|
|
|
【原创】破解Quick Screen Recorder
* r m& K" B9 P8 ]【破解作者】 yijun
o+ ?' _: H! e【作者邮箱】 [email protected]( S. d( R$ c) B T# K$ {
【使用工具】 OD,PEID& ^: O* d7 }, D$ |0 K+ m5 ?# _
【破解平台】 WinXP
9 e8 \' K8 d& a【软件名称】 Quick Screen Recorder
- ?/ e) C( C) y( M) y【下载地址】 天空
4 j6 }0 J2 D: l# M5 }【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
/ O: @* p) ]* ?7 K+ D8 A9 i+ e8 a: X【软件大小】 540K
# w* O1 S: x1 x+ r【加壳方式】 无
7 J3 v& p9 w# s0 [【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）2 O4 T" K& ?4 a
--------------------------------------------------------------------------------
6 a9 k+ ]* F. M% m3 _- i【破解内容】
M Y+ P1 Y2 H% x* {! N4 a PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
; }* I9 k `' k( n00404C69 55 push ebp //在此下断
" G' }6 j2 [0 X* v. f, P00404C6A 56 push esi
' ]* B" R+ b; }6 ~. Z- S0 A00404C6B 57 push edi- J) E9 Y* [2 Y+ k
00404C6C 8BE9 mov ebp,ecx
. q8 V( X1 b: C5 I, j00404C6E 6A 01 push 1# q0 X l! Y) g- C
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
8 y% t1 m. D0 f% s2 A" Q. ^00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
. W* e# |+ C- g3 l00404C78 8BCF mov ecx,edi' I$ k3 I2 \) A2 m: @( ]
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
% l$ e. e: P, }$ J00404C7F 8BCF mov ecx,edi
% b- b4 k8 \0 u( X5 C00404C81 E8 A73E0200 call qsr.00428B2D
9 o& E5 m5 N' V4 o! A4 D00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]) a2 Q8 j& l& s- E
00404C89 8BCE mov ecx,esi1 v7 f! D4 q ?& X5 a0 z+ S* |
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX/ M1 m; i S: N! b7 }
00404C90 8BCE mov ecx,esi$ t6 i5 }9 _7 s# p
00404C92 E8 963E0200 call qsr.00428B2D
! e1 P5 s" D/ a9 j00404C97 8B06 mov eax,dword ptr ds:[esi]# b7 y$ v- g; V* A8 Z8 g
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2+ y* g- y6 i# g* z1 Q: g2 s7 W3 m
00404C9D 7D 26 jge short qsr.00404CC5
$ S$ G# `$ j2 I00404C9F 6A 40 push 40
4 e8 z G- T! O7 T* P- U4 l00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"3 d5 ]1 x9 K( `1 A- r' o
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name.". a& a/ c: R; n$ N% ~/ ^
00404CAB 8BCD mov ecx,ebp
2 L0 u; ?& D- b" k00404CAD E8 C3840200 call qsr.0042D1754 m3 S# s+ l4 S% f
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
2 Q" Y! X% e* }! L; Z6 ^% p% O K00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx6 b0 C d7 g$ f0 R8 l
00404CBD 5F pop edi
' C; x5 B$ H7 t" t% X% G5 B00404CBE 5E pop esi- ~1 C0 j6 G. L5 l
00404CBF 5D pop ebp$ [. g5 e/ N0 t8 \7 o- c
00404CC0 5B pop ebx4 R* j& @9 t0 C9 z
00404CC1 83C4 18 add esp,186 c6 i) a& G! ]6 Z% B% V) f, Z0 @
00404CC4 C3 retn, w0 N: y# v. M$ ^, l" C, h6 ~
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
8 G% m1 y$ a! D' |: h+ n8 i00404CC8 84C0 test al,al( h, k8 \2 F- E" ~
00404CCA 0F85 1C010000 jnz qsr.00404DEC2 J7 f+ ~# [7 ~" Y& B1 A
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' n- P: j; M9 w3 p' M8 v
00404CD4 E8 87E3FFFF call qsr.00403060
7 E4 X2 d4 P5 z00404CD9 51 push ecx
& `; U2 M$ o2 o! X0 A K; n00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
1 c* |; w5 H$ z, `& u4 P6 ?( X# \00404CE2 8BCC mov ecx,esp
