|
|
|
【原创】破解Quick Screen Recorder
0 l+ I% q$ g: |+ A9 O3 r. Z" j【破解作者】 yijun
3 F# z6 R% D7 C9 g: H" Z5 B【作者邮箱】 [email protected]
; }* q) N" p3 \【使用工具】 OD,PEID* L/ \; n# k6 U# f
【破解平台】 WinXP
0 }$ w! q6 c0 C' Q$ x- a4 K【软件名称】 Quick Screen Recorder
# h, B/ O/ B: b. {1 S" @0 {【下载地址】 天空
; h2 F2 l- v( D8 y, a% _3 Z B. y【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 3 \( n3 y5 Q# _% F& a( B8 v
【软件大小】 540K
) i( j/ D: p% _2 l- W3 t【加壳方式】 无
2 F8 w& @8 O: B2 Z ?【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
; p" I7 Q$ F$ Q% g: V3 h0 B--------------------------------------------------------------------------------
8 W/ Y$ I7 v2 O: ~: T【破解内容】
4 c2 [ o, f. ^' n) X, U PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：& o( W# R% S$ F2 I" g `: p) @8 i
00404C69 55 push ebp //在此下断
: K I8 t. g9 @8 S4 E00404C6A 56 push esi! R" H3 [9 r6 c+ b
00404C6B 57 push edi
$ l- ]) a& U3 k' ~: t00404C6C 8BE9 mov ebp,ecx) h1 A0 y2 t9 H6 D, E6 Q. F. y
00404C6E 6A 01 push 1+ A; U& q& C3 `% z- B
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名, V2 L; r/ f8 C$ d
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]% R! ^7 Z/ r/ \' ]: ~# q1 g
00404C78 8BCF mov ecx,edi
1 G K9 d" }0 |8 w2 \00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
" P" q8 A* R# p( u00404C7F 8BCF mov ecx,edi
6 n3 ], p% h( U00404C81 E8 A73E0200 call qsr.00428B2D! i4 i9 v# y: t9 h9 D5 h' O
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]; p* o0 L" s+ e9 [9 k: q8 c
00404C89 8BCE mov ecx,esi
$ B3 Y4 T9 z P8 J' V00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
) t" C" A! @9 F; ^0 P- W00404C90 8BCE mov ecx,esi5 b0 K" x; d( p1 I- T7 |2 K
00404C92 E8 963E0200 call qsr.00428B2D
8 K0 K# d" S1 d00404C97 8B06 mov eax,dword ptr ds:[esi]
; _4 N5 p, n. e- D# c00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
& V0 V- ~1 {! Y1 V7 H7 z00404C9D 7D 26 jge short qsr.00404CC5! T1 A% F& m$ ?% I
00404C9F 6A 40 push 40$ u" C' U7 O! J. {' y+ D+ K
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder": \2 [0 R, h8 x. F! L, y# y( q
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
% {# h, u6 b3 a8 a9 t7 K6 V# S4 w00404CAB 8BCD mov ecx,ebp
" p3 o: u9 U6 l2 r- w, E% `00404CAD E8 C3840200 call qsr.0042D175! m/ P! a# ?# X2 g. y: h i
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]% N, T* p) j/ n _8 c$ p6 B- @
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
- A$ i& `/ q& p00404CBD 5F pop edi% A/ J0 z- d8 L
00404CBE 5E pop esi) |2 [% l+ R; c1 H; s
00404CBF 5D pop ebp
0 w, w( J3 _! A2 ~& E00404CC0 5B pop ebx1 M( u+ ]6 @5 p/ r8 E$ l% w# y
00404CC1 83C4 18 add esp,18
2 P2 x* w4 N- l00404CC4 C3 retn
) m* p9 m: t& j( n1 L8 @( U00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
+ u8 K9 g: `" S$ } n# H1 c00404CC8 84C0 test al,al3 P. j5 H$ u L N$ Z% y
00404CCA 0F85 1C010000 jnz qsr.00404DEC
, c/ W+ r" a0 h* m& n00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 V" |& h ]. ]8 t: g7 C
00404CD4 E8 87E3FFFF call qsr.004030602 S. [! ?$ a( _! Z
00404CD9 51 push ecx
$ u4 M" I6 r- f. C& n00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0. a. m9 U! \" g g% D* v: O( ]; V
00404CE2 8BCC mov ecx,esp6 N' E6 q- Z% L
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
% q. t q7 o. g4 \ u+ f& O$ H2 S00404CE8 56 push esi
+ i5 q: k5 D9 Q Y00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
7 [# {9 K, V% j00404CEE 51 push ecx' K, ~9 s+ P6 M
