|
|
|
【原创】破解Quick Screen Recorder
0 g& C p( H. z5 L Z1 R. y0 w【破解作者】 yijun: Z" U7 N, M( f8 M q% U
【作者邮箱】 [email protected]
4 l" ?/ l" I" W3 L5 O5 f3 G【使用工具】 OD,PEID1 ?- p$ K: g$ A
【破解平台】 WinXP( l" r. |5 |5 F5 r
【软件名称】 Quick Screen Recorder
9 A) h. V* a& e* l0 P# I( L【下载地址】 天空
1 e# t* v7 W2 W6 O【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
/ O) l! _6 D: I _【软件大小】 540K
d) _; ^" K& i【加壳方式】 无# c; E2 L& l& b$ X: l7 \
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）5 }1 V' v- o6 s* C6 E8 V
--------------------------------------------------------------------------------+ I1 M) H# O- [ b/ U( }1 P
【破解内容】. ?" h$ y- _. p0 ?( G' Z; ~
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
+ j* _% e3 P- l0 r' W00404C69 55 push ebp //在此下断
" y) e- V: e7 c8 y3 a9 w# n00404C6A 56 push esi' ^0 y3 M0 E8 f" ^
00404C6B 57 push edi; \; j6 `$ U/ u8 I
00404C6C 8BE9 mov ebp,ecx% S1 Z0 x Y7 `) v' ?
00404C6E 6A 01 push 1
1 ^6 r _2 `2 ]9 {$ n8 @ Y. g00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名, M3 X4 l0 B! D
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]$ M; m2 t- H4 T# `$ W
00404C78 8BCF mov ecx,edi
0 B, J$ L5 a0 h& l2 U% V: H00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码# q. X% J/ A- m+ U
00404C7F 8BCF mov ecx,edi0 E5 b4 @# m% a! I
00404C81 E8 A73E0200 call qsr.00428B2D
1 L5 M. E" R/ t L; A4 ]00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
3 i3 R* c% X2 K* K$ }00404C89 8BCE mov ecx,esi6 `9 N, [" ]0 g0 F$ |1 I
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
5 v: D( ? ^+ ^( N* [' ^00404C90 8BCE mov ecx,esi
" b8 @% p2 O" ~- y0 t, ^/ _6 J00404C92 E8 963E0200 call qsr.00428B2D
; M b( N+ E: }% {. V00404C97 8B06 mov eax,dword ptr ds:[esi]+ X7 W. P6 ]! D+ S+ P& f
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2) u6 G0 H/ `$ [7 m+ A$ R( g
00404C9D 7D 26 jge short qsr.00404CC5( f( q+ s0 x. a
00404C9F 6A 40 push 40
# L, G$ w& t/ D00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder") @* l4 y: I9 O8 j. ^
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
r/ N* k& l5 _* d0 ?; U00404CAB 8BCD mov ecx,ebp
$ J t# q9 l$ ]/ x00404CAD E8 C3840200 call qsr.0042D175, w1 A/ ?/ k# @# X
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]- U# h- c9 a6 A; ^1 S5 W- w' T. E
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx7 _7 \3 B& |5 x& g
00404CBD 5F pop edi
* E6 B7 \- K. i. u00404CBE 5E pop esi- K3 V% ^' K+ U: u. b
00404CBF 5D pop ebp
% \: z2 }: l* I3 ^5 w. \" ?00404CC0 5B pop ebx
- E/ r% ^0 i5 L$ l00404CC1 83C4 18 add esp,18
! @% M" \! ] V' P7 f1 E00404CC4 C3 retn' u. Q* \6 o7 J9 d! Z0 x
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
. |3 J) m) j; G) A; E: I& _, Q00404CC8 84C0 test al,al$ B. ]( f; d- @" a
00404CCA 0F85 1C010000 jnz qsr.00404DEC
' a6 K. `, m4 B6 W" o% X: z, t00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]- t+ w: v9 G9 _$ q$ n& v/ f: p
00404CD4 E8 87E3FFFF call qsr.00403060
9 [, z- m$ C. w0 r00404CD9 51 push ecx
: [, n3 G% b% D: V' e00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
; e3 T F; a h6 {00404CE2 8BCC mov ecx,esp
. x9 [) Z0 S. O8 ^# _00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
0 x; ~$ y6 J( C00404CE8 56 push esi
! ?/ F k: a8 O8 J1 a# l: A6 j+ L00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0" z9 t5 m( S- d6 D8 C' G" C
00404CEE 51 push ecx% k) u0 f6 \7 ^8 k( D/ i5 N
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1+ }8 E8 m" _+ u% C. n/ K
