|
|
|
【原创】破解Quick Screen Recorder
: r4 H' K* o8 Z. O) a5 x【破解作者】 yijun( ]# I8 d- L8 ^( w" U
【作者邮箱】 [email protected]
. L( K7 y" F3 o- x) f8 c( z【使用工具】 OD,PEID
6 h1 T9 N4 @/ b' Y8 [8 T【破解平台】 WinXP H) d! W9 s( W# \/ `- r3 k
【软件名称】 Quick Screen Recorder
! c7 m& I" _( H A; o* Y6 K/ l【下载地址】 天空
/ d( c6 K `+ l1 z9 s0 C【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
- z' j8 W6 W& W1 S$ E0 K【软件大小】 540K1 X4 s* F7 v; m. Z+ ]/ Z
【加壳方式】 无0 [: q8 n' D2 h4 s/ |. H
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）0 q- t1 u A9 X. q; U* F
--------------------------------------------------------------------------------; \+ q6 d# p) i- M! E. M0 B; _
【破解内容】- C( S9 w7 V* h, A" z( v( |" i
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
' e+ f! D R1 Y1 T1 d, ^) a, D00404C69 55 push ebp //在此下断6 s% i0 i6 e0 x$ g" u7 ]) N1 o: C
00404C6A 56 push esi
" @8 Q4 U% Q( U5 s0 A. ?. B00404C6B 57 push edi4 z# w( ?# a+ M# F: P$ y, {( `
00404C6C 8BE9 mov ebp,ecx- j) o, P5 n, S' Q7 L" q' U
00404C6E 6A 01 push 16 K# w- f+ R- D3 ^7 L1 D
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名. y+ b9 s# d: d/ w2 c& b
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
% @/ g, D' C |. u) w4 _- r. K00404C78 8BCF mov ecx,edi9 p- r' V) P- F$ A
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
; {. F, U7 e3 N/ K( q% T# u00404C7F 8BCF mov ecx,edi' B K4 I% \/ {1 a- E
00404C81 E8 A73E0200 call qsr.00428B2D
: h( M+ R5 V- g00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
/ d1 T4 i0 b% _0 p* n00404C89 8BCE mov ecx,esi
% ~8 c5 y6 c I8 f, s3 ^* o# }00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
, ^4 a5 E- d6 C* ~& n& w6 Z00404C90 8BCE mov ecx,esi
9 {+ l6 V8 k5 l6 N7 t00404C92 E8 963E0200 call qsr.00428B2D0 W% _* n0 [! R- C
00404C97 8B06 mov eax,dword ptr ds:[esi]& q3 o j4 C% r. W
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],20 }, v2 I$ E% x
00404C9D 7D 26 jge short qsr.00404CC53 x& P/ w* Z- U6 N; z
00404C9F 6A 40 push 40
3 w7 Y N C! y00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder") G8 [: _2 K( A/ V' [
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name.", R; {5 [4 n O0 K/ D( \2 L
00404CAB 8BCD mov ecx,ebp
' e+ b1 t! T9 U8 [" v& V00404CAD E8 C3840200 call qsr.0042D175. ?4 Y- k# ]; d6 P, B/ K8 d y
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
v2 V& S" ]6 M5 q) i6 J! v" r00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
% F" R6 Q) A; j# Y [00404CBD 5F pop edi W$ D4 o- p& C; S& b2 C/ d
00404CBE 5E pop esi
0 J$ U' U# ?3 D8 g00404CBF 5D pop ebp
$ j% r p# s1 o: i6 V: v00404CC0 5B pop ebx
# I' j+ j4 l# n2 h$ k8 z00404CC1 83C4 18 add esp,18) O" n+ {9 z) m" k- U7 j ]
00404CC4 C3 retn9 n `5 B z* S, W4 i
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
- e6 p" b/ L7 _; F8 t" t00404CC8 84C0 test al,al* S) I! O- D: ^' h B/ a' O0 d j( Y: _
00404CCA 0F85 1C010000 jnz qsr.00404DEC. L/ ]4 W6 c7 P2 E% W/ H* y
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]6 M; ~- Z" E' o* ~
00404CD4 E8 87E3FFFF call qsr.00403060
, H& d) g1 _& u6 Q i00404CD9 51 push ecx
: ] Z0 O2 @6 V! W4 T) d00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],02 V( v/ M/ ?) k, h" d
00404CE2 8BCC mov ecx,esp
1 _- M6 A( Z/ y8 b% b2 F00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
" N( \5 g3 h5 D7 Q) [00404CE8 56 push esi8 U# \: y& X7 ~3 M1 v$ `
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
, D% o& J& f8 [2 L00404CEE 51 push ecx
1 L' O; l( h$ n+ ~00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1$ Z/ S- N+ Q0 L; l# C
