|
|
|
【原创】破解Quick Screen Recorder
7 Y% Z3 h9 E$ b# f【破解作者】 yijun
2 \# `. S, n# q% @9 t* W) Q【作者邮箱】 [email protected]
b- W1 l% @) ]3 {" Z【使用工具】 OD,PEID
! V' ^) h! d' O【破解平台】 WinXP: W. O b( }" s+ ?
【软件名称】 Quick Screen Recorder9 l/ E/ m) A; A
【下载地址】 天空9 s3 o5 Q) B, q. r$ C8 s
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. q+ G7 e ]* b4 N7 R
【软件大小】 540K5 g" Y6 M+ u i: K+ v$ T
【加壳方式】 无
+ D; w; T% u" |" h! g% D7 P【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）4 ~% Y6 `/ j4 G8 b
--------------------------------------------------------------------------------
, \; `* e+ H' Z+ i$ @/ I【破解内容】
. m0 S5 @1 p- L9 Z PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：! V( o. q& F$ D- P7 u5 Y t
00404C69 55 push ebp //在此下断. J, z2 O1 v o" U+ ?/ |
00404C6A 56 push esi
$ N, w* S* A0 z- J; M00404C6B 57 push edi+ u3 _1 C& n5 X9 P) m( h! j6 G
00404C6C 8BE9 mov ebp,ecx5 d' G+ I+ L& ^: R! h6 L w. q
00404C6E 6A 01 push 1/ q- E' m) d0 I1 l3 ?/ Z. Y( D) M/ R
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
# K# x" z0 ^% A% r00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]) S @4 _' \; ~) ]1 l- M/ _
00404C78 8BCF mov ecx,edi$ P* b0 F, q# r
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
+ V+ W% t6 w4 Y, \" `! G5 L* U00404C7F 8BCF mov ecx,edi% Y1 h% B8 [# z$ X
00404C81 E8 A73E0200 call qsr.00428B2D/ g3 D& b! ]" U/ V' B1 A) ^- A+ f, [
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
2 t3 R( q; j4 o3 s: J4 |& p00404C89 8BCE mov ecx,esi! _ Z+ p8 R3 y! X0 `, r, ?1 F# H
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX" w2 r. Y+ L9 Z+ b z
00404C90 8BCE mov ecx,esi* K( L9 y+ k8 s8 E& J
00404C92 E8 963E0200 call qsr.00428B2D- x" S5 q7 O8 U. B/ ~/ F6 |+ C8 k
00404C97 8B06 mov eax,dword ptr ds:[esi]
- O4 ]. k6 h% [6 Z0 L; i: o, f00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2& ~7 C9 d/ a4 h m# x; G
00404C9D 7D 26 jge short qsr.00404CC51 H) W. X/ M7 x4 H0 B& |& @) D
00404C9F 6A 40 push 40
6 x6 P. m8 p' @% l2 ?8 g& C00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
[" {, N N; C D1 z5 V, u00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
/ S- z5 s- P# y4 ?00404CAB 8BCD mov ecx,ebp; N, }' Z4 |' }- p" d9 O3 N
00404CAD E8 C3840200 call qsr.0042D175$ i4 ?$ l ]2 O' Z% S. I
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
4 d; S2 _# w- Q6 |/ a5 r/ n4 y" C00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
# B9 w5 Y7 B9 X00404CBD 5F pop edi4 x+ \0 K+ Y) ]* @
00404CBE 5E pop esi
4 h& j! R* d) w; r6 ~00404CBF 5D pop ebp
, z# X1 A: o- w5 D; [8 ^5 B00404CC0 5B pop ebx) v8 E. }2 E8 S6 f) ~$ a$ f+ k
00404CC1 83C4 18 add esp,18
# H; Q& g& ^0 M ?7 }# `! Z6 m00404CC4 C3 retn
% O9 w- W7 {) ~( p00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
4 ]! k5 Y; v7 Y4 |00404CC8 84C0 test al,al0 n4 w4 v) v0 Z) v9 K8 a
00404CCA 0F85 1C010000 jnz qsr.00404DEC/ e" d3 ]* H& P) j4 v; s
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]0 r5 j& |0 j) Y( N5 V
00404CD4 E8 87E3FFFF call qsr.00403060
, e% S5 ~2 J/ f6 n9 O* @# R8 t00404CD9 51 push ecx
" }) ^, c- z3 f2 b( S* Y' Z; `: f00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
" Q/ {8 R2 j1 w0 }00404CE2 8BCC mov ecx,esp* Y3 K* B$ c+ A$ O) U
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
7 ^ b+ F. h/ ?+ x" @" q% d( W00404CE8 56 push esi
" C9 z- `7 }5 ]00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
, O3 z6 V: U! I7 U5 r) G00404CEE 51 push ecx
& T9 }3 s8 D& G, ]2 u% B! M( `00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
