|
|
|
【原创】破解Quick Screen Recorder2 q, I/ O, i2 I& ~
【破解作者】 yijun/ r1 H0 g) c/ g& ^, f8 R
【作者邮箱】 [email protected]
7 z: d+ [. c& G& G3 o5 D【使用工具】 OD,PEID
1 ~1 y0 Z1 \8 m. N! T2 m【破解平台】 WinXP/ ]9 V- h4 s& }. a
【软件名称】 Quick Screen Recorder
2 d- }$ X( Q: M! k" R【下载地址】 天空
# n5 J% W: F( V/ M/ S) ?【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
6 r; I# P: h! k" A* L【软件大小】 540K
0 e. G$ F8 v- C* J O- a, u6 Y【加壳方式】 无
1 u& E8 X+ G7 T" ~+ |【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）- H3 A0 ~/ m- p) t& [
--------------------------------------------------------------------------------
$ m# `1 y$ F0 X2 Z+ g4 ]! z【破解内容】
' L; {) @2 T5 t. p" R PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
* q( s. w6 _6 r8 J% q00404C69 55 push ebp //在此下断 K. {9 m. c! `
00404C6A 56 push esi
V4 u3 G4 x( b: P$ w00404C6B 57 push edi; x+ Q) [6 \- y5 j) j2 s, |
00404C6C 8BE9 mov ebp,ecx
# F2 B ^% o$ y) Y: ~, p) J& s2 \$ B00404C6E 6A 01 push 1; y7 d3 I" m; l1 C6 B% M& ]" k
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名) h6 i: b2 E7 z: r0 \; C. l& r
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]( n" b7 w# a5 q8 |6 ]6 i% f! B) F2 W
00404C78 8BCF mov ecx,edi6 W4 m0 w1 Q+ F
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
2 K5 ~9 q& m. B. }00404C7F 8BCF mov ecx,edi1 z2 F( [. [6 l8 f5 J. L/ K
00404C81 E8 A73E0200 call qsr.00428B2D- k$ A0 K/ O) d+ p1 O4 ^* o5 }
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
9 A6 \/ y+ a2 {1 G$ X$ M/ G# p00404C89 8BCE mov ecx,esi
' d3 p) ~) W, P- W) e$ b! b00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
% z T4 R2 l2 r% M00404C90 8BCE mov ecx,esi
3 j2 q v2 b, S5 S2 m F00404C92 E8 963E0200 call qsr.00428B2D* ~$ P5 W% a7 \8 u0 b
00404C97 8B06 mov eax,dword ptr ds:[esi]
# ?5 H1 d3 o$ _3 [+ E! T00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],26 Y0 q% J' D; _5 w( h9 D8 v
00404C9D 7D 26 jge short qsr.00404CC5
1 y O+ w/ K2 s; p, o00404C9F 6A 40 push 40
' X8 s( @4 q/ J9 U5 y2 y% x00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
1 ^7 u6 {2 x! C00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
7 I4 J' K2 a- h3 a1 i0 `00404CAB 8BCD mov ecx,ebp3 f" [& x$ ?4 ], k# y5 I" K
00404CAD E8 C3840200 call qsr.0042D175" W# q% W# q5 s
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
& Q, o0 B: d& O* r/ h. {00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
; C$ |/ t) i1 e00404CBD 5F pop edi# V: Z0 ^% v1 e! u8 o* N \
00404CBE 5E pop esi( S' c- S& ~" M1 i! J
00404CBF 5D pop ebp; \2 b/ Z# j% o% H8 k& `$ d4 ?4 v0 Y
00404CC0 5B pop ebx* f2 l9 K$ |8 ~6 F2 _; a$ O1 N# n" g$ E
00404CC1 83C4 18 add esp,18. H# C! z; p5 n$ {: Y8 ]9 Z5 ^
00404CC4 C3 retn: g3 Y' [* G; c4 U# h# x
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
3 f+ k$ C4 @: m0 f- G7 |; |00404CC8 84C0 test al,al
; O a8 Z) p7 k0 A) r00404CCA 0F85 1C010000 jnz qsr.00404DEC
3 x5 t8 z0 g* [4 a+ L6 X) S00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 d0 k8 V' H; T
00404CD4 E8 87E3FFFF call qsr.00403060
8 `# e9 D8 s& E8 c00404CD9 51 push ecx
& d2 u8 A; O+ Y0 K p7 P# |5 {00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
5 J9 q1 B0 E' `3 n00404CE2 8BCC mov ecx,esp7 \& o, }$ u' {! w9 C
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp* W/ J% L3 e D
00404CE8 56 push esi
* F9 E0 F; t5 z, h" d00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0, f* G( w! _: [' l7 Q
00404CEE 51 push ecx# Z) o" v# C/ \
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1. ]4 s2 y' |) X m! h
00404CF4 8BCC mov ecx,esp
9 G# y: Z" r7 W* w00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
