|
|
|
【原创】破解Quick Screen Recorder
0 K1 C' H, Q% ]【破解作者】 yijun; h/ P& F9 f- [, `& M8 ~
【作者邮箱】 [email protected]
x/ |1 B ^! B- E【使用工具】 OD,PEID! i$ Q' c0 f" k) V/ Z
【破解平台】 WinXP
! H# a! u, g4 ?- G【软件名称】 Quick Screen Recorder
; [' g" E4 r$ S【下载地址】 天空. @3 X; l T' C+ c% p
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. * u; f1 f3 h& _ }4 f& s
【软件大小】 540K
/ i1 P+ C! i9 R" X; B# ]: e- q, L【加壳方式】 无
: {! C+ \' T3 @+ s+ m4 E' n【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）& S. C7 ^" S( k
--------------------------------------------------------------------------------
) L5 o) `! U5 w% K1 S- ~【破解内容】$ Z- h3 d2 C9 U3 g( M% w
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：4 h3 w1 @/ d( m) `; ?" f
00404C69 55 push ebp //在此下断
! t* h( z6 i1 P+ X3 z! W1 q3 u00404C6A 56 push esi
, \! M7 Z& V+ g7 r6 W00404C6B 57 push edi1 W+ m3 } Y3 }7 W1 s8 D: P
00404C6C 8BE9 mov ebp,ecx# Z$ T6 R: V1 i! \ j
00404C6E 6A 01 push 1
# X: }' L" s) W9 G; L00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名3 q" B* K4 j% f+ K) ^& f" i: \
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60], R0 W: n. Y N
00404C78 8BCF mov ecx,edi
: } \! t0 z5 H5 i00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
. Q& o, K r+ J. b8 ?4 e( z00404C7F 8BCF mov ecx,edi+ U/ ], M' A6 g' ~+ v& k# Q3 c
00404C81 E8 A73E0200 call qsr.00428B2D Y$ \% B( p2 Q0 s( O" I1 T
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
8 f6 A. X6 u5 o; N u8 ~- n+ W00404C89 8BCE mov ecx,esi
- I! C0 o" s) V. T$ i1 k00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
2 R# j9 S4 W6 { y00404C90 8BCE mov ecx,esi
7 { s; u9 L+ F N; \# y$ K00404C92 E8 963E0200 call qsr.00428B2D
/ f$ i4 J" G5 d7 y00404C97 8B06 mov eax,dword ptr ds:[esi]/ Q$ K4 z& T/ m& v# z9 ?
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2. O a1 l; C; C" [/ Y
00404C9D 7D 26 jge short qsr.00404CC5; m5 y9 u4 C' A0 t) {
00404C9F 6A 40 push 40. O6 N6 c( S/ T4 W( [. t+ A
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
% M- U. V# H( Y ~* \* m00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."/ O$ Z( P( {% @4 v9 R4 o2 D+ l
00404CAB 8BCD mov ecx,ebp
" j' |1 n3 D) J: r- J9 q00404CAD E8 C3840200 call qsr.0042D175: m( C4 c& t3 M) M4 ?- D
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
1 O0 v4 U9 k+ {- f+ e00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx" g" \6 u) N! s# n1 M
00404CBD 5F pop edi& c5 R- ]; T+ N% ?% w8 x" n4 I- ~
00404CBE 5E pop esi: v. F& ^' k" \* U5 P
00404CBF 5D pop ebp
7 K' D9 W* Y- C0 v00404CC0 5B pop ebx
. A) H; y4 @' ~, `00404CC1 83C4 18 add esp,18
& i4 u* U+ \9 @00404CC4 C3 retn
3 u2 J; X& ]. ?1 r" ~7 S$ \$ P00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
" I2 k3 k3 f! ^+ `* O00404CC8 84C0 test al,al) k; i' h4 w+ g. ~% k% W
00404CCA 0F85 1C010000 jnz qsr.00404DEC
9 i; j- S r/ p4 ^7 o00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]) u$ _- P: n2 h
00404CD4 E8 87E3FFFF call qsr.00403060, W/ T! X! I A( s9 K1 D
00404CD9 51 push ecx- F# ]5 V5 S( G+ }3 \
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
2 h9 p/ m& L- B4 z( y. \2 e00404CE2 8BCC mov ecx,esp
m+ w% V z; R1 Z P! Q! z( _00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
( c$ n. p+ Z* U5 A" w4 k4 l00404CE8 56 push esi
4 h: }7 s, X% {3 v4 M0 I/ f. E" w00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0( C; V# Y! Y( S: }7 D0 ?# `
00404CEE 51 push ecx8 P, e/ `6 `& R4 E
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
! x4 _" P! \( n00404CF4 8BCC mov ecx,esp. o8 @6 `' @3 q2 A" H c
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
: s2 T( h0 k; v# }, s00404CFA 57 push edi
* ~& [- r, i; K0 _00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
" c4 x( l L* g, [6 h% R00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
: n! S% {, m5 X5 x/ g8 f00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
6 w0 j$ I) g* J! l+ b* b00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
2 W$ I7 N6 v8 ^- q/ X; h00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
( F# \, N- n2 B9 r00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
; l$ a, m6 \( D* u e00404D12 6A 40 push 40. s0 R8 A, H! t! c2 L# ?
