 P
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
) Y) b9 `1 x$ U0 |2 u+ i00403499 E8 EDBF0200 call qsr.0042F48B
9 X8 Q/ Q3 |, p$ o$ K3 W' s0040349E 32C0 xor al,al ; AL清0
9 b. y D8 w+ I- X3 z) m: e004034A0 E9 88000000 jmp qsr.0040352D& M* M5 c5 D/ n, w: \
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~* \% H" F |$ g
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]# q* V5 i8 J) P( {& J
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9' H8 x' [- W- N4 |% x% N+ d) A
004034B3 E8 D3BF0200 call qsr.0042F48B) K: s% G8 A/ M
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
+ d M, g4 B! R& r: q1 f, f004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
: a/ N* E: h; J% L" A004034C1 E8 C5BF0200 call qsr.0042F48B
: P- I$ i/ @) Q% n004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
. R* S# ` T x! X5 P3 Y! ~004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
# R% Y4 f2 G1 X( b004034CF E8 B7BF0200 call qsr.0042F48B* o6 ^$ }4 g+ d& j. b# o
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& f- {& z4 | Q004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
+ ]& d8 `$ U# I004034DD E8 A9BF0200 call qsr.0042F48B4 }4 a* X! i0 Q. f1 c: v2 L
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
8 B4 Z2 e) N9 d004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3; m2 ^. a& T2 x! t! ]/ l
004034EB E8 9BBF0200 call qsr.0042F48B
7 H+ N0 k0 E7 f- j" P" u. j004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]" G" f" d7 r6 d+ G& t
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2& }. f+ p& N. F( C' w. x, e6 ?0 G
004034F9 E8 8DBF0200 call qsr.0042F48B) s5 v+ z. _7 O8 S0 ?
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
0 b. o' \4 c0 ^5 U; H+ S) g00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
. M: Z; }, h' Z, P" W00403507 E8 7FBF0200 call qsr.0042F48B
) M8 q1 C" Q; I6 q# e( u0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 _' ?0 X& k1 A v/ b% S00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
0 \8 M! y7 e7 X: v& [& x00403515 E8 71BF0200 call qsr.0042F48B
, U. S- ]' w5 B l Z0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 D( |* P% e7 e+ B3 U2 @, G' c
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-11 H( U6 F# T9 m$ l6 c9 A
00403526 E8 60BF0200 call qsr.0042F48B
" O( ~0 L2 x1 u0040352B B0 01 mov al,1
o; f3 ]4 \& [; r ~0 H0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
, p3 A% z. t0 Q; a# {00403531 5F pop edi+ A# Y6 B# | j$ O
00403532 5E pop esi
" s/ u2 t" B0 u7 o+ j00403533 5D pop ebp5 N- D4 n6 {, w) u% X( z
00403534 5B pop ebx
' D. J3 l4 d/ \/ j' u9 j$ u0 Y00403535 64:890D 0000000>mov dword ptr fs:[0],ecx6 x8 U7 A4 d: u
0040353C 83C4 30 add esp,30
. F5 V! e5 |& u( T" J8 g0040353F C2 0800 retn 8
, V( P+ K+ _. ?: i! L--------------------------------------------------------------------------------% U1 [- Z8 h: x S
【破解总结】9 b$ W; ?/ x3 H; Y4 D( k* Y
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^& p( t& X7 k1 n6 x" P
用户名：yijun
R/ L0 L6 A% D# ^* S5 g& s注册码：4893*7777*3726*7777*0529
/ l* x9 f6 z( S+ t4 l5 `$ Y--------------------------------------------------------------------------------
- G+ S# U# H3 J! r1 L【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