% k5 V! y3 v, W# J* v+ l' d00404CE4 896424 14 mov dword ptr ss:[esp+14],esp! D3 \; h" S9 \* a" H
00404CE8 56 push esi
: ]( y8 D* f; w' u: j2 x00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
% o; O% ^2 `, a S( w; @; L00404CEE 51 push ecx; b: Y5 ^( a0 F# y; {" F7 |
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1' s& t$ Q: A9 j" B' B3 [
00404CF4 8BCC mov ecx,esp+ Y9 ^0 M1 [4 C) p2 ]2 e
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp" i0 W6 I% @& S! S
00404CFA 57 push edi- {1 y$ S" J; v# }5 N" R" \: u
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
. M- d/ y& l2 g" s, R8 M+ G00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]' i! t2 y- k( e8 N0 a! R% X) D
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],05 e8 o1 C& ? _- r, { d$ L
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~) d# j5 C* j, m
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~& ?4 b; c% p$ J5 y3 _- h7 Z. y9 G. m
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
# c5 P4 j1 Q6 m7 O! w# N$ _00404D12 6A 40 push 40
5 C, v, F" F; ^7 _7 e/ w) t3 H" Z3 W00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
w* B' M" ?# h+ e; a00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
: o ~! p1 u2 N9 ~00404D1E 8BCD mov ecx,ebp! T3 a# w" }1 @. L
00404D20 E8 50840200 call qsr.0042D175
- s( ^/ k: X; f# K% A$ z00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 l. j7 E" l) |4 b) I
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-15 V% w& t& u# ?7 R* Q
00404D31 E8 5AE3FFFF call qsr.00403090
# T. O$ `2 `5 [00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] O) Q% [/ P7 X! h
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
3 L1 X. _, H; [$ L00404D41 5F pop edi
; N) N6 }4 @( r00404D42 5E pop esi
$ D0 @" V1 y3 I% F5 I0 Y1 ]00404D43 5D pop ebp. B+ c: u8 ?; x/ t3 h
00404D44 5B pop ebx" r4 }2 j: r9 F% n
00404D45 83C4 18 add esp,18
3 C; I; {' ]& P# [/ n0 {$ C, c/ [00404D48 C3 retn
3 z: U: N$ X, K6 R*********************************************************************************************************************************************************
0 J9 c3 c& h8 j( L8 [ Z跟进00404D09处CALL来到：
$ e. e( h6 z& I: h) b, _004030A0 6A FF push -1 //一路F8下去~~~~
4 o, x6 @/ I4 P2 j/ }# z004030A2 68 C88F4400 push qsr.00448FC8
. c) A! F3 Y1 G004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
& u4 [7 [' D o/ q- {004030AD 50 push eax
1 j- O' X. w. M" t* N004030AE 64:8925 0000000>mov dword ptr fs:[0],esp. ]4 S2 E9 r+ a" L4 L4 S$ Z
004030B5 83EC 24 sub esp,24
7 A3 s& ]% B% K( n V004030B8 53 push ebx: \: f0 W9 G) W0 y. u: s
004030B9 55 push ebp
* N" A) z7 ^& y" d( N9 Z8 P- d+ W004030BA 56 push esi
) U3 d; d7 V1 M: l9 l Y8 H004030BB 57 push edi
" B. c& G/ R/ V6 d a004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
! b c$ u7 b9 U; O& R$ R+ Z- I7 ~004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
# w% ~0 D, I! W004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1: j/ _. d3 |# s# v% i+ G+ [
004030CD E8 27C40200 call qsr.0042F4F9
) p/ t5 O) p2 k: O4 s+ P* @004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