00404CF4 8BCC mov ecx,esp
0 J5 k6 l# `2 N5 o8 X+ q4 a: h00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
4 S8 {5 R# o) L0 ~$ b! C! ?00404CFA 57 push edi
7 R1 d! R3 t+ g6 k. V* D4 a4 j00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
. Q+ g# W* g* z( a2 k0 m1 h9 y) U1 W( J00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
6 J& x, _* A0 \, j# D00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0& Q! W4 s. d1 [6 g" Y
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~7 A+ a6 c2 l; W& G2 \; b2 C) U" ]
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~7 V( c6 X8 \3 |& c1 m2 j$ D/ K& r
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
9 U- z, [4 r+ |" n2 Y00404D12 6A 40 push 40
. W' J) W. y2 p% @* c00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
. k5 H E4 f2 l00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
+ K$ e2 v! Q, r5 w3 m00404D1E 8BCD mov ecx,ebp. r B2 e' o/ \
00404D20 E8 50840200 call qsr.0042D175
/ q2 J! G/ o" s) n! S& R9 R00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
6 b7 @9 g9 Z4 P00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
3 n F% B' L: L4 {00404D31 E8 5AE3FFFF call qsr.004030908 Q3 t, i% y" o( y9 G% V
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]: T$ a- \0 _& i
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx: D2 Q: P0 L- L
00404D41 5F pop edi D; t% r) o- B8 e
00404D42 5E pop esi
) E5 P7 {3 Q5 f00404D43 5D pop ebp. x, ?$ j+ P8 P; X' @3 u
00404D44 5B pop ebx
" I6 Z+ q7 u- x2 w4 f2 _( t00404D45 83C4 18 add esp,18; o6 \( U+ L' U8 ?& D; k: p$ e& K
00404D48 C3 retn
/ }1 N* Y" h y/ T$ U1 O*********************************************************************************************************************************************************: I( Z( x* M2 l1 N4 x2 o( r
跟进00404D09处CALL来到：
3 U) ?+ A! I+ d: Y6 O' P004030A0 6A FF push -1 //一路F8下去~~~~2 D$ W4 r( ^/ j' m" J% ]% u
004030A2 68 C88F4400 push qsr.00448FC8
$ D% b" M o% c( p! C004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]5 a* r @2 s( ?( W/ j; X+ |* e
004030AD 50 push eax
: N' L5 x2 b8 K0 l004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
! t8 y+ r7 g) f# X$ }* S004030B5 83EC 24 sub esp,24; c7 m' A: r* _9 O/ B3 r1 [ j
004030B8 53 push ebx
" r, b, z4 ?: D9 p8 }004030B9 55 push ebp S1 M) R+ _3 {4 Y. C1 G- O
004030BA 56 push esi0 C* `7 h: H y3 B4 ^* b
004030BB 57 push edi0 J4 x s2 Q7 C5 e3 u- h3 t
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"6 ]' l$ ~/ d! |' F [2 E+ n5 K
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
* W$ H: v: g4 q7 c' z0 v$ ^9 B004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1! a# }4 s; [8 W' H; ]+ x# M0 {) |9 V3 M
004030CD E8 27C40200 call qsr.0042F4F9
3 I& s# \3 f: z- G, h004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
8 L4 m8 Y1 K& V6 ]6 P9 s5 X/ u004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
0 _. h9 D; j: [0 G! B$ R' N004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
0 }5 }* I3 i8 N004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
! L& a% T5 w* v$ U! g004030E4 E8 905A0200 call qsr.00428B790 `! F; V, M& ]& ]
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% Y1 ~. ~" G2 t
004030ED E8 3B5A0200 call qsr.00428B2D
* ]" R, x3 y- W& z004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]* l0 R1 w; k) l$ e$ W3 E
004030F6 E8 7E5A0200 call qsr.00428B79
+ u( i7 l- n( M! q2 @1 ~) f, k004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 t/ |6 Y+ u5 e, Z004030FF E8 295A0200 call qsr.00428B2D4 L* l; G- G' C4 K
