|
|
|
【原创】破解Quick Screen Recorder
K5 x. p. \- k7 h/ S' b) F【破解作者】 yijun
- Z* w+ D) G3 G4 x' z【作者邮箱】 [email protected]
; J2 a/ J8 R2 K6 M8 d7 e* m【使用工具】 OD,PEID6 l* J' e8 ?& R$ T+ A
【破解平台】 WinXP
1 U [6 z1 C8 g. F) |1 i【软件名称】 Quick Screen Recorder
/ p+ ^! N1 T! P( [( W& y! D- U% i0 P【下载地址】 天空/ y" p+ E! W) R& G
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. ; v; i3 H1 _6 H6 c
【软件大小】 540K
' z9 t# R2 S' t【加壳方式】 无
" } {" Z R3 N【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）1 v' b& ~0 |, R" O6 d3 ?
--------------------------------------------------------------------------------
7 ^' u( J7 t# m+ N/ o【破解内容】
! l- ^, G0 ^7 }1 q. _ PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
# G- b6 _* F' m00404C69 55 push ebp //在此下断' k; j, w( y& @5 q% j! `0 l5 w
00404C6A 56 push esi
+ |; ~8 E; m) z! Z% Z+ _00404C6B 57 push edi
e5 @( T+ \5 H. ?* x' F00404C6C 8BE9 mov ebp,ecx
# V5 x* ~, _- r! V; C) ^# u00404C6E 6A 01 push 1$ q# S2 ]/ E/ i4 n
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名% y/ k' }8 Y# j+ v! H8 b4 e
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
, u( O @: p7 I00404C78 8BCF mov ecx,edi: `/ m# T9 B7 ^. T) ?( |( s7 f8 n
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
* T: Y/ `3 B Q1 N00404C7F 8BCF mov ecx,edi
* g3 }9 S* H4 e& C% }6 V4 L8 Z00404C81 E8 A73E0200 call qsr.00428B2D
5 F( A$ H+ J' [5 h( ]- ]. g: Q9 e00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]1 d1 \4 y& ]2 q+ |; _ }
00404C89 8BCE mov ecx,esi/ X0 @3 t" p7 H2 N0 _9 T
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
+ j( [/ `; j1 O' x: T7 |0 e# }) M00404C90 8BCE mov ecx,esi5 j* w8 X3 N( r5 c1 ?/ K
00404C92 E8 963E0200 call qsr.00428B2D
9 B2 q& I- o3 E3 r9 U) q00404C97 8B06 mov eax,dword ptr ds:[esi]% S5 K8 n9 d* Q
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2; t) x2 M9 r3 N2 ^% o
00404C9D 7D 26 jge short qsr.00404CC5
0 ?. f2 }& S. B- I00404C9F 6A 40 push 40
- {3 x( k0 e5 g* h3 n! ^* ^" u% w00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"8 F. b: @1 \4 |6 S/ l
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."# Z0 L- C" K- e3 @. \
00404CAB 8BCD mov ecx,ebp
8 h5 m: z7 R7 o) z+ o1 j00404CAD E8 C3840200 call qsr.0042D175# i( `* O3 G$ l' f- V
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
+ Q4 h% M, j3 n8 Q. M* ~& Q00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
! [ |: e# z, o4 V00404CBD 5F pop edi
( a( B3 L1 b9 E. h/ u# @; _; u00404CBE 5E pop esi: N( ~0 L' u/ l" x+ Y7 V
00404CBF 5D pop ebp, L# @1 a! e6 ]* s) |: j6 ^+ s
00404CC0 5B pop ebx, `# s: G+ r3 n- z9 p
00404CC1 83C4 18 add esp,18
' Q8 a' c0 ?4 j& C& u1 T00404CC4 C3 retn7 {5 }& u0 ?1 ~
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]( y% K W4 f: n: Z% S
00404CC8 84C0 test al,al0 S% M* d0 P1 k% I1 I
00404CCA 0F85 1C010000 jnz qsr.00404DEC
) b: |& z* u1 i' E' m" p00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
6 i8 s4 j' o, M" f; ~* C( x6 f00404CD4 E8 87E3FFFF call qsr.004030604 i% y2 q& _! W0 c9 E/ I( g3 e
00404CD9 51 push ecx4 R" ?6 @% G9 t3 }( d/ y/ R1 I0 J1 y
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
# ]5 z" E Q1 O* S9 z# B1 e: _& h00404CE2 8BCC mov ecx,esp
0 w* }! f" A2 j }8 U2 ^: n00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