00404CF4 8BCC mov ecx,esp
+ `6 x$ N% {9 E$ H8 }00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
, i1 S8 Q" @/ q# ?* o00404CFA 57 push edi- p' i# H6 e3 J7 F
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
7 b7 p' X7 T1 P8 j" `$ h- u00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
8 ? t/ T0 i( P2 f00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
5 S/ H, m- p! T/ Y6 X00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
4 ^) e8 u+ o5 z ^1 f00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~/ A$ v0 u( q- h, {4 c' R( T
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
+ u4 K8 x! q' P9 i* g! g8 l8 k00404D12 6A 40 push 40
& p+ |4 ?3 Z6 A00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"" j+ Y( K# t6 S: i( K% t
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."6 @/ l! r/ O; V ~! S: P& M
00404D1E 8BCD mov ecx,ebp; d z! M" b8 ?! i/ m* l. w
00404D20 E8 50840200 call qsr.0042D175& G0 R+ H, Z; `# p
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
* t8 ?; s% H* A4 p* M: a$ V! c00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
1 E6 L# b0 z5 C u; Q00404D31 E8 5AE3FFFF call qsr.00403090
$ P) p2 K/ \$ P00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
1 h* }( q. `, `& ^1 }! i& j9 G) s4 f00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
% q0 t m0 R+ i& N' P00404D41 5F pop edi, z+ P% j8 _; x& ]- h' b
00404D42 5E pop esi2 t' C4 c& {% w+ [2 l8 ^
00404D43 5D pop ebp
& e- L7 W" u# R* R5 p+ J# ^: o00404D44 5B pop ebx
2 c" R: E* Z0 C9 d' T$ s00404D45 83C4 18 add esp,18
% g( o. W% W# W" s00404D48 C3 retn
9 N1 F) A, b% `, X! d+ }" f) j*********************************************************************************************************************************************************9 Y/ U. T3 r9 z8 F' g4 x5 Y
跟进00404D09处CALL来到：" ?, l2 A2 Y5 c( W
004030A0 6A FF push -1 //一路F8下去~~~~
: a ]2 v: E0 X/ G0 e0 G6 P004030A2 68 C88F4400 push qsr.00448FC8
) b* ]$ r2 V8 o5 ]; k004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
* g E3 j' l$ h) V& U8 V9 H004030AD 50 push eax
5 ?3 p% w2 _1 G6 r004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
7 `9 C1 @0 J3 [5 t l+ L0 s1 M004030B5 83EC 24 sub esp,24
1 ]2 C' G- V1 X1 R; y2 h004030B8 53 push ebx% W$ n3 ]& y2 u$ [! m, V
004030B9 55 push ebp
8 Q, i/ m0 j7 P0 o004030BA 56 push esi
1 z) l, ] _5 |" f004030BB 57 push edi
1 P/ r- v: _( k! m0 S5 E004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"* m- P+ Y8 D* S8 Z. C
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]; G: Z9 y+ s, E) Z6 P5 T8 |6 y
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
* g) C! T& v3 N( y004030CD E8 27C40200 call qsr.0042F4F9
* M, }: W: D6 R# f& V% s2 J004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
2 k6 l! b# w- f004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
0 \6 T3 l0 f% n- M! g* _& O004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]3 R+ s ]7 P# d" W: R
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3( Z& f, { @% B P
004030E4 E8 905A0200 call qsr.00428B79
8 [8 A8 _5 d o2 H- V; ~& V6 S004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# m! `- I) X! p1 h0 z6 O004030ED E8 3B5A0200 call qsr.00428B2D
8 \# j& X3 b; ]( h" F3 |004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! G8 I ^ k- H0 j. y004030F6 E8 7E5A0200 call qsr.00428B79! S0 a& V( W( l- e