+ T4 U! @" f) R. z2 ]! o8 X004030D7 894424 2C mov dword ptr ss:[esp+2C],eax, I, r" E. i, G8 j% E0 h
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
- Z, b( `6 N& \: O4 b6 v$ b004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],30 B% c4 ^ H6 R1 @6 Q& O! W+ W1 Z
004030E4 E8 905A0200 call qsr.00428B79
& ^! P9 v/ t' K- }/ u6 e* K( ^2 P l004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& i4 m0 x5 E( z
004030ED E8 3B5A0200 call qsr.00428B2D) s2 O0 E/ p5 D, M, M
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
: t+ A( v4 q8 j" M8 @004030F6 E8 7E5A0200 call qsr.00428B790 k8 K5 [1 w c5 q
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* e' t8 {3 b- ^4 |" m% @004030FF E8 295A0200 call qsr.00428B2D
1 s. {4 C/ S) `00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]/ j4 n _5 p/ l# H9 S5 _
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
7 W9 }+ A# k9 o6 y2 r0040310B 83F8 02 cmp eax,2' d! S! H! `5 p) g, U/ Y$ `
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
* a/ u: Q* c! `00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]' p: e J6 P! X! ?5 M8 g
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18" b* B$ ^8 h- t7 A% T8 J. b$ C- |& L
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
. ?1 V( E) i m, x) [00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
# V* M/ {4 y; @00403126 6A 01 push 1
$ w! E. }, u/ J* t, O9 x00403128 50 push eax
5 ], x2 W: Y' ?00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% |6 u; {. h& @. e. C0040312D E8 C4550200 call qsr.004286F6
; h8 e; ^ Q6 E2 j00403132 8B00 mov eax,dword ptr ds:[eax]
6 I% j( Z) B! v1 ~$ `00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
& P& Z' W& j/ Q0 N6 e00403138 50 push eax
8 K1 A; K$ ~4 Z00403139 C64424 40 04 mov byte ptr ss:[esp+40],4/ Y3 w( M' B. i: F' e+ D
0040313E E8 4D560200 call qsr.00428790" F/ Z+ m* p. L E: n9 {' y* \4 ]
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]9 m. V) l. a. O$ M3 p
00403147 8BF0 mov esi,eax
6 O, ]# A3 H# e, m/ P9 n s3 ~; p00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3, a4 S* a4 t8 C9 y; D7 M
0040314E E8 38C30200 call qsr.0042F48B
# ]5 _3 x) a% ^3 _( Z% K00403153 8D46 0A lea eax,dword ptr ds:[esi+A]6 A" F/ i& A! f$ G
00403156 B9 3E000000 mov ecx,3E9 `8 q# [" V- | U6 z0 \4 `
0040315B 99 cdq
* Z/ g! l6 @2 D; h0040315C F7F9 idiv ecx
9 @) S- f8 R0 h2 P! c0040315E 6A 01 push 1+ `9 `3 r3 n z2 _
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]- ~) e" Y( |2 \# d6 O7 K' m
00403164 8BF2 mov esi,edx& i n% w. x$ u1 w
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
! R! a$ X+ L: r+ ~4 A5 ?* i0040316A 52 push edx. z0 y- d. z* Z& w# F( T8 f
0040316B E8 0A550200 call qsr.0042867A
( f" c$ F' M7 H1 T! }& q00403170 8B00 mov eax,dword ptr ds:[eax]/ W8 y( a. c2 J; q a
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
* [$ i! i7 H9 m& Z00403176 50 push eax
4 Y' e" v) M2 _5 m0 M$ `$ g2 R00403177 C64424 40 05 mov byte ptr ss:[esp+40],5, V: b) K4 M: `: A! E" |
0040317C E8 0F560200 call qsr.00428790
) G8 E! v8 j; {9 M" r00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 \8 s) t6 d& o# `/ X8 i( ?00403185 8BF8 mov edi,eax6 t- J) K8 T: T: h. u9 E: _2 o