1 G2 z: w! E S: X00404CE8 56 push esi7 d9 q, g/ {3 `8 }" A2 y
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
, K$ Q, e8 {3 j3 {& l1 |* a% L00404CEE 51 push ecx" H' m$ }' ?) ]) Z# J- U `
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
+ r% { v+ o8 w+ W, [6 B00404CF4 8BCC mov ecx,esp& @- \+ O% a3 N( W* E! b, A# M7 ?8 g& `2 G
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp& d0 v+ K6 G. i/ o. Q6 \% H
00404CFA 57 push edi( ?% p) |4 u* e# i
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
- y$ k: ?" K3 M D: A* _, l00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ U5 F( w" F, M# _
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
0 Y. G+ u" A" ]8 h6 ^. T9 n! `0 J0 J00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
. _* @( |8 l8 I, T6 U( J00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~: z7 l) N. d* x- }" V
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
# g5 k$ a( R8 ^' A2 R00404D12 6A 40 push 40
0 L2 `) [) E( ?1 P/ G00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"* H3 @. x$ a4 D3 M+ @* M
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."/ F o7 y& i: R6 F# N) @
00404D1E 8BCD mov ecx,ebp, ^9 j4 U4 ?# U$ w* i; v
00404D20 E8 50840200 call qsr.0042D175
. o9 L" j( q/ [/ c00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]7 I- O* t" S8 V6 o, v
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-17 }# Y5 \1 u; G/ }
00404D31 E8 5AE3FFFF call qsr.00403090
9 |: [( _: r N8 D1 o00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]" Z3 q4 ?: Q& ~$ _# `6 V& F8 y
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx6 Y' ^" u6 o1 S; p6 u
00404D41 5F pop edi, R, w. j& H$ H& V
00404D42 5E pop esi: E5 l* ]% c% t. O6 q3 ]
00404D43 5D pop ebp
8 I4 E8 V4 j2 k6 d7 Q; g+ T00404D44 5B pop ebx
! j6 R6 m% U j6 t {" _' Y! ^00404D45 83C4 18 add esp,18% h4 ~* r& k( y$ h0 g- ^8 x
00404D48 C3 retn
1 F- @% k+ o6 l+ w, p*********************************************************************************************************************************************************$ `1 _$ j& n% z4 p. g8 Y
跟进00404D09处CALL来到：
3 P+ C/ T9 v) i7 J3 b! U3 @) o004030A0 6A FF push -1 //一路F8下去~~~~
) n& {4 C6 {- P# i; P004030A2 68 C88F4400 push qsr.00448FC8
! }) _1 S M. `/ X8 S4 N004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
. t d6 E1 `- {! I004030AD 50 push eax) D7 J H: m* \3 }( E( u/ N7 {
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp L: f& s% D4 h4 [: t' O
004030B5 83EC 24 sub esp,245 a0 `6 K; k3 d7 u, Q
004030B8 53 push ebx" K( K% L+ B. [
004030B9 55 push ebp- l6 T( S7 c4 E
004030BA 56 push esi
m0 j/ R0 ~4 |" l004030BB 57 push edi
9 u. T$ ^4 T$ ]! @! D004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"+ T$ e7 I4 ]/ y1 I9 K
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
- p1 s9 e& B" h" a5 l004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
; `' B# j) V. `9 M004030CD E8 27C40200 call qsr.0042F4F9
( z3 g- k$ {9 ]4 H004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
; s [) q' b$ ]$ m1 F, G004030D7 894424 2C mov dword ptr ss:[esp+2C],eax+ t! g, h- z3 ^/ p6 Q
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]8 @: p+ S4 e: v! z' V+ w
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
