|
|
【原创】破解Quick Screen Recorder; _. m3 J2 X V. F
【破解作者】 yijun+ o0 A: d( F$ k3 t
【作者邮箱】 [email protected]
8 ^/ m5 z. g' L/ ]【使用工具】 OD,PEID
8 e2 f4 i4 ?5 l& l【破解平台】 WinXP0 ?2 s8 x- X! y: g/ c/ F: m
【软件名称】 Quick Screen Recorder
3 D* b: S9 A1 k- y【下载地址】 天空
& v% Q5 x7 w: K$ Z9 ~+ Y【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
. B% {% s/ |- v% f【软件大小】 540K
2 x9 g( d8 l. s4 y$ }/ r4 S【加壳方式】 无6 D* a" I, @+ @$ x+ M' b/ `& k4 V
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
# |9 z; A r( S& h--------------------------------------------------------------------------------# u% V/ U+ N8 _ d$ M+ y! @
【破解内容】
; j1 w) s9 _; t. p- n1 ^- @ PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：/ {# }" g: V# N8 B
00404C69 55 push ebp //在此下断
; C. N6 C% x7 q2 v9 X00404C6A 56 push esi( Z, \; H1 b- e, [+ `; t" p% E
00404C6B 57 push edi. \% r& D P$ k2 a7 L" u, V
00404C6C 8BE9 mov ebp,ecx, j2 J6 r! w" V2 a* x! J
00404C6E 6A 01 push 1
* o6 ?$ ?: I" l- n* U& H4 k6 G00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
' s0 R2 {# Y \( j00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
! d5 B; r3 H. N( G$ ^' l00404C78 8BCF mov ecx,edi
+ x8 Q, i; e+ X7 P5 |00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码9 m$ O* p8 d: G7 d' y! ^% H/ x' Y1 U
00404C7F 8BCF mov ecx,edi, O. }3 ~$ ?3 ~) {8 G. k9 A7 C1 d
00404C81 E8 A73E0200 call qsr.00428B2D8 U }1 ?( P* c1 X
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]) ]6 I4 L* D# B5 u1 k8 {5 `" \ W) e
00404C89 8BCE mov ecx,esi: K8 c8 S; T7 ?4 Q( [) z8 P
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
2 n, w- |4 f. }00404C90 8BCE mov ecx,esi$ v6 G0 j7 Y- z8 h2 H2 h7 d
00404C92 E8 963E0200 call qsr.00428B2D! M* J: c2 m0 F. N# s
00404C97 8B06 mov eax,dword ptr ds:[esi]
: L: E: _) q$ f00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2 x1 G: r; n6 X6 y6 z# L# M
00404C9D 7D 26 jge short qsr.00404CC53 y! _: k: D7 c5 i- f# e T
00404C9F 6A 40 push 409 m; L. T$ G8 v3 D0 ?
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
+ x$ S" ~) _3 N! Z$ @5 z00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."4 o+ |6 q u$ S; _
00404CAB 8BCD mov ecx,ebp- ?. \" S+ O4 U" R+ p. J1 ?7 w
00404CAD E8 C3840200 call qsr.0042D175/ p- _( C- N! t4 X7 R
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
5 |% q2 g# S7 h9 _0 x8 \00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
3 K, g. ]" T) c6 y& @00404CBD 5F pop edi
3 f% r9 g) w( Y- B. _. L00404CBE 5E pop esi
& G1 h: a' l& W; Q00404CBF 5D pop ebp/ c7 w8 x/ h* u" S
00404CC0 5B pop ebx
: \3 U& Q, A0 x/ F' t/ D5 e1 C00404CC1 83C4 18 add esp,18
; |* {2 C5 k% _( ^" ~3 h00404CC4 C3 retn
( @ D7 [, q9 k \9 D00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
) u; z# L$ {6 l00404CC8 84C0 test al,al
7 D1 A/ Y, @2 e2 z! ], l00404CCA 0F85 1C010000 jnz qsr.00404DEC. p$ N0 V- \9 |
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
( }7 r8 @7 c( K00404CD4 E8 87E3FFFF call qsr.004030602 q: `6 B O! A, Q
00404CD9 51 push ecx
* Y" I, v1 ?' j00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0: Q. K8 f1 V K3 z9 z2 }
00404CE2 8BCC mov ecx,esp3 J3 B, v4 r, Z& K3 Y6 ^. m
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
3 ?; O6 K/ ^. [( |( v00404CE8 56 push esi: b2 p3 @: n1 |2 M. ? W, V0 r
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0! c4 D( Z% f H
00404CEE 51 push ecx: |! B0 J D/ q2 p
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],19 ]5 P) Z v8 }2 F: J
00404CF4 8BCC mov ecx,esp
0 K- U p0 r/ @& i# p00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
