|
|
|
【原创】破解Quick Screen Recorder
8 r& X+ c( L- J2 \2 Z1 Q【破解作者】 yijun
4 H2 d" ~" z; t3 }$ w( D8 K8 X! H0 }- y【作者邮箱】 [email protected]
2 v' E; P. U: a4 l【使用工具】 OD,PEID
9 n Y# P1 i# k$ h4 `【破解平台】 WinXP2 n" R+ h+ Z' H; k6 V. B2 m! V' E
【软件名称】 Quick Screen Recorder
5 r' [: O- e; |4 p6 i3 e【下载地址】 天空# X, b4 @, Y5 g. A
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 3 V4 L0 f7 f4 f; M3 i/ v2 K/ |7 ^
【软件大小】 540K
2 q+ Z0 x* ]+ }; P【加壳方式】 无 ^8 c' k6 W) a! J
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）5 Z& I0 X+ |& h) v3 e$ j* R
--------------------------------------------------------------------------------2 Y) S# K. ^/ K3 I- |) u. j
【破解内容】2 c& J) t8 A7 \( B+ B* Y4 @6 R
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方： u a* d' ?1 z
00404C69 55 push ebp //在此下断3 x$ G2 L* W/ D! ~# F. k9 G
00404C6A 56 push esi6 _; K5 m# I2 U: |7 d) H
00404C6B 57 push edi8 O$ a$ M e, d% }" N) W: @
00404C6C 8BE9 mov ebp,ecx
9 R! ?2 E* p8 l2 X00404C6E 6A 01 push 1
) o8 B- T0 s/ h' w. M00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名) X3 b) Y( ?3 q2 c4 K7 R o4 b
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
/ ~- [* Z7 Y& ~9 M7 N00404C78 8BCF mov ecx,edi
% s" F% P/ J7 y7 I00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
- A5 V+ h1 h$ b- e H- F00404C7F 8BCF mov ecx,edi0 y2 l6 [% j" h
00404C81 E8 A73E0200 call qsr.00428B2D9 q% b- N6 [2 G3 u. b, r( n2 J8 ~
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
. h$ \7 [: p/ |1 B00404C89 8BCE mov ecx,esi
* J1 ]7 a& |% p5 b2 ~* w00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX! R& V, f/ I0 s. K; u6 B
00404C90 8BCE mov ecx,esi
) V' \/ \) C; b9 y- U% N% Z' g00404C92 E8 963E0200 call qsr.00428B2D
# B; C6 V. m' i- G! f; G00404C97 8B06 mov eax,dword ptr ds:[esi]8 ^) _8 f* N5 d8 f1 u+ i( ~% {
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
" J: D' |9 \6 H( b* Z, L00404C9D 7D 26 jge short qsr.00404CC5 X/ h! }: Z9 p$ N2 C
00404C9F 6A 40 push 408 ?% b& F, W- r' l, e8 g
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
~7 t' U2 m, J6 X00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
7 e: c) V& f2 i# H! ?$ }00404CAB 8BCD mov ecx,ebp: w* e3 X5 ^9 e2 o" z+ J0 k
00404CAD E8 C3840200 call qsr.0042D1756 g) |0 C6 g) ^! `$ I
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
( x: D) ] H. @' P" d! T00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
! O6 u3 F* m6 Z2 x00404CBD 5F pop edi: L6 v# r0 S6 ~, s' g8 ^- b( f6 P
00404CBE 5E pop esi
- t. ]+ Z/ r2 F3 n5 G00404CBF 5D pop ebp% t9 v$ h3 v$ V2 a8 Z
00404CC0 5B pop ebx
+ d5 l' x. u7 {( z5 p6 ]/ @7 L+ y00404CC1 83C4 18 add esp,18
1 s& B# W0 l, A8 d00404CC4 C3 retn. K6 W& c$ P8 R3 r$ o2 D# ^
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]- m% P0 t2 @: g1 G
00404CC8 84C0 test al,al
5 C" B6 {. f& R6 H8 G9 N' h00404CCA 0F85 1C010000 jnz qsr.00404DEC; U( B3 @- D: X, W+ Q! J4 L" {4 ~
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
* M+ k* J0 b! U6 z, C6 D00404CD4 E8 87E3FFFF call qsr.00403060. }# X- ]9 i; r! j& |
00404CD9 51 push ecx' R G2 x5 m: s# l/ z
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
+ Y# r) r8 c# A- `00404CE2 8BCC mov ecx,esp( @& z6 m) B( O
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
1 J: e% \5 P8 ~00404CE8 56 push esi5 g3 _+ k! u6 p, }0 N
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0: \2 I6 X z1 S1 k" c
00404CEE 51 push ecx5 B8 L- r8 T8 w
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
5 P: g, B0 i$ p00404CF4 8BCC mov ecx,esp1 U( b4 U$ k- r% ^2 S" M; M/ k