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
2 s7 q0 z( f! g4 X00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."1 A8 ?. S9 r/ T# S9 e
00404D1E 8BCD mov ecx,ebp: H! S( n8 ]" {1 p5 ]6 ?$ w$ V+ j/ F6 [
00404D20 E8 50840200 call qsr.0042D175* ^/ K7 X9 ~' E; v
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; Z; R% `. m! i" o$ d5 h. G1 }8 |
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-17 z; C$ H1 s. T% A: H
00404D31 E8 5AE3FFFF call qsr.00403090- ^( m& ^0 ~4 K1 K6 T
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
p/ y5 a; w9 [9 V00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
$ x% B5 D0 S: x) U3 f1 b00404D41 5F pop edi3 U4 @* v7 }* R2 w
00404D42 5E pop esi
3 u' S6 |* i8 f00404D43 5D pop ebp3 H' O% J, U* |' x0 p+ u/ c/ R" K
00404D44 5B pop ebx: V& j7 L Q J1 J& V$ m: d4 D
00404D45 83C4 18 add esp,18$ r/ c+ }! A. L0 |- U
00404D48 C3 retn
6 _& x" H; w! f# A9 S) u G*********************************************************************************************************************************************************
% X2 S# G- l, [! E4 b+ }( q跟进00404D09处CALL来到：
" E( B4 J& N! w4 U004030A0 6A FF push -1 //一路F8下去~~~~) U; E* Q2 {3 P
004030A2 68 C88F4400 push qsr.00448FC8
, c( A0 ^ I9 x3 y$ K004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]0 s0 k6 q9 g x9 f7 {) O$ V
004030AD 50 push eax
6 D* n5 U7 ^6 A* ?004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
5 d3 h' f1 {/ ?/ J( }, k+ w' j& H004030B5 83EC 24 sub esp,249 l3 u M" G+ V) v
004030B8 53 push ebx5 ]0 L0 q0 A$ d
004030B9 55 push ebp$ f3 w# m* T% m( O7 I
004030BA 56 push esi
9 E* s' g$ I5 _ m) e8 d& \+ C7 k @004030BB 57 push edi" q3 X( u5 S3 A5 g2 E
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
$ l7 B+ y" h, F; M004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
! A: Z! M! X+ I7 N7 ]! H004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
6 C3 C% d4 y- S( V& O: I004030CD E8 27C40200 call qsr.0042F4F9
' l# L R( r Q; i' K( i- H' k004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
I; f5 B' m0 b: O. P# C: Y004030D7 894424 2C mov dword ptr ss:[esp+2C],eax8 s# d% K+ C0 C# t" i8 p
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ i+ n* j$ z- J& e8 h/ j; ]/ f
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3$ b# l: H j8 j3 x
004030E4 E8 905A0200 call qsr.00428B79
z% d4 m# Z( i: J/ Q1 M004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]9 W4 r/ B1 Q- O [$ M7 j4 i
004030ED E8 3B5A0200 call qsr.00428B2D
2 w" Z3 A: v" U: @1 {& m$ Y004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]# D8 ?2 Q: \; j3 L; n9 B
004030F6 E8 7E5A0200 call qsr.00428B79
- |; ~7 L( }3 F' H* \- G$ [004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
2 i: n4 ~$ H6 M8 n3 [( \004030FF E8 295A0200 call qsr.00428B2D
@$ j: t- f1 h2 P( Q6 N6 W3 m6 G* Q2 ^00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
3 j) ^4 ^. _7 a8 H3 D( ^00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