- B3 `* v, A3 x/ o+ g- `004030E4 E8 905A0200 call qsr.00428B79
6 ~: H$ K& O; d1 C+ m( [6 ?- Z. [004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]) @ x f' i, i6 {4 I
004030ED E8 3B5A0200 call qsr.00428B2D
8 I/ l' A# l& Y004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]% g L* B" C% N
004030F6 E8 7E5A0200 call qsr.00428B792 R7 ]$ f+ q- j' w
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]( z1 R6 R; o6 T9 n" F- {% Z" k
004030FF E8 295A0200 call qsr.00428B2D0 h! a# v% H5 v# l$ C! `' k
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
+ D% O$ L% M- R8 P2 n' H00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]7 U b' L6 |! n% |: p c
0040310B 83F8 02 cmp eax,2( Y5 f0 V" X* O9 o2 m* O: e
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
! e. F- k/ e( h$ X' n00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
/ t) f: _8 ^: E8 m" P00403118 837A F8 18 cmp dword ptr ds:[edx-8],186 V: [1 h" ]0 P3 ~& W( H
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
- U9 Z' u! U, S00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]3 S4 l" D9 b9 D, [3 u
00403126 6A 01 push 1
' `- R+ A, l. R! s( a! _4 c! _00403128 50 push eax; ^6 ~5 ]" U4 d& z9 h" ]
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: V8 g* V: s' E: |0040312D E8 C4550200 call qsr.004286F6" ]5 o. N0 _* r
00403132 8B00 mov eax,dword ptr ds:[eax]- k/ q/ A2 m! s9 h8 `! n. [* A
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]6 T0 a& q o- w
00403138 50 push eax
3 e Y4 e- G+ Y7 J" `% C00403139 C64424 40 04 mov byte ptr ss:[esp+40],40 j( c2 a2 Y, d0 C! [# V
0040313E E8 4D560200 call qsr.00428790! R, m8 r! M( A& J! W# V
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) }+ {. f, `; L9 S7 w00403147 8BF0 mov esi,eax
3 h5 n J2 j9 L9 s2 W: T00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3% R4 ]7 Q* f! U) y- Y5 \6 N
0040314E E8 38C30200 call qsr.0042F48B8 v/ D5 o% C* q/ b6 G" l
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
* m% ^ W# O. I/ J00403156 B9 3E000000 mov ecx,3E9 ^7 F. B9 u7 A7 e# y% Y- D. `
0040315B 99 cdq
?3 a. g3 r* d0040315C F7F9 idiv ecx
9 G& j* y( }" g/ b( l0040315E 6A 01 push 1/ U- C- v+ a8 ]9 o9 ^' _% ]
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]' V6 { I) s$ K; X$ T$ g
00403164 8BF2 mov esi,edx
: T1 d1 h0 e7 y00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]" u# k. j, e) K' |
0040316A 52 push edx
, ^6 z3 F0 \8 d" F0040316B E8 0A550200 call qsr.0042867A) Y( r+ S" _3 Y0 J" a) [& J. N1 Q
00403170 8B00 mov eax,dword ptr ds:[eax]
+ l, g( U2 a+ P7 c/ @00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ P/ ?/ x6 N$ }& j+ W3 g
00403176 50 push eax
' J- x% F2 G. P, d4 Y* J00403177 C64424 40 05 mov byte ptr ss:[esp+40],5* f7 D2 }6 [2 A
0040317C E8 0F560200 call qsr.00428790
N/ J; q/ s8 I1 N8 p k: e00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
$ f" S$ Z( M1 r" P- U00403185 8BF8 mov edi,eax
) w. _ d, p8 a, I' ]00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
7 B# l; T' R& V2 |# r. @4 l% T5 v A0040318C E8 FAC20200 call qsr.0042F48B
- e) j! V3 U T" [* T/ | H2 x) Y( M00403191 8D47 0A lea eax,dword ptr ds:[edi+A]( ? c) z9 @9 X; R/ e: x6 w2 L+ t
00403194 B9 3E000000 mov ecx,3E
. J4 l7 K7 D5 Z0 ]1 g00403199 99 cdq
0 H* \% g. K X: n% s# x: ]3 t0040319A F7F9 idiv ecx