) G" H* K- R1 v9 H00404CFA 57 push edi
" ^/ d; G. z/ g4 a9 @3 I& ~00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是02 v9 _; F- [6 X5 d5 `4 N
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
$ F( }, ~% P. D3 I00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0' C( d. W. i) d
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
% n: o' w7 [; ^0 P# j00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~+ f( @, ]7 A/ i D6 I) Z$ Q
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~3 e7 a# W" w- F* Z* q
00404D12 6A 40 push 40( D9 X9 |8 U; \$ O0 R& @2 ~) n: I
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"0 }: N4 @3 j# I8 @
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."+ M U" a$ i5 k% w
00404D1E 8BCD mov ecx,ebp6 B# ~0 j$ Y! F. Q
00404D20 E8 50840200 call qsr.0042D175 j- R0 z& A0 _2 H3 ~& X
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 w! x6 R& e9 a
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
; w" u! n$ _0 N h6 J1 j5 ^00404D31 E8 5AE3FFFF call qsr.00403090
* z; j7 q) K, S* [00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]/ }! `6 c- ^" x* V7 d
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx5 |5 t7 D5 Q7 R2 m$ N$ D7 c
00404D41 5F pop edi9 ?. A g1 Q# |" T) C. N3 B
00404D42 5E pop esi6 K6 h. j! O% q6 S
00404D43 5D pop ebp
8 v5 p' G4 `! M$ G1 _& D00404D44 5B pop ebx
; K5 i5 e& X* e5 v- M9 A1 w9 N2 _00404D45 83C4 18 add esp,18
* \. B+ R1 v$ I00404D48 C3 retn
* Z! {2 L: l B3 ^. Y0 b2 |********************************************************************************************************************************************************* Z3 _4 i. m8 V* y# z( g7 P( b
跟进00404D09处CALL来到：
' g) ^: {3 P6 b( ]% p6 ^5 ~004030A0 6A FF push -1 //一路F8下去~~~~
0 x& c3 i \/ X3 Y2 I004030A2 68 C88F4400 push qsr.00448FC8# H" `: A/ f/ o* V8 M1 i
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0], }# s2 A; n' C, I8 i
004030AD 50 push eax& i- G W( b! _- f
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp4 k. g7 J) J% V t
004030B5 83EC 24 sub esp,24 N$ e( s: Z( O4 @: ?8 Q$ }7 c2 Z
004030B8 53 push ebx
, K+ N/ [; a8 V. F, W3 ?004030B9 55 push ebp
& P4 _ b* H, a% C; s004030BA 56 push esi
1 Q* V7 Q% v9 |# C( n# D% G004030BB 57 push edi
! |/ G- i: B+ }4 u$ Y004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"7 o$ m6 X# d% L( ~+ B$ e2 G H) l2 `
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
7 J' J: Z+ d) B& d004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
- ]* p$ R9 ]" Z$ i, k/ f004030CD E8 27C40200 call qsr.0042F4F9- T: `. G7 g) c) Q h: F. M$ \
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
* M) j3 P0 `0 m# \+ i1 D004030D7 894424 2C mov dword ptr ss:[esp+2C],eax, P7 t, r( {5 Y3 d9 U4 W/ m
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
' p A0 `6 h! @004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
# A1 e4 o$ ~* C( y) h; u9 S004030E4 E8 905A0200 call qsr.00428B79
0 `/ n5 l9 b# o/ b5 z2 M004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
7 D: v c8 k8 f0 b004030ED E8 3B5A0200 call qsr.00428B2D
1 X4 Z0 }- `2 @004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# q& x1 u$ G+ z1 W- X004030F6 E8 7E5A0200 call qsr.00428B79
1 w! w1 Y8 D4 G. C, N( a004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
- O7 Y& a3 X7 w004030FF E8 295A0200 call qsr.00428B2D
4 T+ M9 x* n2 k1 Y# _+ r' k# R% X00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]: Y G% O4 m' O% u2 J. ]
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]# `8 Y% g; f4 i
0040310B 83F8 02 cmp eax,2