9 \7 T0 V1 H# H00404CFA 57 push edi
/ K' _5 V2 j+ K& K00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
6 e4 X5 N: |! j1 R% T: `- g7 @! J k( S, ~00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]5 h1 Y( o2 _' E; r; r* S) K
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0# N1 i$ F) i1 r$ S. o: u ~8 P
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~4 [$ O& H; D" ~* j2 B
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~" t% s) Y& X/ x1 Q+ W" D
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
5 t+ v7 a) U3 }+ n4 t- d2 T' m2 e00404D12 6A 40 push 404 p# ~, n1 v9 C" Z5 `! r7 m* V
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
! d8 g' D) g. i00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
# i& O! y% M* ]# a" a8 }6 W00404D1E 8BCD mov ecx,ebp& C0 A& \: N7 R" a6 I4 d
00404D20 E8 50840200 call qsr.0042D175
7 O _" N w7 ^# u, a/ P00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. a& X; f( z. J9 ?. ]
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1) u5 r; K$ K6 e, L2 ?
00404D31 E8 5AE3FFFF call qsr.00403090
9 @1 F& b/ A2 `/ b9 J00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
, a# r8 r+ P$ u. ^3 g, V& C( y00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx3 O$ O, C# v7 r) s9 @* x* O
00404D41 5F pop edi1 o7 `- q# r8 N
00404D42 5E pop esi: H: z% q2 ]: T8 P, K2 A
00404D43 5D pop ebp+ L6 x& n& ?) @# e/ N
00404D44 5B pop ebx
- a6 `" N8 \8 X/ N" \00404D45 83C4 18 add esp,18
h, X1 w' P' x1 K8 j' D) X00404D48 C3 retn+ z- V, g G$ G! ^4 |
*********************************************************************************************************************************************************
% X1 i" o- _9 a( u/ n6 ^7 s$ R跟进00404D09处CALL来到：
' N. ^8 f# m4 T004030A0 6A FF push -1 //一路F8下去~~~~! o" J4 v, V+ u
004030A2 68 C88F4400 push qsr.00448FC88 t$ i2 d3 w8 u$ z" R
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
$ N: J: l) u. ~, N: F, ~004030AD 50 push eax/ w P! ^6 P& \) R6 T
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp% [2 [$ z! k* d: o4 d1 _& C% d
004030B5 83EC 24 sub esp,24
5 p9 o9 f' [' U' l" `004030B8 53 push ebx
y8 T" h3 V; [6 p: b1 H2 Q% _004030B9 55 push ebp( h: N; `3 M& `' ]5 [
004030BA 56 push esi. ~, u) }& q$ D1 J* c
004030BB 57 push edi
2 d6 Z8 T; s7 B, s: L9 u. a004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
- Q8 y# J3 e: R) n& K) T! j9 P. Z004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
. w3 C# C) q5 e, D' b* E; K) Y004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],13 `% Z* O0 v- W/ g. q1 Q% F' W: C
004030CD E8 27C40200 call qsr.0042F4F9
3 J- u. e$ |) j. F, h004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
$ W( v" e" s& f& W+ |004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
. U( h& l7 l. H004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# L2 v$ C( V7 v+ f+ l [2 }004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],30 i8 x( @# I: D. r) p+ u. g
004030E4 E8 905A0200 call qsr.00428B79
* l# Z4 T5 U6 N" _' g004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
7 W) {6 F" [$ E; B004030ED E8 3B5A0200 call qsr.00428B2D
9 ]3 A: Y& |* d0 \ ?, w" M% V004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]9 z( x- B3 m' K* a. U( c5 `
004030F6 E8 7E5A0200 call qsr.00428B79
- L" c; P- p# {/ e8 A9 [3 T004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
+ h3 m- ]7 B2 W1 j004030FF E8 295A0200 call qsr.00428B2D