5 e `/ F+ W0 ~% [' D7 x00404CF4 8BCC mov ecx,esp, X/ e* @- d& o& t
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
; w4 Z/ |, o: K1 Q5 l: l% D00404CFA 57 push edi
4 l s+ a5 J" d00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是05 q9 M9 F5 m9 M1 Z
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
. ~2 F6 Y) c' d. h00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
# _: T' A' [! `! M% X$ z00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~" j3 q4 |3 ?$ T
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~# H* \6 c1 @9 d, F
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~- I, i Y9 _7 f) R: T" N
00404D12 6A 40 push 407 f, Q% C7 C0 {6 {# j) X5 [
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder", h' d: v; T; v9 y J$ U, s. S# i
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."2 v6 d7 _% k& y6 d9 I+ y
00404D1E 8BCD mov ecx,ebp
% |7 }' W/ M( [& V) O8 X0 p00404D20 E8 50840200 call qsr.0042D1758 x8 M0 \9 A5 }( e2 w& S
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 i8 p$ S/ |# c9 C, L+ Z0 a
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
( \1 N: s3 N% \2 J4 `, s _00404D31 E8 5AE3FFFF call qsr.00403090
0 ^3 j3 z0 ]8 |+ {- d: H00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]6 \7 E/ a" o* e
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx0 T8 Y( f* j `" z3 g# D* w' `
00404D41 5F pop edi
' t6 r" A: v# a- s T% g00404D42 5E pop esi
7 v; f" h) K0 C00404D43 5D pop ebp
. i/ p5 r" t1 y/ g( W00404D44 5B pop ebx, K T$ \! u! R2 F5 ~
00404D45 83C4 18 add esp,18
6 C8 ~1 j6 w0 } Y. H00404D48 C3 retn
/ m: o% h* T+ }5 A6 q! h*********************************************************************************************************************************************************" R2 F5 g! g) R. ^
跟进00404D09处CALL来到：
. O- t& m( z! r$ w3 `5 A004030A0 6A FF push -1 //一路F8下去~~~~/ P' n6 B5 F9 W1 v5 U5 Y
004030A2 68 C88F4400 push qsr.00448FC8
7 O! p( A: n- j. `3 V6 {5 W2 E* a" t004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
# S2 n# r) u( C# H; {9 Q. p. F P004030AD 50 push eax4 ~+ L+ ~4 g/ h1 k! [$ J
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
2 w. G' p. j$ o4 {004030B5 83EC 24 sub esp,24
2 R0 Q$ E. d: |# X! W+ U004030B8 53 push ebx
% m, t5 { H) ^# V: K, |0 {7 y' }004030B9 55 push ebp+ G4 e6 U2 @- M# Q: z8 f; n
004030BA 56 push esi3 f7 h, z2 S. t, x& m# }
004030BB 57 push edi
, v/ X4 c$ T, B) h9 A2 i- k004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"0 ?, L0 N, Z6 J$ ?7 B; m, Z
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 `6 l0 X2 `: j% m1 C4 R004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
( q, u! C! R* r. a- g8 U004030CD E8 27C40200 call qsr.0042F4F9; [: P: f/ ^3 u. D; J+ X Y
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]3 e0 g; @2 |- W; \) C
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
& ^1 D" V& t5 E5 |004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% l* c- W @/ Z7 ^. f
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],38 W0 y# j6 D; L7 \" b" e
004030E4 E8 905A0200 call qsr.00428B79& q" |% t7 [+ Q7 D: R6 z
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]4 F1 M1 m: V: u4 M2 x6 {
004030ED E8 3B5A0200 call qsr.00428B2D
: Y: F2 J# W9 F8 {% U" K% A004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
0 X6 N. T8 u- w; c2 K/ j- @3 g004030F6 E8 7E5A0200 call qsr.00428B795 N" E& Q4 i$ y) s" g& R
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