/ }3 L! {, Q% a7 `' r9 L0 n0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳; P8 d: [) l+ i) |$ b
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]2 |, _0 n* u8 X# v3 O( L# L% m
00403118 837A F8 18 cmp dword ptr ds:[edx-8],187 Q6 ^9 g1 \/ h$ f: }- u `
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳& ]) y L) e* f
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]0 ?, G m. d& O; R/ U" c- L9 l
00403126 6A 01 push 1
% K+ e: S7 c# k# ]0 _9 u3 u7 ^+ j/ \. t00403128 50 push eax
5 p' s# k6 S$ K& h" W2 q00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ \0 i; p* P# m$ W% W, L
0040312D E8 C4550200 call qsr.004286F6
8 V Y' k M' n6 n8 M& R& Y: n00403132 8B00 mov eax,dword ptr ds:[eax]
# \4 m; V! c2 U' k) I0 s00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
% n) W$ m0 H$ m+ n00403138 50 push eax
6 Q Y. {5 b) t! ?; L00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
/ }, d9 d3 ?% Z6 I" j0 o0040313E E8 4D560200 call qsr.00428790- b7 e! X- m) w# R \) y7 M& Y
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' ?+ l& w5 z9 ^$ d9 x+ O, \0 C00403147 8BF0 mov esi,eax$ W. V$ Y: a8 [' v) Y! ^
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ A' P0 T3 `2 \$ r2 I9 z' {/ v0040314E E8 38C30200 call qsr.0042F48B* w5 W) H- @. Y% [4 ]
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
6 m# D- P3 g2 w- D: _) f00403156 B9 3E000000 mov ecx,3E
\1 A# D! `0 d8 V" L, l0040315B 99 cdq
) _' S! w: r2 c' h& j" N; x6 ?0040315C F7F9 idiv ecx/ L" T9 I; B" M/ e) q$ Y# k
0040315E 6A 01 push 1
, e2 o& o* n& T" s5 O# Q00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]8 w6 A5 Y; w g- N$ ^2 \9 P
00403164 8BF2 mov esi,edx
, T& {3 ^1 m( A2 n( _00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]# t& p7 n5 T9 Z: B
0040316A 52 push edx( Y1 N$ d( d7 ~7 l. ]$ L
0040316B E8 0A550200 call qsr.0042867A5 V( ^) c" Y/ o# v N
00403170 8B00 mov eax,dword ptr ds:[eax]
% ?2 z5 e) b! c9 H% L3 l00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
( Q# A3 v9 p4 @; ], }/ `8 {4 ~00403176 50 push eax5 t. g+ o3 S0 K9 V1 u; |( s, o6 Y; i
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
5 \' a- @5 N: A t$ @6 h0040317C E8 0F560200 call qsr.004287905 t. B- m0 o& m3 d; n/ K
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 ^ J; j2 C( s. b00403185 8BF8 mov edi,eax
( [8 Z' b O2 a! q+ b h7 k00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],33 L7 q; D$ J& B2 y4 q, T
0040318C E8 FAC20200 call qsr.0042F48B2 f c6 ]9 n: A+ W
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
0 b+ D, M) J. K7 R3 k4 |00403194 B9 3E000000 mov ecx,3E9 a8 a3 R! ~1 F: e; }# s
00403199 99 cdq r- O9 |7 Y# v1 Z6 D' ^8 F
0040319A F7F9 idiv ecx
) k8 t: o; v$ d! ?5 ]. I0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
( U. o8 W$ ^5 U004031A1 894424 28 mov dword ptr ss:[esp+28],eax
5 N" M3 R- Q2 u004031A5 8BCA mov ecx,edx# A' R7 F7 { i6 E0 q( s
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
* l# U+ L! T3 u) w! I( k, g004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
: v$ p8 _) a9 r V004031AF 894424 18 mov dword ptr ss:[esp+18],eax& n4 R- @0 z* n$ i; D Y5 h" d3 k% d
004031B3 894424 14 mov dword ptr ss:[esp+14],eax. \- G( A' f0 N/ l+ Y
004031B7 894424 10 mov dword ptr ss:[esp+10],eax5 i/ `' m( K+ C5 ^# N7 U! a
004031BB 8BC1 mov eax,ecx, ? ~/ _. P! o! |
004031BD BF 0A000000 mov edi,0A
5 H! s5 _; s# Z7 i2 x" ]004031C2 99 cdq4 p2 j" h- B3 L% l+ c
004031C3 F7FF idiv edi
' j3 }4 T2 D0 p004031C5 8BC1 mov eax,ecx
; ?/ c) o; D1 f# h* B" p004031C7 B3 0B mov bl,0B
1 v& h6 G. D) I# }: E004031C9 0FAFC1 imul eax,ecx( p& n# L: K( z) C0 h% {3 b& v/ U