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* _& D) ]1 X3 W$ |% v; W004030FF E8 295A0200 call qsr.00428B2D7 j' {8 O+ W7 @
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
& n8 p8 B1 o* g) h/ n) _. j Y00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]4 T+ I3 _* ]; I' T
0040310B 83F8 02 cmp eax,2
+ ]. f0 l' ~: m. P" ]0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳; I% E4 E; j/ r5 E# h- ~2 P
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
2 [8 W& R% c+ S7 G) C00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
8 }3 f! y* E) r9 y( k0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
* L4 Y1 D# {# w( h8 m, }00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]5 \3 s% c: t, i. Q# {+ Z) c! d
00403126 6A 01 push 12 N3 L3 S" D2 G; y& Q
00403128 50 push eax& l% x; \9 _ _3 c$ E* d' Y
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" B3 W. i6 Q: N! u
0040312D E8 C4550200 call qsr.004286F6
( J+ N- H2 w* x; g# q3 E00403132 8B00 mov eax,dword ptr ds:[eax]
6 A* M( n; ~- ~. m5 E' \! R! s00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]& w A, D/ s9 m7 {4 Q& w9 w1 {
00403138 50 push eax' B% z- M! O4 t4 ?
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
5 u4 K/ x9 e8 ~" ]( O- x0040313E E8 4D560200 call qsr.00428790) V* W. P" }( R$ A' F; k
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& j7 R" u2 g. \9 x/ a00403147 8BF0 mov esi,eax
# s7 @4 |; k# _) m00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 [, r8 K U+ w8 ]6 {) M; m0040314E E8 38C30200 call qsr.0042F48B
3 n( [" c2 Z2 M/ [! Y2 D n00403153 8D46 0A lea eax,dword ptr ds:[esi+A]$ _1 d& f. Y" x+ c4 K
00403156 B9 3E000000 mov ecx,3E
5 k! ]( E0 _3 W* T, K0040315B 99 cdq
. n$ z2 \% j+ I0040315C F7F9 idiv ecx) J1 Y6 e* ~8 A; Z' c, Q
0040315E 6A 01 push 1
" Y4 c5 @) ?1 v0 \% B' N, r00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]% q9 ] P+ j# o! x; T
00403164 8BF2 mov esi,edx) t9 Y" K! ~5 Z& t
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]5 Z8 z) N" {9 N6 b
0040316A 52 push edx
; U6 G& v5 [: C( y: e7 j) F0040316B E8 0A550200 call qsr.0042867A, ?$ n6 s" W) y$ L1 s
00403170 8B00 mov eax,dword ptr ds:[eax]
& L/ x D- R. R( h" i% P5 {00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]4 C4 A. {; |# V2 [; s+ u
00403176 50 push eax
! J) ^2 I; }" w, x" z* z00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
: ]9 X' e- w) ]6 q+ t0040317C E8 0F560200 call qsr.004287904 g9 |9 H- j; u! Y& k) t
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. W( V* K- T# B4 \, ?9 a00403185 8BF8 mov edi,eax
* \5 `& T( u2 W }8 `- ?: h6 @7 E h; o00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 D. u t; P# X3 z0040318C E8 FAC20200 call qsr.0042F48B
3 z# r- G( d4 A |: U+ k2 `00403191 8D47 0A lea eax,dword ptr ds:[edi+A]# u# G' y7 j3 Q- |
00403194 B9 3E000000 mov ecx,3E
% c0 |2 ]4 M P) }: B9 F: _00403199 99 cdq
1 D: s J3 E& p7 {3 a* b0 A% ^0040319A F7F9 idiv ecx
! @% _1 R8 B; h0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]* P( K' j3 q. x2 M( Y3 X" r0 o
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
u- P% u" C3 X. \5 M C( U8 p004031A5 8BCA mov ecx,edx
; v( B& C8 h8 E4 R% u4 R004031A7 894424 24 mov dword ptr ss:[esp+24],eax% F% \$ \/ I5 H, l1 Y
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax8 f6 g1 ~9 s5 J3 x" Z
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
. | Q) h8 W: Z# J' P* R5 j* J004031B3 894424 14 mov dword ptr ss:[esp+14],eax( s$ G; C, r1 r( A