, \$ M0 ^, b% j8 g! A& u004030FF E8 295A0200 call qsr.00428B2D
# f! ]0 c5 _ O B4 _6 g00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
2 | h" y5 w1 z, u; ~+ A- h00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]( S) a5 q& k0 Y* }# T5 S' B( d
0040310B 83F8 02 cmp eax,2
+ A1 T* T( M& }/ Z0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳; C1 @& x2 k( y9 f" G; h! m. {7 H8 S
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]' Y* ]# J; F7 a
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
7 @4 u& b- ]' D5 o0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
! F% w8 }: Y. b3 N00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
- Q1 M$ J3 d% B7 G# |% s00403126 6A 01 push 1
: Z$ U8 p* R: K _$ _6 r00403128 50 push eax( \* B8 r* f# t
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 A) _1 G6 p8 e
0040312D E8 C4550200 call qsr.004286F6
( P7 J! p' }( P& \2 m00403132 8B00 mov eax,dword ptr ds:[eax]' s! y0 V$ }& U2 X: S W* f
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- a- p0 \1 z" Z" }" T
00403138 50 push eax
: n2 `' n2 F+ v, g5 U00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
. x8 Q4 }! d( k, j+ p5 B' O0040313E E8 4D560200 call qsr.00428790- ] O4 w& z: I# r, H( A
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
# C, Y: h+ F- ^+ |! A1 T00403147 8BF0 mov esi,eax
; e. U) A8 w) K$ `00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
* R' A) U, q2 c: M7 P& H3 A0040314E E8 38C30200 call qsr.0042F48B
+ B) D! q ^! X! @5 q& D00403153 8D46 0A lea eax,dword ptr ds:[esi+A]: t3 w* W. @$ J' M- P
00403156 B9 3E000000 mov ecx,3E
& K8 s7 y* K, e0040315B 99 cdq+ P* B- |5 s6 i
0040315C F7F9 idiv ecx$ k$ c a r" q4 \: O3 r! T
0040315E 6A 01 push 1$ L; y( J! b8 D* c
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
, O# ^& ]) t _ J00403164 8BF2 mov esi,edx# t9 E. E1 A- K3 e( u$ e. S% e2 [
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
3 b, O# [" s' x# X5 ~4 q0040316A 52 push edx; c' J# M, O, L/ L: b8 E, v4 ~
0040316B E8 0A550200 call qsr.0042867A
. {+ |9 E# }& G2 Y( Z8 L/ N00403170 8B00 mov eax,dword ptr ds:[eax]* O" }+ S6 N9 y) g. ]( s5 o: D8 \# q2 ?: Q
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- B1 @" Q# d6 C5 o2 L3 i) I8 e
00403176 50 push eax/ o. ~4 F9 l: d" @) J$ B' n
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
1 e9 V+ Q7 D: Q( s% y O0040317C E8 0F560200 call qsr.004287900 O" C( u( _5 `4 @: t- Z
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' n X2 j# S( T3 J
00403185 8BF8 mov edi,eax
4 \" [/ l3 D2 H3 b7 y00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
* \( g# Q9 A6 o$ C3 v) r, u0040318C E8 FAC20200 call qsr.0042F48B
7 a7 s3 |$ G4 `00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
/ f3 C$ I- S- h. A00403194 B9 3E000000 mov ecx,3E
5 r2 D% Y2 ~* A) g7 u; ]' I! Y00403199 99 cdq
( [. V& s" y& p0040319A F7F9 idiv ecx
8 p3 ~" E$ C3 z0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]" Y) G4 I) e3 Y- z s
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
/ h) t$ r( T3 O6 B* d' o/ `004031A5 8BCA mov ecx,edx
# b2 h( W0 g9 l8 S! N/ ? X* f9 g004031A7 894424 24 mov dword ptr ss:[esp+24],eax
! f* m. a0 a7 E# r! [+ W; c; T004031AB 894424 1C mov dword ptr ss:[esp+1C],eax% J/ \0 n6 _! k9 f9 H; F5 s2 W
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
9 L5 T. n& D) a" r& A; c! o( C004031B3 894424 14 mov dword ptr ss:[esp+14],eax3 W6 ?4 g( S$ f/ t8 o
004031B7 894424 10 mov dword ptr ss:[esp+10],eax# ~2 J4 `5 T+ y: B- J