004031CC 8BCF mov ecx,edi* o* K1 G% l1 h& a# r2 I- L
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl- U: \* ~/ H/ O I. L
004031D2 52 push edx
; v! }* F4 r9 Z$ Q3 P8 _; g004031D3 99 cdq& h+ O. D2 i9 X
004031D4 F7F9 idiv ecx
: n$ u/ D! m! q5 C7 a+ R004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]! ^7 _) w0 B) M; p/ T( [: H ^
004031DD 2BC6 sub eax,esi3 L, ^( g% c5 ]8 W
004031DF 52 push edx
+ _ C5 D2 z0 w5 ~! g004031E0 99 cdq
; n w8 Z5 X# Y: ?7 ^$ y( n004031E1 F7F9 idiv ecx$ V P7 w8 l* D' I: ?* F: V
004031E3 8BC6 mov eax,esi
1 w. Y/ Q5 ~$ P" w; K004031E5 52 push edx
6 B- ^/ m* H) m: j) @ l1 b; K ~004031E6 99 cdq
4 W' @$ H( P: f3 }/ J004031E7 F7F9 idiv ecx
0 O% S) g# a+ T5 {2 @( J* I4 r004031E9 52 push edx9 s# k* L$ V \ J- w6 H
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]' L1 C" a3 N1 a
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"# g! \9 |( b" X. T: s3 C. U& a
004031F3 52 push edx) W2 p! u( ] K7 T/ s
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
}( ^4 R3 S# R- y( S, K# }004031F9 83C4 18 add esp,18
/ D" T0 {" R9 j( D/ ~( h( L004031FC 6A 04 push 4
* ?6 r, Y8 P4 w0 c" x004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
# M4 U! P6 \' ~" t- M6 L00403202 6A 00 push 0/ k! R e ~6 @( N# t) d
00403204 50 push eax) C# v2 z* E) N; o9 k ?9 I# _
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
) A2 c# N+ w) [; }4 S$ k00403209 E8 D6530200 call qsr.004285E40 N/ u( }) |# H% y! E
0040320E 50 push eax
. L% i, C3 S4 H$ w7 A0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]: h/ W4 R1 b9 w
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C4 f8 \7 ~, J4 R L5 M
00403218 E8 A7C30200 call qsr.0042F5C4- d( k' s! K6 x9 ^4 w* R9 |
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 H* M( y% k6 |+ e& u
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl3 c) u4 H1 @; G
00403225 E8 61C20200 call qsr.0042F48B% i: r9 E+ c# y1 g7 N: K* W
0040322A 6A 04 push 4
% ~ o/ K- h$ }0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]* D9 e# a9 e! Y; C
00403230 6A 05 push 5, X2 a$ ]0 r5 ~
00403232 51 push ecx, |/ ?8 _; f3 s" D3 J# N; f
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
* f* E, h8 ~& U1 D5 w' C, ^( _00403237 E8 A8530200 call qsr.004285E4
8 K8 v' T8 \1 F# H8 W" N0040323C 50 push eax
( d; g9 [9 B. B, ~( |" k0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
/ y' r8 ?, k& O. A! z" _00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
- v: _, A+ r, _) M7 x5 B00403246 E8 79C30200 call qsr.0042F5C4% f1 q; J" r' A3 U* L7 f) }" z
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( a: e7 }7 }! R) N- l- a
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
$ u* o8 j! k# s$ \; Z9 j. k00403253 E8 33C20200 call qsr.0042F48B3 h3 U: W5 _: b# R, z1 T
00403258 6A 04 push 4
$ n& w* q5 C* z# ?6 z9 v1 `0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
" F, S7 i+ v8 N) ^# L0040325E 57 push edi% ]- |; k \) F( @6 k; `
0040325F 52 push edx
* e' I0 t, |' y00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 P0 O7 I [# Q. z! K% u3 _00403264 E8 7B530200 call qsr.004285E4# @" S2 ^, `) U6 J+ c: E: b
00403269 50 push eax) x& \4 l7 m3 r% J) L3 I9 A* y
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]! d/ G/ i$ [2 t5 x
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E4 f3 F! J9 K! q2 J
00403273 E8 4CC30200 call qsr.0042F5C4' l+ \- F8 t1 B
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' S% |: u! S. H0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl' C0 v4 e' W7 y
00403280 E8 06C20200 call qsr.0042F48B) ~3 p& y0 S7 G! Z2 G, h& U
00403285 6A 04 push 4