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],31 t' o$ A6 U/ b; ~7 i# y2 r
0040318C E8 FAC20200 call qsr.0042F48B, a; N' m" v+ r: [, { k" j, }
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]! A/ P* b. i3 U( X+ z
00403194 B9 3E000000 mov ecx,3E$ L6 |% s! j/ _6 z. B* Z/ }
00403199 99 cdq
; }+ d7 x: ~3 c% K0040319A F7F9 idiv ecx5 o3 p4 T: L4 m2 L2 y) l
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
% }3 g |3 i/ U0 d3 b& z$ N; C5 H004031A1 894424 28 mov dword ptr ss:[esp+28],eax
# J6 K+ U& x* g+ K6 H004031A5 8BCA mov ecx,edx
* {, \7 @4 {: E2 \0 s* [. Q6 q' l$ M( t004031A7 894424 24 mov dword ptr ss:[esp+24],eax
# K3 x& Z* s/ T2 w004031AB 894424 1C mov dword ptr ss:[esp+1C],eax1 ^/ g- P9 H/ A3 y, s
004031AF 894424 18 mov dword ptr ss:[esp+18],eax0 h' q4 G! v+ d( B" c/ c; V( M
004031B3 894424 14 mov dword ptr ss:[esp+14],eax6 e1 S7 T# r0 k0 |
004031B7 894424 10 mov dword ptr ss:[esp+10],eax2 N! S/ ^0 X* a* A5 M) O+ Z) B
004031BB 8BC1 mov eax,ecx& J- V; s% i/ R. d4 R5 e* O7 o
004031BD BF 0A000000 mov edi,0A! G" B2 n% Z$ [( p3 Y/ h: e
004031C2 99 cdq
9 U$ q6 a4 l9 v0 K: {' ?004031C3 F7FF idiv edi
$ B; h5 |# A5 Y4 u. X# H004031C5 8BC1 mov eax,ecx1 e! [- a+ m6 _5 t1 v# \
004031C7 B3 0B mov bl,0B% R8 v1 P/ [' d* _/ Y \+ _4 L C5 ?
004031C9 0FAFC1 imul eax,ecx) q- |1 h7 f# S0 O# G
004031CC 8BCF mov ecx,edi, V5 K+ x+ }4 w' u, }
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl1 Y! w1 p ~! P* O5 Y
004031D2 52 push edx
7 |7 S6 [- ?) ~004031D3 99 cdq0 [/ G- {) ]0 }& a* P
004031D4 F7F9 idiv ecx2 }* M! `5 f' ]. i/ W
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
4 t3 ^4 R7 _: x! d( |004031DD 2BC6 sub eax,esi3 Y- V5 {3 i2 r. f* g
004031DF 52 push edx/ y& Q& |0 s/ C$ D, Z
004031E0 99 cdq
- ~8 F5 P _4 {/ s9 f E" o8 n; D5 \004031E1 F7F9 idiv ecx: S( F2 ~2 t& ]6 E5 W
004031E3 8BC6 mov eax,esi6 _6 c0 n" B6 E0 M6 R
004031E5 52 push edx
8 \1 V8 b! n+ x# _/ X004031E6 99 cdq
# U. F" Q! q; a8 a1 v) i6 C, `004031E7 F7F9 idiv ecx
2 v$ t% B% v2 \- d004031E9 52 push edx
( P% I7 k9 B1 Q004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]" t+ V% Z5 ?' J0 x F( V
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
" k% c/ A3 f4 n5 }# `004031F3 52 push edx
$ q0 v* N F. J2 m+ ~004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
" }1 r1 x1 U% S4 @004031F9 83C4 18 add esp,18; F6 h. Q0 L- q. O& a$ v
004031FC 6A 04 push 4" D) k" Q) n! k( f, z0 F* F3 N
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]3 u2 g( k0 D: b+ p4 A
00403202 6A 00 push 0
' r+ c3 T3 ^2 u2 w# L4 o% j! v. a. u7 A00403204 50 push eax6 \4 z' [( t0 r
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; N# ]9 o# r6 l$ k l; f6 L: ?00403209 E8 D6530200 call qsr.004285E4
$ p5 m/ Y4 k5 N. o0 ~: ?0040320E 50 push eax/ Q+ \; u* r# K+ R
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]6 t9 ~1 w+ L; Z$ }
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
7 t) B3 ?) @8 A% P00403218 E8 A7C30200 call qsr.0042F5C4
! A% O1 j1 m" ^* p+ b4 |9 B0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) K" e+ C% z6 ?00403221 885C24 3C mov byte ptr ss:[esp+3C],bl* q1 ^; q1 z* N3 o