004031BB 8BC1 mov eax,ecx$ r' P0 l; L. v7 Y" l5 o$ {8 i
004031BD BF 0A000000 mov edi,0A
6 n9 b# |& t$ H! Y6 J1 Q004031C2 99 cdq
/ C# l$ J" q( i004031C3 F7FF idiv edi5 C3 H$ x) `+ \6 v2 x
004031C5 8BC1 mov eax,ecx" P$ v) O$ g6 M$ ?+ p2 h
004031C7 B3 0B mov bl,0B
% U4 ]% M, A* G, {6 J, m* [% z004031C9 0FAFC1 imul eax,ecx2 z2 f5 S7 n3 ~! ~% z
004031CC 8BCF mov ecx,edi
6 ]1 U* q+ V( V3 S* d1 T004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
+ u* C+ x9 @$ Y" [/ o0 Z0 }% y4 t004031D2 52 push edx# }% g/ q' F' N8 L L% I1 ~
004031D3 99 cdq" \6 G6 \' ]! ?9 H3 q' V( g
004031D4 F7F9 idiv ecx H5 D1 F2 [3 |6 Q" M8 X7 ]
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
' t; C! W6 l2 t# } B& N004031DD 2BC6 sub eax,esi
0 U8 P) d. H9 l/ G004031DF 52 push edx
5 `/ V1 l2 T$ v( c: |: R004031E0 99 cdq7 s$ @; H. t. O- ~. J
004031E1 F7F9 idiv ecx
+ r& l0 H2 M2 f; R8 B004031E3 8BC6 mov eax,esi
6 i0 L3 ~7 l/ G) W004031E5 52 push edx: {+ {) B3 c% R" b6 e+ ^' o. {
004031E6 99 cdq
* V/ t+ I! ^3 r004031E7 F7F9 idiv ecx
% ^. _$ Y$ @6 J2 Z004031E9 52 push edx
& s9 A! d% d8 ^004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
i; d0 _1 F2 K: V5 y0 Z004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
2 G$ v4 Y& Z3 x. ^$ {5 O6 j" ~004031F3 52 push edx
# ~; i" a' _" b ?; ^004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893- j1 N! \2 @* W* y+ j0 f1 v: O
004031F9 83C4 18 add esp,186 k$ |8 q: [# o u/ p; m
004031FC 6A 04 push 4
. g& q8 i) Z+ y& o) v3 d `0 d004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]+ K; L6 t9 @2 w$ O# ^
00403202 6A 00 push 0
; C/ t8 o8 B4 p* a6 t9 I! G) X00403204 50 push eax+ ]( w2 H0 C* m' G
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 s: F! }' P2 N# |, F! d00403209 E8 D6530200 call qsr.004285E4
* `% Z% w8 x0 @# Y: U0040320E 50 push eax
3 O- c7 A) m' L. T$ V- E0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
: a: r6 I2 v; Y3 c, o% q7 n8 c9 R00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
2 e2 p% j. C; z9 C00403218 E8 A7C30200 call qsr.0042F5C4
! G7 h7 J' e7 P* U' L0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. B* y& p" ^' g# L( u9 z) Y9 V00403221 885C24 3C mov byte ptr ss:[esp+3C],bl* j2 i1 a$ f) \$ A
00403225 E8 61C20200 call qsr.0042F48B9 K/ R# Y# {0 k* M- T' r
0040322A 6A 04 push 42 _; a3 _# `4 s9 r5 R6 P
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]- J: N' w2 Y+ A5 W5 b7 |. L
00403230 6A 05 push 56 z/ `4 G- |/ {0 j, j+ ?5 D
00403232 51 push ecx% c2 e; I! O$ ]2 U6 p4 F% e+ g2 G
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
. y' G f5 h- v00403237 E8 A8530200 call qsr.004285E4 u8 D' N k3 O+ ~; n* h0 A: p
0040323C 50 push eax
7 M- G; L8 z4 J6 a x0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]8 F2 }% p t2 d; a- d0 A# N) N
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
$ |! m, J+ y! R5 O00403246 E8 79C30200 call qsr.0042F5C4
/ _/ K( R5 b: X/ }, a0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 Y" b5 a9 `! u5 v! |3 I9 x0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl7 _, ?: O1 z% y& t: ]
00403253 E8 33C20200 call qsr.0042F48B
0 D/ N9 ^0 m# y7 p# S6 w00403258 6A 04 push 4
D; W2 C: ? u) v0 k0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
7 P6 P6 O) `/ y* i$ q2 U$ q7 d* r2 t0040325E 57 push edi
- T: d0 a9 J! K9 O! o& C/ c0040325F 52 push edx
4 z, k0 t2 u, G- }) O& D/ f00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
6 |) r; z' Q8 Y00403264 E8 7B530200 call qsr.004285E4
2 a# E# m- X# p o00403269 50 push eax