9 R" ^0 M* s% M4 Z9 }00403287 8D4424 34 lea eax,dword ptr ss:[esp+34] }0 K$ h1 q( n, a* E( J% V
0040328B 6A 0F push 0F+ A. P( `" G% _) ?" C
0040328D 50 push eax- J6 e1 m: B) D
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: i' G; f3 Z2 A6 U" q9 ^* K1 o/ [ I00403292 E8 4D530200 call qsr.004285E4
* \2 X5 K# B. X00403297 50 push eax
3 D1 [6 D/ @0 X0 w3 V: @. H) a' p7 T+ Z00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
7 v5 ?/ e9 o% [: P( ~" O( }0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
4 | [% S$ m$ F' W, ?& W; E: M004032A1 E8 1EC30200 call qsr.0042F5C4
9 v- V. U3 M7 P' _004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" J+ w2 B) U( V% G7 O. O. J: C
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl* w/ E% X3 P* \+ ~7 O9 p4 p
004032AE E8 D8C10200 call qsr.0042F48B
8 N" Z' W( b$ f2 x004032B3 6A 04 push 4
/ h( o7 E' h1 x004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]; @+ m- _% O8 b
004032B9 6A 14 push 14
* _3 g0 N/ h) X( a: b004032BB 51 push ecx
, Z( ^+ }4 j0 e$ i; R/ k9 d004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% q, E$ p u- R0 Y2 c0 x5 @% t. s004032C0 E8 1F530200 call qsr.004285E48 I1 r- Q' o) L p0 x; o5 t
004032C5 50 push eax Z& Q+ K$ D9 J% q+ H% O
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 {! N B; x, X6 Q) n5 P7 l. V$ E004032CA C64424 40 10 mov byte ptr ss:[esp+40],10* k$ c: E6 k5 q& Y
004032CF E8 F0C20200 call qsr.0042F5C4
2 _2 {- N, r: h+ x, m9 s004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]4 Z6 I& M, b9 N6 l# \9 _4 E$ ]6 C" J' e
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
5 \. ~/ e' M( S# C) p2 f& r( k004032DC E8 AAC10200 call qsr.0042F48B, A1 @' e0 L/ K1 }" e- S2 y
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
) @& ]/ n& @2 L004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX w- Q* [0 X E: T/ P
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
& ~4 I. V* A' C/ |. B004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL/ ~/ N" r6 o- u p s
004032ED 8ACA mov cl,dl ; DL送CL
( r; Q5 x/ Q/ T( I3 a& M2 B004032EF 3AD3 cmp dl,bl ; DL和BL比较
6 c* @2 [$ R9 l8 `! {- {8 f" E2 X004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
; _* n0 X* @5 D8 U004032F3 84C9 test cl,cl& W: m* o* P4 c0 o
004032F5 74 16 je short qsr.0040330D
+ G1 K2 ?; l* V004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
1 |6 i( f! _2 i" X" r004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
$ C7 L3 v! @; a3 K004032FD 8ACA mov cl,dl
3 t4 i8 ? p, d/ n, x2 }& P004032FF 3AD3 cmp dl,bl ; DL和BL比较5 [) h! r5 _: F: [ V$ d# D( B
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
. J3 R( {. X; _00403303 83C0 02 add eax,2 ; EAX加2
+ m6 M- w6 c, N8 N5 X2 i, R00403306 83C6 02 add esi,2 ; ESI加2
. W) Z( n% W, s2 h- F( p- C00403309 84C9 test cl,cl* r3 K' \" w- |+ K( h
0040330B ^ 75 DC jnz short qsr.004032E9
4 f6 _% b' X. ]# W! }0040330D 33C0 xor eax,eax
! X) o3 `) O3 t# {3 [. x$ O0040330F EB 05 jmp short qsr.00403316
# W+ k" q4 K; H0 H; u00403311 1BC0 sbb eax,eax
/ A' W8 m4 U- f0 L1 p P8 k2 E& J00403313 83D8 FF sbb eax,-1
' I0 @* |6 H! L6 K" b5 Q00403316 85C0 test eax,eax# F" y+ @* C2 ]$ d) }
00403318 74 0E je short qsr.004033282 w' q9 A5 \' I; q! @* f
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A9 ~! R/ u U9 z
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
" g" R# x( d* L5 R- \00403323 E9 F0000000 jmp qsr.00403418
8 _) y8 c8 k! o/ |( s8 B7 t; r! k3 @00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
2 h4 K( r; F( C' L9 i4 E6 m0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 u: F3 ^# f' g5 |9 z( W6 \