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp4 O2 s( R3 B; @
00404CFA 57 push edi
5 ~% w4 T4 I6 N( H' p8 A& ~$ J00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
7 ?: M; w' Y$ n' f' i00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
7 d y; V2 E. Z; L# G7 S; q00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0% B- ?( \$ V K7 b& n4 J
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
6 Y& ~ R2 u: ^* T00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
) @" q- V' m& q00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~2 o& n5 d4 w7 C* \4 O$ }/ \
00404D12 6A 40 push 40
, }* P" p) l& R% _ K/ @. g00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder". {4 z2 i' Z' y* G
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
6 [2 t0 d* K+ m* u* P* \' z00404D1E 8BCD mov ecx,ebp5 {' @7 ~( z# u9 k& T
00404D20 E8 50840200 call qsr.0042D175- i f- I7 p: ?# @
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
" I O, e6 b' \/ a& u; E9 N1 k. W00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-16 _$ u8 z( X. Q/ w
00404D31 E8 5AE3FFFF call qsr.00403090/ u0 f) i* l% t, d6 W
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
4 w7 S8 _) j8 t. V9 F5 R/ o0 ~00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx; Q# [2 _; \1 G7 J0 R% o
00404D41 5F pop edi
& b$ Y. n' R d& E X7 x/ Z00404D42 5E pop esi
/ U! j% A _4 p" Y3 r+ K00404D43 5D pop ebp) _: Z" d% t3 i. S$ ?
00404D44 5B pop ebx
$ [6 E; o! v$ {0 @! Z00404D45 83C4 18 add esp,18
) e8 u" p+ w9 U( J9 p7 O* E+ x00404D48 C3 retn" W$ I* \3 p+ s" K9 w
*********************************************************************************************************************************************************
- }: \+ \' o5 m j* I B4 g跟进00404D09处CALL来到：0 j% V+ W3 X1 ]
004030A0 6A FF push -1 //一路F8下去~~~~. V, K# f# A- v
004030A2 68 C88F4400 push qsr.00448FC8
) y+ F* {& @. S. U* \4 Q004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
" x4 Q' q. F' ~" c$ U004030AD 50 push eax
0 V, c5 o2 I! J. R! m004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
4 E: f% e4 q; z; x004030B5 83EC 24 sub esp,240 j# o/ ~" D3 U- R4 \
004030B8 53 push ebx
2 W$ S. L' |% T8 ?8 w004030B9 55 push ebp
5 |: d, M6 s: i( h. Z: T004030BA 56 push esi) a/ e+ C. a) O3 c) i. h
004030BB 57 push edi
( d" \9 h, L9 p004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"7 [) J; X ~' v$ c0 x$ D* q& d
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]) s# d9 k$ S8 \& M; D. {0 D0 }3 w0 y
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],14 ?6 i0 S5 B# a4 n; a8 Z: R- c
004030CD E8 27C40200 call qsr.0042F4F9- m. a: O, \$ h& w
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
, ?: H6 X" w; I( G004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
' [* P' a$ a5 f* k: h004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
! I5 n* M5 @# q; z9 a" f5 ?; e004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3* Q0 C3 L M+ `; D# ^; c
004030E4 E8 905A0200 call qsr.00428B793 a( H" R" d" ]
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ M7 B0 T6 X4 U' C% f
004030ED E8 3B5A0200 call qsr.00428B2D: D+ S9 ]. L/ f+ O; ~/ _; ^2 Q1 }
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# |5 U7 _* c: `6 k( Z004030F6 E8 7E5A0200 call qsr.00428B79
' f" @* u) {- c$ z& i# i004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
9 x' W) @& n* @6 X" U004030FF E8 295A0200 call qsr.00428B2D; o( Y$ l8 Y* N, u' z