: I5 X3 @* p1 V0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
2 o5 a# u, y3 o0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
8 M, b6 S: y" l4 B* ?% J5 |00403273 E8 4CC30200 call qsr.0042F5C4
& q# |+ O5 m, H6 W00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 p# g- e/ J9 P0 v$ F5 x0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl. y9 s! \. J/ o5 ^( [( r7 J
00403280 E8 06C20200 call qsr.0042F48B5 j) ]! p2 k3 W: X" @" h) ?, W
00403285 6A 04 push 4; ~4 l; V) u, Y6 @* t2 n: O- G
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
& R# }+ h$ r% i {" i4 e. O- S0040328B 6A 0F push 0F
( A% B" }* V$ u. k0040328D 50 push eax
2 Q7 ?" T$ I/ A* V0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]- {/ d2 j# S7 l& [0 n
00403292 E8 4D530200 call qsr.004285E4! j# C, J# p& z% M$ D
00403297 50 push eax! S ^& H B) ^- o m
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]( o) v' S- B. i) Q7 E5 J* f
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
8 O2 |( u, |: x7 X- g004032A1 E8 1EC30200 call qsr.0042F5C4% I% e" S$ ] [& C
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 I* _7 k( I+ p' x5 x5 ~6 W6 B1 G7 B004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl* ]& ] M/ r! U1 E5 o; Y
004032AE E8 D8C10200 call qsr.0042F48B
) D* W6 e( {3 U$ v% B; b004032B3 6A 04 push 4) }" w, Q8 Z& Z/ b R
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]5 Q' c; {: b* L( g4 U& y9 t
004032B9 6A 14 push 14
7 `5 R X- P* t1 b004032BB 51 push ecx
. d- m0 q) D- m2 j, c7 I; @8 g004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]* d9 t2 g; o s! O# w( k
004032C0 E8 1F530200 call qsr.004285E4
; J; `6 n. B# ^8 A7 A004032C5 50 push eax
! }) E" z/ `" \9 i9 e004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 \+ e) U$ z( |6 J3 c1 g9 j004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
/ T% D3 t" B: t8 ^5 \4 J& R004032CF E8 F0C20200 call qsr.0042F5C4 K" F8 P$ n0 u6 q
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]& N2 O" A- R+ \2 v! p
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
, n6 h8 u% I8 H: `004032DC E8 AAC10200 call qsr.0042F48B
- x. A1 a) y* J3 I; Y4 m004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
, ?( r& m% o3 D9 l/ j0 G# U& g004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
- `7 q0 A* z9 l2 d004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
; E: l/ N* l5 r; R- ~8 R; T004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
4 t3 u5 s$ B) i% W0 \& z004032ED 8ACA mov cl,dl ; DL送CL
* \5 B5 T# e1 n, r, z004032EF 3AD3 cmp dl,bl ; DL和BL比较1 k8 i6 L9 e# r, _
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）; A3 X% w% f( W8 q
004032F3 84C9 test cl,cl
7 s8 V" t# I# A; Y004032F5 74 16 je short qsr.0040330D) k$ d' V" h# J7 r9 J* L& L
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
6 |# w& K) y5 E* H004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL1 [" c+ j, y0 G- u' e. P' J% u: ]
004032FD 8ACA mov cl,dl
8 [, |8 v0 r: d) T# ]004032FF 3AD3 cmp dl,bl ; DL和BL比较
- a) U7 A% |# m2 x00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）+ f2 f7 J7 ]5 O F
00403303 83C0 02 add eax,2 ; EAX加2
* h! _5 G, D) w0 W00403306 83C6 02 add esi,2 ; ESI加2
- U# k% U+ C: K, F `( F00403309 84C9 test cl,cl! k2 l) G/ I6 Y9 ^# A' ] D) ^
0040330B ^ 75 DC jnz short qsr.004032E9
& R% }, x3 ]3 M3 {1 h3 X0040330D 33C0 xor eax,eax8 g$ i. \% p5 d4 K
0040330F EB 05 jmp short qsr.00403316
$ ?/ \+ {: n6 R* }9 J! h# c5 E00403311 1BC0 sbb eax,eax9 _5 D" E+ h4 e+ B
00403313 83D8 FF sbb eax,-1