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]3 Z/ P' E& x* x7 @
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]7 S# k* a0 ]' ~2 L [9 ]7 P: q* P
0040310B 83F8 02 cmp eax,29 X* J- `1 J: A7 U3 g# V
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳0 [7 a( A* ?9 @- ]6 w5 f. Q
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]6 E; F4 @! w$ I" n" ]
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
4 ?: s/ U! ?" W, D: {3 Q' }0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳. Q% O+ A* i4 ~) e
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
0 E0 D8 X* }7 y _00403126 6A 01 push 1 I) j; F) s2 O! i/ M' {
00403128 50 push eax0 e' p3 o4 n( S7 v, h
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 [" ~1 g3 v% T2 n0040312D E8 C4550200 call qsr.004286F6! U1 h' v o( U. p4 L* f* B
00403132 8B00 mov eax,dword ptr ds:[eax]0 P' x' G1 i+ p; a
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 w. h5 F6 r! x" c
00403138 50 push eax+ v3 j& v! D- F m0 R' G5 R
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
8 `6 T/ ~9 m# f8 s" S0040313E E8 4D560200 call qsr.00428790
" u9 K" }6 |8 J; H00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" Y1 s ?# x$ c: D
00403147 8BF0 mov esi,eax* }, Q( l% |. N( D
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
: A1 K8 Z7 m2 t' w ]5 [+ Z/ R0040314E E8 38C30200 call qsr.0042F48B$ q: _/ E4 r' }5 q$ I7 a, k* ~
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
! \7 s$ |0 P; D& X% m# z00403156 B9 3E000000 mov ecx,3E" T8 f. K% _5 D Q6 b5 }# q& d
0040315B 99 cdq
/ N! x; B" ^8 n/ y5 |% u! T7 q5 Z0040315C F7F9 idiv ecx
8 Z7 q$ M2 V. @) t* ?0040315E 6A 01 push 1( R( c' K% S: ? ~0 t; ~" d9 r" F
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
F, d; Y* z7 V% E: b y x8 W00403164 8BF2 mov esi,edx
1 R0 K, f& [6 Q9 w: S! k4 y: E00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]. I9 R7 D0 i2 q$ U+ m6 O e
0040316A 52 push edx
( g" m- X5 {) `" g* x0040316B E8 0A550200 call qsr.0042867A2 q8 k; \! ?" X" V% ]6 `
00403170 8B00 mov eax,dword ptr ds:[eax]
1 q2 M0 d( k) b' V2 L0 A00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ W+ ]0 B1 |2 J4 ?& s2 ^+ @
00403176 50 push eax5 \$ r' c& `! @
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
' T! V. @/ }1 A- j( v" J2 M7 H0040317C E8 0F560200 call qsr.00428790
2 L2 I! j/ u& D0 {00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 N* [3 Q2 }) V! A$ K# j; r00403185 8BF8 mov edi,eax
1 V* H% F+ u+ I N0 _9 ]00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],32 \# |! r' Q" R9 {
0040318C E8 FAC20200 call qsr.0042F48B
+ H2 z( Y5 u$ p" ?& O00403191 8D47 0A lea eax,dword ptr ds:[edi+A]4 [! N: u& F$ E: F# m' C
00403194 B9 3E000000 mov ecx,3E* a8 w+ v1 v9 t# f( G5 B' R1 M
00403199 99 cdq
! `' K" u7 w4 Q9 H0040319A F7F9 idiv ecx
1 n2 v) m6 O$ m+ H) e: i0040319C A1 38F44500 mov eax,dword ptr ds:[45F438] s. R# z }0 v) s! @7 j
004031A1 894424 28 mov dword ptr ss:[esp+28],eax* T) h& [- v/ l' L
004031A5 8BCA mov ecx,edx) \* x* _+ ?0 f1 Y- t# ~9 g6 n
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
# L9 E0 }' y3 U3 z. y004031AB 894424 1C mov dword ptr ss:[esp+1C],eax7 C) j' z) E8 e: [$ `
004031AF 894424 18 mov dword ptr ss:[esp+18],eax* a* k7 z% Q6 }
004031B3 894424 14 mov dword ptr ss:[esp+14],eax8 {" a3 e v+ O" {; W
004031B7 894424 10 mov dword ptr ss:[esp+10],eax4 P- a! u* {6 T" U5 {
004031BB 8BC1 mov eax,ecx% f# Y* m( k; i) A0 T& Z