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]2 A3 O( A6 ]" ^! ]/ I5 l( v o
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]' C3 e7 i# N% e; p) W8 x% W
0040310B 83F8 02 cmp eax,2+ _1 g; U, x3 w1 O
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
^) `( h" K2 O: o% U- t0 F0 r* @+ [00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
6 L5 u- p; E* ]- x( Y00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
* `& Q+ v: T7 r7 O! C& P: \7 g% R0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
+ _; v1 n- j& M* x: r: ~+ C; ~00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
# b1 U, ^% z) ]9 f00403126 6A 01 push 1
2 S: |! A# E! @& I% C00403128 50 push eax7 X) Q" L2 L9 Y: z6 } }
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50] N/ l2 @- O" k: Z5 Z% J
0040312D E8 C4550200 call qsr.004286F6
; m- Q6 R5 E) h: P8 @00403132 8B00 mov eax,dword ptr ds:[eax]$ i5 ?/ W3 {8 K* r9 W
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]; x) Z' q% F0 A2 E$ c. R2 E
00403138 50 push eax
. Q9 c/ S) \: m+ g8 U, J {00403139 C64424 40 04 mov byte ptr ss:[esp+40],41 ?0 L f6 k' N
0040313E E8 4D560200 call qsr.00428790
" N" | F& [3 d' I) X00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]: w' o. q; A. |! I4 }6 q" z9 O
00403147 8BF0 mov esi,eax( _, i7 {: I( D/ O; J
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3: [7 A i' G! d; x8 ^
0040314E E8 38C30200 call qsr.0042F48B! O9 U, }' A# ]$ h& B1 v
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]) A0 N# u1 _2 p, X+ V) r
00403156 B9 3E000000 mov ecx,3E; \# z, H- p8 [7 i& \" \
0040315B 99 cdq
1 G, a0 ?* f1 g& x0040315C F7F9 idiv ecx
4 k" h4 d, W: I) F2 g5 V3 u% L% C0040315E 6A 01 push 1
o) L2 A3 r. \00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
. _6 J& j4 U3 b00403164 8BF2 mov esi,edx( m) }# l2 f( f% O! w8 S8 n$ z$ q) Y
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
+ K- i$ l. A0 q& M0040316A 52 push edx! h, M$ Y, l- ?/ H7 W
0040316B E8 0A550200 call qsr.0042867A) Q( U. m4 q& E* T% U
00403170 8B00 mov eax,dword ptr ds:[eax]$ F3 _+ y. X. z. T& q& H+ S4 J7 O
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]$ }" B9 D }5 y0 G# _& U
00403176 50 push eax
2 P; U t% [6 t* z1 i6 e d00403177 C64424 40 05 mov byte ptr ss:[esp+40],5- z: {& E; I) ^, N3 C; ~
0040317C E8 0F560200 call qsr.00428790+ @5 j( O% X3 H* i
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30], c, a& _& w, x/ G( ]
00403185 8BF8 mov edi,eax5 D/ E% |) V0 R2 [4 m, c2 A- r
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 y! \; h+ p" ]% F3 N+ G0 N0040318C E8 FAC20200 call qsr.0042F48B
! @, _, p3 a. \, G5 I$ [: S00403191 8D47 0A lea eax,dword ptr ds:[edi+A]8 O, s- I/ ~/ E( r: E
00403194 B9 3E000000 mov ecx,3E" @ Y& j+ X' N! o8 H; t# ]
00403199 99 cdq
) C1 l1 ~" s- u& _. m% M* u0040319A F7F9 idiv ecx
% ]" X- L! Y1 [0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
8 W( p% d$ O) r6 f: G" X004031A1 894424 28 mov dword ptr ss:[esp+28],eax
N0 X9 r9 ?: `4 a" P- x4 @" j+ Z" z004031A5 8BCA mov ecx,edx
; N9 Q3 i6 ]* t. l0 R7 t# L004031A7 894424 24 mov dword ptr ss:[esp+24],eax% M6 d( ~4 q% W
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax$ B1 J( w5 ^% T# N, u- q* i
004031AF 894424 18 mov dword ptr ss:[esp+18],eax) b: v: A1 L4 `7 v# t
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
0 y) B, H1 I @9 i004031B7 894424 10 mov dword ptr ss:[esp+10],eax
7 V$ o% \$ b0 g! X: h5 j& i004031BB 8BC1 mov eax,ecx' R2 m2 p2 E- \
004031BD BF 0A000000 mov edi,0A