+ l9 p [ }" `0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]. h; \- [, J& Z5 H' {- B4 `
004031A1 894424 28 mov dword ptr ss:[esp+28],eax! z2 B: Q8 s, `, [ E* G& P
004031A5 8BCA mov ecx,edx- ^! k( T$ B5 G) i
004031A7 894424 24 mov dword ptr ss:[esp+24],eax9 y1 T' S7 M/ j9 Y
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax) g" {' P# F) S- [
004031AF 894424 18 mov dword ptr ss:[esp+18],eax2 g2 [, L0 X. K3 J& A2 D! Q# G) j; L
004031B3 894424 14 mov dword ptr ss:[esp+14],eax; ?7 Y% I2 p* ?- b
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
- s2 ]. f( m( s, U& ~004031BB 8BC1 mov eax,ecx
: U6 }( r1 Z) ]004031BD BF 0A000000 mov edi,0A
% W: x* U4 a" W9 l" E! a9 X004031C2 99 cdq
/ Q5 G+ I: }6 ]) m004031C3 F7FF idiv edi
# x- i3 F: [7 E) s5 Z004031C5 8BC1 mov eax,ecx
, n$ N* ? b6 E* @- C0 c004031C7 B3 0B mov bl,0B3 S: y" B8 }( W+ b$ g3 i& v
004031C9 0FAFC1 imul eax,ecx
2 }. n! y: E" H- R+ o* `004031CC 8BCF mov ecx,edi
/ ~$ m8 X9 Y1 D004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
" l/ K/ A4 C1 z9 r2 }- w5 f, O& n; `004031D2 52 push edx
& m$ |( v; [/ t/ x$ b( G1 z. h004031D3 99 cdq
5 |) L. J" a5 T. s( g8 y004031D4 F7F9 idiv ecx$ d. E0 Y# e! \6 q8 a2 |6 N; i( ]' @
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8] H. D& E6 g- i: l
004031DD 2BC6 sub eax,esi5 Z3 s; X% M) K
004031DF 52 push edx
2 p9 r8 w% ^# s- L- m$ N004031E0 99 cdq/ C# K' m' r7 E( I- t, E0 g; G
004031E1 F7F9 idiv ecx- t8 Q8 U c* W$ V8 P; n
004031E3 8BC6 mov eax,esi
$ r5 C1 F4 p& \/ ~. }( _004031E5 52 push edx, J! N, H9 n: n0 j& M$ [
004031E6 99 cdq
2 r, u, L9 M2 s1 y( ~& }7 k0 F004031E7 F7F9 idiv ecx( O% R( N/ f& c+ I) w
004031E9 52 push edx
3 E- R% L9 W* ]3 {6 K; q: ?004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
Q' T" }% {% X; B004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"5 h# |& }1 G; F; a$ j
004031F3 52 push edx6 F6 d6 w/ B, u& E* U
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
# L6 I0 P# {0 L) q4 x004031F9 83C4 18 add esp,18 A$ I! T8 U+ _: d% K
004031FC 6A 04 push 4
7 Q/ X: n6 D/ O6 B1 U4 X2 j004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
) X' \/ O0 H- o. m00403202 6A 00 push 0
& B- |5 O9 H4 P7 S# R5 I. e00403204 50 push eax
0 W5 F& @* n L( d00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( W* Q+ R7 ]2 n8 O8 W: q
00403209 E8 D6530200 call qsr.004285E4& d2 o" j, O' ^5 ~. d. Y: l9 `
0040320E 50 push eax9 Q1 G7 C8 I1 ^2 ~# D! I G E
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]8 c0 M6 w \0 i1 v
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C& u8 M( n1 A @' j" a8 j) ]9 G
00403218 E8 A7C30200 call qsr.0042F5C4
2 F# _' u& |, P/ ]. j* }! U0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. ]& E5 f1 y7 t, J9 K1 J" I00403221 885C24 3C mov byte ptr ss:[esp+3C],bl* L: e- M! X: U6 } }# z
00403225 E8 61C20200 call qsr.0042F48B# R; m6 D0 w+ U$ P
0040322A 6A 04 push 4
3 Z) j- ^2 w6 Q( W: A* m0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]6 R. `; n- f, D( `$ R% C+ m
00403230 6A 05 push 5; i+ Z7 ]! P; j. {2 A e1 P4 d( [
00403232 51 push ecx
( u- X5 g$ h) T+ @8 j00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: r. h( | N% ]7 J
00403237 E8 A8530200 call qsr.004285E4" |/ P' R9 _1 f* H( T4 g- h. p2 b