! o8 B# `0 ]/ A+ T& F* d9 h00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]/ v2 R3 B( Z; U2 ? {
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
4 Q. i8 h+ D; r) Q. a0 V0040310B 83F8 02 cmp eax,2
% C6 M, I) ]( @' k3 s$ w: v0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳1 n0 b6 B: N$ `5 ^8 ]
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]% Z" g2 G- s1 G6 M- H$ t
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
: X" ~- F# f8 q) F. b; e0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳" T4 P0 _: Y1 P6 M6 L+ w+ h G) ^* m
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]4 f3 a, f" ^9 X: L/ `" @
00403126 6A 01 push 1" P: K" L) S* c3 g4 G2 s. @
00403128 50 push eax6 r, A# M( A/ z% _ p
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 k& I( N& }- t
0040312D E8 C4550200 call qsr.004286F6
" w. |( L" v9 @; B00403132 8B00 mov eax,dword ptr ds:[eax]
$ J# g: R* M& r00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
d3 G9 m6 c. X/ F9 L7 d' c* ~0 G6 ^. P00403138 50 push eax
3 d4 T! O) t2 d# j! L. q00403139 C64424 40 04 mov byte ptr ss:[esp+40],4/ J7 V, T2 A% v. r' i" v
0040313E E8 4D560200 call qsr.004287904 L2 h: a- H% ~8 I6 m, S, t
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 u6 e4 j) |$ v! f- P4 U" c; ]( P00403147 8BF0 mov esi,eax7 o* {: @4 E) l" W9 ^1 D. L5 Q( w+ `/ O
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
& Q- @/ m: A& ?0040314E E8 38C30200 call qsr.0042F48B
8 L. d3 I) @) a& A: ?00403153 8D46 0A lea eax,dword ptr ds:[esi+A]$ o( ]8 r5 L) C6 I: {0 s7 J
00403156 B9 3E000000 mov ecx,3E! r1 n5 ]! a8 ]0 t, i' f
0040315B 99 cdq- a* Z: U/ t2 K9 o
0040315C F7F9 idiv ecx
4 |+ r# n* a* z. N0040315E 6A 01 push 1
4 {/ o+ e2 X; F* o$ `$ U00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
; {, A9 j" a; A1 X* o00403164 8BF2 mov esi,edx3 Z2 a& z8 s) m. F' P5 F1 k! G3 A* h
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]( R4 @" }8 t6 ~5 E0 }8 ~
0040316A 52 push edx1 X& \3 f: ?: H4 s& V- A. J9 l
0040316B E8 0A550200 call qsr.0042867A
+ D% m7 N9 A2 D00403170 8B00 mov eax,dword ptr ds:[eax]
; d/ B% f" F$ t d2 p( R00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
, @' M3 @# T4 E3 [00403176 50 push eax
1 `) r# ~- z" R U+ \% [; ~00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
3 W; g9 t: s7 q7 N7 C% ]0040317C E8 0F560200 call qsr.00428790
; J( o3 z$ y E! p00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
3 H/ G+ K1 H, Q& p9 v, X! i, C1 e00403185 8BF8 mov edi,eax
1 L8 u( ]/ Y9 A- V3 T/ o00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
& I) N& e0 E+ G0040318C E8 FAC20200 call qsr.0042F48B
+ g1 [& e+ N: Q* O6 D00403191 8D47 0A lea eax,dword ptr ds:[edi+A] n2 A' |. l' d o" }/ U) z
00403194 B9 3E000000 mov ecx,3E! l* j6 X4 @( L# f# ?1 B
00403199 99 cdq3 U4 |' c* P& T$ f8 ~7 [1 J
0040319A F7F9 idiv ecx
* A" Z" O- K f0 Z, l3 n0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
- T0 ?0 o# S, B$ c' w; a: S004031A1 894424 28 mov dword ptr ss:[esp+28],eax
- x" L8 z m6 P4 \# M004031A5 8BCA mov ecx,edx* F; N" T0 i7 `) V! \! i
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
9 l/ [3 w5 V4 O- M2 K- G004031AB 894424 1C mov dword ptr ss:[esp+1C],eax7 L4 \ ^3 o, a
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
0 h/ q- [: w2 o. H T+ |004031B3 894424 14 mov dword ptr ss:[esp+14],eax: M4 {: ?, E2 y& d
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
* @5 c Y: y9 n, U" S4 m' G9 x004031BB 8BC1 mov eax,ecx
8 z3 A) y$ J- E( @) X* [& M+ r- S* f004031BD BF 0A000000 mov edi,0A" |( h% U5 [: c( b( I6 f