004031BD BF 0A000000 mov edi,0A6 h2 ]0 ^$ Q) C' W3 x% R
004031C2 99 cdq/ H9 E: q6 E# w8 V9 H- N0 f
004031C3 F7FF idiv edi/ n6 Y+ `" S1 O5 [+ P
004031C5 8BC1 mov eax,ecx. k$ M, S' k1 X8 o
004031C7 B3 0B mov bl,0B
6 A3 v! M* G" i% E1 M. ], N004031C9 0FAFC1 imul eax,ecx9 r* L- s" E8 @& ^. Y; Z) W
004031CC 8BCF mov ecx,edi
9 r; f. _2 ^ X2 e; b004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
9 w5 U2 K% _+ F, o7 j004031D2 52 push edx1 H. G& {* K3 u& |$ B, p& c# k
004031D3 99 cdq0 q7 D! d& R$ H0 X/ g
004031D4 F7F9 idiv ecx0 p$ W; I) c& W. B0 C
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
8 j/ n+ L2 }- z2 \$ Q9 d- j/ |3 S5 l004031DD 2BC6 sub eax,esi- N/ e, g0 O# R$ N0 V+ b
004031DF 52 push edx
: J: s3 u' J1 e004031E0 99 cdq' I& j, U; Z, a' @ \3 ^
004031E1 F7F9 idiv ecx, J# y) G# w% g( n. x
004031E3 8BC6 mov eax,esi% [7 `6 t/ G" {9 t: V
004031E5 52 push edx
/ b4 Q6 F% K- I- [1 Y004031E6 99 cdq
2 C/ x6 A% a4 \ G3 i004031E7 F7F9 idiv ecx
+ ~8 c, q: ~9 ^5 Y004031E9 52 push edx
; b) ^+ T) p' W5 Y7 t004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
" q4 a+ J; m, w* i0 r" M004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
8 s1 U8 R' Z- _8 ~- T) E% `# B5 G004031F3 52 push edx
1 B6 c; ?; `. n. M% B D* k004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
) B' {7 \" Z+ x6 Y" c6 Z; j$ j004031F9 83C4 18 add esp,183 p3 {, B7 J+ @; k. Y* V
004031FC 6A 04 push 4
# ~' |! Q" X. w# I5 x) ~004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]9 _7 ^% X9 V( v" L& l8 y& W; R* Q* U ]
00403202 6A 00 push 0
! N( J/ Q O, {7 p00403204 50 push eax
/ ] l7 V. m$ e! R' L00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( J- n% w, t7 x$ U: @' V00403209 E8 D6530200 call qsr.004285E4+ ^* u9 F( Z+ E! T8 k7 T( D( L% t
0040320E 50 push eax
& v1 ?3 T, l4 @- p- @0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]: i1 s4 E5 X3 P- \) y. [" h' F& |' T
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
' _) L% r# |7 g# `00403218 E8 A7C30200 call qsr.0042F5C4
) ~6 O' a8 q( ?! v; @' |0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]0 t) L! k# g1 Z6 }5 k; n& C
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl: V, i2 L M* _& O* m
00403225 E8 61C20200 call qsr.0042F48B
- I1 W- x; S/ v+ L/ b0040322A 6A 04 push 4' r+ v9 I6 i5 w* \6 V) r
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
. T6 D1 x* D: Z00403230 6A 05 push 5' d$ H/ H) B' x; r6 L
00403232 51 push ecx
7 y {' q$ {8 N4 r0 @% L, Z00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" V. \/ W- L- v8 }) R2 `/ l( N5 \' d00403237 E8 A8530200 call qsr.004285E4
" L, x0 f$ R! z+ i! l2 m9 F0040323C 50 push eax
8 U, u8 g* D+ Z8 z* {7 c0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
2 X; @7 h9 k% e7 P4 a6 C00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
$ Y' ~. ~0 h/ J$ @$ e9 d00403246 E8 79C30200 call qsr.0042F5C45 u2 d) r2 V8 [8 }
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) b; z: c* a5 p/ w; C( k0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
, l. [: I" l/ I7 {4 p6 G00403253 E8 33C20200 call qsr.0042F48B* s% `! ~5 G, y
00403258 6A 04 push 4
; R2 p% c- O2 y% A, N o& i, T0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]* m7 n3 K+ L& i
0040325E 57 push edi
( W5 ?% _: `1 {& }/ i0040325F 52 push edx
. u8 Z+ U3 I- s8 y9 B3 n0 Q00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
& r9 T) R+ j8 T j% c; U00403264 E8 7B530200 call qsr.004285E42 l; A# ?) X( r; q
00403269 50 push eax