004031B7 894424 10 mov dword ptr ss:[esp+10],eax- d1 }4 I" L1 x8 W1 H
004031BB 8BC1 mov eax,ecx8 B$ I3 R( b) G# W/ S
004031BD BF 0A000000 mov edi,0A
" n/ b9 p- }/ e004031C2 99 cdq) Q n" a& c+ T) d: J
004031C3 F7FF idiv edi0 K) E: E4 l- t; Q! O" G1 @
004031C5 8BC1 mov eax,ecx
! x, ?1 ^2 ]+ I) j+ h) W004031C7 B3 0B mov bl,0B, A5 {9 Z) ?/ D5 S. i
004031C9 0FAFC1 imul eax,ecx
7 g0 h% b% [' c+ H$ E* D004031CC 8BCF mov ecx,edi
1 M2 ~: ?1 _: U) g; P7 r1 T+ c004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl+ E0 r# @1 e: j8 c- z$ q
004031D2 52 push edx
6 a( H: P9 w# y N004031D3 99 cdq
4 L5 K* d7 [% j; j( y* C5 Q. I004031D4 F7F9 idiv ecx
, P3 L6 b& t. F- v- P- [004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]/ L* f! ]; a- T+ N) l f; a1 O
004031DD 2BC6 sub eax,esi
) H! {0 U" g5 A1 h004031DF 52 push edx, Q* ?* o$ V: B, v
004031E0 99 cdq4 x" f6 g1 L' l7 c9 F# g# ~$ n- V
004031E1 F7F9 idiv ecx1 ^7 M$ ^8 ]# `4 S0 |7 [' n
004031E3 8BC6 mov eax,esi
7 f7 h% o. v5 O7 b, M004031E5 52 push edx& k& t+ V8 J) o, i6 i! v
004031E6 99 cdq
' Q* P% o, O6 F8 ^/ N+ `+ b: h004031E7 F7F9 idiv ecx
8 Z, Z x# m$ t ^' O% m( K: u004031E9 52 push edx
0 \% m5 q- Q& s1 y& e2 D' H* \4 o004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38] S) W1 ^* @- y5 V
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"2 `6 ~4 e- y9 ?+ I6 e/ u
004031F3 52 push edx$ O/ C3 @& C1 }, [
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
( _1 F1 D N0 f3 n8 c4 A004031F9 83C4 18 add esp,183 k: @8 u1 Z1 W# r
004031FC 6A 04 push 48 y8 l" A; s4 K# P- W$ c! x
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
% m& O' z l! }) H- f' l# a00403202 6A 00 push 0: ^9 z8 V8 t3 {* {7 _# d0 _
00403204 50 push eax! a& c. F! }4 k1 O! Z% n* N
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]! _* C: ^( L3 h/ B: l: l4 M
00403209 E8 D6530200 call qsr.004285E4
5 ~) J4 Y' T2 Q1 r. X0040320E 50 push eax
. r9 E& c/ X; K/ P$ i" \# ]0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]5 L1 y, U- g2 E1 M7 g+ l
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C1 T" {$ e& M, |
00403218 E8 A7C30200 call qsr.0042F5C41 ]( ]1 m1 Y1 d5 H
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]1 p7 N3 [# B. _* Z! B# g
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl# \" m. l/ O* n$ H" T
00403225 E8 61C20200 call qsr.0042F48B
7 g g' i2 W# r% t/ x$ X* D. |0040322A 6A 04 push 40 [1 r3 [; _- ~" e5 m7 J$ C, s. g
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
1 w. F: X5 c5 z% I ^00403230 6A 05 push 5
R1 f1 ?- ~$ a0 Q+ f& X; U7 w( X00403232 51 push ecx$ v' Y( X" g0 I3 K- b
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 M& h% N) Y( |) l- M
00403237 E8 A8530200 call qsr.004285E4% G: O' t# C4 {- f
0040323C 50 push eax! r, p5 g- c. w( k2 ?& u* R% S; ^1 `
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
; x+ ^( M, g. J: X% B. g2 `00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
4 t" W' f, j- I4 ]. G4 y1 @* n00403246 E8 79C30200 call qsr.0042F5C4! l! p, b. `% o* m5 v" A# V
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
3 {+ X! P8 y) x, M0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl) M0 y3 |* Q* ?6 j9 |1 n9 g
00403253 E8 33C20200 call qsr.0042F48B* h0 N$ j$ s+ D( G
00403258 6A 04 push 47 b- C5 G1 o! \( x
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
1 n3 N& O- F q G6 F$ \& V/ h0040325E 57 push edi: p6 @; o: C* B1 [ A- i" ?