00403225 E8 61C20200 call qsr.0042F48B% H# ^# a# Y `* k) m1 o' Q. t/ T' F
0040322A 6A 04 push 4
" }# J* U7 T6 G( a0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34], w0 |( e6 A; }' V' x) ?
00403230 6A 05 push 5. V+ E1 D/ |3 v4 C* m0 l
00403232 51 push ecx
2 M: l5 P" C3 t n) v, }00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; [7 D: K# I, c
00403237 E8 A8530200 call qsr.004285E4
+ @1 ~: e0 I9 g: r" f0040323C 50 push eax$ h* C" G4 _9 }) h: E
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20] ~" \6 \# l1 y: I! R/ y
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
) V2 F4 S9 W2 c y00403246 E8 79C30200 call qsr.0042F5C49 ~1 b+ w( `8 @
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& J0 z% `) }9 Q0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
* L3 A: H. u. F8 h/ M- |7 C0 W* q00403253 E8 33C20200 call qsr.0042F48B
7 H0 ]" @$ W' Q. O8 ]! ^1 E00403258 6A 04 push 4
8 d$ C* V7 p* S0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
" ~- I x6 K+ E+ z) t& p0040325E 57 push edi6 w6 c b0 v; p1 K1 k3 m' X$ N$ A9 N
0040325F 52 push edx7 X+ C: n$ \8 h* A8 t( p7 `
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]7 o7 E( N* ]; i. a3 V9 @
00403264 E8 7B530200 call qsr.004285E4# _0 i% b' b+ B3 t4 ?- m
00403269 50 push eax' m6 ~6 ~+ ]5 w
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 P: s$ B3 ~$ P/ o* E0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
) z2 k9 O1 L/ w* {6 x00403273 E8 4CC30200 call qsr.0042F5C4* `/ V) @+ i( E
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]4 w+ ]9 D6 b6 Z l& l
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
" D* W5 q* h$ N00403280 E8 06C20200 call qsr.0042F48B
7 c! q; R& b$ B' {3 O5 d1 j00403285 6A 04 push 4
; d+ M" g0 c. @4 L: V. K00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]3 _" M# M1 l2 s8 L5 D u4 ]
0040328B 6A 0F push 0F
/ e! a* o) w% O5 M0040328D 50 push eax5 k+ \: [7 J& X
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ E& o3 s% j* e# t' V00403292 E8 4D530200 call qsr.004285E44 f7 F+ j" A. K; D
00403297 50 push eax: m+ Y `7 P, @9 s$ O {& Y
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
( E& s+ s Q7 s9 v" x; O0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
* |7 F8 e6 M c+ j) P004032A1 E8 1EC30200 call qsr.0042F5C4
; j: ^2 n. f8 P6 {9 g) Z8 b004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) ^: O5 x3 ^* v w) A" S
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
$ c8 @" y# j: Y004032AE E8 D8C10200 call qsr.0042F48B9 ^8 Z R. D& N& g0 b- D" Z
004032B3 6A 04 push 44 a/ T3 _: x) |6 B# ~- e! N
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
6 V4 ]6 B) b* k: Q& Z4 U2 |004032B9 6A 14 push 14' @2 i9 C/ C% e/ V
004032BB 51 push ecx; A# |- i" ?2 i
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' q1 U: K# x. q: d4 G4 T: l& y
004032C0 E8 1F530200 call qsr.004285E4
8 l( }/ X9 Y D; D7 s004032C5 50 push eax+ q7 s) S5 T- u$ R2 Z
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( F5 \- `+ Y, W. s8 [6 c3 Q% q! p
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10- `4 B+ N" g, w+ o% x' ?