" j8 P4 `! q. B1 D, s/ c6 i0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
0 c$ g: Q# k+ \# T: V/ }0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E! U( S" v; L" m! v# Q- [6 _' Z, G
00403273 E8 4CC30200 call qsr.0042F5C4' q. P5 ~" ?7 W2 s3 `$ B
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% s& Q5 {1 m- l- ~+ v+ o2 Z0 \0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl& ^4 }' s1 C4 b& [
00403280 E8 06C20200 call qsr.0042F48B
8 i' Z2 |% A# i7 a0 ~00403285 6A 04 push 4
- e( W, W1 d: u& O. k1 h00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
/ t/ q" A0 i$ F0040328B 6A 0F push 0F$ A' k( ]; B$ `
0040328D 50 push eax" ?, x2 u, c5 V4 W- Z( b# D
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: ?% j) n y x9 M$ Z% d
00403292 E8 4D530200 call qsr.004285E4
7 r" S1 |) `, N6 {00403297 50 push eax4 D1 E) b6 n8 r& G! ?+ s
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
% y+ x' D; m0 c1 W/ q0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
2 @6 x( s( M8 e8 y4 K% u004032A1 E8 1EC30200 call qsr.0042F5C4! t* ~; J& S! i& w/ B- ~ g
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]/ T2 X) J6 C8 J9 L% z R- |
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl. j/ \3 b- w: Y
004032AE E8 D8C10200 call qsr.0042F48B
9 Y8 a; E9 i- Q9 d; w# N, x004032B3 6A 04 push 4
1 m ~5 ] K8 Q. v+ U004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
[7 [7 b3 t' q# D004032B9 6A 14 push 14
, Y7 N# v; |' V* S6 r: t004032BB 51 push ecx, n y5 J) ?1 c+ D7 q S
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
' R& P3 r0 L5 u: ]004032C0 E8 1F530200 call qsr.004285E4
6 w: S; E& q3 b4 B2 s1 V004032C5 50 push eax; y0 a+ Q2 D/ D9 E, I4 h, V7 [& f
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ ?& h4 C8 X% U$ v( L, s
004032CA C64424 40 10 mov byte ptr ss:[esp+40],103 a. V9 ?9 w& ~
004032CF E8 F0C20200 call qsr.0042F5C4# K2 D8 n7 c+ E! d! F4 m
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]: ?& r2 {% V' w1 _; g$ H
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
: w3 o5 T) i# z2 A004032DC E8 AAC10200 call qsr.0042F48B q1 P* I- Q- V" Y! k/ T2 T
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI9 X6 E8 G" I0 Y" t! Q7 P
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX5 ]9 B( i" f% g( j2 f
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
6 S& C8 }3 G* x: V! P+ P004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
* d, U6 \$ t5 p$ c8 n$ d004032ED 8ACA mov cl,dl ; DL送CL3 l" t: S1 V/ x) W, G
004032EF 3AD3 cmp dl,bl ; DL和BL比较9 w! C6 }# S( V! U) I
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
, M% F( O8 U6 T) C" w004032F3 84C9 test cl,cl+ p! A/ u1 ^1 K1 Q0 y9 H
004032F5 74 16 je short qsr.0040330D3 a/ q: h E5 s! G! v( d# n
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
. ?+ O+ V: S+ Y/ q; J004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL) v8 d! b5 y; |9 }7 l) v
004032FD 8ACA mov cl,dl
& p7 _" H6 s0 t( N; g004032FF 3AD3 cmp dl,bl ; DL和BL比较, ~& y1 m$ f2 m+ A5 E
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）6 w2 m8 K7 K/ R
00403303 83C0 02 add eax,2 ; EAX加2
, E# L; V" R, _% d T. b00403306 83C6 02 add esi,2 ; ESI加2
5 r/ S( _" r T7 N3 u00403309 84C9 test cl,cl( \& z3 B, N& N4 |9 b. q- ]8 y% _
0040330B ^ 75 DC jnz short qsr.004032E9
! ^+ K9 E7 q$ @$ T- O2 w, p0040330D 33C0 xor eax,eax
. U# _ d$ `' \! t, v0040330F EB 05 jmp short qsr.00403316
; \$ m2 J" O$ U* ^3 n00403311 1BC0 sbb eax,eax
: p5 u3 h2 ~0 D' I9 j2 B$ N00403313 83D8 FF sbb eax,-1