$ u4 D( m' | C4 j; S004031C2 99 cdq
- x5 p. G( H+ r) H7 C( G# Y, @004031C3 F7FF idiv edi0 {5 B1 X# Q" L) @
004031C5 8BC1 mov eax,ecx |& R$ D/ K# b& j: T! V* n1 ]' T
004031C7 B3 0B mov bl,0B; N3 D% {& u! w% W
004031C9 0FAFC1 imul eax,ecx
; ]; s+ Q* C" X, k' F004031CC 8BCF mov ecx,edi
6 X1 V1 b/ s/ v2 s5 a004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
) m5 u$ ^/ s) d004031D2 52 push edx
3 t! a Q& G1 O, p8 p5 G' J4 C004031D3 99 cdq
0 p/ k2 a+ `6 X2 i2 O( z& j004031D4 F7F9 idiv ecx5 E/ k6 w7 K7 F# A1 W | k e
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
3 K- J$ Q' ]& T2 U+ i8 d9 O004031DD 2BC6 sub eax,esi
" ], H- m. n5 L, v004031DF 52 push edx4 E5 ^ D1 i, Y# S& n
004031E0 99 cdq" l$ u* x* s/ P) g8 I0 s
004031E1 F7F9 idiv ecx. n0 B: }- n K2 H- m
004031E3 8BC6 mov eax,esi" ~! C# G+ g3 Y4 R; e
004031E5 52 push edx8 {7 g& f" @+ O1 f6 H
004031E6 99 cdq5 W+ T0 F. d% Q5 h
004031E7 F7F9 idiv ecx
1 m9 L0 w6 H( z004031E9 52 push edx8 P, ^; p" q* n7 m8 ?
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
, Y4 ^3 w' F, r$ H004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"3 b: A) w, z3 |% a5 H$ W2 a
004031F3 52 push edx
* |& N2 S$ J$ k5 Y& J S1 [& d5 i004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893- l% c2 u3 F% W1 D% u1 H7 Q, I4 l
004031F9 83C4 18 add esp,18/ d' n2 i, L [; O7 ?- i
004031FC 6A 04 push 4& G; R3 m5 s: y; v
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
0 D! ?, H& W6 z9 N5 y0 ?00403202 6A 00 push 0
* r. O0 X% G G00403204 50 push eax& L9 n/ Y/ H# V5 l
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ N3 R8 Y' Q! W9 D# T00403209 E8 D6530200 call qsr.004285E4
( S }/ E2 A( P0040320E 50 push eax& i3 T# P3 k8 W* T! A
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]# B* W& @4 ?4 D g7 O
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
2 q2 I# g3 K$ Q5 Y- b- E0 ]4 R00403218 E8 A7C30200 call qsr.0042F5C4
$ B$ ~2 [/ [, c$ j# M' o8 j7 V0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 O( ~, v9 c: ^ a4 @00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
3 t d1 I& R+ z00403225 E8 61C20200 call qsr.0042F48B
5 d/ O; Z5 _. C* u0040322A 6A 04 push 4, r9 H J$ p% W9 V2 }/ u) @# M: h$ `
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]" p" G) a$ o& k1 f
00403230 6A 05 push 5& R3 Z. Z# e1 @& x
00403232 51 push ecx
% \ [ |( d- g2 T00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; n( ?: o- A6 p: N6 }00403237 E8 A8530200 call qsr.004285E4
8 ^; U9 C2 s( w* {+ b- w$ D& Z& ~0040323C 50 push eax. s- d2 v$ v9 O0 {: o6 I
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]. J8 ? u1 Q5 M7 U* ^1 C; V
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D) R0 ^. h) N! r' M
00403246 E8 79C30200 call qsr.0042F5C4' c/ @* q1 {: ?6 g
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 Z% f- d( ?# @) h4 M0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
6 a) ^, R! j4 c5 J' c5 Z+ A: M00403253 E8 33C20200 call qsr.0042F48B
# T% y5 d/ ^5 H" X' e$ n& h5 b00403258 6A 04 push 49 x& ~8 g- w' x& L
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]" ?+ u ~& [) F7 k$ Y
0040325E 57 push edi
6 S O( k( L+ Q- s2 o! I7 ~! ]) H0040325F 52 push edx) y" A4 Y/ B* w( e; W
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 @ V. E* X; }2 b
00403264 E8 7B530200 call qsr.004285E4
3 I; d* z0 i& e& G00403269 50 push eax& v& [' Y- f( t# p4 ]( k
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 H5 `" K4 ~2 t: J" J0 Q
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E* i" d( t, t2 \
