|
|
|
【原创】破解Quick Screen Recorder D8 N5 l" g5 Q* v6 { P; m! B; l
【破解作者】 yijun
" W, u1 c: W# ?- O$ n【作者邮箱】 [email protected]9 J* N5 X3 m8 a' E' v9 Z" v* K; C
【使用工具】 OD,PEID
0 q/ e( m; N. X【破解平台】 WinXP; {& a9 L5 W2 W9 m* z7 g
【软件名称】 Quick Screen Recorder8 `# n8 j/ L$ e! c7 \
【下载地址】 天空5 O! G" H0 K" H% y" L' X
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
' O5 H: g' y+ J' B$ ~2 `# @【软件大小】 540K
, G4 N# \3 P- b7 {7 ? o$ J【加壳方式】 无, C9 B3 I+ G9 m9 C$ x9 ]6 w7 b+ c
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
# }& P5 i' k) H+ F p. n5 k9 O8 f--------------------------------------------------------------------------------
9 q" ?8 ]4 w7 T2 B8 ~4 m+ }【破解内容】* T9 u; |) ~+ ?1 x0 {
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
R: Z+ B9 b6 ~6 S9 s8 `00404C69 55 push ebp //在此下断0 B3 q7 q6 y! J2 v. G* ^+ K
00404C6A 56 push esi/ X( O, V! g, X$ ?
00404C6B 57 push edi3 R8 i! r# o) ^6 b& m: G8 V% k
00404C6C 8BE9 mov ebp,ecx; {" i6 U& S% u9 d2 m/ |
00404C6E 6A 01 push 1- P! P9 q8 d4 ?! v9 i
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名# b4 O9 B0 N& F* `: `9 G3 F
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
' [4 R2 w4 ?; O" ^00404C78 8BCF mov ecx,edi
4 l5 V' ^1 [. W6 @( I! a00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
5 Y6 R& [2 ?# ]9 n! e1 ^9 p3 i00404C7F 8BCF mov ecx,edi/ w7 L# o: D% \3 M2 y( `
00404C81 E8 A73E0200 call qsr.00428B2D# w/ T0 i3 U% L8 B5 J# j" ?
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
7 X8 ^; N9 L, {( K3 z: g; v00404C89 8BCE mov ecx,esi
& h" W1 l* P6 q% P* L& f$ T00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX+ @3 j9 S0 c+ I5 U! J6 y
00404C90 8BCE mov ecx,esi Q% I( D" v! Q2 H
00404C92 E8 963E0200 call qsr.00428B2D$ E1 }- }4 h# S& u. |2 m5 ~% d" l: V$ ~
00404C97 8B06 mov eax,dword ptr ds:[esi]7 `( u4 g0 ], K: G0 c. @
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
& D" l7 j6 K" w' m00404C9D 7D 26 jge short qsr.00404CC5
$ R$ t' F' `( S% V00404C9F 6A 40 push 40. Y0 W# ?% m% H6 |3 M
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
' u! s, o3 C+ U: J00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
3 r$ u B9 H% w+ X6 w$ U9 C00404CAB 8BCD mov ecx,ebp. q3 y" V/ `' ~' U+ a& _1 P3 E
00404CAD E8 C3840200 call qsr.0042D175# L9 L5 Q" I; ~* i
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
" P& h- `) h0 f1 F00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx. Q. ]2 v" y1 U5 y
00404CBD 5F pop edi( U% i2 H' G5 ^, V+ X, R' p5 r
00404CBE 5E pop esi
. X+ g7 q$ }' m8 J1 U00404CBF 5D pop ebp& X* [3 m( g* t, `6 |1 w% d
00404CC0 5B pop ebx
& n% m/ h f9 T! W00404CC1 83C4 18 add esp,18! W/ b# B8 x* ~- b, Z4 Z
00404CC4 C3 retn
0 ^, R L2 t, G* N9 D# ?00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]8 N/ }* L% m, r4 d* A$ i: s
00404CC8 84C0 test al,al, W3 s, C/ d0 P7 n& N
00404CCA 0F85 1C010000 jnz qsr.00404DEC, B* y; Y8 k& _2 R/ `- [: L
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
9 ~" G, W- v9 k00404CD4 E8 87E3FFFF call qsr.00403060
7 b5 T* I, o/ B; |& n( F00404CD9 51 push ecx