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
; p7 |( C$ _ `. [+ {00403333 50 push eax
" `( A: U5 O( ~00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
( T. e$ ^4 w" {1 }' q00403339 50 push eax8 B1 b3 t6 ~" a1 a% ]- x7 ^, s$ d
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX4 f6 r! e3 X3 N2 s. [
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
* E9 ^/ i* |2 f% G+ ?00403343 83C4 04 add esp,4
2 z% C+ u) ^* M00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI2 Z2 n# b3 Y1 L! _! b
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]8 e* u$ O5 h( D8 R
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]* Z) N# v. x( M
0040334F 50 push eax
) @# l5 Y2 T% g3 n1 W4 k00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX+ J$ X/ l/ C I a8 \
00403355 50 push eax( G9 ~/ @9 l4 M8 f
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX5 n2 u7 _7 @8 v' y; [/ m# ?) U
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX# j3 ~+ F0 {& r) e9 i
0040335F 83C4 04 add esp,46 X: m- W. J! k* J
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
% I, w" d5 p: Z' ~' b" y: g& q00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. w, ^6 Q/ p4 t5 [
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
" D- w, e8 _8 r0 m3 D0040336B 50 push eax5 d% J; T! J- r3 J: X9 A
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX* m# ]: x$ o/ L2 d& C E) A
00403371 50 push eax
8 Q* X# J9 R3 O00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX* {. _8 E5 i4 B6 ^( t6 M
00403377 8BD8 mov ebx,eax ; EAX送EBX
8 P7 ]# W) k6 K' q1 n00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
" k& m1 E+ h7 i: X6 k5 ?- n' O0040337D 83C4 04 add esp,4# L6 o; g7 }$ M4 l4 m
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ Z# @2 k3 D7 M$ N00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
, c7 u( o+ _# {+ C, z00403387 50 push eax( W. N. L( \$ y
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
* s- i' e* q; d0040338D 50 push eax: ]" x+ c" N8 o+ h1 Y
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
4 d& \. G' Q- n2 u' W* Y00403393 83C4 04 add esp,4
" P7 \$ [0 H1 B* e8 y00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 w7 b7 h$ F. \6 e3 H
0040339A 8BE8 mov ebp,eax ; EAX送EBP) ^. ?6 E4 k3 S/ O9 x0 D
0040339C 6A FF push -10 Z0 u7 ~4 e: q% j" v
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX; R, g3 {+ J( b2 L
004033A3 6A FF push -19 B* R/ W5 V6 @$ ~# h0 w- _9 q
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX; l; P- K6 u, X6 ?2 `
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX: B5 V5 I0 J) F: n( V7 m
004033AE 6A FF push -1
9 J+ d1 b$ a6 t# i004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX4 m5 W" G: ?% H% l$ F0 e8 j4 x
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
) \9 i" X; B0 t5 I004033B9 6A FF push -1
, R; v+ B* k! m004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX2 E5 o: h; J2 r( V5 U3 J: l9 ~0 G
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
9 T& k) C8 b1 S( ^' n y004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
. z \0 a2 n2 A" I004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
2 d' |6 d9 H4 U1 f004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX1 F! @6 Q _! v2 f
004033D7 D1E0 shl eax,1 ; EAX左移1位* e- _& E9 W2 e: c$ {- x
004033D9 99 cdq ; EAX扩展
6 n; P2 M. `0 g" [: v9 z) ]004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中( M' |9 s# A/ H) z N0 c
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较. J. [: L! S8 e# ^
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）/ o; T3 [% N+ x3 L4 Y7 J+ [0 X$ b