7 J0 [4 x% g8 _+ J* V# V. f9 R1 N0040310B 83F8 02 cmp eax,2$ h9 Y, Z0 K" g! {0 V! U
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
[$ A2 w8 }' a- v6 E0 k00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]' x$ W" L7 e/ E! w
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
* ^9 m. U9 p0 M1 J& o8 ^% s0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
" r" ^8 B1 f% i00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
2 h- y0 T/ d- Y5 N0 M$ p5 H6 B( Z00403126 6A 01 push 1/ I* e5 K9 w1 [7 @
00403128 50 push eax
' }5 e A% q) v* R' M9 f( j+ z00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
# ] z- }6 S9 F+ E0040312D E8 C4550200 call qsr.004286F6$ q4 x+ @7 e/ [+ D' M& ~4 T
00403132 8B00 mov eax,dword ptr ds:[eax]7 w. T& ^, ]4 [6 T$ h7 |: l
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
0 V& \2 [( n) }( u00403138 50 push eax
8 A; U( [! q0 E6 m00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
$ W! z, I6 a$ [+ v! c x0040313E E8 4D560200 call qsr.00428790: `8 l3 Z1 m, U
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 w. `, F5 S. Z3 u5 L' Z00403147 8BF0 mov esi,eax- F% ~. t6 C |, x3 D1 i; m- i r. O
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],33 A0 V" ?/ ^- m8 e3 `
0040314E E8 38C30200 call qsr.0042F48B% [* o, {9 r" j3 S3 x) P
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]! V4 x/ Q& [* h( j% b" @+ M3 @6 M
00403156 B9 3E000000 mov ecx,3E
9 _/ E: b* U+ `' x* y1 v; E! `0 j0040315B 99 cdq
/ n$ n# [' P/ Z$ n0040315C F7F9 idiv ecx" O3 z6 W1 ^: ^+ p8 v' D
0040315E 6A 01 push 1
' e% n: o2 T t* p9 |# d, l5 R00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
: U, E" q7 X6 `0 x0 j00403164 8BF2 mov esi,edx
. g0 G" n4 t- q+ d3 z00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
0 |( A) v; {( \( @0040316A 52 push edx% s$ e3 Q: c3 O/ d5 H
0040316B E8 0A550200 call qsr.0042867A
: k, E: L* o0 G# k# b00403170 8B00 mov eax,dword ptr ds:[eax]
! x- f' w7 a1 D. ?3 |: t9 u. b! H: v00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]! s" ?1 ^% z9 O* e
00403176 50 push eax. \5 m5 Y# [' o5 i* a' C% I% v1 w
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
i, P, t8 [7 h. t: F0040317C E8 0F560200 call qsr.00428790
0 q+ ]; j5 s0 b2 V/ z+ u6 c& T00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ i' v# g: }& @6 \: {- t/ Q6 r, [
00403185 8BF8 mov edi,eax, F# X0 S. S6 k) g
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3; G! }8 f& L* l$ q ]
0040318C E8 FAC20200 call qsr.0042F48B
/ F3 r4 |( y' X! V00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
* ~/ `% }$ Q* x# I00403194 B9 3E000000 mov ecx,3E- |- \1 y4 q: S- A
00403199 99 cdq7 k; @/ j$ p4 s9 l0 {. t0 X
0040319A F7F9 idiv ecx
5 v, _) ]+ R% X3 T5 V" @2 m0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
. z8 q; P2 o9 l6 L% E004031A1 894424 28 mov dword ptr ss:[esp+28],eax
6 l; `0 x) s5 z0 ~004031A5 8BCA mov ecx,edx, o& D5 m. ]/ H2 Z" u
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
; [& r# }/ s# N004031AB 894424 1C mov dword ptr ss:[esp+1C],eax$ G9 T; x% J9 e- g6 m* Q