# x: S" q- B: h00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0* ~ [( o$ P, r- u5 n4 O
00404CE2 8BCC mov ecx,esp' K1 _9 T# R" ]5 m- u* R. q. U" w S
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
1 t9 @- _0 L$ x1 J00404CE8 56 push esi
' p0 W( P" d. i* K( S00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
- ^$ B- p& u) p! L8 @00404CEE 51 push ecx+ f0 X7 `$ B3 j
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
, g6 E* o3 |2 B" N3 b00404CF4 8BCC mov ecx,esp
; v# f- r$ {7 Z( {7 ^00404CF6 896424 20 mov dword ptr ss:[esp+20],esp+ G7 b( }1 ^' g- }: V2 [
00404CFA 57 push edi
1 S. s1 z/ @, d. g00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
) l4 ~" @, H; L3 y5 @! [00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]4 s$ ] \' w7 x
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0* I2 C% |/ ~+ B; O
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
' Q) h t- V, u* m3 I9 q u! ^00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~, x) }, I" J! q0 L
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~7 q0 H' `! y' l7 P2 W; ^3 C" W% S
00404D12 6A 40 push 40& Z9 v4 d* L5 S) H8 ^/ |
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"* b3 R) h) K1 _7 E e& ?' n
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
" f1 w' x* A; \1 ^* _7 z00404D1E 8BCD mov ecx,ebp
0 `8 E5 s0 w; A6 i. b9 ?00404D20 E8 50840200 call qsr.0042D175
1 Q( t! p' ]+ o. D/ D% M, _! L00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: D9 Q; n1 M0 b: |9 C1 W! q2 [00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-10 b0 _- p. j# e7 U4 Z4 i$ O
00404D31 E8 5AE3FFFF call qsr.00403090
' I0 n/ i( {; `+ z/ ?- p00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
7 J7 p: O Q# S( i00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
: P, O \& T9 i, ]2 t, R00404D41 5F pop edi
/ z" i2 @5 J+ x6 X9 m00404D42 5E pop esi" `' w% o8 U& X; ~: @9 }
00404D43 5D pop ebp
6 |7 K& w3 r6 D! |. A* d00404D44 5B pop ebx( H( n( G$ [% _1 s- A
00404D45 83C4 18 add esp,182 v, G u7 q! O) N3 ~# T
00404D48 C3 retn3 ^- R9 Z6 p' R2 U
*********************************************************************************************************************************************************
. X- A" g4 k! v4 c- [跟进00404D09处CALL来到：$ ~; K9 d: R7 y: u
004030A0 6A FF push -1 //一路F8下去~~~~, X9 e( I% y- n( z
004030A2 68 C88F4400 push qsr.00448FC8
3 @4 I" A* P. L: P) W004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
2 z/ Q3 p" z0 z004030AD 50 push eax
( m( {- q# s3 F004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
" b& u! ]6 e8 O# H* O( A j004030B5 83EC 24 sub esp,24
+ F& r- U7 u7 a, \4 S& ?0 p! M+ j7 M004030B8 53 push ebx( O2 l% f. A! R
004030B9 55 push ebp3 t0 |1 Y' p" t" ]* r3 H# z& l2 c
004030BA 56 push esi
4 z8 M& g# a3 F: _+ S5 J7 B004030BB 57 push edi% S" ?' K+ r; }9 J+ a
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"* P/ h9 H4 }- N
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]% f6 J* R5 S% |+ a3 A4 w