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],12 N9 h* X6 r$ L) M- x
00404CF4 8BCC mov ecx,esp
: k, \: q: j4 ]9 z00404CF6 896424 20 mov dword ptr ss:[esp+20],esp- T" d; \# f7 O7 s& A; A, w
00404CFA 57 push edi
. U1 U9 K5 C5 a) x0 g! j% N00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是08 n6 Z! g/ e2 f% }1 |
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
0 A" Z' i& w: I' ?2 r1 u- L/ _00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
# _4 O5 t, k' r- d! u" n0 W00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~+ D" W" s6 x. h
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~( k( c9 h; k- E; @0 E3 b/ q( k
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~+ e* q2 `% \8 u, d& C: v- d
00404D12 6A 40 push 40
: h: X4 P) ?9 p9 V4 y: U& V& H00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"0 C# n2 j5 I9 ]3 c* I9 Y
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."# S" [8 n# a+ x* L) b* Z5 R
00404D1E 8BCD mov ecx,ebp0 I" I8 j' f% N M3 n l( o
00404D20 E8 50840200 call qsr.0042D175- m- g) \( S+ B( ~$ p3 ?
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]9 a! n7 `$ J5 Q" |" i9 W$ S: u: p+ f
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1& x: t6 G/ o/ w6 }! e
00404D31 E8 5AE3FFFF call qsr.00403090
) c" O9 z7 E% _& F- Z8 a7 _0 G* \00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]& W1 A4 A% \' E
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx$ ^; Y) K+ `1 }# c
00404D41 5F pop edi
+ C7 k+ y2 x u* ?3 T7 _7 I$ N0 H00404D42 5E pop esi& _% ], H1 [, [
00404D43 5D pop ebp
* _& S' `/ `0 I! B$ ]9 ]% l- O00404D44 5B pop ebx) Y/ F+ B' u9 `/ g1 e
00404D45 83C4 18 add esp,18
, W3 x. m g' J$ H% N* L. f: ?00404D48 C3 retn
, N4 H" v# s' s*********************************************************************************************************************************************************+ l) ^7 L4 E' G' W) }* |+ E
跟进00404D09处CALL来到：
! {) z6 \0 l, q6 g004030A0 6A FF push -1 //一路F8下去~~~~
! i! o; h6 X1 v004030A2 68 C88F4400 push qsr.00448FC8* _$ Y& |1 x6 G0 P" l" v/ h
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
' Z3 E; d: d) E5 D7 X004030AD 50 push eax
; n$ x9 G4 K* ?$ A9 Y. f, |004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
; B: z; p2 F2 N# x004030B5 83EC 24 sub esp,24 a$ A9 T" n4 H$ K6 f! t1 M
004030B8 53 push ebx
1 u- | x- f+ H8 Z2 o, L1 [004030B9 55 push ebp+ Q- ~' Q* S$ h' s t
004030BA 56 push esi% b* `% @! P# ^! D" f
004030BB 57 push edi
6 I* P6 o0 }3 m+ p3 C004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890". W$ X- T o' C
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
" N# K- h; u/ N4 |9 ]& j004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
0 O0 r) a. Y4 @1 f$ G7 H( F004030CD E8 27C40200 call qsr.0042F4F9; d/ g- k# h' x v
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]) F, y/ E2 o& y. {" ?# A' D: B! K
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax8 h4 ?; d% z# T) r1 V# z! x- t. a
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]+ ?4 h- v8 {% W5 W
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],36 I& v% l1 d. u" b# r4 A2 r! \
004030E4 E8 905A0200 call qsr.00428B79
+ N2 Z4 o: u$ d) k1 X004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
5 v' H( v+ W! ~004030ED E8 3B5A0200 call qsr.00428B2D, |) n* t* e5 Z7 t
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# v$ ~. m- e( F* `- X) t004030F6 E8 7E5A0200 call qsr.00428B79