004032CF E8 F0C20200 call qsr.0042F5C4% o2 g2 r, Y& k
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, ], ~8 U6 \4 q5 L( O2 W004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl* f2 ]. t" w1 p \' T0 f. G$ l
004032DC E8 AAC10200 call qsr.0042F48B
. T* d g( e1 W9 j" E004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
9 r' j! O5 L3 ~& E) u' {8 ?% k004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX' x" h; {) X- F$ g z
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL3 G! H, n( x4 e# p$ B' y
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
- d7 J8 S& I9 O& Z/ H2 q2 j004032ED 8ACA mov cl,dl ; DL送CL6 K; a' B4 |1 p6 ^0 I
004032EF 3AD3 cmp dl,bl ; DL和BL比较: \+ y+ B$ B& V+ N. A$ A; t: ]
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）" |7 h8 u! e1 x0 d. S( c
004032F3 84C9 test cl,cl
: I2 s5 }# H: L# J4 u% @004032F5 74 16 je short qsr.0040330D
( G. x8 e( l& |# O004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
) F4 ]8 r& Q8 m* b8 K4 U6 [) E& {) Q004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL: X# n. P$ ~* m; x$ ?. m' G
004032FD 8ACA mov cl,dl0 ^4 U" ~- G1 n
004032FF 3AD3 cmp dl,bl ; DL和BL比较7 j @ ?# V" n5 ?9 L) ^
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
; k1 j. p: g1 A00403303 83C0 02 add eax,2 ; EAX加2' [( J: t1 V; @0 D# i+ q& N- S
00403306 83C6 02 add esi,2 ; ESI加2- }# Q* d) ~9 t
00403309 84C9 test cl,cl
( L6 n# a* U) i0040330B ^ 75 DC jnz short qsr.004032E9
F6 {% k! q6 {0040330D 33C0 xor eax,eax
3 C8 P& M! {$ y; n: Z0040330F EB 05 jmp short qsr.00403316) A- f3 W2 s2 D3 r6 o, }1 f, a; j
00403311 1BC0 sbb eax,eax
2 u: E: r0 C5 h- l; c00403313 83D8 FF sbb eax,-1. U$ }7 [4 V- c& O& t
00403316 85C0 test eax,eax
5 t$ M+ E( q( g' ]3 E% ~ Y7 O; t00403318 74 0E je short qsr.00403328( b8 {, H" f' J) B0 e" a
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A$ S. d( v% I$ E: O
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]) D0 s8 }4 |' s% y# I7 B# F5 L4 Y
00403323 E9 F0000000 jmp qsr.004034189 ?$ {' ^& _# g
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX. a1 @: ~2 o+ v* F3 R& m( Y
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 q* F4 { _( C0 y9 S0 e. M
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]% b; Y( Z3 l$ p w/ y6 |$ N: d
00403333 50 push eax& m5 K: X0 Y% c8 ~) K' `5 Q: Q/ L' ~
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX4 N1 T: h4 H7 n9 a2 d+ X. t; r8 J
00403339 50 push eax7 K) z4 S. E# c' C, s6 L2 X
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX- d4 }- \. n# M: ^
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX& _' F1 l9 G1 b; k4 j4 I- T o
00403343 83C4 04 add esp,42 n, K* Y# X% |6 l6 ]0 B
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
. W' y6 r# L0 _7 Q2 t00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]9 z4 r$ ^$ b( V' N. T) y
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
( P- h6 P% @3 [) I0040334F 50 push eax
0 R3 o5 W0 g0 x+ o00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
6 z" `3 n8 f' g4 F; [00403355 50 push eax5 |+ x% V q# R) |7 r
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
, M( b, a1 h- V0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
% Y6 p z2 o+ ?, j0040335F 83C4 04 add esp,4
3 s9 N6 x, q. h9 I }* ~. A: |00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
/ ]8 _ \1 W+ W \- |! q00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
1 Q/ n4 S# }' @( E `00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