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1& }5 t# q; O( c7 P% r" t1 m
004030CD E8 27C40200 call qsr.0042F4F9
H0 F3 H( t8 j0 d# K) _004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
: v- M7 g+ M7 P& @) \- O. S004030D7 894424 2C mov dword ptr ss:[esp+2C],eax- t$ I! j Z! |3 F3 m" R9 _
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]/ @; @+ j0 D3 c. g/ P
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
5 w- V! M" Z: E" V004030E4 E8 905A0200 call qsr.00428B79" W+ e/ c$ {5 x1 Z2 [
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48] M3 Y, i5 }4 h7 l' L
004030ED E8 3B5A0200 call qsr.00428B2D
X, }# ^. Q* t4 V- V004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]1 f8 z. B! J, W* t' k
004030F6 E8 7E5A0200 call qsr.00428B79
. t6 x! b5 n Q5 o6 C& _004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: U) U+ _/ e/ ?% y7 Z" c
004030FF E8 295A0200 call qsr.00428B2D% [+ o. ?+ @4 q& r
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
$ Z6 Y+ Q$ {9 j6 l3 I: R) r/ f2 c00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
8 X Z. l3 X' q: A) ]1 E4 a0040310B 83F8 02 cmp eax,2
& {' y* q2 o" A0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳6 h" f* |5 o0 n8 J
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]+ R, c* T2 C% q) s$ s4 |8 B& i
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18! i- M" n8 H& v5 t' Z1 y% u
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
3 ^8 L6 |' O4 A E* d2 n& Z1 _9 S1 b P00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]. X6 f1 G" y. b1 t/ M, r9 ]$ N
00403126 6A 01 push 1 F& A6 P% b/ C6 Y8 |- j
00403128 50 push eax. m+ }: S( w3 }
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( v Y# M5 S- p t" I# K0040312D E8 C4550200 call qsr.004286F64 Z! X# w \6 O: ^, i
00403132 8B00 mov eax,dword ptr ds:[eax]
) t$ y2 e4 Y8 O3 r# K1 d, G00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20], I) x: H! H' Q; j+ b: C
00403138 50 push eax5 r# v( _% g( Z9 F
00403139 C64424 40 04 mov byte ptr ss:[esp+40],42 o- f$ A% E: e2 u" d- P/ M
0040313E E8 4D560200 call qsr.00428790; x" w; b" b, z0 ], q$ [9 Z
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]; g6 O# m% H2 H4 W$ A
00403147 8BF0 mov esi,eax
7 \9 G3 Q- o' m* E1 O4 Z* O$ }00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
# A# _" |- K3 r9 e. J; n, `' s0040314E E8 38C30200 call qsr.0042F48B
' a* o! w$ _* \00403153 8D46 0A lea eax,dword ptr ds:[esi+A]3 q$ v% [2 b1 J
00403156 B9 3E000000 mov ecx,3E' g. [# U: V- K6 i
0040315B 99 cdq# c9 X/ z7 y/ h- E4 t" H! i3 U6 z& z
0040315C F7F9 idiv ecx3 \; t+ m% u1 Y" G% t# S
0040315E 6A 01 push 1; a8 u9 m( s0 i4 m6 _
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]8 R1 u9 F0 [, u! U3 `" r
00403164 8BF2 mov esi,edx% m$ i' `; D( K/ k0 a0 a& U8 W2 h
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]; u8 q9 x" j8 e2 o% D& @
0040316A 52 push edx
4 E% c+ x2 E# u6 D5 Z0040316B E8 0A550200 call qsr.0042867A5 A9 X6 P+ U' A5 a8 L
00403170 8B00 mov eax,dword ptr ds:[eax]) V! E, @2 D3 a, T( V/ P