0040325F 52 push edx
7 l% P6 V. L8 {7 W2 y& ?0 S1 X3 [00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 P' Y/ R! y8 ]+ Y9 l' \00403264 E8 7B530200 call qsr.004285E43 ?/ Q7 v2 l: Q# I+ @4 e! n O
00403269 50 push eax3 C" X4 U+ M8 Z C$ K
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 [0 }4 j' t5 M
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E; D2 j1 G2 a* [7 }1 A, q+ ^
00403273 E8 4CC30200 call qsr.0042F5C4! G3 d# ]+ _, a6 t
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" s9 X& ^/ Y* t2 U6 `
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl3 e( e9 R( Y" w# O( s% `
00403280 E8 06C20200 call qsr.0042F48B
! j8 o7 V2 z. R0 o3 X) [3 T# o00403285 6A 04 push 4- y% Q ]- C2 w0 n2 T
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
/ E& [. D3 R* X0 j2 x' e6 D0040328B 6A 0F push 0F, V% D7 z, O) j
0040328D 50 push eax
- n( v7 q, _$ N0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]- Z" J7 Y5 f- _3 ^5 m! W) }
00403292 E8 4D530200 call qsr.004285E46 V0 ` P2 a) }* e7 H- y% z
00403297 50 push eax
$ g; x, p9 W7 ^9 H/ L6 R* a: m) F00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]/ Y3 P& m4 `( n
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F- ^2 q8 Q9 ?! p1 E1 h/ P: O
004032A1 E8 1EC30200 call qsr.0042F5C4
8 _+ f" s! ]7 Y! M' `; c004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 k0 K# R( ~! D$ {: a3 D, B6 i004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl% ?4 `5 K4 ]$ u# n
004032AE E8 D8C10200 call qsr.0042F48B% t2 y- M0 m: U8 E9 O8 R
004032B3 6A 04 push 4; K* \1 A0 A( z# t9 {8 d
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]! c+ v4 l' Z, z" J! }* a2 T
004032B9 6A 14 push 144 w' R9 G, O; Q. D4 v$ |/ X! e
004032BB 51 push ecx
! |" a3 C" E7 L. {004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ E( Q$ C; n2 P004032C0 E8 1F530200 call qsr.004285E4% D. {8 ]2 N- |) n ^( z
004032C5 50 push eax
! {2 [. ?( ~/ s" p) y# d4 G, v9 E, y004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]" o* c4 K( x/ A, n: h N
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
! V4 x! c; W T# ~004032CF E8 F0C20200 call qsr.0042F5C4
$ N' ?& u9 s; l- Q" K004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# k2 R# Z6 q% B# a7 w* k
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl$ W L: z% r5 k! C: C' m# R6 l
004032DC E8 AAC10200 call qsr.0042F48B
# b* a; u* x+ U' ~. {7 m004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI; g4 b3 ?& |9 d6 H. G2 A8 M
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX- Y- J( f! u0 `& y- v' I. [! q
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
" y% s5 x# n' ?004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
# m% X; k' S/ l' Q t* Y2 x! D004032ED 8ACA mov cl,dl ; DL送CL
' {' x0 u& X6 Y8 X v8 p004032EF 3AD3 cmp dl,bl ; DL和BL比较0 @' v f1 z* U
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）$ |# Y0 ~. S: M6 O
004032F3 84C9 test cl,cl0 l }% V! r- T- v- N
004032F5 74 16 je short qsr.0040330D
5 K4 N) h$ d0 o- y4 O& s( t004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
- P4 n" X4 b# ~7 B4 `- }! W004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL3 O9 i" O3 N! B
004032FD 8ACA mov cl,dl2 E# B3 \9 \, ]7 N* i
004032FF 3AD3 cmp dl,bl ; DL和BL比较
4 X0 y$ O, Z. J1 G+ d+ r3 M/ g3 a* w9 n00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
/ g" E) y* I! I- X4 C00403303 83C0 02 add eax,2 ; EAX加21 z; j' _: X) ]3 A
00403306 83C6 02 add esi,2 ; ESI加2
+ [# Q: [# Q5 V, m( u! b00403309 84C9 test cl,cl4 H+ ]% i# x5 J3 ]0 i
0040330B ^ 75 DC jnz short qsr.004032E9- g. I5 k3 Z; T: @" [
0040330D 33C0 xor eax,eax2 C0 j9 C- Z. M% R/ i9 v
0040330F EB 05 jmp short qsr.00403316