: U9 f+ r8 B- f* n( u' B( d004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 _1 \% k9 h y; U! {004030FF E8 295A0200 call qsr.00428B2D
! f Y, \+ C( A3 d1 I00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]2 Q( K# @5 ] ]+ I
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]2 k( P! O( F/ h: V/ m
0040310B 83F8 02 cmp eax,2
, j9 n& D, b2 X p A0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳) a( h. B w0 s0 J* t, M1 i+ Q
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]+ a6 h" s6 x8 K* p7 ]) W
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18/ g& ~0 U0 |; v% ^$ S
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
" F* Y6 r, ]2 ]3 {00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
/ d& z" Q% \$ T/ u+ ~& }00403126 6A 01 push 14 o: ~. @1 C8 s6 t' U
00403128 50 push eax" e+ f: w G+ [& t6 U" h# N. D* D
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" ]4 Z% I) A2 C
0040312D E8 C4550200 call qsr.004286F6
' M/ N1 Z2 h% s$ l00403132 8B00 mov eax,dword ptr ds:[eax]) _% I+ O% I3 P: @+ U8 p) u
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 @* ^' \2 g7 l9 d) _00403138 50 push eax1 H. G0 u; R7 i+ W$ Y# f
00403139 C64424 40 04 mov byte ptr ss:[esp+40],43 X) f% Q2 d; j A6 b& c/ o
0040313E E8 4D560200 call qsr.00428790) O( o- n& i0 {! s. g. U+ [
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]9 q" q/ q( y; `( c2 H* D6 W9 n
00403147 8BF0 mov esi,eax8 M3 B. `- d$ a2 }
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
. _4 L5 G& b! w4 E6 i4 ]0040314E E8 38C30200 call qsr.0042F48B
: c* S: R' u M1 z00403153 8D46 0A lea eax,dword ptr ds:[esi+A]2 ?' f) U" N7 @& @# a
00403156 B9 3E000000 mov ecx,3E9 g/ ?( Y7 k6 w1 y g
0040315B 99 cdq
' t& t M0 N7 K5 Y, W4 F0040315C F7F9 idiv ecx
* z5 n3 N% ^& k4 F9 s, p8 g0040315E 6A 01 push 11 g o( {) P7 N& z8 F6 t8 h- Y8 [
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C] m. O. _) F6 i! ^' v
00403164 8BF2 mov esi,edx
' r& n; U- ?$ _: U! A00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
& Z8 s# C2 ?. K& Y4 u- T" w: z& y2 ?0040316A 52 push edx
8 j/ A6 K% m H9 _0 S X. Z, `* ?! Y0040316B E8 0A550200 call qsr.0042867A
: _, s) q' U C00403170 8B00 mov eax,dword ptr ds:[eax]( e% L3 H1 n) m; w
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 [5 w. X/ L7 u8 A, n5 L- f" Q- G00403176 50 push eax+ B) a4 r8 {/ F8 |
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
! M( u5 A/ r, t0040317C E8 0F560200 call qsr.004287902 X9 D7 T1 c4 b) @5 s6 f& }
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 p; C8 _5 {6 \1 o5 `1 M
00403185 8BF8 mov edi,eax q) P2 X" Q# g* W$ V
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
, u2 r: \( D* Y: \' [- [& S' ]8 J0040318C E8 FAC20200 call qsr.0042F48B
# g9 R& _( e# Z7 c! B1 I00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
- h' B @, ?0 ], j00403194 B9 3E000000 mov ecx,3E% L' V& {& G i1 M4 a/ d
00403199 99 cdq
& \4 R+ S7 I7 O$ j' z0040319A F7F9 idiv ecx
* B9 E7 V5 \! i% ?' I: {0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
' z4 [; k* A' |- i004031A1 894424 28 mov dword ptr ss:[esp+28],eax$ E9 j3 M A1 A2 D- m
004031A5 8BCA mov ecx,edx
* o" u# T n3 J& N: D% `004031A7 894424 24 mov dword ptr ss:[esp+24],eax5 [# E0 S+ s+ P7 |# ]; |+ C
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
/ u J/ x% A: {; d0 ]004031AF 894424 18 mov dword ptr ss:[esp+18],eax( g0 f! Q2 q0 ]% D