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- b2 ^, P4 v+ L1 ~. |
00403176 50 push eax
- [: _5 q p$ q! ?00403177 C64424 40 05 mov byte ptr ss:[esp+40],5 b) k$ S( j1 A% w" B5 }$ R0 u
0040317C E8 0F560200 call qsr.00428790" _$ o) w- h' w
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' ~: N. _1 m4 }' q. t00403185 8BF8 mov edi,eax
. y$ d( n2 R0 `6 s# ^8 D00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],30 m: S5 x! N2 E- D! A. y: X* D
0040318C E8 FAC20200 call qsr.0042F48B
4 d8 e: Y* g, w; F+ z* ~) k7 p00403191 8D47 0A lea eax,dword ptr ds:[edi+A]) Y$ ?9 w, e. w3 y2 c
00403194 B9 3E000000 mov ecx,3E
( k+ B6 t" p! D2 D' g00403199 99 cdq$ k% f7 P6 a" Y0 N+ r
0040319A F7F9 idiv ecx. r$ o6 H- o6 f* u8 N; p7 f$ @
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]* N" e" d4 N2 R) [
004031A1 894424 28 mov dword ptr ss:[esp+28],eax. A/ I# [' j) Y
004031A5 8BCA mov ecx,edx
# ?$ o) |& Q+ L1 S7 R004031A7 894424 24 mov dword ptr ss:[esp+24],eax. s) f1 j9 _# {5 a5 A* ~
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
( {0 C2 v2 o5 J0 ^004031AF 894424 18 mov dword ptr ss:[esp+18],eax! o! p5 x: b Z: W T
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
( P: }$ G; }1 f% M8 D004031B7 894424 10 mov dword ptr ss:[esp+10],eax
A( K0 N: l, Z9 g4 e9 k004031BB 8BC1 mov eax,ecx
- D) h" [9 [0 B6 h( v004031BD BF 0A000000 mov edi,0A" f$ Y0 p9 ]' F5 d+ f, s& Q1 ]
004031C2 99 cdq ~6 g! ?3 V& ^' h4 P
004031C3 F7FF idiv edi
% {; `4 A. L" F004031C5 8BC1 mov eax,ecx
. j& J% k) C2 f( _6 l! d004031C7 B3 0B mov bl,0B
/ Z5 i8 O$ J( ?2 t0 X004031C9 0FAFC1 imul eax,ecx4 d. a ]% x: J# I' j- ]
004031CC 8BCF mov ecx,edi- p# c7 q& O. A4 X5 V4 T/ _ x; m
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl% u- t% t, I1 I0 X! P5 Y: h0 z
004031D2 52 push edx4 C3 f. e4 g- K8 F% h9 Z/ J; ?
004031D3 99 cdq
$ U- ]! y& y1 [004031D4 F7F9 idiv ecx
" i4 M" h$ n" k. C! o4 U004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]0 A+ \- \( j. b# I Q
004031DD 2BC6 sub eax,esi' T3 ^- t8 |6 H
004031DF 52 push edx
X8 a/ @' } Y4 L- G% u' l3 s004031E0 99 cdq$ E! X: r2 C% v* @ u$ @( ^2 s
004031E1 F7F9 idiv ecx; J2 j7 G `2 h
004031E3 8BC6 mov eax,esi
6 N# L u( W f004031E5 52 push edx2 p+ v2 q2 y6 _" A1 h3 {
004031E6 99 cdq
( Z0 |# h# T! N' D* }/ V$ T004031E7 F7F9 idiv ecx3 @* ]! p2 J" _# e4 [" }1 X2 q! o
004031E9 52 push edx7 w! S, L) i g8 q( E
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]1 ^7 y- s, i$ Q; v+ B5 K4 C
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
! A9 U5 D5 {( e/ @: P4 ~% _; y004031F3 52 push edx( U9 o8 n$ ^8 z) \% W/ {
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
6 @, ^3 S& P+ `, L! g& u5 V. N004031F9 83C4 18 add esp,18
& y. n, [0 {8 X+ g ^2 K2 U$ q5 ]4 ]004031FC 6A 04 push 4
2 _( u' o8 u4 G+ @3 C004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]1 L+ y5 W" }0 F1 u' e
00403202 6A 00 push 0
! v* R `0 E, ^6 A9 ~00403204 50 push eax
; M( W6 j7 Z8 [00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; j+ I ^9 f! r0 t* A