) O$ E) A1 i* Q) s0040336B 50 push eax
6 f: D& ?. X/ Q1 W0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX3 M" f$ U: P& F
00403371 50 push eax
* T" k" E0 p/ ]5 t- }" f! U00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX+ G% d) e, y7 y! M6 D
00403377 8BD8 mov ebx,eax ; EAX送EBX, O: Z; u, o ^1 b- V: m) w
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX/ H a. T2 [4 i2 Y
0040337D 83C4 04 add esp,4
! h: o1 w; ?- g, L J: h; i, K d00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]' t3 H! Z* Y( r
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
5 ~, X$ Q( h5 [' x00403387 50 push eax
, `% i3 S$ W- O( Q; D00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
* a Q9 K* \; u: q& F8 Y6 S0040338D 50 push eax6 v1 j* C3 }& K0 c) ~: j
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
" S% ]) B3 d$ T00403393 83C4 04 add esp,4
! w6 I7 E5 E9 B) |0 }00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]- v5 g# B- v; q0 W3 M/ x+ S0 G
0040339A 8BE8 mov ebp,eax ; EAX送EBP8 q G( [3 M( y. G7 s! [
0040339C 6A FF push -1( B$ s }3 m* \, d
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
" b6 W7 h! {3 I004033A3 6A FF push -1
% m; q g3 h2 o004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX( K3 T& i; s* E$ B; X* H
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX3 n- q% `0 G f2 V2 G
004033AE 6A FF push -1
7 w, R7 e( R4 C/ g004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX8 z5 t. Z! \( Q# N8 ]' n( W
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX4 ~/ i, _. R& P* H+ X3 Y! a, I
004033B9 6A FF push -1- o) p+ b3 v" y" I5 K: s5 \: [
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX" h7 r' X( r( f- X
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX8 q) ^1 h" z& Y H- R" E# b( I$ A: H
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
" B: D& s( s5 Z+ M% ]004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
X6 l1 G$ Y2 h) U; u1 c004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX9 v! `& {6 a! {7 n1 G! R( J
004033D7 D1E0 shl eax,1 ; EAX左移1位
/ D" ` B' }% R, l' c' @$ I/ w004033D9 99 cdq ; EAX扩展$ z0 V; p2 Y( R+ r: V
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
0 j# Y3 |3 f3 c- c1 l004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较5 @3 ?' p+ T# r1 p2 L9 v$ N
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
; H, S& n" z: |/ G% ^5 M004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A6 O1 j3 w0 Y: @$ m$ f- V
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]# o! \' G( I2 t6 X D, ~1 f n
004033E9 EB 2D jmp short qsr.00403418
- h+ |; F. Q3 R9 f" n1 W004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX# n/ F% t$ P B
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
* N" K! m7 ? u5 V5 K5 q+ l& r004033F7 99 cdq ; EBX扩展8 i0 M! q) v# Z0 G( D
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
5 u9 o# ] x- E" y9 K) x004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
3 l8 {7 f* U3 p% l1 \: C( c004033FF 2BC2 sub eax,edx ; EAX减去EDX
, y+ U' A* O7 ~+ X' j) _00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]8 d; m1 k% b# i7 ~' J
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
( F+ O- m/ B2 Y7 a& [7 y00403409 99 cdq" ~/ T' {7 S- u# q# T
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
4 q3 G( S f9 u r. A) i; a0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX: \0 f8 O2 @) C) [
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