004031B3 894424 14 mov dword ptr ss:[esp+14],eax% W5 A5 D1 E: G# _6 j! Z! x, n) ^) A
004031B7 894424 10 mov dword ptr ss:[esp+10],eax) b* s) V2 {) p* B* X
004031BB 8BC1 mov eax,ecx
" k4 u7 t8 k. [8 [3 w3 `# t004031BD BF 0A000000 mov edi,0A
2 B$ u2 N& \5 k% S$ T8 H004031C2 99 cdq* x( F7 A: i4 c8 x& }; {
004031C3 F7FF idiv edi! G* Z0 B( p0 m8 {' d/ H. I
004031C5 8BC1 mov eax,ecx! g+ Z" H/ S$ b0 ? r
004031C7 B3 0B mov bl,0B% o/ X, o! q# \7 y9 z6 ]
004031C9 0FAFC1 imul eax,ecx9 g0 E9 p7 w: {2 n' r4 _
004031CC 8BCF mov ecx,edi/ M7 K9 V9 g% x9 T* C0 G
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
. n J3 c& F8 O' @5 r' P& C004031D2 52 push edx
5 `& X1 o5 Y7 J+ I. F. x& t& ?7 a004031D3 99 cdq
! E) B( N) L; A0 A0 A7 C9 L004031D4 F7F9 idiv ecx. [( c/ f* v: e: h1 s
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
# a. Z6 O M7 k* ?+ V7 C004031DD 2BC6 sub eax,esi+ w. ~5 t, h- |6 }* ^# q
004031DF 52 push edx3 `6 H, H. b8 _/ [8 N; a+ H1 D
004031E0 99 cdq$ `3 l; f: z8 A* J- D
004031E1 F7F9 idiv ecx
$ U7 \0 d% N5 w. }004031E3 8BC6 mov eax,esi
$ I W# F3 }' b004031E5 52 push edx% y. i; U, i! s& ?+ J
004031E6 99 cdq3 Y! V5 o5 ]- m, }+ O% y
004031E7 F7F9 idiv ecx
+ O4 X( A& m, e u; t( B004031E9 52 push edx7 J8 v" r; W; a c
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
2 ]# J' {: k$ N$ f6 n9 W004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"+ j% p+ t0 U6 s
004031F3 52 push edx6 |# m! j" {" l, E1 i6 |* m* ^/ ~
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893& U9 I. z0 `+ c& ? w
004031F9 83C4 18 add esp,18
7 Q6 m4 N: _+ y' f, z+ V# h7 a004031FC 6A 04 push 4* d, N2 N8 @+ }- h
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]( A, o7 d! Z- ]
00403202 6A 00 push 06 G! B) J# O$ N
00403204 50 push eax
! f1 U2 m9 I* Z& i j4 j00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]$ P6 R' Q: e7 _$ S+ [
00403209 E8 D6530200 call qsr.004285E47 v r) ]9 B- j2 a B$ m# q2 r$ J; [
0040320E 50 push eax
+ U4 `) k$ h" @ q0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]6 @* B; B/ r& o" k$ H8 Z9 e( O
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
0 {+ n, T. F% l# W1 f00403218 E8 A7C30200 call qsr.0042F5C4# a2 F6 t3 k; y
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]9 W6 r9 O; y+ D5 Y; S0 S) l/ c) i
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
. n( m5 C8 j9 {: A00403225 E8 61C20200 call qsr.0042F48B" W2 `1 {9 N5 L$ u# Y/ ?+ f2 X) s
0040322A 6A 04 push 4& d' ^% _7 u$ p6 |4 A
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]7 ~( j- {1 I- ~. \0 G
00403230 6A 05 push 5
( [/ z1 Z; P- Y$ ]' M00403232 51 push ecx$ f1 Y/ ]8 h/ I
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
6 @1 w7 N' F- z2 c00403237 E8 A8530200 call qsr.004285E4
1 T4 S$ N* O* a4 P: j6 j0040323C 50 push eax* ], s# ]2 W4 M1 z3 t1 W
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 S3 `& W1 ?" R @( `00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
, U* W! d* ]& m" Y00403246 E8 79C30200 call qsr.0042F5C4
5 n" c3 s. K1 P g0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30] w4 b1 z: R9 x! n5 k1 j
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
- p6 W" C. B- Z% y% q00403253 E8 33C20200 call qsr.0042F48B
4 _* e. B# _" G& H1 ~00403258 6A 04 push 4( b7 P" r; u; L) \/ \0 c$ U
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
& L: N; L) E" n% b% x# z) x0040325E 57 push edi" ?& x# J6 T6 w' j. r; ?