00403209 E8 D6530200 call qsr.004285E4 n% P7 N, j# V W/ ?
0040320E 50 push eax+ B4 z3 t% Q& h4 Y9 |
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]/ W1 ]) ~* w @% y
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
2 d$ |( C {! J/ b00403218 E8 A7C30200 call qsr.0042F5C47 r6 i1 G* F. D+ u; `* j
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# U2 f6 }+ B$ c- L; N/ W. ^- G
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl& g* F+ ?* o% T D$ D" u2 L& c
00403225 E8 61C20200 call qsr.0042F48B
1 \7 `. D" K- [$ o7 v( j1 O1 M6 W0040322A 6A 04 push 4- E5 s6 U$ s% m4 ]' v" F
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
5 c( A3 c' R6 b$ b00403230 6A 05 push 55 b/ r( |! C# ]) M) {8 E( B+ P5 M7 Z$ F
00403232 51 push ecx
5 ]# O/ C1 u$ p5 Z00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" Y$ l& M8 u( u6 Y b- m00403237 E8 A8530200 call qsr.004285E4
; e; Z- h# c9 D9 R; ?0040323C 50 push eax
. |* T* G, {1 \3 l. [3 e0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
0 E6 l6 R# X) ~4 @& A j00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
2 p' R% A* v+ W1 X+ S00403246 E8 79C30200 call qsr.0042F5C47 Z' `' r; L7 V
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ B a a1 B& }# W8 X6 `5 V0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
7 E% f7 F0 B3 t! V9 K1 u1 M2 y0 l4 ~00403253 E8 33C20200 call qsr.0042F48B
- p' F% |- S1 \00403258 6A 04 push 45 ~0 }$ B2 {/ d, _
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]9 l( X6 ^) }% ~5 Z- E0 H
0040325E 57 push edi/ R4 o' ^4 v+ s3 u/ U( C% a
0040325F 52 push edx
" R" g" c2 p2 Z00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
# ?/ n0 }; x+ Z) u7 ~2 @* ~00403264 E8 7B530200 call qsr.004285E48 v) k% i8 i/ _6 b5 n/ U! L
00403269 50 push eax0 A2 y! O7 x5 R/ l1 C0 @
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
# P5 S# q# Y) g5 }2 ^3 p0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E& B# [' h0 P, @' R
00403273 E8 4CC30200 call qsr.0042F5C4
/ Q. j; C1 k2 m& c+ ~00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' a }# A) H8 I0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl& v6 w0 `" V! i
00403280 E8 06C20200 call qsr.0042F48B* M9 G" `. T0 f$ s
00403285 6A 04 push 4
# ^& Z7 p3 l4 z6 j3 Y00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]$ G" P- s% L, m! u" X$ H/ a3 _0 E
0040328B 6A 0F push 0F
3 U9 h9 |+ |' I/ m; p0040328D 50 push eax
) X7 \4 |' g- N: g0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" ?0 E) E" z h$ y- F
00403292 E8 4D530200 call qsr.004285E4
2 I+ ] T9 ` n/ K$ z00403297 50 push eax
3 w. l x& e$ p; A0 q, A00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18], K! N R p7 y6 L0 ^
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
; O$ J1 m3 d7 `' W) a) R004032A1 E8 1EC30200 call qsr.0042F5C4
- E! O& @) X# f( t" v004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 X* L* F8 B. T: I
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
; N. H* x1 q* m+ ^; o& s! J004032AE E8 D8C10200 call qsr.0042F48B
. }1 I4 |2 P$ ] j3 v004032B3 6A 04 push 43 u# k; ]* h& E* J, [0 o/ n
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]. c6 U+ h/ W" O' @6 K, S+ i% A2 s
004032B9 6A 14 push 14
; D8 |: P( f8 S+ Q4 g004032BB 51 push ecx" N) U" w) k" W% c$ ]
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ \- P1 g- ]& h9 I; ?8 I
004032C0 E8 1F530200 call qsr.004285E4
( e. u' E7 D8 q5 O# u( Y004032C5 50 push eax
+ D7 T; u# u( ^% u004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ z- M6 v& x9 e8 e) K' M w% d
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10' i, x: ~* B' J8 f3 X; j, S3 P
004032CF E8 F0C20200 call qsr.0042F5C4
" U& R1 _! o- M004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]; S1 q" x, a/ [3 [
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl/ X% X9 E; B* H; ^
004032DC E8 AAC10200 call qsr.0042F48B
, [4 M0 | A& u* v" \004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI- s- X6 y6 W" \+ ?5 o