& ~' A, Y7 Q* N0 \% k Y) f# A00403316 85C0 test eax,eax s- F% F/ C% ]4 d, D& D
00403318 74 0E je short qsr.00403328
' o0 f: l# o4 J% n2 t5 b: |0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
9 ~& }+ h' s2 J' V+ a0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]/ t; B6 p; F( f% u2 [. ?* C& b
00403323 E9 F0000000 jmp qsr.00403418' @& g/ M' g- h. D
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX7 l1 d) G1 Y5 L2 _' ]. ^/ g% K
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 s' x. J5 f& r& c
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]2 j: d, N6 D, }
00403333 50 push eax" ~, n7 y. m9 v+ u
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
8 O, t' e- N, N0 L b3 q00403339 50 push eax' S! ]1 O, q9 H, [
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX% I& R/ k" [- O$ K0 B& P
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX7 S9 Y5 I7 l! b9 Q! v" h: r/ Q; @& ^
00403343 83C4 04 add esp,4# r8 @; O8 p) ^" l, S0 {
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI9 S) Y9 T. Z* F# O1 p. j. o
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8] X4 Y$ u6 M( [$ Q: c/ ~, N
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]. n; H+ C! b# X- A Y. b
0040334F 50 push eax M" J; v h" N* h
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX7 {4 Z& O2 ?6 m7 K6 `' M
00403355 50 push eax
& t. Q# d9 @" s. I% o& z* X00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
0 E" O, V, t" P& L5 J0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
$ l w" r4 C9 q' T1 u0040335F 83C4 04 add esp,48 [0 e3 Z2 [$ [# z# [4 f- p
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI+ X, q {! e4 N! p. Y5 K
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: s3 S2 \' L3 s2 X3 d q) k- O+ m00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]( S: ]3 c/ a8 o) F+ x
0040336B 50 push eax7 {6 j( J% W/ N! D
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX5 q$ k5 o7 s6 `5 J
00403371 50 push eax
+ B- Z) A' u4 t00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX% h5 B/ O2 ~: @- F/ p4 P
00403377 8BD8 mov ebx,eax ; EAX送EBX9 z i! f" o* Z6 V T9 I$ K0 V
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
3 J( m# D# j9 M& I" y% {0040337D 83C4 04 add esp,44 G; l4 ~) W0 \* T9 B) a
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ W! m, |" r) ^6 N) q+ w, C00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
" B$ }- `( j3 d$ \: C7 w- E00403387 50 push eax& I" _! Q' Z. u+ V
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX" c; H C% W0 }2 Y7 }) m6 Q. L
0040338D 50 push eax* ]0 R) F8 q) X5 }: }) m2 W1 t
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX! U, s) o+ }4 q
00403393 83C4 04 add esp,4. e- T$ e9 F0 p3 U4 I5 H
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ {3 f* ~. f; A8 M! ~
0040339A 8BE8 mov ebp,eax ; EAX送EBP
3 F" a# a3 ~$ R k" h* x/ r0040339C 6A FF push -1
' J% T* c- p; G3 T7 A5 f! N0 i( Z0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX; u# e q" \& }
004033A3 6A FF push -1
" S6 Y- @- J8 J5 V004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
Q E# r! m7 C9 ~* W% J; |004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
+ a! E$ [5 l, g$ I; P" p004033AE 6A FF push -1
: p& {# W$ r6 P6 d! D4 D' W; @004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX6 @4 ?5 E7 P6 X4 B% c7 ]
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
# t: |( \) e5 ]: ]) s004033B9 6A FF push -1
8 H6 A0 c' G- u3 D) k004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