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
7 y( s# c$ P' y& \( u: B" h# t! }004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]: u+ U0 b1 F: U/ P
004033E9 EB 2D jmp short qsr.00403418
: [! F" g' E9 u# s8 @004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX7 m2 w3 K' o+ |6 B6 |2 D$ p: ~/ I n5 L
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2/ @* K q$ P, X% K& d% u
004033F7 99 cdq ; EBX扩展
8 d* O' C; `% `- q, w004033F8 33C2 xor eax,edx ; EAX和EDX取异或, v) A" h. E7 z! }
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
; x4 k$ _; W0 C004033FF 2BC2 sub eax,edx ; EAX减去EDX
8 k- t9 K3 Z$ j$ [+ R6 X00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
) f, F" N' k' k) J2 v% e3 p2 I00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
( @ ^; i3 M( |6 s% v$ n0 R3 R00403409 99 cdq8 {2 l ]" A# L
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
- f9 ?% z/ K- z" T9 z. E0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
* k4 ~2 G3 u# z00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较; X* ^7 U N# A: x8 f
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）" |4 ^7 v4 m! v+ C0 F8 Y+ z3 P
00403418 E8 6EC00200 call qsr.0042F48B ;
4 `. U4 n( b& q- c2 t3 y9 n+ K0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' W( Q) R! ?' D( G& c3 t00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
7 X( Y$ l0 z% h# Z' E6 r00403426 E8 60C00200 call qsr.0042F48B
* W& R, T5 P$ s% x0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# Z# M& l9 M- W4 y/ g
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8) p r( ^" X' \( p
00403434 E8 52C00200 call qsr.0042F48B% H8 R8 l8 a, K4 u |
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ `" ^- ~; b ~- o3 s0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],70 s9 H% E, {' `% B/ v+ s( U
00403442 E8 44C00200 call qsr.0042F48B5 ?- E: R" H {8 x& e
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
( p7 `- a: d- H8 r0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
0 d, K" p K8 }00403450 E8 36C00200 call qsr.0042F48B0 g: U/ n; B7 E9 y' F/ Q. P+ K
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]/ X+ k" @) p. V5 W
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
( d2 \$ r8 i- @0040345E E8 28C00200 call qsr.0042F48B S6 t: l, _0 o; i. [$ G
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]! |) I5 k9 u6 M+ y% {7 |9 r6 N
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2+ ?( ^! E3 k, ^7 ]
0040346C E8 1AC00200 call qsr.0042F48B
% w0 j; H1 C9 Y2 Q1 i; w% Z00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
# F+ C2 y# f. E9 u1 H00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
. ?% S- f. |9 s+ D% Z8 C0040347A E8 0CC00200 call qsr.0042F48B
9 K0 @8 N( c% ]2 S0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: g& J! b# p& ~9 f; f! [
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0, A1 `4 l& F, L
00403488 E8 FEBF0200 call qsr.0042F48B- r+ A' O# T" d
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& R2 u' J- W1 X/ O
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
; I( g4 G: J. W! ^' D8 z, Q00403499 E8 EDBF0200 call qsr.0042F48B
% i7 o o' ?5 x" @' l; Z0040349E 32C0 xor al,al ; AL清0
6 k: o3 J8 ?* O: _+ H% @004034A0 E9 88000000 jmp qsr.0040352D& m+ C; E1 I& L
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
8 V( f6 y8 X! ~004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' r1 J' y- }2 ?" ]% @3 A004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9! L- H3 a2 ^: @( z
004034B3 E8 D3BF0200 call qsr.0042F48B
( V/ }5 }; v; k0 X( I7 F k4 k004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