004031C2 99 cdq8 k+ t( B" f, n0 i) h) C* e& @, T! T
004031C3 F7FF idiv edi
, C* ^1 f0 u8 y- ]. I/ Z004031C5 8BC1 mov eax,ecx& f$ o/ I: p5 b
004031C7 B3 0B mov bl,0B8 X, i4 `) [8 O# _5 R6 t" q
004031C9 0FAFC1 imul eax,ecx
$ d+ |( _; R/ E: u004031CC 8BCF mov ecx,edi: V2 I; V4 |1 \+ c& V5 \8 j
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl2 V$ Z0 d. D) @; ?6 ~
004031D2 52 push edx
$ c% p% O9 @7 k u3 U5 l3 o+ [ l004031D3 99 cdq; l3 ~. T0 d# L7 C2 n( v. ?
004031D4 F7F9 idiv ecx
8 t/ \! W2 c/ ?" B( i$ s004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
5 V$ _/ r8 |* M0 w0 L004031DD 2BC6 sub eax,esi; _) }$ j) t3 U) U2 R4 P; S+ ?
004031DF 52 push edx
; o# u5 e" q* O3 @004031E0 99 cdq- S$ t: x+ \. C% r
004031E1 F7F9 idiv ecx, X- P0 k: G+ ?3 R8 w% u# d
004031E3 8BC6 mov eax,esi
" y v+ i! G5 F7 m0 I4 B6 x5 N004031E5 52 push edx
5 W5 f9 z0 G" K" K5 p- X! b004031E6 99 cdq# C! i! o; s+ a2 R [
004031E7 F7F9 idiv ecx
, }; o& z/ T8 S) u% j( P5 B004031E9 52 push edx$ V; P, J- M8 G2 k; o& s, }" P) s$ Y
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
' i; H( \ p' v& |: c004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
- p( m8 n+ L2 f8 s004031F3 52 push edx
+ ?3 H7 _1 ?0 {7 |7 o. f, G. \) Q004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48936 \. Q# B2 {+ I1 W0 P! @! o
004031F9 83C4 18 add esp,188 I$ A/ z& B; E' B- p) T6 Y; \
004031FC 6A 04 push 4* {8 O$ \' j+ ^: K. ~' |
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
" ]! @! p& ~7 }( z3 @5 k* w$ d4 ~00403202 6A 00 push 0
! A4 U- C8 j: c0 W& Q0 y# x. q4 A- Z: y00403204 50 push eax
1 \, v% a- v' h7 |+ G00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 Z' m& j, o: @00403209 E8 D6530200 call qsr.004285E4
- ^. o5 A4 Y- J, {6 M$ N0 T0040320E 50 push eax/ \* b9 }3 Y: `' }$ ]
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]. u5 f# ~* x5 S9 ]
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
( L/ T% L7 J' l8 a/ f6 ~00403218 E8 A7C30200 call qsr.0042F5C4: [7 D& T$ p# _4 w# K5 ^
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]3 `* c) S# K7 b$ V) t
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
+ K" H2 T f4 g s! c00403225 E8 61C20200 call qsr.0042F48B2 f+ C; U$ o8 i* g$ i6 ^
0040322A 6A 04 push 4
( R* k# t$ ~( g0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]: C3 r, \& i0 G1 e
00403230 6A 05 push 5
3 Y& Q1 o. l* m' L) v6 {* i6 B5 ?4 k00403232 51 push ecx* k* Y; c p! V4 n* k
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]4 l$ j+ N$ @2 i& R+ h* O
00403237 E8 A8530200 call qsr.004285E45 Q: C+ G! A, K) {4 i
0040323C 50 push eax/ x3 V2 J7 j: U1 ?2 w
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
. V" s5 B8 [' _( G00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
- A7 `5 I4 s8 m! \0 H. h$ q& `00403246 E8 79C30200 call qsr.0042F5C44 k* z2 ~3 |) d3 X# w0 a1 A
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]9 X+ p; N6 F% q* a
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
0 ~4 l, q4 Q) l. o+ K+ J00403253 E8 33C20200 call qsr.0042F48B
* G3 h- y, A( e1 }; ]1 S00403258 6A 04 push 4& `! e' I' ]! @0 R! M
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]% z3 k" |- `9 T3 M
0040325E 57 push edi
$ _% l7 c; \6 y$ k: C' ^* @; C0040325F 52 push edx
' U3 K O! e1 z2 i, G9 C6 Z! p00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
4 |" G) u; i9 o7 C00403264 E8 7B530200 call qsr.004285E4
6 A4 M5 X' w+ A- ~: z6 d0 Q( x! M00403269 50 push eax