0040323C 50 push eax% Q% q5 d# M: t( i3 F
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 l7 x/ ^$ v3 o4 ?1 T7 E |
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
2 z. `9 [" q5 ?7 y00403246 E8 79C30200 call qsr.0042F5C4
: @9 ~6 ~% p( {$ Z$ ~" g; {) i0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 z- y, {$ h5 R# Q* s# q0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
5 C8 a8 H1 h: B9 k6 q9 g00403253 E8 33C20200 call qsr.0042F48B2 |" ]) H/ m3 {7 N4 A
00403258 6A 04 push 4+ Z# l+ l" G: W5 K+ s7 K
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]$ N/ k3 y$ D, Z! \ L t" ~' C
0040325E 57 push edi
+ I8 c/ a0 O$ w0040325F 52 push edx+ c$ o9 X7 V; K9 Y
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]& o X' G3 g7 D
00403264 E8 7B530200 call qsr.004285E4( w E7 k: }, l8 c* W5 _' t
00403269 50 push eax
! h0 A3 m( G% q* a0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 r. S+ y# v8 G: h7 i0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
9 ^0 z& `: ^' P$ P/ d! p! j00403273 E8 4CC30200 call qsr.0042F5C4+ G" E# t$ U2 v! {4 }
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]! k# u, ~1 G/ Y0 n5 K# O
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
! U$ M9 A# K6 d5 c/ ?; D00403280 E8 06C20200 call qsr.0042F48B
- ?5 F8 e: }. v# [* d }00403285 6A 04 push 4$ z8 N) O* H# C4 W2 ]3 a
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
, @ M# H4 O# i! Q4 \) H$ H) j0040328B 6A 0F push 0F+ x% U4 ?5 P2 O; t* N+ |$ j
0040328D 50 push eax
" C. s& F* m! ]7 {/ D7 r7 \' E& s" E5 S0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
# @& u% @) x6 G K; b$ e00403292 E8 4D530200 call qsr.004285E4
: A" d9 q! M! }2 S6 v00403297 50 push eax1 K+ ]2 {$ e! S3 |/ G
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# K( E) i1 A8 ^ w2 X8 V9 U' \& J
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F S: ~" L6 O3 E+ X" u! F' |
004032A1 E8 1EC30200 call qsr.0042F5C4
# ~3 P" J( C' V, {004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 V8 I: a( O! ]$ a: D, V$ {
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl7 v: r% e: R; }$ f) Z k
004032AE E8 D8C10200 call qsr.0042F48B
- N5 r _- z$ Q% N+ q2 I004032B3 6A 04 push 4 Q( b# N; |( P- A6 r
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
! U6 F* m. I( z8 S5 h004032B9 6A 14 push 14
+ ^+ J; V6 F! p1 f9 m! F004032BB 51 push ecx
; D8 P& }) K) m3 w& N004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 [9 @8 q* P. F* S" _! [. W
004032C0 E8 1F530200 call qsr.004285E49 b: N5 H) h, p+ u
004032C5 50 push eax
" ]) [/ {1 i- C) }& }1 O004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]$ n/ Y/ @+ x( H7 d* J+ H
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
# b2 P4 z7 _' [' b- Z004032CF E8 F0C20200 call qsr.0042F5C4
) i6 n: x" ?5 ]. _$ q004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 i4 v' W" y) u6 w. N$ v
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
; s8 Y! ?& \# }$ |004032DC E8 AAC10200 call qsr.0042F48B% M2 v& y5 I O+ g% W
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
! E# G9 H9 J: B; U004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
* T& _" o- C# n6 N2 s004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL: D. o8 e6 b8 a0 }6 y7 L- S! o