0040325F 52 push edx
1 J0 m, e8 x, S* B3 I5 `: S00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 ~9 |) W9 B! o8 u( H ~00403264 E8 7B530200 call qsr.004285E44 ]3 L) u0 ?" o) |
00403269 50 push eax9 v; w0 C4 K5 M& B
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]& \$ |4 J; J- Y0 t4 Y: N
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
0 S0 A* F! Y; ]( E00403273 E8 4CC30200 call qsr.0042F5C4
" j' E3 F7 Z4 j, D! u00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( ?+ H( H4 ?/ e# F F
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl" P" w0 g2 [/ q9 B$ [: `$ h
00403280 E8 06C20200 call qsr.0042F48B
" b3 `4 D) M8 }00403285 6A 04 push 4% {% q5 T9 x, Q" n4 i" R
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
8 P% i% v, g0 a0040328B 6A 0F push 0F
. [' D) R; z; h9 q0040328D 50 push eax+ c- i9 ~% M8 {- w
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( L3 Y, l( |8 n" F
00403292 E8 4D530200 call qsr.004285E4
4 O; ^. }+ d! O+ g U00403297 50 push eax3 J( f1 o8 X9 p7 L$ S
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: p2 K/ `! C! P6 P: G' Z0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F% d7 C, v0 S# ]- \* o1 I
004032A1 E8 1EC30200 call qsr.0042F5C47 \3 ]4 W6 k' M0 V0 f
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# q3 p; A+ d* K$ p' X& A
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
. h' u6 @& l5 V( V6 D+ Z- H004032AE E8 D8C10200 call qsr.0042F48B
2 F) g. J8 U) l" M. l004032B3 6A 04 push 43 D/ T# a: j# o$ L/ _ B
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
7 J1 u5 D" c1 R# k9 t7 |9 h004032B9 6A 14 push 14" W. ?- H$ {/ ?7 h5 a* Z7 z
004032BB 51 push ecx
8 g' p# C7 g! U& i! }004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]) A( a% _8 M9 T$ _* V& X( {, ~
004032C0 E8 1F530200 call qsr.004285E4
3 B. Y. D' x' G& a" o2 b# N# t004032C5 50 push eax
9 T* v3 e. I2 `8 x9 d3 J2 S0 P6 s004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
! Y4 m Z0 j; B' \3 ?2 g6 n004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
+ F3 {" `# [( k6 ^004032CF E8 F0C20200 call qsr.0042F5C45 d) ~% f: b4 f* ]
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* |' R* i9 I( f
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl I9 l+ E% j, ]5 x0 ^) B, T2 k! m
004032DC E8 AAC10200 call qsr.0042F48B
: \3 g4 |+ m$ v' G8 m004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
A4 |$ B5 d% N( c, J004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX( K: `; v! [+ L& V9 z- h- m& T
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
E8 L& m: s) t9 W; {3 F! }! _% U004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
5 A* @+ P8 h9 I6 e$ M/ b, j/ ]1 r004032ED 8ACA mov cl,dl ; DL送CL
" u- r& R% `3 {0 Y5 \6 E- u004032EF 3AD3 cmp dl,bl ; DL和BL比较
9 x/ u+ ~& a2 Z2 I004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
" [1 B5 v& H* f004032F3 84C9 test cl,cl: D) M2 o1 B8 M6 z
004032F5 74 16 je short qsr.0040330D6 r; k9 P E" R% i+ k- D
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
6 ~' X1 z. E5 W4 ~& {" ?/ c+ h8 m: W004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
8 v+ i F; L* Z& |1 t7 k# ~4 y004032FD 8ACA mov cl,dl0 I' j8 f, N* [9 y/ z b
004032FF 3AD3 cmp dl,bl ; DL和BL比较6 Z" @7 J2 s* x8 V5 B
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）: N2 Z5 E4 B6 `9 T' ~8 S8 R
00403303 83C0 02 add eax,2 ; EAX加2 D4 F! y! y. T7 p" m1 _3 x
00403306 83C6 02 add esi,2 ; ESI加2
# M# A# z, C9 z, ]6 f4 \. I: Z- N00403309 84C9 test cl,cl7 ]" Y1 n, L$ }. V" R3 E1 Z- X* R$ |5 l
0040330B ^ 75 DC jnz short qsr.004032E9
% f; [/ z7 C, w5 i4 Z) U0040330D 33C0 xor eax,eax1 o( T& @- @* K