/ ]8 F) {1 M6 t' U6 s. D& d0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]' A: b0 _' }( _/ x/ B
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
$ B3 c6 S2 O2 q. r00403273 E8 4CC30200 call qsr.0042F5C4
7 g3 }5 I: l6 o1 ~00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ Z8 b- b" I1 d: a" I! A# P0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
( \6 y( b. D6 d1 @5 v8 l$ s00403280 E8 06C20200 call qsr.0042F48B$ X: T, o) w+ m
00403285 6A 04 push 4
$ m! h8 l, z5 ~; j3 [" _00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
$ r& P, C4 r- B+ x9 [0040328B 6A 0F push 0F5 s1 {3 z, F+ G7 n
0040328D 50 push eax: x* s( t5 Q+ T4 }
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( A4 R; Y9 K; A6 i# `$ Z00403292 E8 4D530200 call qsr.004285E4% g% [0 v" Z5 U, B% @$ x
00403297 50 push eax% c9 J0 S: V; n
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]7 J# R, q8 i* T9 M( w
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F( n1 G5 `) x5 ]% h5 M& ]" a
004032A1 E8 1EC30200 call qsr.0042F5C4
! e9 U+ J9 }4 [+ Z4 w004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
7 M, g g% n( R% N7 @1 F9 Z004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
2 M$ X* p% n q& b+ A004032AE E8 D8C10200 call qsr.0042F48B
, e) e* J1 P3 s+ C, E7 V, J% h004032B3 6A 04 push 4: C+ j; E& C8 Y# ?4 |! \! Z
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
! w* W9 l) T7 V, i6 O; m0 O004032B9 6A 14 push 14
: N; ?# \. N5 G3 {- b$ T0 A) }8 p004032BB 51 push ecx$ c7 k3 V# F9 t. b& E7 g* h7 N
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; A& q2 p; P; t! c! b2 n004032C0 E8 1F530200 call qsr.004285E4* |# S7 ]; e2 w, Y, ^8 K6 e# Q
004032C5 50 push eax0 |* Q5 B- G) a9 I8 p1 h. Z8 ?7 z
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
$ N- x, p ~7 n: x( h004032CA C64424 40 10 mov byte ptr ss:[esp+40],10+ R& v ~) b5 X- F
004032CF E8 F0C20200 call qsr.0042F5C4; ]6 G, E6 E8 c1 q% V
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* O/ O, s- J8 ^004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
V" V3 C5 L% c6 S* {3 W6 |004032DC E8 AAC10200 call qsr.0042F48B7 o5 {3 ]$ k P1 v0 a3 b2 G" {
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI u7 [% ~4 b2 ?( U/ v! u
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
c x1 p, \6 Z, I5 o7 R004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
. w4 {; R6 j/ `; ~( N5 c004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL7 O, o; V+ _. o; G1 P# I
004032ED 8ACA mov cl,dl ; DL送CL
+ Y! T, P) V+ u- y4 M004032EF 3AD3 cmp dl,bl ; DL和BL比较0 i/ U4 Q3 z! H/ a9 ^/ G
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）. T Z8 z0 c% ]7 p$ ]
004032F3 84C9 test cl,cl3 z8 R/ c U# K$ _, S9 x4 f* T
004032F5 74 16 je short qsr.0040330D7 ?1 d* ^! q" X" A# k* u
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL# p* Q9 _' b, x1 ?/ H
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL, c& u/ J4 m* t& [
004032FD 8ACA mov cl,dl; e7 Y$ Z; P2 S
004032FF 3AD3 cmp dl,bl ; DL和BL比较4 p( S k' S L/ J: P/ X
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）6 Z& S0 u# h' v& I; O' }
00403303 83C0 02 add eax,2 ; EAX加2
8 t7 q) ^5 Q) w! ^2 U00403306 83C6 02 add esi,2 ; ESI加2
* M2 \9 d9 [* }' C/ E1 ?00403309 84C9 test cl,cl: G8 B' [' m% P0 f9 C
0040330B ^ 75 DC jnz short qsr.004032E9
: r2 F; { t8 G0 d3 q o, ]# F0040330D 33C0 xor eax,eax
; p7 {/ b2 \" n3 p- ~8 |' h a4 w0040330F EB 05 jmp short qsr.00403316
5 R. Q2 s5 Y8 _: d$ {* D00403311 1BC0 sbb eax,eax
7 {8 U" j' V7 r2 v) z9 |1 N: }00403313 83D8 FF sbb eax,-1" T; k2 W. C' x