4 r- L; a* \3 D/ p/ q5 t6 a. T8 G8 V00403316 85C0 test eax,eax
1 n5 C8 N& s" T! Y+ Y5 B- r7 g00403318 74 0E je short qsr.00403328- k3 ~( T2 s; j7 D2 X
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
+ L* D; m2 N4 B2 f0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]" h3 ]% [, n, P' Q2 A
00403323 E9 F0000000 jmp qsr.00403418% z0 n8 N5 H5 |9 u
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
) ]/ a7 F1 V- D5 o- D! m( n0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ p& p7 ^( k$ N/ n) ^# I
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
: |- r) M/ Y) p: X& |3 }00403333 50 push eax. C: Q6 V' X# b7 q/ G7 b) M9 G
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX; z9 \% Y' B/ r6 ^
00403339 50 push eax
) p$ L: ]$ | ]1 n9 e* m0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX- A) ~' X+ v0 q
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX( G9 \& e$ ]3 F4 z n; z- d+ Q
00403343 83C4 04 add esp,4% k" `5 @$ g4 X0 ~; \5 r4 j9 n
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI4 i. P% O7 c- [ Y- Y
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
" k+ h* m! C' Q5 s, _2 H0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
. a, s5 ]9 [- N% R# e% _* m' L0040334F 50 push eax( L0 V' a3 F, \4 N
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX2 J' j+ H$ b( F
00403355 50 push eax9 N5 E6 U1 x: ~$ H
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
' ^0 J/ u, a4 H0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
% J& Y5 o( ?' x& d. R& Z0040335F 83C4 04 add esp,4/ U% w7 u3 `& n6 A3 O
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
0 I2 E# g5 @1 ?, N9 V00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; t* U, f( [5 M$ k8 H
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]0 ?' v, Y* {0 ~8 ^7 ?" Z7 p5 w
0040336B 50 push eax3 R% Y% p$ h8 l# h2 x
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
1 d M, ~% p7 P# Y00403371 50 push eax
$ e9 B$ ?: w( {7 E; A5 _6 j00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
7 ` L2 ~, _: _00403377 8BD8 mov ebx,eax ; EAX送EBX
7 M* O+ H1 `: a% J' v1 ?00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
# O3 u( t' D2 }4 o0040337D 83C4 04 add esp,4
( K- e5 \+ F( K2 C00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ N2 }5 A+ W6 n! {8 b2 y00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]5 V' s# h6 B4 R K1 ^0 ^9 d
00403387 50 push eax
8 ^/ v) |1 n7 X% e1 r0 @. A00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX' W( H+ r R; j& V
0040338D 50 push eax5 E1 {' t: R3 p3 H v& t1 p
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX: {, f' I6 J G. u
00403393 83C4 04 add esp,4! j" U% X, s3 J" q
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: I* {/ ~& _& Y
0040339A 8BE8 mov ebp,eax ; EAX送EBP
: s' H7 m2 K5 B; O0040339C 6A FF push -11 N. Z. j6 i$ I+ l7 ]# I
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
# c! u; Z, d" t0 j004033A3 6A FF push -1- X/ E8 j/ N) Y5 _) ~
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX0 x5 l; ~1 V6 y: K2 Z6 |
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX/ H" _1 I3 q3 t J5 K$ [ X
004033AE 6A FF push -1" m/ g' g1 i: @) W3 T
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
+ t0 K; |# M! x+ ~: n1 F004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX$ P. ?% B0 N' B0 M- J
004033B9 6A FF push -1
, k) n) n8 j! b2 | d004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX* G3 L' r. r8 L+ |