# q7 K0 D5 M) X004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8$ e L& f. }4 ?
004034C1 E8 C5BF0200 call qsr.0042F48B7 O- Q% _4 w" i! `8 [* ~; \$ l2 l" f1 ^
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 ?6 r1 Q2 o' K! E. z6 O, A8 E
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],71 x* R$ Y9 F6 q& V4 G( u
004034CF E8 B7BF0200 call qsr.0042F48B4 R- p/ q5 J( O X F
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]" N, S E2 b, K0 D
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
% N+ e8 W& z6 Z* Y0 k/ n004034DD E8 A9BF0200 call qsr.0042F48B
5 K8 V2 }8 k4 p$ r k7 K6 B004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]. ^) k7 }) S4 E6 U( ~0 w" m
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3- V1 v$ Z) M% ^ l* K. L
004034EB E8 9BBF0200 call qsr.0042F48B
& R) \0 j3 f) G# Z" y& b( S2 r004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]# c! _ U7 m+ t, H
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2& K9 v. G A# \
004034F9 E8 8DBF0200 call qsr.0042F48B
' a0 P5 Z3 P6 ?) V- X$ ~004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
) B" n0 X$ C7 o: b8 q7 c00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1/ C. h2 D2 `1 G F
00403507 E8 7FBF0200 call qsr.0042F48B9 W7 Y# b$ o, x, d" ^
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! r1 O6 B+ O* {, m* i; A/ M00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
) f* A" t0 [: a1 ]5 k00403515 E8 71BF0200 call qsr.0042F48B
h* w2 f, n8 m# C& u+ B2 l/ c: p0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]+ r$ [: o. _; S$ G/ ?+ I
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1/ w) P6 i8 V$ O: w* I6 k
00403526 E8 60BF0200 call qsr.0042F48B, c/ u% J( f. a ?: y
0040352B B0 01 mov al,1
: s; @+ |/ U: W5 P4 A4 _- }8 n0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
6 P2 t* ]* X* `5 U, f" q00403531 5F pop edi
. T$ |" z* n, `* R! m" r, W00403532 5E pop esi- y8 v1 [6 B3 V( q
00403533 5D pop ebp4 `1 o0 e8 H% f( ~* T( r- R9 A
00403534 5B pop ebx$ k& w3 h& h }4 f) g
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx B; R& Q, @0 ?9 A
0040353C 83C4 30 add esp,30
) C$ T, _" \& {% N0040353F C2 0800 retn 8
" A4 F% P2 @8 A7 B1 q) d; a--------------------------------------------------------------------------------" T5 I8 h9 Y. m* s$ d! ~
【破解总结】2 B* Z5 A. A2 o4 m/ j: j' P& q
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
8 b' H; Q, }4 E用户名：yijun
5 q ]; J8 {( P, o7 n# }注册码：4893*7777*3726*7777*0529
8 X K( I$ I! e9 F! ^# y--------------------------------------------------------------------------------
% w4 @3 ^ j) j【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