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
7 Q( [8 b$ m w4 n' {( e8 w, G004031B3 894424 14 mov dword ptr ss:[esp+14],eax
$ ~4 q3 u( _8 Z7 K/ r/ Z* b7 g004031B7 894424 10 mov dword ptr ss:[esp+10],eax- U. B/ q9 A. s2 M) `
004031BB 8BC1 mov eax,ecx; P5 S* t! |2 W$ o% ]; i9 V
004031BD BF 0A000000 mov edi,0A
/ H, T6 N+ F, a* k" ]' G% M004031C2 99 cdq
L4 Y* z' T( E004031C3 F7FF idiv edi
& f! r( Y l) N" z$ d8 ?" ^! n004031C5 8BC1 mov eax,ecx
x, s9 D' \! g9 i7 l7 n- r! L004031C7 B3 0B mov bl,0B6 t/ c& Y8 }/ u( ~ [& ~! `
004031C9 0FAFC1 imul eax,ecx) B" G( ^$ D* G7 X
004031CC 8BCF mov ecx,edi
; L6 j N! Q4 z) a; [: k* R5 v$ Q9 Q/ u" R004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
$ N) V8 D _2 }1 W9 l004031D2 52 push edx* e0 ?. k9 e6 A4 v0 j
004031D3 99 cdq' K: i- Y6 v) k3 W- i
004031D4 F7F9 idiv ecx! u. g+ H' d3 C$ ?- S( {# R7 q# B
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]- y) }1 M6 e: W0 T5 K$ ]. O5 O
004031DD 2BC6 sub eax,esi
+ b1 S/ M/ r8 {- _: S' B& [004031DF 52 push edx
0 v' s) X( `5 e8 V- W004031E0 99 cdq" _6 t6 ]* z( N4 R. x! t; B% N
004031E1 F7F9 idiv ecx2 R5 {8 v/ ^9 g' w5 d
004031E3 8BC6 mov eax,esi
. ~2 _/ }. k z3 j: E4 Q/ @; L004031E5 52 push edx
/ V2 F2 r/ O) O8 {004031E6 99 cdq) A w9 T i) u6 d5 ~
004031E7 F7F9 idiv ecx8 H0 f9 I0 g, g
004031E9 52 push edx J) i: R) c7 ` {- E) Y0 P7 H
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
) o3 M& f7 Z8 v3 t, }2 w004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
/ t: G, D2 p. G2 ~004031F3 52 push edx( c" t; e6 |* A3 g
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
/ @; @2 K7 V+ ^004031F9 83C4 18 add esp,187 W) E' `* t( Z% ^+ N
004031FC 6A 04 push 4
0 X4 D! i& v9 Y004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
6 S# v9 d) e- \+ u! ?8 `00403202 6A 00 push 0" v2 O+ G# O4 m. X8 e! K+ Z0 `
00403204 50 push eax
4 z7 a" T) Q+ c0 c2 L00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 J1 I0 ?/ S+ w: x: _3 x
00403209 E8 D6530200 call qsr.004285E4
. V0 z9 ~4 \8 A! k0040320E 50 push eax! {' K9 o' G' ]. z. U
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]% g% C# d( F# t- l' u$ I
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
! a; [) ? i( q- L( P00403218 E8 A7C30200 call qsr.0042F5C4
1 I( k7 u# c" q' B& N f0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
7 [! M0 z( C5 J" ~, i00403221 885C24 3C mov byte ptr ss:[esp+3C],bl0 ~8 B, h! m" k, t( |) f
00403225 E8 61C20200 call qsr.0042F48B
9 w+ I" q$ Q( t+ A; m- B4 @0040322A 6A 04 push 4
7 g1 ?" p% F8 h. y+ p. V8 \' H0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]* H4 ~7 O9 c: B2 E
00403230 6A 05 push 5: N* L/ B2 J7 q& y3 b
00403232 51 push ecx
6 k. B0 A6 X# t5 q! F00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]% g% N5 M2 n4 u* y% Q; L. S
00403237 E8 A8530200 call qsr.004285E4
( n! D9 ^, T* {% k7 v7 _8 p' a0040323C 50 push eax# P- ^3 [ [) n0 v5 P8 U4 n& A& ]
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