0040330F EB 05 jmp short qsr.00403316! r- Y" H" Y7 o$ O$ E
00403311 1BC0 sbb eax,eax
) F$ P& l' }; }, r00403313 83D8 FF sbb eax,-1
4 e4 T3 a2 A$ A L8 Z# E00403316 85C0 test eax,eax+ J9 A+ n N# _; p( M; |
00403318 74 0E je short qsr.00403328
3 r5 f, V+ K# g z7 q" g! ?, Y1 v0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
8 Q+ A h! y) t7 s- d0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]# q9 Y6 p+ V: `
00403323 E9 F0000000 jmp qsr.00403418
2 ]- }+ |; D8 G: \/ _* W00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
+ V. ?/ ?" N4 `. z4 m% S0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]4 b% j+ u4 e/ }; J3 `
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]! k3 f( c9 x6 h: E9 R# G
00403333 50 push eax6 K% V N6 g* i1 e3 g/ t
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
+ I9 J- r5 f, k: o& \00403339 50 push eax
5 y, s2 e# ?( A I ]8 f$ H9 `0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX ~9 y, a0 j( R6 Y# f& x
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX! F& b1 U( }' v9 Y! k" E
00403343 83C4 04 add esp,4
1 p4 `5 E W+ y- W7 s00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI& l: f8 [) h# k5 }8 |
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]8 T3 M. U: C% U2 i. H$ r
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
, t) D g, J/ q/ U4 C" Y0040334F 50 push eax
4 Q" x: u+ a) z* B00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
. f$ u- |' |& Z, S, W5 p: K00403355 50 push eax
1 Q: v" r7 @% U' `7 q* _4 J00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX2 E* H* @+ t: g6 I3 Z6 ]* a
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
7 ?, F6 L% N: v" `6 C7 P4 h0040335F 83C4 04 add esp,40 X0 W) ?' E8 {% i: p/ X4 ]
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
D0 j. ^, {$ }+ T00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]: C+ b+ N& ~' L) g
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
% k( E2 P7 w. W0040336B 50 push eax9 I) R% D1 @& b. B8 K
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
) u% U6 }; d/ ~00403371 50 push eax& o* z. k y5 ~# `8 n
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
; n4 [# K+ S/ D00403377 8BD8 mov ebx,eax ; EAX送EBX( q9 ]3 E7 W4 g. m6 a
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX- {1 ~$ w2 Y& _7 G0 S
0040337D 83C4 04 add esp,4& ^0 b( b8 K/ @$ p: d
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]1 l3 T6 ?, B! B. Q( U2 u" i
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]1 Y4 }0 H+ e7 B6 D1 m9 w. U
00403387 50 push eax
7 w: @ k7 d$ y! h# F! M00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX1 j6 W8 @0 q0 J; O
0040338D 50 push eax2 f/ V0 t7 R0 x9 U4 E% Z8 v
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX) @& b& g' _* P. ?8 @
00403393 83C4 04 add esp,4
+ t9 q6 K( n- J" A2 Q00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]" k: U- V3 `: P, p Q6 |' ]; @# B
0040339A 8BE8 mov ebp,eax ; EAX送EBP
( S/ E5 c) p+ a% U6 E0040339C 6A FF push -1/ Z0 _! a* X/ k; z
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX5 D1 o* y8 D( B! X
004033A3 6A FF push -1
k* J9 U; F# h004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX$ D8 G3 B" i8 _0 w9 [5 @5 Q
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX# X6 s1 A/ |* N9 [6 k5 M5 U+ Q3 V& V
004033AE 6A FF push -1
# ?' `( ]9 C% ^+ Z004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX/ M6 n& L6 e0 B
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX5 }9 k+ M; Z# W0 w6 H7 \& y" V0 e
004033B9 6A FF push -10 M- q+ w3 ~4 p9 }5 E0 X