/ F+ b. t% o" U( v00403311 1BC0 sbb eax,eax5 h4 d: E* [4 R; T
00403313 83D8 FF sbb eax,-1
8 x6 o& }$ B5 M6 O) W+ Q# c00403316 85C0 test eax,eax
0 \ j8 i' x% F' ^% j/ x5 q00403318 74 0E je short qsr.00403328
1 S0 O1 t9 ~- k4 ^' l. i. Y2 a0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A4 Z; A! z/ Z) h/ r0 z$ Y; ?
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]: X8 y; c1 b* |9 Z
00403323 E9 F0000000 jmp qsr.00403418
" b; \; ^: ]$ u8 ~00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX5 `+ k5 b# |8 `# G+ [3 j4 u$ j
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]' R& r+ K, q4 k! Q! B! N6 d; O
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]/ A5 S5 E* }& T: s
00403333 50 push eax$ j, \/ I5 e7 E& F+ A1 c
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX' I, i# v0 V; @6 k1 _
00403339 50 push eax5 L9 c3 W# A# J$ V
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX4 c# C, l+ c3 b. M4 k4 E
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
, W8 L$ v6 v8 _' {) d8 v00403343 83C4 04 add esp,4% N6 H& n' W; j/ f( D
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI& v8 o: m6 e! ~4 @( R* I o
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
4 X+ U6 A$ O: B0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
. E& w( A5 m/ G0040334F 50 push eax
4 p g/ C3 s5 V3 H6 D! j3 M0 c00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
# V, \* J0 M9 m: d% |2 `% C00403355 50 push eax
- P2 k& s9 g9 r7 j: N4 ^00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
, G+ r7 y6 A0 c' |0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX, E1 r! t4 j: s# x4 @* g' B
0040335F 83C4 04 add esp,4
: D2 [9 f/ w l& F' R00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI! u# m. z1 [1 d! f+ H3 R
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; p0 g3 m+ b, J
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
8 e: y" E* [ C `+ i2 F0040336B 50 push eax( v8 R) P, m- L
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX# s3 [; k$ O+ Y& e
00403371 50 push eax0 k0 y( t# d# X" M5 z. E
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
+ `# [/ w; C3 k: h$ r" Y# @' K# H00403377 8BD8 mov ebx,eax ; EAX送EBX& `' }' l' D8 v
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
$ G y3 w S9 \2 q7 ?# o& r1 o0040337D 83C4 04 add esp,4* u, M) f5 K6 i1 C# Y- D6 k) M9 K
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
; V+ h9 h# u" a, e7 W00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]5 v: O9 h* w/ Z: U+ L# n
00403387 50 push eax0 |: j" V' u% z. S8 |" q0 m
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX6 `- T" @- d2 |) j
0040338D 50 push eax$ P0 O+ L1 w8 E! r. n% S: `
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
5 g! u" G0 r# N, U; h: I00403393 83C4 04 add esp,4
6 ?) N" m$ d4 O- k: {7 }: I00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
. z5 Z9 U6 V8 d0040339A 8BE8 mov ebp,eax ; EAX送EBP! j# A! Q& `# t/ q9 S% Y4 B. V
0040339C 6A FF push -17 E: f1 H. z% ^0 b5 @+ E
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
% Y0 r/ u; g8 Y, t R. x4 c004033A3 6A FF push -18 B; i5 ^7 O% X) Z% s
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX& g) I! d8 Q0 v+ H/ F) e+ [: B
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
/ _' c( j( q- F8 K+ r004033AE 6A FF push -1
2 J( D/ L& a. w y5 _( p' R, @004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
0 E3 ]) @* V1 h) z004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
: s9 N* q5 z' n' {1 G004033B9 6A FF push -18 _" J |, k) A7 h. S2 M
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
( W1 o4 Y5 M$ d3 G+ k004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX9 b- r3 ?$ c/ ?