. g. K8 C; {4 D8 `00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
+ e! f, O4 s) s. U# }00403246 E8 79C30200 call qsr.0042F5C4: N% Y' g( P, i2 b8 x7 \
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ c+ Y9 S9 Z% B# l+ ?* J0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl. ~" C3 l* [7 @* N4 g2 O+ X8 W
00403253 E8 33C20200 call qsr.0042F48B
& d$ K# Q5 J+ W2 M k/ A2 J00403258 6A 04 push 4
6 J$ R( q0 f& R' d1 u2 Q; E I0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]( z9 P' ~; T/ W. \
0040325E 57 push edi
5 a$ P& V; b/ u0040325F 52 push edx
& @/ N* m5 Z9 q. d/ w: R2 Q00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
/ A0 _$ p2 ?2 s8 l, K& i00403264 E8 7B530200 call qsr.004285E4
; b3 D' @9 G& @$ U00403269 50 push eax0 `" M2 Y/ A' ~: j8 h! x8 Z
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 ?$ P1 ]" W" E1 m: c8 Y: c0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
; K! S% o, b: M1 g i4 ?6 ~ K9 q% k8 M00403273 E8 4CC30200 call qsr.0042F5C4, h* _' X0 s/ m7 u! d4 t& _
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- R) v" v) v5 n$ q/ l) |" T0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl& y0 A4 k$ z0 _4 m: T
00403280 E8 06C20200 call qsr.0042F48B
" ^* o2 W9 i5 f6 f4 x( F00403285 6A 04 push 46 {4 A" m& K' W
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]6 S2 S$ D: c; O7 l
0040328B 6A 0F push 0F* x2 ^1 U) ?! J+ n% j" ~( l& Z
0040328D 50 push eax% Q1 J) x5 f4 [% U" H- p
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
' E( x5 C* U" p1 d4 }# d00403292 E8 4D530200 call qsr.004285E49 Y8 e2 O: h* H. r/ N& v& v- k
00403297 50 push eax7 I& X; V; `: A6 }. p5 Z! m
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
|$ ^+ N% r( F+ N# ^6 x0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F8 G4 D. W; `% V8 V! L2 C0 W
004032A1 E8 1EC30200 call qsr.0042F5C4
6 c7 m( _) Z. r6 g004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
" N1 z' j" i1 ]# B) M004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl @. H8 k0 g- G
004032AE E8 D8C10200 call qsr.0042F48B2 i2 |$ s" j# p6 E
004032B3 6A 04 push 4
" G& q. n. }1 h9 c004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]" p5 q5 ?2 F8 X; d& T
004032B9 6A 14 push 142 k7 |* V1 Z# ~* u0 e& F
004032BB 51 push ecx
* v! M' K, O" ]" t$ \004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]) {8 n) y6 u9 V3 O8 W3 U8 G: Q
004032C0 E8 1F530200 call qsr.004285E44 x0 ]5 `1 r+ N6 [
004032C5 50 push eax
; j- B2 ]: F6 P004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ w" _% L o! ]$ a- n& r6 i
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10& I6 s3 H! e5 \1 ]4 U1 Q- C
004032CF E8 F0C20200 call qsr.0042F5C4; ]6 }1 V& T1 v9 _. R$ U
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- `- C0 A! d% A1 M
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
/ u9 S- e1 d5 r4 E004032DC E8 AAC10200 call qsr.0042F48B
) }- W8 W0 R, H7 @+ [8 J, U6 P004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