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
; _& }) m/ p' z3 F& T004032ED 8ACA mov cl,dl ; DL送CL& [, h* n. F6 m! `4 H+ q
004032EF 3AD3 cmp dl,bl ; DL和BL比较
# d/ G5 p1 r2 d2 K004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）6 k! m d6 E" x% c# S, e+ l' c/ C# ?
004032F3 84C9 test cl,cl- S9 `3 b h! @( _# l8 M, R
004032F5 74 16 je short qsr.0040330D, K( g+ W, M- W1 g8 Y
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL3 u, c! m, ^ W8 y0 _
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
- F- w3 C" }/ B& |7 K- W$ ~$ B8 Q004032FD 8ACA mov cl,dl8 E' h4 F5 E, }* V
004032FF 3AD3 cmp dl,bl ; DL和BL比较; R! _% ~" L/ d! n+ s* U7 a
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
* e3 k8 B; }; [* F P; l00403303 83C0 02 add eax,2 ; EAX加2
& k x9 G2 d3 ?3 N& `00403306 83C6 02 add esi,2 ; ESI加2( @ w* ]: o; a" W2 w
00403309 84C9 test cl,cl
7 q* X" P+ a; G) S- z& @0040330B ^ 75 DC jnz short qsr.004032E9
5 \2 m% `6 C" d! g9 O' Q" D0040330D 33C0 xor eax,eax. d/ Z8 p4 v4 D* F4 q
0040330F EB 05 jmp short qsr.004033164 F& I/ [+ @- [1 {: @" J$ r; J
00403311 1BC0 sbb eax,eax
' K6 [, R! J* Z00403313 83D8 FF sbb eax,-1: S4 B% S( k3 z, M) P
00403316 85C0 test eax,eax. Y8 m: h" x2 o2 F
00403318 74 0E je short qsr.00403328
% _, d$ K/ P! H! y0 q0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
* @+ G3 R7 v, x$ z, ~6 ~0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]# ?+ S1 N B, @" a* ?9 j5 t
00403323 E9 F0000000 jmp qsr.00403418$ L4 ~' }6 s8 S: Q
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
) F9 C* W) r1 X# s0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ y7 J* |- d/ r1 \6 L( l4 A; e00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]! B3 p2 l4 T. O: L$ W; a# [" w( F
00403333 50 push eax- G4 |. `6 j# P) C) G( I6 m1 o
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
* f$ E/ R8 {' I* H( I* Z# j00403339 50 push eax
! I! b5 Q) o4 `- p0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX7 a# H; }' [* x4 A
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
6 K \4 t5 o* o+ k5 u+ n0 m00403343 83C4 04 add esp,4
' E6 ^: Q1 c3 {7 x4 d00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
$ ?* C& }5 e8 ?00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]8 H* y' s+ K+ Q) s6 z. H
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
( e; x# X8 v5 n0040334F 50 push eax
8 h' @6 p a' u00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
( N5 i3 A0 ^4 y6 ]: x00403355 50 push eax
' X0 b# P3 H# @3 P% O! }00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX C& L' \# D8 R* B
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
( _& v& |- R- U' E5 c4 _- g0040335F 83C4 04 add esp,4
0 @1 r+ a( J: _, y4 U. G00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI3 N1 r1 h* t3 m* e6 M/ F
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
; N8 i$ @8 ], D+ b9 B$ I00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
1 }/ ], {$ p. p) @6 j' R& m0040336B 50 push eax
% `& k% B% F6 L' a# W0 `0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX1 G3 A" q2 `% _9 p% ?