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
6 n. m5 n. e0 B4 e004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL* T. }5 r5 B8 Q4 |7 E9 d2 Q$ r
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
( W; V3 _) w# X' `( z5 s# [1 r004032ED 8ACA mov cl,dl ; DL送CL
$ u/ w5 k2 o4 w" D004032EF 3AD3 cmp dl,bl ; DL和BL比较
1 _4 v" N% P- |& n. y004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）" B& ?# S; a" J& o' e$ n/ P
004032F3 84C9 test cl,cl
9 h; q0 R9 |( M1 f004032F5 74 16 je short qsr.0040330D4 X9 ~& z; ?$ U, ~1 [% l" i& _
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
; E& x9 I5 C; o, p1 H/ e+ i1 ^004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL+ S% z, v1 ]/ T/ a, t) ^
004032FD 8ACA mov cl,dl0 M9 a8 G1 \6 z2 s
004032FF 3AD3 cmp dl,bl ; DL和BL比较% b& j6 b0 j9 |" m+ [
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）( q$ U5 l4 l8 ?$ f% m& m8 @) N
00403303 83C0 02 add eax,2 ; EAX加2
# C3 G/ z3 D- c7 p7 K0 W00403306 83C6 02 add esi,2 ; ESI加25 G) `* ]( p* A) z8 O1 b
00403309 84C9 test cl,cl
3 \7 Y& ~* Q( s6 |. B$ Q( j) ]0040330B ^ 75 DC jnz short qsr.004032E9- j' |+ X' c, D& j% j
0040330D 33C0 xor eax,eax3 C# \6 l' o) S6 l: G8 h
0040330F EB 05 jmp short qsr.00403316
, ~; ?1 K m e" ]5 ^3 |; b00403311 1BC0 sbb eax,eax/ L! t' W1 }! u3 q
00403313 83D8 FF sbb eax,-11 o" v9 {6 ~/ A1 r8 f
00403316 85C0 test eax,eax( E: W q5 h! b! k' i
00403318 74 0E je short qsr.00403328
1 d8 C7 U5 J0 a$ w0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A2 m, n/ c: a% y) r- i6 [
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]% y4 G( _" {5 z. g, @
00403323 E9 F0000000 jmp qsr.004034184 z2 Z1 w, b8 H3 g' s; l
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
0 ]6 r1 _3 s* z0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ S8 D0 o! P: u9 Q7 \( _1 Q
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]' }6 U) |' c2 I. s
00403333 50 push eax
7 f' L/ @0 u( H8 Y00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX2 u4 f: S) \# Q% i' k1 R
00403339 50 push eax
2 T' m2 `6 y: v( a0 }/ P8 _2 ]2 ^0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX, k! z% X3 T& U( @; u. Y
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX8 X1 o! ` p: B' p4 E5 Z
00403343 83C4 04 add esp,4
7 T) j2 f# I6 a; V7 P, \/ f* H$ u00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI7 D$ P k; X! \' A
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]! J. i- I4 z# I$ H# G
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]+ ]. D' f' x& {( s& t7 ]' \
0040334F 50 push eax
# A' I. F: k' Y6 E2 B! u1 C2 [# Y00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX* N, |0 R& `/ J- i. i7 v
00403355 50 push eax
3 k+ _) Y" p V! l A00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX: u+ S9 N0 D) A; F- _: U6 Y( a
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX7 }7 Y" X6 e/ b0 A% S Y# V9 C
0040335F 83C4 04 add esp,4& j8 p6 E' E( B# t/ J, P
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI3 R4 R9 c. [. ]( X! U, _0 J
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
b$ A6 ]/ u) i. ?3 ~00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
5 A" T C5 S* W0040336B 50 push eax; n% X& I7 j. [$ _6 v. B1 T
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX, r2 \& n# M. V w" ]
00403371 50 push eax
& m% r( O' s( N4 |* i# z00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
" A! _% w4 K' H; E7 k00403377 8BD8 mov ebx,eax ; EAX送EBX
# N) Q$ J5 S1 U8 q& i9 Q) v00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX( [# C6 N! q. m3 w# ^
0040337D 83C4 04 add esp,4
5 z: p' j! K. \& O j00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
$ u8 n5 G* B8 v' P, ~& I$ Z00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
Z# m0 V5 ]$ }0 U4 Y* N) |7 a00403387 50 push eax
+ w2 B1 Z& Z8 F0 s+ o00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
( ^: d- N6 P8 |3 J0040338D 50 push eax* A0 `, Z3 y/ Q/ \9 m