7 S: M( R1 q4 j3 k0 J4 p004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
) D, ^4 I0 ] r0 F0 I2 q004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
7 p8 @% h/ C4 h, l8 Y3 p004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
9 z" V6 u8 [. m" q+ w0 H004032ED 8ACA mov cl,dl ; DL送CL
0 `7 }* m j j% O! K& h% V004032EF 3AD3 cmp dl,bl ; DL和BL比较8 V4 ?2 k, b$ e0 _' b" O( y
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
, \: J: L/ B, G* P8 J/ i0 t004032F3 84C9 test cl,cl
) S" ~9 r2 J, B X& f004032F5 74 16 je short qsr.0040330D" G* y( t. s- L/ U7 @. [) D
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
$ P3 p8 B4 g. h/ ^$ F( j7 [004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
% k: h& ~, i" k8 P6 }1 {004032FD 8ACA mov cl,dl: y I+ P, O* D; h* _* P. a% }' i: G
004032FF 3AD3 cmp dl,bl ; DL和BL比较
! P9 c3 h: D9 K8 S$ E00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
- v# A( a& i Z00403303 83C0 02 add eax,2 ; EAX加2# D1 @+ |) f* c
00403306 83C6 02 add esi,2 ; ESI加25 B% M1 ~. A& M7 B% O3 g& x* P
00403309 84C9 test cl,cl4 c2 r8 k0 b# X8 t
0040330B ^ 75 DC jnz short qsr.004032E98 N0 Y; R, w7 S m5 M$ _8 w# }. f
0040330D 33C0 xor eax,eax
; f: l1 w0 ^ y4 }7 w0040330F EB 05 jmp short qsr.00403316
" D6 _$ D2 U- {5 \% k! @' s00403311 1BC0 sbb eax,eax
/ X5 K9 a0 B8 P8 i2 K* R00403313 83D8 FF sbb eax,-17 A6 r9 W/ @4 v
00403316 85C0 test eax,eax
7 r- T; [/ X. i' J5 H! q" {' Q00403318 74 0E je short qsr.00403328
* Z3 w! n- F7 V8 J3 F* E0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A' @* N$ u5 u R2 {, U J
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
6 o8 R" S# Q: G( j00403323 E9 F0000000 jmp qsr.00403418
* I* v8 M( Q0 h1 X: ?7 {* M0 o00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX/ }$ c! k. c. p8 {- X
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( m$ E. r+ S& |8 l0 W+ N" J- b00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]' F2 n# h" _/ C: E
00403333 50 push eax
! L9 r+ @- C: t5 Q, S; t00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX: I% v' o) G( q# C2 l |& g6 a, H
00403339 50 push eax) R- H) i. @, X4 e* B1 C
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
& o! a" p2 t7 L/ i ]; ~/ G0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
; y5 U9 ?8 S7 Q/ Z3 G1 F) P00403343 83C4 04 add esp,4
$ {, o- {; v! @8 }9 Y" B00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI9 a9 t% \( Y) E
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
. O$ T8 \& D' `+ L3 s0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]( l, z! V N, N& R- H( w3 M* q* t
0040334F 50 push eax
; O) t9 G5 _7 ]4 J- a% \0 P: ~00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
' J8 l9 M- x p0 S+ i5 k00403355 50 push eax
- Q; d9 ~: r1 v% V# \" I( I- \00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
, G) d. Q* }9 \% ]0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX( Z u2 H d# N+ m
0040335F 83C4 04 add esp,43 y4 ^! G) C" z: e
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI3 j( T" H" g, V& A, ?