00403316 85C0 test eax,eax U/ t, }2 H1 m
00403318 74 0E je short qsr.004033281 ^2 X3 \ O' l
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
8 e' q- w" M) O# q8 ]/ {0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]. S4 X* H) G5 p" W
00403323 E9 F0000000 jmp qsr.00403418/ z! K+ d R2 M1 K! P2 s- z
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
* d3 ^2 _# T: Y2 V7 f8 d. }' v6 ^0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
_) ~' o; p; y00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]: q9 D- E* K% H+ f# C8 z/ x
00403333 50 push eax
" S/ ~$ w8 ^, C1 z6 Y p+ u; ]& m00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
# p' W: U z2 n; \0 R/ C( X Y+ C00403339 50 push eax- L5 P3 I8 j/ g% u% r
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX3 X! A% G t2 l7 F
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
; G" t: W' ~ Q/ C4 Z2 K# J00403343 83C4 04 add esp,4/ e6 W% Q5 \ @5 @
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
: r% |. C5 ^1 ]/ b, {00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]6 D: E5 S6 x0 M' a" J' ~. Q* L4 o
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18] E+ q6 `" e3 K1 b
0040334F 50 push eax! @% \- b* _* z5 m
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX& `$ I ]! @8 ]! O
00403355 50 push eax' \, j$ Y$ L8 Q; P
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
/ h! j( |/ r4 F& `0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
4 O) {! H+ M) q0040335F 83C4 04 add esp,4$ b3 F5 z% c3 p9 Y( ^/ V4 y
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
* f) g: f8 R% x0 Q" M00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
" e# y9 S' f$ j00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]" A# w, [6 v0 n0 x6 k$ x4 w
0040336B 50 push eax
6 W1 ^: F H1 T0 V5 b$ f3 d0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
5 O3 G1 @2 X4 x00403371 50 push eax/ W* a6 |2 o. a' J: q0 T2 e
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
6 H4 i" c$ M8 m) L6 ]00403377 8BD8 mov ebx,eax ; EAX送EBX
7 K2 h: w+ g( D: Z00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX' n, b! ?( c) Z$ p/ |
0040337D 83C4 04 add esp,4( }' ]0 s3 v4 I4 D; x) X
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]9 X, p: U& C. U0 ~# g1 @
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
" Y) P5 z2 ]- I( U! C( Y00403387 50 push eax4 J, I5 g4 i. @; `$ S
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
: ^! ~2 V. A0 Q9 ` ~, [) v0040338D 50 push eax
) x9 }; v: ? z# Q7 R0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
2 F' L0 @* f5 H! w00403393 83C4 04 add esp,4
1 [# J# H' ?* {8 ~00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 c# u4 p' Z0 C6 P: @
0040339A 8BE8 mov ebp,eax ; EAX送EBP% N8 \9 B, L/ `
0040339C 6A FF push -1
* ^: m% l8 k4 g1 } E0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
) m( ~: M0 w g! _9 Z0 o) N+ s004033A3 6A FF push -1' d) i) l- k! E/ ?+ x
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
" Y' G1 _* ]! x' ?9 l& j004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX6 |/ l. F. a4 c1 S Z5 x- [# R& i/ n
004033AE 6A FF push -14 o1 L0 s# S! A) a9 H& H
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX2 v. |, {4 J! e7 O# e- J0 h
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
P' V4 k, q7 e9 F3 m004033B9 6A FF push -1) }4 E2 G- b# ~9 ~: B: ~! T
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
I, ^) z& _1 h004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX, C; ~- L9 p9 w. S$ k5 U8 S6 D