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX( r8 H ~/ _% M) u) ^
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX& L0 M$ A r. K3 O, ?. G
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
( z! q6 L3 x7 h004033D7 D1E0 shl eax,1 ; EAX左移1位
, s+ p* f) L2 K1 h/ n8 q1 ~004033D9 99 cdq ; EAX扩展3 j* C0 i) M, C" P
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
! ?& P2 ^! ?! R( m4 ]" R004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
[4 x1 l# M' @1 I& s004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
( t8 V9 ^ c2 M8 D! b; D3 w: E004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A) O; y8 B3 ~( x+ J+ }
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10], [2 T1 B8 i9 s. M8 }9 H
004033E9 EB 2D jmp short qsr.00403418& l; P9 k1 S. |1 A
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
# X. B, n! L, J7 [9 x) \004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E29 o2 q# Y! m' p2 Q* B3 s
004033F7 99 cdq ; EBX扩展( i" |6 r2 a1 e% H: _" F8 I
004033F8 33C2 xor eax,edx ; EAX和EDX取异或, R6 Z& e% k2 o8 Y
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
5 _' u f" n0 X" \; w004033FF 2BC2 sub eax,edx ; EAX减去EDX8 D0 y4 W6 Z2 K9 R& x9 t
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
7 G: R5 d# Z* P00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX- J0 L, X7 `8 Q; z: }* n2 Y" ?6 \$ m
00403409 99 cdq
" m8 l3 x3 h# j0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
; p, h+ | e4 G: t) c# b0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
" b+ P/ j( P; t# {& R7 `$ [+ f2 r00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较" U d% x8 m7 p$ t, i7 z
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
, h+ F' m$ U' U" [0 X# w00403418 E8 6EC00200 call qsr.0042F48B ; % G5 H1 F: Z9 }& S) z6 E
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ T2 ^4 v9 X. {) q' d. r& ~00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],90 p8 Q, I5 x+ [1 G' a
00403426 E8 60C00200 call qsr.0042F48B, }1 C$ @& K+ Z: S
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
8 m1 e7 h6 h: U0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8; ?$ i2 g# M/ ~
00403434 E8 52C00200 call qsr.0042F48B2 M3 O+ q9 @. `0 f# t5 `
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# n, E% H+ n' k5 B
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],75 o3 m0 f3 K+ R5 p/ Z
00403442 E8 44C00200 call qsr.0042F48B
) w1 e7 b l9 c! D# c" Z00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]# z4 Q8 l6 Y$ i! x6 N
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6* t6 l4 h2 n# O+ `2 _
00403450 E8 36C00200 call qsr.0042F48B
* r$ d& N2 O J, G00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]* h* D+ h( |4 L, y+ l' p! s& G
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
. v* ^& a* T! _+ M8 t0040345E E8 28C00200 call qsr.0042F48B
- U, }0 q5 \# @8 d- t00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
S% w r+ W$ ?+ m! x; X00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2 i, R; J/ x- \ ]
0040346C E8 1AC00200 call qsr.0042F48B6 A1 ? \! s$ o+ f- S, `0 Q9 j
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 d0 u9 w0 a; s8 _9 c/ P; i
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
, b: I# J. R& a2 @$ N! F3 M3 m0040347A E8 0CC00200 call qsr.0042F48B
2 c$ U5 t: }3 d B0 Y9 u0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]" |) n3 J" ` a