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: J" z$ }8 N7 A& v9 }$ r00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]/ m7 y# A3 Z5 d
0040336B 50 push eax" }! R0 l. @ p7 h6 ]& b
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX; V$ Z/ R$ S- m/ i
00403371 50 push eax$ Q6 }; `+ H2 U+ k* u) X' y
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
' x. i$ e) y2 f4 L00403377 8BD8 mov ebx,eax ; EAX送EBX
[0 f. q- p0 R* \00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
o. h' x7 M: d" j0040337D 83C4 04 add esp,4' j, A2 q$ L& X" H
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]. u+ s- G2 K: a8 R* r5 u, |! W
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]5 y1 T* {5 s( Z3 \( ]7 _! d
00403387 50 push eax$ y$ }# z3 x( H- S
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX3 |. `6 x/ X# S7 e K5 B' H
0040338D 50 push eax
( d! P$ n7 w$ y8 y4 s0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
: O/ e% b; a3 p a- T' s1 {00403393 83C4 04 add esp,4
7 w' O0 o( v' c) S+ ]9 k8 F5 D( E00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ T8 R6 Z* ?5 L& _6 O! @! e0040339A 8BE8 mov ebp,eax ; EAX送EBP j( G0 r! S6 `8 s0 [" _8 U
0040339C 6A FF push -1
5 j, Z+ Y( Z- K0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
( H m( I# O9 T: x: M! h004033A3 6A FF push -18 q, U* P; l' _# T# `: {
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX( A/ X# n9 I; A$ L
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX6 M4 T1 ~7 m0 t7 f
004033AE 6A FF push -1
0 c4 s4 m8 R2 V3 ^' C004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
; V& A$ O$ h9 J: f004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
4 s K' q! y' X6 q0 q% O004033B9 6A FF push -1/ u: b: v- P* F" X3 j
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX# I. R5 _2 s9 ^; f
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX$ g1 l1 Q# g' v3 l( Z7 p a' c1 S
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
5 r4 r+ @- `) G- F- s% T004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
/ n4 t( p M, o0 k004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX- v, f h' z9 B& C
004033D7 D1E0 shl eax,1 ; EAX左移1位
1 O7 `4 s3 w/ K4 _% p- g: ~. I5 r004033D9 99 cdq ; EAX扩展
( a( J0 @! y5 ?8 Q U004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
/ j' W$ L7 E! P# F; d+ f% Z/ r$ Y004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较0 L3 \) q5 F6 s, l
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）, P! ?/ `6 |5 H/ R7 [/ a2 X- w# M
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
' R7 \- n+ J* r, J9 {& \) t004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
! m! _# f% W8 q: x5 e/ {004033E9 EB 2D jmp short qsr.004034186 Y* H8 b4 {5 S. {9 r
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX1 `5 V( v: N {, K7 M# I
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
y% _; G* Z3 `' m& A* k004033F7 99 cdq ; EBX扩展
& q/ P f, F0 h1 @$ G1 S: _, ~6 y% f' A004033F8 33C2 xor eax,edx ; EAX和EDX取异或$ A1 T- C8 }) u J, S5 @0 j
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX, y. Z/ W6 k$ X6 s: e
004033FF 2BC2 sub eax,edx ; EAX减去EDX
" r$ t- A, g1 u% t- S00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]' j4 Y B! z; R: y) m; f
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
6 y4 ?# H( d+ k/ v7 W( F00403409 99 cdq; h) y4 z$ ~/ a8 ]) ~
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
: v& B; P- ?2 e P/ q/ z0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX X9 Q( ]4 Q E( i! D/ u" }7 r
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
5 M; k3 q4 W; T6 r7 w3 i+ n0 Y00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
4 S i7 U( z, I# j" n00403418 E8 6EC00200 call qsr.0042F48B ;
2 u$ Y, ^3 G6 p5 z0 p0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& |2 i( `: \) u) _* C5 E. l/ [00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9( T& p9 Q7 t" F" z
00403426 E8 60C00200 call qsr.0042F48B3 z `" R# W# D2 s' c9 i
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]" ~7 f4 Y" g( Z9 a y `2 l
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8" ^# v7 T, l* ?5 p3 f U# b1 \) l
00403434 E8 52C00200 call qsr.0042F48B6 N+ e: r. Q8 ~: m$ {/ ?$ `7 y R
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
7 ~! b* O/ X i+ j- r, v0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],79 [2 | k5 b& J# ^ e( M% `& M8 _7 D
00403442 E8 44C00200 call qsr.0042F48B