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
# F, F' q0 `% }! j1 ~9 C7 T3 ?00403393 83C4 04 add esp,4
+ n. Z9 } Y1 h00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
2 L& Q; n5 M9 T* V4 ]9 i7 m# O0040339A 8BE8 mov ebp,eax ; EAX送EBP1 S; b) e/ I3 Z. T1 E3 q
0040339C 6A FF push -1$ p" m4 N9 t3 S0 n( `8 H0 u8 a
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX* r) |3 G+ w% B4 q. L( m- O. d
004033A3 6A FF push -1
/ g! C) T- K& H& Y, s004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
6 I* u N7 F- B/ X+ R0 e0 [004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
/ P: f8 _ d8 a2 K+ f8 t1 @# o5 d004033AE 6A FF push -1+ [3 e. N4 m0 u1 R3 _0 D
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX2 Z/ _1 @' z$ F4 C+ r, b* N
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX. w4 G# g' a- \/ c0 O
004033B9 6A FF push -1
; E% L; ?8 z7 X1 V004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX5 r2 Y% l) T/ W* H3 o) ]
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX6 F; \9 S5 R. z2 P D$ e, K' ~
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX+ X9 G ^+ d% W
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX1 u/ ]/ D9 X. u
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX. {5 A. o% U8 O E2 Z# s
004033D7 D1E0 shl eax,1 ; EAX左移1位, m& ?6 t% I) j( p8 x
004033D9 99 cdq ; EAX扩展- d+ [7 _9 M& U' e
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中1 {9 C$ M8 Y0 Q; t" Z r9 C( X
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
5 {: {# ~, a% W2 [* \# Q6 q004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）2 g6 F0 k; S# J
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A( A6 v% P& B5 ?
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]: S" m7 z, H( i+ U( u5 g! t; r8 m$ z
004033E9 EB 2D jmp short qsr.00403418. [" D: h, }' w: k: O! c
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX% b3 Y1 p1 O* b6 \. N( S
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2; N$ J9 B# y# H/ s
004033F7 99 cdq ; EBX扩展" O. I X$ c3 W8 n% \& R: ^
004033F8 33C2 xor eax,edx ; EAX和EDX取异或. V$ J1 }: d% I2 O; w1 H+ f) j
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
9 p' F7 |/ ~1 Z004033FF 2BC2 sub eax,edx ; EAX减去EDX
0 @9 `0 L5 }; X* C# g" X) _00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
% N! R7 N0 S: E, o00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX4 E# e( T" g' X/ o( O- @
00403409 99 cdq
' e, J6 p: d, e3 e0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
0 G' ]3 y$ W: a4 i2 Q) P$ i I0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
. T7 d% e4 h& O7 S( M% J9 L00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
# A9 K# ]4 T w2 o i; F6 x00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）" W9 E: a, _" f1 P0 }
00403418 E8 6EC00200 call qsr.0042F48B ;
( D# j' s! M8 C7 i" Q0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
$ v N- |0 H" C/ h00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
0 z ~3 ?( }* U3 w00403426 E8 60C00200 call qsr.0042F48B7 j5 t0 ?6 I3 u5 V5 x% A' _4 _
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
S: s4 R( }2 }2 j0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8" K% L% S+ u7 L0 {/ Z
00403434 E8 52C00200 call qsr.0042F48B3 {+ w% | g4 q+ X: w" {3 ?( w+ O
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]; P3 Y* E. U3 v
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7. j# b4 X7 G; A. k; U3 J! B5 P
00403442 E8 44C00200 call qsr.0042F48B
% g( ~8 G5 h8 h9 L( H( V7 M4 z% p00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
) ]9 \- A4 T7 k: n+ t5 ]# l0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6, q- H0 z, J, ?' d. D/ D
00403450 E8 36C00200 call qsr.0042F48B
( s# ?9 e( ~( {4 V! k6 P& t00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]* b9 l @, x( N* A
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3' Z: y, P d- z) [
0040345E E8 28C00200 call qsr.0042F48B( c$ X# J) T5 y3 ~; ~7 [$ Y3 G
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