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
. G; [/ J" A2 P; _; k004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX( t, \* n4 Z6 W$ l+ y
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
5 T/ }: t4 T1 H- ]. c0 k004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX. }* n& M* q. v2 q
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX1 h- n6 u% _, c; z
004033D7 D1E0 shl eax,1 ; EAX左移1位; N& s1 H1 f/ I% z
004033D9 99 cdq ; EAX扩展
; U0 Z& B- f& P6 p" K" a* r: x004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
) ?6 j Z* f. z8 H- }004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较0 I8 T! J1 |* h# M9 T6 n
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）) H' r6 Q/ j @. ]( A0 k4 ^
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A* e6 R' ]/ ~* M0 \! ?
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
. Y: v! w. ^% Z/ Q' R& V _7 H004033E9 EB 2D jmp short qsr.00403418
7 R+ g. i2 `4 L0 h, S3 W1 c. g004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX$ m" M# w& [) m* I) l) `
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
" {/ b& ?9 N: L# i$ J' C004033F7 99 cdq ; EBX扩展
9 B8 [* t' T/ [7 I) g! g2 }9 V/ n004033F8 33C2 xor eax,edx ; EAX和EDX取异或+ l. X3 `* j1 K. c6 A
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
9 G+ Y+ a1 @, b% c0 Q004033FF 2BC2 sub eax,edx ; EAX减去EDX& y" Z5 W, b9 i3 N
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]# N* z$ Q& @& P
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
0 @! p( q7 K: b. Q5 ]7 H00403409 99 cdq7 W" T: [" i) O; g! P& l1 J- `
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
$ y# k: `1 ?2 p+ L7 z k8 s5 t- N0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX5 h! [2 h8 @: `, I
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较1 K* E7 r" N( L) n2 J3 U+ ], y
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）1 L* v8 u; y" _6 q0 M* {
00403418 E8 6EC00200 call qsr.0042F48B ; . G' A9 n V0 K) B9 ]
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]$ c& U9 C" n: Q% Q
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
% B) o; b- v$ w$ q: k00403426 E8 60C00200 call qsr.0042F48B) i ~) g8 N4 X9 g& K3 k0 ^1 @
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
, Z& e) s6 X0 H* O# y+ `% U% z0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],89 I# g$ t1 K0 x4 t0 q- Z" Z, V$ G
00403434 E8 52C00200 call qsr.0042F48B
) M* z. }+ w* r) `7 Z4 U9 k) l00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& w: _" W" N# S. f G0 e! W8 C$ G0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
. Q+ k: E# ^1 s& U00403442 E8 44C00200 call qsr.0042F48B0 ] D5 w7 F7 X
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, e9 f8 {% O( j0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
2 e* {; u0 w) r" L4 L+ {; M7 v00403450 E8 36C00200 call qsr.0042F48B' d4 v. H$ W0 a4 z; ]
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
0 x( O! L$ @: S7 E7 O4 p00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],39 n& P. A, {5 ?& ]
0040345E E8 28C00200 call qsr.0042F48B
' p3 d9 b' g. Z. p7 y00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
" `1 c: Z+ o! c' d6 H$ B; Z) V+ o00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
9 f ?* \: ?5 }# {* F0040346C E8 1AC00200 call qsr.0042F48B
- Y& z; S: x4 ^. d" F9 z00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]8 P$ z6 C8 C1 |: ]2 [
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1/ [- U% x. f/ D9 h9 B7 v' i
0040347A E8 0CC00200 call qsr.0042F48B' q$ r: I; t. M# i Z
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]; e+ S6 Q( G/ n: w, s4 i5 w. J- j! E