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
! N+ {7 X' J. r) i1 j7 A004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX8 u1 y* D5 u# B2 F3 J! z
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX; I4 y6 J! h; B$ f6 H8 f
004033D7 D1E0 shl eax,1 ; EAX左移1位' b# r) F1 a) [8 m# }$ q& G y
004033D9 99 cdq ; EAX扩展
/ c& [. l. {$ i* H; `+ J; M# p) ]004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中% Q6 m. O+ q4 S5 a; Y
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
! S( _' R. K3 v4 h) a1 S004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）8 R/ H. U2 X0 N- H( r0 g
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A$ r$ L' [2 f1 r0 l; {
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]: {- D. ~ T( u$ N @
004033E9 EB 2D jmp short qsr.00403418
5 E& R) n f9 U9 `4 m; `, I004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
( V# K& K! X8 R5 i0 [2 k004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2/ q+ M" g0 v" P8 S" a6 V. I8 q
004033F7 99 cdq ; EBX扩展
3 W9 H* N& z0 b Q) i004033F8 33C2 xor eax,edx ; EAX和EDX取异或 a2 d' _- @4 N2 ^
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX- M$ b3 v7 X$ F
004033FF 2BC2 sub eax,edx ; EAX减去EDX
& \. N( ?0 g2 g; B( M( P00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]2 F0 v8 @$ V, S& W' U! K
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
1 S! h: N5 L8 Y3 K8 U00403409 99 cdq
2 E3 ?- `$ X" ~; L2 T0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中$ J2 B4 f; o3 S9 O( ^, N
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX, ?! ~6 N L! M* ~" n8 W! z8 u+ S2 i
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较. R2 b+ @9 V4 _( ^
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）4 Y2 ` o/ d/ k
00403418 E8 6EC00200 call qsr.0042F48B ;
7 h8 @, d* U$ Y1 }4 ^' {, m0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]8 A) I* O2 c8 ~3 l. R* U) Q, q
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],95 S( a0 Y8 y4 l/ C6 F8 E
00403426 E8 60C00200 call qsr.0042F48B) U p) @3 T! b: M
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]1 f7 ] C4 ~: r( S y
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8. q6 V% x" a# W1 P q5 G6 S4 g! D2 D
00403434 E8 52C00200 call qsr.0042F48B- A. d; M$ E$ R& j6 [3 A
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
, W& @( [+ ` `9 }0 |0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
) Z* O" ~& N: ?( ?1 |9 X+ ` Z00403442 E8 44C00200 call qsr.0042F48B
0 B# B C* o, g, t/ [1 a2 V: w00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
4 S! t& x/ | {5 C/ `0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
4 o( U, B8 N. \! u% |: e) r5 n% `4 N00403450 E8 36C00200 call qsr.0042F48B
% I* h8 V+ F2 Q D00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]7 \+ f, A$ ~/ ~- y; X
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],33 M$ q) D% F- e: |8 V7 k; G
0040345E E8 28C00200 call qsr.0042F48B9 Y$ q& T3 K, V: F1 D3 x, A% h
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]. j6 Q. X9 U/ W" O+ P: K, W
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
. ^; e: [& t4 x. U0040346C E8 1AC00200 call qsr.0042F48B
7 c0 X" _2 Y# @4 n( o7 D00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
% L4 Q+ c c# _+ m) a00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
/ [5 ]$ b* D* U% z) U, j0040347A E8 0CC00200 call qsr.0042F48B. {& ?& p) u9 [2 }0 o) D( ~
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
% K% v3 O9 }, l# d, i; p+ s* g00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0: @( M5 v0 ]0 b# h* ^% ?; G