00403371 50 push eax
6 I( O& v5 e: ~* e00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
1 n5 S' o' l% F# j2 {00403377 8BD8 mov ebx,eax ; EAX送EBX
! E) ?' t- V4 B00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
" t p6 H q2 H0040337D 83C4 04 add esp,4
) _! q% q$ _5 L, L1 `00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
$ s* b4 F% h" W" z# T$ r6 e8 z0 ?00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]( Q0 q( r9 J4 P# b0 ^7 P- E/ U; H
00403387 50 push eax' T3 B! b V- c$ N( q9 R" Z3 a& f- l
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX3 h/ o, U' x1 ^
0040338D 50 push eax7 J0 _) ]: a; R- k8 ], t
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
( D# M. S% m* f: x' a$ {: U00403393 83C4 04 add esp,46 @' ~/ o T) i. u# }. b
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]" K1 a- ?+ @5 i4 p- U9 x, y4 J
0040339A 8BE8 mov ebp,eax ; EAX送EBP o+ P2 `- H7 P7 h
0040339C 6A FF push -1
* g) p% m8 m: }# ~0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
R$ \# T; D% M. A004033A3 6A FF push -1. Y/ r9 r) W/ N
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
! [* S6 g+ H1 Q9 k4 t) g9 L004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
( w' J. q( F) a, m/ T: V004033AE 6A FF push -1
( V" T7 O. v: N004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX4 D) d6 R$ v& t. b+ O( X
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX/ x5 h) B3 `! v* b5 t
004033B9 6A FF push -14 B" V. o2 h( r9 g
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX; @) h& @& r0 l; S
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX. y( ?6 b& A" W; ]' U5 v
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX4 e2 d" f; W) |
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
5 A: A z3 M- F004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX ^" O$ m1 w+ A4 @: t
004033D7 D1E0 shl eax,1 ; EAX左移1位3 t' y: ^2 a B3 X" u
004033D9 99 cdq ; EAX扩展
0 u9 M; v& v! s: J. v! X* H* E004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中6 ]* R4 ]: o) ?5 Y
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
* _% s6 T* p$ W5 ^5 K! y004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
5 {, W) w" _& F' z# r# ^; j+ o004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
" ]5 S9 f+ l- q- f# d004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
5 o8 E3 {* ?# M; m2 P' I004033E9 EB 2D jmp short qsr.00403418' Y" F6 n F3 C3 y# B- T$ J y
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
1 I( R& {; j2 T004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
5 q4 t; y$ D0 x; Z8 Q" Q# I004033F7 99 cdq ; EBX扩展% K. s" l1 Z# A- h# z- [0 z1 t
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
: |& N$ D# `" Q004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX* m& Y4 m, R/ m8 d( V7 l
004033FF 2BC2 sub eax,edx ; EAX减去EDX
' o5 h) a M4 R$ ?00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
3 I! y0 O' F+ e9 W) X8 T0 e1 m$ P00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX O5 D! d$ r: X7 e8 B& s# X1 n
00403409 99 cdq: G9 U2 ^ [) `1 r- S2 P3 k/ J
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
0 D/ J' V" w0 I0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
9 D% c3 {4 Q& N% O$ V00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
' p$ g: a, {/ d2 D- M/ M3 C: y9 L00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）4 }& b% I8 _; ] x! }% i9 M
00403418 E8 6EC00200 call qsr.0042F48B ; 7 |0 H; X$ |% V; u& Z1 M
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& A; }9 z4 m! F00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
) g+ q3 f# ]( [) R00403426 E8 60C00200 call qsr.0042F48B8 E- W* r# f# d# _5 l
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
' F; x6 O W9 ?0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
! C1 p& F3 Y1 W00403434 E8 52C00200 call qsr.0042F48B
+ S& }( N/ B1 H# D$ E5 o" C5 d00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]/ |* G- |' y) Z/ d4 O* s2 s" }% K
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
$ G$ n3 H1 i, Q1 a) r; G8 o9 y00403442 E8 44C00200 call qsr.0042F48B0 I9 f: r9 U6 e, m. L4 x$ Q4 b* h
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]: f- I! h. B( f/ b+ m
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