00403273 E8 4CC30200 call qsr.0042F5C4( q% t: p# O( R* D
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 H2 ^+ |' Q/ c" `$ D) x0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl" x5 Q( N: X* ?# x3 ^
00403280 E8 06C20200 call qsr.0042F48B, g2 i# f: ~ Q' ?6 \. C
00403285 6A 04 push 4
c1 J# P, A) A3 s& B8 G4 Q+ v! G6 e9 ^00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
1 _( O" n) y0 H+ E6 E1 {; U0040328B 6A 0F push 0F
& X+ R- P& i. b: W7 U. h8 ~0040328D 50 push eax, u( O% a4 X, Q7 }
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]/ i3 t8 \1 m: B* R
00403292 E8 4D530200 call qsr.004285E43 E$ ~$ S2 G9 O$ |
00403297 50 push eax, H- z3 L/ A+ o+ v# @6 J0 @
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]( P% U: Q/ R- o9 `) p9 W& ^
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F1 I. E: Z6 n6 Z4 m
004032A1 E8 1EC30200 call qsr.0042F5C4
$ |+ L$ `6 b9 G+ z, z1 n* r004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' x! [ R t: i+ Z1 p" M. E: k2 m004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl3 D* C8 H( I- T! `! ?7 t0 L: T) ~2 y
004032AE E8 D8C10200 call qsr.0042F48B
3 O8 H3 J) Z: l# x0 @6 j0 \004032B3 6A 04 push 4
; i! K+ m- U; D: ]" q! `6 G# ~004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
T$ \1 |/ a# {, M7 T0 O; \$ W004032B9 6A 14 push 14) r/ `$ `+ p# u3 ]) r
004032BB 51 push ecx; @4 Z% i0 `1 e: o" G$ f t
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 I/ ?0 ]9 S% j' x1 B v0 ]- A0 {
004032C0 E8 1F530200 call qsr.004285E4( f+ `. R1 E& a% H, d
004032C5 50 push eax
' q) k3 t" _/ a; d004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]7 P- T0 k7 K+ F: n$ _( w* H
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
6 d+ ]+ w* ] Z* g5 L: I004032CF E8 F0C20200 call qsr.0042F5C4) F7 i+ C) v8 {7 _( j
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. e3 ]8 A/ V( a v! ?2 v004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl, r/ h: m' k" z" u2 z( R2 W
004032DC E8 AAC10200 call qsr.0042F48B8 x* I2 D6 G7 u/ |, f
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
6 a" x+ w4 x( }- Y" F1 ~$ P. T" d( z004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
, X% p z |$ j% C004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL8 M; Z# g' ^( j5 P$ E- i+ X
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
! b: S4 m' M9 P" X004032ED 8ACA mov cl,dl ; DL送CL& t+ ?- D4 J- K" Z, {; k
004032EF 3AD3 cmp dl,bl ; DL和BL比较
' K2 h( S, J6 C4 _8 |) Y9 v004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）1 |4 I( B4 Z) C7 z9 ?' H) H
004032F3 84C9 test cl,cl3 f. T1 ~2 \. P# d
004032F5 74 16 je short qsr.0040330D7 X* N* A3 U, _% m8 `; I( O# d5 t
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL0 I2 c0 L( ]$ ?8 p
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL u' x" A* P5 Y( @( m
004032FD 8ACA mov cl,dl
" Z' U2 V9 p* X$ ^# I* l+ M004032FF 3AD3 cmp dl,bl ; DL和BL比较: J. t1 z% r/ f3 i1 `
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
8 n( O! O& ~' h' s/ A00403303 83C0 02 add eax,2 ; EAX加2. V& b& n1 z& L
00403306 83C6 02 add esi,2 ; ESI加2
% z9 y6 I" @" ~7 }00403309 84C9 test cl,cl% U6 x& ?5 K V- U
0040330B ^ 75 DC jnz short qsr.004032E9
) L' i. }; z8 t9 F( ?( T0040330D 33C0 xor eax,eax3 v- I1 d! T/ h' W
0040330F EB 05 jmp short qsr.00403316
% h; @6 j/ R; ^. ?& {7 K* o" Q00403311 1BC0 sbb eax,eax8 Z- f; A- r6 p
00403313 83D8 FF sbb eax,-1
6 W4 ]- p7 p( K00403316 85C0 test eax,eax
6 K6 s5 k! R+ n! T; z- `00403318 74 0E je short qsr.00403328( ~9 }2 }+ y+ Y