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX0 z( }: \; u2 V/ E* a/ F/ W* ^
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX0 E! V+ N* N5 _
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX5 q j* b+ K4 B% |
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX0 b( U3 Y m: v& x) ?2 I
004033D7 D1E0 shl eax,1 ; EAX左移1位% Q! @' N0 }0 x5 T* A
004033D9 99 cdq ; EAX扩展5 C0 g' g1 \! m0 n/ M ]7 z
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中+ k/ ]5 O# o" S& C
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
; V+ E. u9 q$ ^8 i4 i. t004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
* L" x5 |0 {' v" n' y T; D. |004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
( q* I) l: j# e' R004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10] g# l; f0 p' y# `1 e
004033E9 EB 2D jmp short qsr.00403418' N# j. e; |, \" w$ L/ H1 s! X8 S+ J
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
1 `6 S, t6 d0 T9 W9 ?" t5 [. X9 B004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
7 Y( M( H. r2 z W7 M$ C K004033F7 99 cdq ; EBX扩展+ v1 i4 W% `6 }* [3 r* ]) X
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
+ T! B) |( ]& W$ l; H8 i: _$ y004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
: ^5 B$ `( I1 d: _ i1 _& M" x004033FF 2BC2 sub eax,edx ; EAX减去EDX- l, L+ s+ t4 x3 y% U$ H( R/ y
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]9 G; @& f9 Z* S
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX7 t2 t) K# t, l
00403409 99 cdq
. {' a, w( |2 ?" ^ c1 M6 H8 @0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中2 s2 F0 f1 T0 J2 B# M
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
$ F7 l* d, r! C W00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较8 H5 t. T+ ?0 c, h5 A' d
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）: s( g7 m6 c5 d; \+ y. L) e0 H
00403418 E8 6EC00200 call qsr.0042F48B ;
; D" b) o5 Z# A, U! ], R2 E0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; i4 {& ^. e- o5 V9 w. o {5 P/ P
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
[, S; a, j) k$ f5 @/ }3 e00403426 E8 60C00200 call qsr.0042F48B2 x/ s3 z) t' O, ?, ^ s
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: ~# b$ x0 U, R2 U8 D" M0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
% I- T" f9 n7 f) I. A00403434 E8 52C00200 call qsr.0042F48B" P# r2 D. o! @! @5 ], S
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], I/ n; x( z* K
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
+ u; p P! M1 P3 X/ l' r+ L00403442 E8 44C00200 call qsr.0042F48B
4 L3 m1 @) C+ ~' X. p) r00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]/ f( F0 d3 }' f8 Q
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6( n" R3 y1 F+ v1 ], U3 O
00403450 E8 36C00200 call qsr.0042F48B% }! E3 g& S9 _6 ^/ u4 O
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28] r: i! F$ {/ ]( U
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
" B( l# _- ]3 X, ?6 w4 E# S; n! @: _0040345E E8 28C00200 call qsr.0042F48B
7 g1 y% U6 z# ~. y, n00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
5 h* M! @% L% J" `- J00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],24 I$ D5 A8 H& [" h
0040346C E8 1AC00200 call qsr.0042F48B
9 y m/ a! }: u00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
, a) w0 F+ m4 n3 D- l; u00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
: N( S. S; h* }2 b$ @% t5 d0040347A E8 0CC00200 call qsr.0042F48B
9 V9 C! A# G( M+ M- e* r0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]( L4 q% G$ O! N! C# K& Y