9 L: \ B" o. f3 t: T) F4 q0 W00403450 E8 36C00200 call qsr.0042F48B2 X. }; [& f" J, z
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
6 }* L L4 @$ Y00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
; K; w8 R) B X9 ^( P7 E7 d4 I( x0040345E E8 28C00200 call qsr.0042F48B5 A. n# k( T4 x
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]' W9 }5 N1 c1 S6 }
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2) Q: Z+ P Q3 H
0040346C E8 1AC00200 call qsr.0042F48B
3 E( j' o8 p8 l) T6 H1 h00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
( v: D( l# I# {4 X X00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
- Z$ i# q; B5 u( W0040347A E8 0CC00200 call qsr.0042F48B: }7 Y' K |7 E% p# l
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44] ?; F5 ^! {9 Z. J; q) j" C! k
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0/ p! K4 t7 }, p, Z4 }9 h
00403488 E8 FEBF0200 call qsr.0042F48B" O; L8 F: M3 S7 E$ _0 v6 \
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" K) p( C1 C: `# E
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
; j0 s/ y4 q4 Y# M6 X: G( f00403499 E8 EDBF0200 call qsr.0042F48B
5 z: ?( `& E9 {. u8 V7 M/ J0040349E 32C0 xor al,al ; AL清0& y7 U7 u/ w6 G4 X2 X8 Y+ U
004034A0 E9 88000000 jmp qsr.0040352D
% h2 C$ k9 z4 n0 ]004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~* R( q0 ? o+ F3 Y
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]" d, t6 d3 @2 S6 t
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],94 M5 P% C- ]9 W7 d, D7 {) E
004034B3 E8 D3BF0200 call qsr.0042F48B
+ [6 A3 y; [: U4 K% F- Y5 ]004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
$ @4 E9 V9 g! H) K004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8* n P) V+ ?3 @ n& W9 d
004034C1 E8 C5BF0200 call qsr.0042F48B
- {7 ~' @0 }( w$ g* K: V4 W1 {; Z004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 v* I8 X! W( u004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
! x8 d5 i/ ?; Y- z004034CF E8 B7BF0200 call qsr.0042F48B3 n$ i7 _! {* w
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24] k. h2 @+ y/ ]& ?4 h; q: e
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
% V5 ?/ ]$ j' B) B( Y8 Q0 \004034DD E8 A9BF0200 call qsr.0042F48B
& ?7 w' c% X8 Y; }004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28] _. j- O+ o5 B$ h# ]1 k
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3) v& _, D& ~$ l; I" B& Q4 d G
004034EB E8 9BBF0200 call qsr.0042F48B
) n; e6 h% h! X004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]( f/ r6 m. q2 S5 {3 A
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
1 i! f( P% j& q004034F9 E8 8DBF0200 call qsr.0042F48B
9 q6 E9 l& S( E; p004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]4 o6 n# {% C- \
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
1 |9 o+ h/ F9 b00403507 E8 7FBF0200 call qsr.0042F48B9 w- O7 ~$ A2 _6 v# r% D& t
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: P0 M& B6 K, e I6 |' T7 q) h2 H( j
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0# }/ a; V/ M6 u1 o; c1 l" y% y$ M' t
00403515 E8 71BF0200 call qsr.0042F48B
) U% s, Y* z J5 I0 y G0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 q' c& Y3 U. M! u, A
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1( g+ A% J: B; d; p5 T
00403526 E8 60BF0200 call qsr.0042F48B# b* g) G' Z7 @. ~6 G5 g
0040352B B0 01 mov al,13 S+ X7 @+ t2 \* Q
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]$ }( _) S$ i' j: M" ]3 |' P6 c
00403531 5F pop edi
3 j6 Z& ^$ T, e. Z* f3 E. ?6 ^/ F: N: x00403532 5E pop esi, D! Y4 I+ U$ M1 F
00403533 5D pop ebp
1 k6 u- |: a- `- [4 y* l00403534 5B pop ebx# ]! s4 _8 J) i S( H
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx' w& ]0 Z9 g' |9 r
0040353C 83C4 30 add esp,309 x ?3 I, U7 ?3 V. @* D3 L
0040353F C2 0800 retn 8
+ g( G" w" w' x$ Y--------------------------------------------------------------------------------/ I. N2 E+ x& t
【破解总结】& ^ i. T- l' H2 c1 Z# m; J
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^& ?% }5 n4 o+ E
用户名：yijun
- F( E, {- U, \$ L& {1 Q+ R注册码：4893*7777*3726*7777*0529( |- h7 b! t: M8 Z5 D
--------------------------------------------------------------------------------5 B) h) z v) }: ?$ R
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