00403488 E8 FEBF0200 call qsr.0042F48B3 p9 a. t, L& n2 |; m/ A0 N& }
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]0 Q5 k& a5 C6 |5 ]1 S
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
6 n( k6 N0 h8 J! W% Q/ y9 h00403499 E8 EDBF0200 call qsr.0042F48B0 r. S2 ]* f8 f( I3 @1 w: }# V" M
0040349E 32C0 xor al,al ; AL清0: I# ^, L$ H- z$ y/ c# Z' C
004034A0 E9 88000000 jmp qsr.0040352D' e! T* }" y1 g3 O# D( H
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
e! Y# o1 k+ ^& f0 R7 a004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]9 z' x$ T8 h- f# W
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
, t" {6 C# X& K3 y- Q9 R1 ]5 v004034B3 E8 D3BF0200 call qsr.0042F48B
0 h( m0 R: W- C- T% V; t004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
+ y9 z4 P; `% m! Q6 b, N004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8, d- A( y. P; }8 M5 K3 ~' N- n8 Z- F
004034C1 E8 C5BF0200 call qsr.0042F48B: t2 c J( F" G$ P- I6 z C0 u. n4 J
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]( ~3 ]" }4 [+ c7 O
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7* j H" Z- \0 q$ w7 }. T7 C
004034CF E8 B7BF0200 call qsr.0042F48B
1 c4 o5 }) J, }" d) Y) s004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]: f2 e$ ], k) ]( I& p; X( d5 G+ J
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
! s6 t+ _8 K) h& c004034DD E8 A9BF0200 call qsr.0042F48B
3 v9 O3 }( ]' n: @ o004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
1 d7 A, j3 F3 S4 K' R0 {004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],37 F7 a, ]: _% m" U3 P9 Y9 b6 y
004034EB E8 9BBF0200 call qsr.0042F48B. q: z' C0 a8 B! f- N. r. i
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
2 y! m7 U p8 K004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
. |8 c: t* |* ]004034F9 E8 8DBF0200 call qsr.0042F48B
& z d$ K: y9 B004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
: k+ Q/ K& F2 Z, x8 I00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
- Y9 H* j \8 v3 @4 A5 x/ r/ K z00403507 E8 7FBF0200 call qsr.0042F48B/ W+ h& S; l: d7 z' {
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]7 ` R3 c8 g& O2 L( O( ]
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0 v0 _' k% H- W8 c' A/ |
00403515 E8 71BF0200 call qsr.0042F48B7 F3 R( U: v9 a6 O4 E$ _
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]! u, f q8 K, G3 j& C; E6 Y
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
4 Y- j' h3 Z4 i, s5 \: J' @ U5 R00403526 E8 60BF0200 call qsr.0042F48B4 V) _0 c: }% B* F5 n
0040352B B0 01 mov al,1
3 d: h8 Z3 @1 a0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
! S- ]2 w: f! \3 H% ~/ `$ ]2 r# W. O00403531 5F pop edi
& z- S3 B7 O( k+ r& N% F00403532 5E pop esi
/ V$ m' o$ J0 |6 t4 p" t00403533 5D pop ebp
6 c, C$ H( c, n00403534 5B pop ebx k% F) W5 `/ E
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx! R% D/ c7 p. V6 d, o4 R; f% S3 A
0040353C 83C4 30 add esp,30
" b, S0 ?+ q4 i0040353F C2 0800 retn 8
3 M/ J: X& D7 H* `: ^--------------------------------------------------------------------------------* \4 v, E R1 y( N
【破解总结】
) b9 m( J0 t: `8 ~$ s; `2 \$ X t 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^3 E/ Q7 D" v% H; X7 M9 A
用户名：yijun: K D u9 c1 j7 F Q
注册码：4893*7777*3726*7777*05292 V& _# a: k4 V( D3 _" [: K
--------------------------------------------------------------------------------6 Y$ h g- q' {
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