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
1 \6 _! `/ e0 |5 F00403488 E8 FEBF0200 call qsr.0042F48B
( q- B9 J$ t7 C X0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( H3 U& p4 ?, t( O) \3 h; S+ W00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1. d$ {4 r+ J/ k% d3 a0 k$ l
00403499 E8 EDBF0200 call qsr.0042F48B
$ H3 B' k" U3 z7 G9 I: M( Y0040349E 32C0 xor al,al ; AL清01 `6 j! p. u) U. s8 l, J
004034A0 E9 88000000 jmp qsr.0040352D
+ w2 b8 ~0 F8 r r$ i+ X004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~2 h* a! i+ C8 Y" y( q4 x
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 A: A4 a7 p! j; F" D3 ]
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9. j' Z! X' W' F$ \. S% s' W4 w
004034B3 E8 D3BF0200 call qsr.0042F48B
. Q( x2 z0 u0 r8 Z7 B004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]+ `+ d1 X1 u- [$ ^7 l
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
# k7 r8 ]( W! N6 M, N004034C1 E8 C5BF0200 call qsr.0042F48B
- M/ B: ^4 r7 [) o+ Z3 M: |. S% V' {004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
" u" h3 }& S( g3 i$ ]( o, z004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
7 A# o2 A0 }9 @/ z* J) L, {004034CF E8 B7BF0200 call qsr.0042F48B
o I; @ }/ }004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
" L4 p# Q- R/ j# b3 y+ I004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
5 s, }' d. j: C8 j004034DD E8 A9BF0200 call qsr.0042F48B, E3 D* ?1 y; G$ @4 m- W
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
- G' N' g- @& @2 ]4 w( t$ t004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
# N6 T9 y& y8 |- C) J$ \) Y, g% n004034EB E8 9BBF0200 call qsr.0042F48B4 `) C$ ~. P: {# s& T
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
7 ]$ Z, C+ d5 ~004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],23 t& L5 c! N1 V4 t N
004034F9 E8 8DBF0200 call qsr.0042F48B& [: t* P6 ?# a
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
# t) c, u ]+ e8 r00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
( k! r( _: \, p. u/ y00403507 E8 7FBF0200 call qsr.0042F48B
/ B4 C. q- t0 ` ?& o0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
( h; A, w1 r: \00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
8 x' q/ d% e' T; F00403515 E8 71BF0200 call qsr.0042F48B' J( k6 B- I. r' g0 r5 b
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 K$ f A. _: ]6 \/ e5 I. ]0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
1 z! L" V7 x3 f" J8 u5 V00403526 E8 60BF0200 call qsr.0042F48B3 v8 U2 Z# X: k% S
0040352B B0 01 mov al,1( ]/ v3 }" e: N5 |. k6 _
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
9 p# z% W4 v; n$ g' V0 l00403531 5F pop edi
2 j. r" U7 B. x4 t0 f, _8 X$ q3 S00403532 5E pop esi
5 N4 e+ P( l" r& Q/ E* E2 {1 ^( h00403533 5D pop ebp; v7 F) Z$ p& p
00403534 5B pop ebx( a9 L5 w O6 v. T
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
5 a. x. t! l" s* N) H- F! g8 ^0040353C 83C4 30 add esp,30
+ j0 ~; |/ D7 Q: R, t; H; Z0040353F C2 0800 retn 8+ ^( m7 S6 |5 A9 P
--------------------------------------------------------------------------------$ c4 Q4 ?1 {8 P1 Y
【破解总结】# [0 K% q/ z0 N# l0 H; Q6 E! n0 Z
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^: f5 ?/ Q- {6 _" g7 p
用户名：yijun
/ ?0 c3 s7 J% u& L5 m: t注册码：4893*7777*3726*7777*0529* e# a' x2 I6 I
--------------------------------------------------------------------------------4 @: O- ^3 q( f/ k
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