& T! I. u& T" i2 o004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX" O* H$ ?) D& M5 V! V+ X
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX1 g4 v2 c( K. B
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX, P9 V- L2 K* B ~
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
1 s o% n1 l. n# _) w. ?% q2 L004033D7 D1E0 shl eax,1 ; EAX左移1位/ B" E" h+ E9 g
004033D9 99 cdq ; EAX扩展( t) e: U- s1 S& @
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中) D4 M3 y- Q) \, a# C9 G5 K3 x: S) k
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
( k$ i: D% M9 D8 r% ^004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）9 _! O3 |/ p9 t
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
. o" r& ?. f) B004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
2 F+ t1 L1 f! ?+ j/ T% V$ v004033E9 EB 2D jmp short qsr.004034181 a$ y* u* |; j) `8 F
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
z* f; W( u: c004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2* [; D, T6 M) c- z" }
004033F7 99 cdq ; EBX扩展5 \- l+ u8 `" F" o/ ]
004033F8 33C2 xor eax,edx ; EAX和EDX取异或; p% L0 x5 U% Y: D7 D
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX7 b. T$ g' N, Z" ^) u' y
004033FF 2BC2 sub eax,edx ; EAX减去EDX
6 Z+ r( J/ Q, R) y' S. X, h* c00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
5 |; Y3 a" A% ~8 f00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX& U1 u9 |/ F) _: Z* H
00403409 99 cdq1 i) G4 U! D: ]1 V
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中0 T0 y" @% Y* e
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX8 i: c6 m* j: E; B2 z8 A
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较! e; w: ^+ v+ m4 A
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
( ^+ D4 J) D# @' r- c1 C4 R00403418 E8 6EC00200 call qsr.0042F48B ; 5 K: j& ^7 E$ k( ~
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
4 g3 {) a7 D2 M00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],95 a) t1 ]1 u( E& z) ~
00403426 E8 60C00200 call qsr.0042F48B8 j/ C! n, v: M% `: J d C, u
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
5 Y" ?; C7 w7 ^" A3 R9 x0 k0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8/ j& O3 Y# }( c
00403434 E8 52C00200 call qsr.0042F48B I' v5 `/ ^, A `5 K" k
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]) ]+ {3 \% n# H0 z' ?" q/ f
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
1 O d0 A- ~# a$ W. i5 M1 B! |00403442 E8 44C00200 call qsr.0042F48B2 y1 W1 ?7 E0 b) c& c
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
$ Y6 f6 T* _# Y0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
+ W) w4 S5 r( R00403450 E8 36C00200 call qsr.0042F48B( d4 X5 ^! N4 e
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]6 m3 g6 ^3 U- e9 f( a
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
8 n1 a- U, c7 ^: b0040345E E8 28C00200 call qsr.0042F48B7 d% p ~# N; {: `& W" g4 v
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
, N( R8 K0 w) r# N+ o00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
+ _- y$ F8 g5 }0040346C E8 1AC00200 call qsr.0042F48B
/ }: p- {0 x% X) l6 J) t00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20] e. h3 P) ~6 x" }6 B5 f8 a
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
: g: E `+ t: B3 `0040347A E8 0CC00200 call qsr.0042F48B
. Q& g( L) g. e2 ^, f1 Q0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]; R# l3 N0 r) c! e
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],07 Q3 ]' B9 J) r) m