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A3 a. G1 D& Q# H
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]2 N2 O! X$ y2 U6 y8 ?
00403323 E9 F0000000 jmp qsr.004034189 G, c1 J! ^. j2 }9 S
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX$ L$ R" y2 d/ E1 ]! A
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ Z# f6 e0 }5 e d
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
2 t( G3 t* S! s00403333 50 push eax9 ~& y4 f3 N' u9 o7 E, s- \9 n% F
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
8 h& t/ d" Q& b {! ]9 j. Y9 f* q1 N/ B00403339 50 push eax
8 x- ~. \! g, F. E2 x) }) x0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
j, P0 M, @& `( J0 l) t. |* \$ U0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX- }$ y8 Y x3 S7 @* Y! W
00403343 83C4 04 add esp,4! j- s: K2 S! z+ i u
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
- ~- W1 L6 S! b/ Q0 l00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]3 ^3 ^/ C- w) s
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]8 I4 ]" I$ e3 Y" S7 d3 r9 L( m3 L
0040334F 50 push eax8 i: l3 A0 h. g) [% G1 B' x$ H' L
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
s4 j3 |. |3 W00403355 50 push eax
$ c/ ~& J& r8 G& R1 G' W00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX8 Z4 [$ D' o& \9 r2 n3 ]+ I
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
4 Y/ O8 W( ]- c9 E3 P0 `" S; D6 _0040335F 83C4 04 add esp,4
4 {9 Q: b% f2 T' b r) O3 Z q+ f00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI0 P H- l3 e. g8 |
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 F2 b o7 G) u& t% e$ M2 t+ F7 R
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
' u& v* ^0 L1 z D9 V0040336B 50 push eax
) h# a( p+ @# L( K0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
2 ^: D5 g9 l8 d; s: u7 \00403371 50 push eax
2 Z/ Q" L( ~# F; t1 H4 }00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX7 [. j3 \7 f" D& o+ Q
00403377 8BD8 mov ebx,eax ; EAX送EBX* Q: G. m# i$ V4 Z/ X5 }
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX! t/ [- e. \+ N1 i, m1 \7 i6 t
0040337D 83C4 04 add esp,4; c1 R8 w, W$ K( D
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
; F* I' e, r7 x. D! ]00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]% I2 N. Y& K8 l4 G! ]3 V
00403387 50 push eax/ D. ^2 r: W" R" U! j
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX) f9 P) {3 `) J+ E* {. k6 J5 d
0040338D 50 push eax8 `- o8 ~7 ]: X+ s' u8 M
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
* u3 b% \# j1 w W& P" C/ l00403393 83C4 04 add esp,4
" F; E0 M2 z3 y1 W9 W* |/ ^; V00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ |5 O3 i# e& t0040339A 8BE8 mov ebp,eax ; EAX送EBP8 m- C# l1 q) g
0040339C 6A FF push -11 v- H% q2 o6 @/ I/ j% }
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX* |% @" ^, M0 X- H+ S
004033A3 6A FF push -1
2 m1 B: q" W/ d004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
) L- |+ W" ^# Y% p004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
J; V7 s: B) i% D. M( w/ K004033AE 6A FF push -10 \7 ?' i' y: g# k7 n9 D) W X
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
1 t; g' z, d. @, R4 A0 E8 U" f004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX K# D8 v9 a3 @5 A- E
004033B9 6A FF push -1
7 H3 K5 h# t8 s2 b004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
/ @" J; [2 v$ m; u004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX/ A) o( A# T: D5 @. C