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0) A5 }, Y, i( r+ H! A( w
00403488 E8 FEBF0200 call qsr.0042F48B6 Y* \! _+ }0 p0 S
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
d/ E4 q0 b" \00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1- p5 R. O7 z& s- T; c9 _
00403499 E8 EDBF0200 call qsr.0042F48B/ v; ]* X! L) V z x
0040349E 32C0 xor al,al ; AL清0( p# I* q6 I" B! J% Y+ X6 i
004034A0 E9 88000000 jmp qsr.0040352D9 k6 W3 g; H1 E
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~, V9 o C& Y. W* O$ ~; s. O
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
; ~( D9 @+ I: p* }004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9. x ~/ w3 D0 u# H2 y
004034B3 E8 D3BF0200 call qsr.0042F48B2 ?. F* Z" q6 r" d! C/ h
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
; ?5 m( _; a) Z8 f7 g8 q! Q( x004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],80 n& y$ T" l& M2 C9 q- Z3 X3 C6 B
004034C1 E8 C5BF0200 call qsr.0042F48B
) k q% n( l8 Z& U004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
# E* k( i) F. ? m) M004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
7 o% l5 f% V+ C004034CF E8 B7BF0200 call qsr.0042F48B
" u, P) q _# \1 s1 M P" Y$ P& ^004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
P- n. R5 G8 b2 t" b004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6! z+ W) Z" l4 I5 [: K0 ?0 ?2 J
004034DD E8 A9BF0200 call qsr.0042F48B
5 t% v& ` Y0 T9 k: Q7 I004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]% j$ D% e! y. {( |
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
& l! h0 S5 r" {5 R004034EB E8 9BBF0200 call qsr.0042F48B
m9 ]1 a; R% `0 j1 h" a( P8 }2 j004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]' z, Z% A& |2 W
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
* q2 U" ]9 l5 o004034F9 E8 8DBF0200 call qsr.0042F48B0 v, B, ~- e. t# G
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" w7 i2 k: C# c
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],12 M6 w' i/ h3 G& C$ |, \+ z
00403507 E8 7FBF0200 call qsr.0042F48B5 Q4 ?+ n1 M3 d4 _/ U0 x
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]! m5 c& ^2 D$ R. w F
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
?4 @+ N8 D& |( C( n1 x00403515 E8 71BF0200 call qsr.0042F48B
# M _$ o: u, ~! h2 _& W0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
4 M- q# |% L! m/ i, H3 t" A' `1 D0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
5 n) J/ U- S; s- q2 t- x00403526 E8 60BF0200 call qsr.0042F48B. A! e& u9 f0 T$ y3 v4 b. ^
0040352B B0 01 mov al,1: _& X1 f6 `8 o+ h
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
% \; F1 i" Z0 X- i4 ~00403531 5F pop edi; q2 q; s( w, h! z6 `: @3 n
00403532 5E pop esi4 a1 z9 A2 D# I4 P0 A
00403533 5D pop ebp
) E9 [& Y, g( @$ ?2 F8 J% f00403534 5B pop ebx w0 Z/ z% c7 C
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx& v( R( Q9 R T! ~
0040353C 83C4 30 add esp,30
/ }% N2 J) i8 U. p1 Y& T2 j0040353F C2 0800 retn 8: W1 [2 V( V" L+ h% `: `8 M
--------------------------------------------------------------------------------* P k" F: X+ }
【破解总结】
: K! m |7 W1 ^' t- O) C 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
8 G& n2 w$ b) H" w$ \& X/ `5 }用户名：yijun
, A8 f0 {" @3 Q s+ x注册码：4893*7777*3726*7777*0529
; F% K$ R0 |# H* w" B--------------------------------------------------------------------------------* q$ a* g0 R8 B4 @$ I
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