00403488 E8 FEBF0200 call qsr.0042F48B9 x/ [+ ?) g5 h7 k( X2 @
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]- u B+ \( Y, d6 W4 K1 ~ h
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-11 f9 d7 A5 m) c1 v! b& E
00403499 E8 EDBF0200 call qsr.0042F48B
3 T: |7 V1 k# w" U" z0040349E 32C0 xor al,al ; AL清01 h5 _( V' Z0 R6 u/ v4 [- y
004034A0 E9 88000000 jmp qsr.0040352D% Q7 q: Q# [- B7 \2 \
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
0 i$ {: _: J( A# b4 F5 ~6 U- k, N004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]2 ^9 ], z- E' K
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9* t" K5 p- q" I, m q: S
004034B3 E8 D3BF0200 call qsr.0042F48B
3 `$ e/ T% T# x m004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ~0 O4 f1 L' H1 X. y. n$ ~
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8% r! P3 y; N# K8 X
004034C1 E8 C5BF0200 call qsr.0042F48B% b0 b$ t1 k% h0 Y! J
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
9 z) `; [9 W* V% J5 f. K004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7# g$ ^" U* [$ `7 j- k; B
004034CF E8 B7BF0200 call qsr.0042F48B0 M% T8 J, s$ A4 M5 h1 t6 L8 {6 C
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]" \: ~1 F. D4 \4 F3 t0 @6 r% b9 r4 H
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6% \& J3 p7 ^# h+ Q( \
004034DD E8 A9BF0200 call qsr.0042F48B
; o4 ?3 R! N% W* H: J- s+ u! K004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]# Z7 N8 Q& y- E$ h/ z" R
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
( A% N+ I! ?8 G7 m' e004034EB E8 9BBF0200 call qsr.0042F48B
' Q; U* Y0 B" g1 k) c4 i5 _* {004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
$ Z4 W8 G* i3 q3 q3 I4 @& _2 b7 k004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2+ O( ?7 M0 n- M: i6 L/ a
004034F9 E8 8DBF0200 call qsr.0042F48B
, z# y0 @" v8 f, F. W004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
% B4 B2 { U! \6 @& s* {3 O4 V1 l00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
( ?$ G; y7 c/ G) w: N00403507 E8 7FBF0200 call qsr.0042F48B
4 U, W8 f |( Z. b: ]0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
0 [4 j6 s; r, }- e7 Z2 ?/ b00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0! M5 E9 _' l1 K, n# ~8 G
00403515 E8 71BF0200 call qsr.0042F48B* g6 M5 ^& O6 `: G; }: I3 Z+ w$ a6 o
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
6 S8 ^5 ]( \3 Q/ n0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-14 O+ n; F7 O- e* D" p
00403526 E8 60BF0200 call qsr.0042F48B
" h4 S7 q/ T% \. w3 u0040352B B0 01 mov al,1' V& ?) p" m* i5 d
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
) @9 T5 C$ z: l. |( X* c00403531 5F pop edi' d0 P5 V) P8 \: S
00403532 5E pop esi7 J$ o8 F" T, e( K2 M
00403533 5D pop ebp* x7 p1 o$ A, L+ w8 v6 p: B
00403534 5B pop ebx0 W3 d7 J* w, u; L2 |- K8 y
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx: R7 X+ v) p# b
0040353C 83C4 30 add esp,30) ?' y8 l+ U9 i' g/ @6 D/ H6 M
0040353F C2 0800 retn 8$ @" ^/ [6 M! d }
--------------------------------------------------------------------------------% `+ t& I2 V1 l- }
【破解总结】
" h9 m0 V5 }1 b0 U0 t+ v 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^' J% W$ [+ H6 v# D: I6 u2 I
用户名：yijun. Z$ ]8 J$ m& W: O/ I# O
注册码：4893*7777*3726*7777*0529
5 E/ i: B( y( ^# w V4 W; ^--------------------------------------------------------------------------------+ G) v0 {2 O* H2 h* z# Q' J
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