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
1 B9 C3 B! o5 O5 c004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
2 c$ O/ m. f/ b2 j" n/ g' V J, n004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX# E4 a# V7 Q7 Y
004033D7 D1E0 shl eax,1 ; EAX左移1位" F2 A4 p9 F/ j# P; e
004033D9 99 cdq ; EAX扩展
4 i3 S5 s+ o" K: E8 c+ Z- b004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中) W/ E( B( ~. N9 F8 c
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较2 ` Q' M% ^3 I7 h7 Z3 |6 c( m' O
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
! E/ G" x# @ @$ M004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A, ^% r7 P& X/ p0 t( a
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
% K" h! @% G8 v3 @" n7 Q1 Q# I004033E9 EB 2D jmp short qsr.00403418. w' _( [! z5 W5 O+ `$ I
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX/ ]6 w( M2 F; [% e" J
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
$ n) G! O0 z, @" P1 U004033F7 99 cdq ; EBX扩展2 X2 Y+ Q! s: i/ @& b- b
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
: Q$ m/ M6 i, Z- E004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
. c+ N% F9 ?. g! S+ q% L004033FF 2BC2 sub eax,edx ; EAX减去EDX
5 r9 ^" y/ F w; d& p7 ]5 O9 t! L00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]& q7 n. p: Q" E6 C. Z
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
. b& s: h% _8 z5 P7 @7 Z00403409 99 cdq+ r- \3 ?5 Q% L5 F8 x0 I4 U0 d8 z# V
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中 k3 O: ^$ M4 D" M" ]/ K* N
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX' o5 F0 d/ w& c R
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较9 ~( |3 X6 G7 h6 \" U6 u
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
0 Z. _/ L( `! k% S7 |0 O00403418 E8 6EC00200 call qsr.0042F48B ; 3 [0 w7 [/ n! F" |: C5 i/ t
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]- L: R+ R3 F5 Q$ T+ N
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],92 ], ^" q% E5 y, c( y
00403426 E8 60C00200 call qsr.0042F48B
3 p( g$ ?4 S- {) J0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
( @8 {8 G' K5 }- a, K0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8# N9 B* B" O" ^
00403434 E8 52C00200 call qsr.0042F48B
: J6 D1 z0 v% b# E0 M* l- t00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
* }$ T2 t1 b2 j* [0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
. }' F3 ~' M* `00403442 E8 44C00200 call qsr.0042F48B
, T( y3 K/ h! R00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& d( ?4 s7 S; y% ~% M2 G& G7 Q* h" y# P5 Z0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],64 R" O3 [4 p) N9 m3 t1 j) `+ v
00403450 E8 36C00200 call qsr.0042F48B
8 [6 `1 Q) C# p00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]3 i2 ?& }7 ^; }! P. ~
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3, I% e9 K- I/ N* K( t( z
0040345E E8 28C00200 call qsr.0042F48B4 N. z" g. M3 o; e1 P3 q7 p1 g
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]. i: L% p$ I/ ~3 ?$ i7 v; E
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2$ B3 X1 ^5 Y( d k7 M
0040346C E8 1AC00200 call qsr.0042F48B
% G' T6 O3 S+ @: ?( Y00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]: S: J+ T8 t2 Q% p7 q* ^ q
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],14 W9 P5 r- `' ]/ U1 L* Y9 O
0040347A E8 0CC00200 call qsr.0042F48B; [7 p* j9 w1 Z- n% I
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
% u# W3 G; z" z: p00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],00 `) ~& B* }# X7 E1 c$ y