! M2 a. K, A- e" w00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
& ^2 N) h2 p- f8 g- }" u) p0040346C E8 1AC00200 call qsr.0042F48B
1 t1 Q. Z* Q. \/ W00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
# v* q/ X7 W: ~6 b5 e00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],16 @2 ~* u! s7 {+ V8 t
0040347A E8 0CC00200 call qsr.0042F48B `# j0 ?* V' B% z8 U2 v0 m5 N
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
/ ]" ?* x5 T R) O) K1 l/ ^3 B. q00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
' f$ [1 j# V+ [! u" R00403488 E8 FEBF0200 call qsr.0042F48B+ i: a, R; Q/ k
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 C3 s9 L6 d3 h( Z$ H00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1' U% ^2 R7 a w7 U1 \8 | ?+ |
00403499 E8 EDBF0200 call qsr.0042F48B" U" ?/ k6 m$ n9 y
0040349E 32C0 xor al,al ; AL清0. G: K( ? y* T
004034A0 E9 88000000 jmp qsr.0040352D* V. E. ]$ q8 e/ s# l' s
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
6 t" r0 t9 I( z& H004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. O! u& u& \2 Y004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9, `8 K( Q9 {9 Z$ m4 `5 m; W
004034B3 E8 D3BF0200 call qsr.0042F48B! V T; T# J- S
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]. q6 X4 l" {& I5 a
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
k0 R( F, ?" V; p; j004034C1 E8 C5BF0200 call qsr.0042F48B
! ~' e# s" V" D; C) c$ k- X. u004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ N* l: Y4 k7 |' b" g7 H
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7% g# u) J. M1 B
004034CF E8 B7BF0200 call qsr.0042F48B% z$ g0 V$ W! ^" Q3 E- L6 B
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]7 K5 X4 v! I5 q. B- ` Y
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
2 D' ]; i. [" d4 ?2 O, r004034DD E8 A9BF0200 call qsr.0042F48B/ T3 a+ d7 _# J5 ?
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
: I4 T" b- S, }6 W" L2 p004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3. ^: ?- h$ s% y$ z
004034EB E8 9BBF0200 call qsr.0042F48B
( p& M% E8 B1 }" V6 ]4 V) P004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]3 W) H# _; h5 d1 T2 s( [
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],25 k0 l: c3 u* m0 L3 a0 _2 b
004034F9 E8 8DBF0200 call qsr.0042F48B q8 i. I2 p( w" ?
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]8 ]; V+ D- r" J: k9 f. U
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
; s: Y- ~3 B! e& t, n- \00403507 E8 7FBF0200 call qsr.0042F48B0 v4 B1 L- [# a. L) d( a7 |
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]1 X G: W5 s3 q6 R, u
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0# W4 O6 P( z& ^0 K1 |- ]. e. J+ C
00403515 E8 71BF0200 call qsr.0042F48B
0 w) K s4 c5 d0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]4 K' b" y# v* Q
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
. l* m7 v7 P, X; A, _+ _' K7 h00403526 E8 60BF0200 call qsr.0042F48B
: O" } ~0 K; q0040352B B0 01 mov al,1
+ I2 G/ o; @( K0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]/ j& D# g# V) ?7 E& T/ X2 Y X
00403531 5F pop edi( C0 V' W+ V1 ]. P' I$ X4 f
00403532 5E pop esi) c, X5 H& n1 t) `: c1 O7 i# n7 v) C- @
00403533 5D pop ebp
* N' b, L6 _4 S- e. y) d00403534 5B pop ebx
4 e2 G2 `' [# i8 H00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
0 @9 u* D7 }% { j7 Y$ r% z" T7 w0040353C 83C4 30 add esp,30
* h/ z. M1 ?8 R9 e. G' W0040353F C2 0800 retn 8: @: n: j+ ^$ u" y7 Y
--------------------------------------------------------------------------------
& v; q; D! f: A7 p! C0 X G/ N【破解总结】3 k' n8 y9 I$ {9 W2 T
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^) _% m% E9 N9 Q
用户名：yijun @: C9 I/ B7 Y! A) @
注册码：4893*7777*3726*7777*0529$ v8 C, l4 b: Q* c) @! U$ f
--------------------------------------------------------------------------------
+ [ h5 p" {2 V K, V) I【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