2 V5 j; i c+ n: _; i00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]$ X; G- N* _$ e' D$ g
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],64 q7 P O7 y& x' s! d: m$ G. B
00403450 E8 36C00200 call qsr.0042F48B- o! A1 A% ^1 F
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
. s' V9 x, m/ e4 R. r( O; V00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 P1 \) Q5 B5 ?1 `) q0040345E E8 28C00200 call qsr.0042F48B
! }9 C8 v' ?* O7 \4 J* g00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
; Z5 w' Q' g% T9 H& A00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
2 D( \7 G+ o! B' e4 d2 T9 n0040346C E8 1AC00200 call qsr.0042F48B- _4 d$ s+ v; O. Z! ?4 i
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20] W, a: y7 ]) x# K9 K5 ? c2 c# {
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1$ `: E0 u8 G7 k0 s
0040347A E8 0CC00200 call qsr.0042F48B: @8 Q! Z* H- z" n
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]' X4 a5 v2 E; _ F+ G8 `1 [( w
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
; U- D0 w! l6 T00403488 E8 FEBF0200 call qsr.0042F48B
7 _" P, h$ C( ^& X: `0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
2 V) v$ e+ x: z3 I9 u) C00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-15 F! p! \) o: o# P
00403499 E8 EDBF0200 call qsr.0042F48B
; q; ~" J! P& p$ V! _1 [. h0040349E 32C0 xor al,al ; AL清0
7 _ a2 i" R/ o& y; _) Q5 T& P004034A0 E9 88000000 jmp qsr.0040352D( g' f' ^8 e8 E1 g4 j- U1 ]! e
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
" D2 h& X+ L( r+ W004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 ]; B3 g& h( d/ H1 q ` ?( E' }004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
4 I3 z! Q; n4 t; R004034B3 E8 D3BF0200 call qsr.0042F48B
3 @2 v& D! ~+ |* K# p6 U' b! H1 f004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]$ G4 A. q1 `! _$ ?* P
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
! S1 t" i4 x6 v% X. K# r/ `: O' w004034C1 E8 C5BF0200 call qsr.0042F48B
7 i9 x3 l; B) Y9 ^2 \004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
f/ i# N! T# \004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7' o* I- E# g) @2 Q' E
004034CF E8 B7BF0200 call qsr.0042F48B' m! X; A s5 F( E) Q4 `+ T& e
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
( K( C2 r2 \$ @. M$ _6 d7 y- G004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],67 b$ K' C1 e9 o5 m2 m8 i+ j
004034DD E8 A9BF0200 call qsr.0042F48B) B G' r+ g7 R0 ~( ^
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
! D! i( p0 V6 m! P004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3! \ A9 p) H% Y& S2 u; U
004034EB E8 9BBF0200 call qsr.0042F48B
; f. {5 h+ `* G- T: l/ K1 b004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
5 m3 c$ r$ {" o, S2 K004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
3 z/ g$ ^' v) y0 E004034F9 E8 8DBF0200 call qsr.0042F48B& h3 C4 B* `+ h% l! F- J
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
+ V1 z/ Z+ k( P+ D( k00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
6 U; k$ c* u! \. s; ?00403507 E8 7FBF0200 call qsr.0042F48B
$ S+ D( v- O: H3 \8 J- [! a0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
2 j9 Y/ H- D8 y00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
& r: ~# H+ r* n6 K8 }, M00403515 E8 71BF0200 call qsr.0042F48B4 l1 p1 K/ H) V1 J+ h
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
2 @- P7 D# u/ Z3 n: _9 ]3 B2 K0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1/ T3 E8 I8 O9 G1 i, G
00403526 E8 60BF0200 call qsr.0042F48B8 D# ~. c9 E1 q' C
0040352B B0 01 mov al,18 i1 G5 z7 u; ]5 i$ \7 w
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
+ H. \5 t- {4 g# M) t) ~00403531 5F pop edi$ V8 n+ s2 C$ o7 E4 @( @
00403532 5E pop esi
( y7 O- x0 o. l5 \0 I( D4 l. z& t00403533 5D pop ebp# t% f: b5 W. ^; ? M0 d$ N R
00403534 5B pop ebx
) }3 Z8 ]4 \2 f8 \00403535 64:890D 0000000>mov dword ptr fs:[0],ecx: U! I" R. Q: _+ |6 d/ {6 o
0040353C 83C4 30 add esp,300 r* D. T. N1 o+ R
0040353F C2 0800 retn 8( p% z% I$ c2 N, t
--------------------------------------------------------------------------------9 ~; w) `7 [( }& p
【破解总结】! s& ] v/ g$ n
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
8 [$ p( n5 Q1 Y7 L( f: }用户名：yijun
, h, w# X- t+ [3 J2 q, s9 Z注册码：4893*7777*3726*7777*05299 C# p1 y! \4 ^6 }3 F/ n4 u
--------------------------------------------------------------------------------: |! G; L. V/ p; E( F+ U
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