00403488 E8 FEBF0200 call qsr.0042F48B
" |' t) ]( t2 [, z# n0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
$ D. M' `( x- ~3 z* H. c00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1' Y+ }: v: p6 U3 k7 v; k; x
00403499 E8 EDBF0200 call qsr.0042F48B: `& t! Y$ o$ z1 K2 W
0040349E 32C0 xor al,al ; AL清0' @5 D* y( Z+ ~' t
004034A0 E9 88000000 jmp qsr.0040352D, j6 X+ i. I% D+ |7 X1 u
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
$ G4 Q! T+ N+ [* E$ y; T004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]0 {% l! q6 k: H( a. B+ f- y
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9" g j) N7 a; W1 G2 L1 g9 n
004034B3 E8 D3BF0200 call qsr.0042F48B
+ I7 Z9 y: D( D) z004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]4 a5 r2 j) v; {5 F; H# B
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
" X7 K1 k2 ?& y* ~ [1 Q$ f004034C1 E8 C5BF0200 call qsr.0042F48B
+ d6 B. R! i' w+ {6 _/ R004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* n; A" L/ a9 s
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7, k- E' J4 @5 O( N9 Y: U+ @1 f, F
004034CF E8 B7BF0200 call qsr.0042F48B
6 ?9 K/ ^- @ F% l004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
9 a, U6 g8 ~: m& t004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6; L2 u4 `3 g/ l! Q$ F
004034DD E8 A9BF0200 call qsr.0042F48B
8 L. q7 n D$ J& b004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
/ p9 w o$ d+ y+ s0 d4 l2 ^004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3* L$ Q/ z. ?: m! v3 ^* _/ d/ N/ V
004034EB E8 9BBF0200 call qsr.0042F48B# ?, f/ V& q$ q! A' U
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]4 x# ^8 b4 s# e+ w% s
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
5 d. D# ]% }+ }/ @004034F9 E8 8DBF0200 call qsr.0042F48B
% E' v- t6 ?3 |( _4 N/ _004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
: l$ M2 B& c, o8 K: I4 D. o4 ]* I00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
, S. f4 q, }* \' k1 Z! Q1 o) v00403507 E8 7FBF0200 call qsr.0042F48B
, {( k, Q$ W/ L+ F; g0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]) e1 H3 v& c, \ ^. j/ {
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
7 |9 T* W; a. Y$ G' G- N00403515 E8 71BF0200 call qsr.0042F48B
- u1 d# r! a" S* I+ I0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
6 b3 I, l. m* v0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
9 [3 D8 }6 q ~, x. h8 T/ B2 w00403526 E8 60BF0200 call qsr.0042F48B; G! D+ R3 e0 S* ?3 `
0040352B B0 01 mov al,1
/ {, |- y% V/ S: M" M, ?1 n, ?( u0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]' P4 w5 o' v; i% w. Z. N; ?$ L
00403531 5F pop edi/ s+ z- b/ F: P8 Y. b- G
00403532 5E pop esi& W9 j w% H; h9 _
00403533 5D pop ebp
( @! S4 @* ~# N% d G/ S+ z00403534 5B pop ebx! o. Y+ A/ V: h) Q2 `. X3 N9 R
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx0 c6 L/ P9 K! Q! N; K6 m
0040353C 83C4 30 add esp,30 ]9 F; i7 z1 ]) F/ c
0040353F C2 0800 retn 8! y* B7 u4 V! q6 B Y8 X) [; A0 D
--------------------------------------------------------------------------------
5 g, W" {8 ]2 F# ?$ ?0 n【破解总结】- Q: n% h* x1 W, b& |
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^2 Y0 N( I0 R& Z$ |; z
用户名：yijun( m2 o) \6 b, g+ ^: T
注册码：4893*7777*3726*7777*0529' j- }0 F8 A2 d ]$ Z' L
--------------------------------------------------------------------------------
* N5 M3 j2 `6 k4 o: E# w* {( b& a/ a【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