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
9 Q! ^2 n) N* B7 Z2 T* v9 p* z: T9 C00403488 E8 FEBF0200 call qsr.0042F48B: Y. b7 Q$ X1 @" t* q
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% s: Q8 D+ d' r# C# f9 u( L6 f5 m6 M
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1% V8 v8 l% R/ V$ I7 n7 y6 A6 Z
00403499 E8 EDBF0200 call qsr.0042F48B
8 p5 G3 }, G2 u- I0 L n) s0040349E 32C0 xor al,al ; AL清0
, m3 D# x0 l% V* Y( {004034A0 E9 88000000 jmp qsr.0040352D
" l$ O0 r a9 O1 N3 C6 H) R$ ~2 o7 k004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~+ E7 h0 C5 R3 k# `+ \! n
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ j8 l% K- g' R* V+ b4 @004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],94 A) P! M. P; T. s
004034B3 E8 D3BF0200 call qsr.0042F48B$ }0 n- o q6 O! w* E0 L" d
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18], k* t# P: z# }; r0 i" r) g4 v, U
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
5 P4 Y# ]6 |; B/ h: I& v8 s: U9 S004034C1 E8 C5BF0200 call qsr.0042F48B
4 k7 l5 l) z, L6 s+ n/ E004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
8 T" A4 t" F" T% x004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
1 `# _7 C) Z9 o: x$ y8 x" R004034CF E8 B7BF0200 call qsr.0042F48B
1 J# N; n' z$ `3 H6 o004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]4 z# e6 X7 M: S" X, P( H, M
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6( s G* X* h, P; [
004034DD E8 A9BF0200 call qsr.0042F48B
: Z+ O, A* x: _, ?2 q0 L7 N6 Q004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
/ T, N+ n9 F, Q' b; l- V& a004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],36 D2 P" d5 h- Y: `) h; z
004034EB E8 9BBF0200 call qsr.0042F48B
0 `5 a: B \4 @! n. z @1 i004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
7 `) e: {1 ]7 Z! h004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
6 C% M( c0 m* d& R& I' _. J' G004034F9 E8 8DBF0200 call qsr.0042F48B
. l4 u" @# E' d& b$ {- T8 P004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
$ W) [. M/ F! `+ s- e2 g" m00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],15 i( c2 y7 U$ ?1 D2 f7 H
00403507 E8 7FBF0200 call qsr.0042F48B
: B) k& E c8 r q5 v8 I2 S0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]& ^* _6 D, R2 t
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
( r9 i/ F* Q, r) p) p8 c( M2 {00403515 E8 71BF0200 call qsr.0042F48B
& P6 h, o6 j9 W: J4 r1 P0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 I# n( S9 Z3 {1 l( V
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-12 x- \& l+ L$ q6 H1 a: J# n$ v$ \1 t
00403526 E8 60BF0200 call qsr.0042F48B' [; [$ [( M; o
0040352B B0 01 mov al,1
( o& I2 d `( S! c* h. \/ v0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
& U' g3 k/ o/ a4 b$ J9 s9 Y00403531 5F pop edi6 F; L. c6 o" F
00403532 5E pop esi
0 \6 J! p. K& q% Y( E6 F% J! m00403533 5D pop ebp1 X j. b+ `; G! _) V- K
00403534 5B pop ebx& c" Y; j' |4 a- V
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx, S6 L7 J9 L9 }
0040353C 83C4 30 add esp,30
2 [8 x, X- K0 ?7 C! o, i7 D+ _/ L6 O0040353F C2 0800 retn 86 i; w0 k! J a# j2 ]% ^8 S
--------------------------------------------------------------------------------( _- Y" F2 b$ S/ ?! w/ C( X2 _0 g
【破解总结】& M, V9 R* g- \
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
3 j* s( y5 n7 [* j' I/ Z' w用户名：yijun
9 F* v! `) @7 D: y6 {注册码：4893*7777*3726*7777*0529
A7 }9 _( [) ?+ @6 E R Y--------------------------------------------------------------------------------- ~+ ^$ c0 q! m
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