# o. p8 A$ E0 x+ y8 m% G/ ?00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）/ S/ L0 o2 a& w$ H; o2 p
00403418 E8 6EC00200 call qsr.0042F48B ; - B: J$ M N9 X6 q8 H
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
2 j7 r6 ^, Q, i1 J00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9' l. ^7 r/ Y2 |% n2 l- m
00403426 E8 60C00200 call qsr.0042F48B
, }( [* p$ i* j) {; p; b/ L9 m0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]* L. J. v* m; k
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
' Z& @/ `7 P+ K2 I6 J. T6 V& D00403434 E8 52C00200 call qsr.0042F48B
' W' c% D P4 j00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 d4 U: n) m; z& f- i
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
: ~8 ?* Q5 R- g, q* J: r9 j) m00403442 E8 44C00200 call qsr.0042F48B
2 \& E" |5 m) x5 m) Q; _# ^$ B4 I. m00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
. ?2 F1 N1 H7 x- A$ j& m; u0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6& t6 D% Z1 [5 q" r6 `5 `7 n
00403450 E8 36C00200 call qsr.0042F48B, W9 w }" c( S* A
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]% T: F: a5 V+ I( A
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3) Q, X0 M3 n7 a2 [- p/ D
0040345E E8 28C00200 call qsr.0042F48B7 H& }/ ~. @: G% u! Z$ a/ L
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
. D4 c" u8 M% f2 D00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2; U u% D: y! { ]3 W
0040346C E8 1AC00200 call qsr.0042F48B! z8 X K% v2 L; `9 `" j3 d' J
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ W- V1 R* u( x; |' P
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1# H, q. `9 |. z& j) y- K) m/ O
0040347A E8 0CC00200 call qsr.0042F48B
4 P, @2 V' C/ a) v( N/ y0 a# O! |2 n0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 j7 V/ P: z; m' C9 k& z/ M00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],07 d( o2 x! j7 e
00403488 E8 FEBF0200 call qsr.0042F48B
) t X* y4 B& Z* g7 C1 r0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
4 \7 ]- U8 }% V! a. x- ^9 x. {! I: Z00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1% v& O' T/ E4 s5 h' C% V
00403499 E8 EDBF0200 call qsr.0042F48B# g* c, o. d7 m0 S) c. W7 C
0040349E 32C0 xor al,al ; AL清0
: N; a( D1 n$ O) M% _3 M. b1 K004034A0 E9 88000000 jmp qsr.0040352D
( G u$ H% r, I3 Y004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~, M$ w+ @+ C8 m: o5 _- F
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]9 p6 T6 Z. L R5 X3 Q6 {( h
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
$ i" [" c2 ~2 S- w7 T004034B3 E8 D3BF0200 call qsr.0042F48B2 ]' D+ Y1 ~ D$ |) N; U+ C
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]2 M, k# ] U4 F, ?
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
% |' C" M5 n; h/ h% y004034C1 E8 C5BF0200 call qsr.0042F48B' w% [5 U/ i* e
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
R0 ~- q& l+ _! E% c& [004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],75 H2 M6 r' z) h% f" S2 D
004034CF E8 B7BF0200 call qsr.0042F48B8 N# t# c' W; Q: q3 K2 @9 x) X4 T
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]" O; H& ?$ u2 L0 c2 I7 U
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6( O& J v- [3 }, U. F$ w0 e3 B" Y1 b
004034DD E8 A9BF0200 call qsr.0042F48B
2 ]1 X* l$ ?9 N( v" h" g. `004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
0 C) c! p* h% @! Y* T# Y004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],36 w4 A1 |2 u! Q& Q' c
004034EB E8 9BBF0200 call qsr.0042F48B1 N% [/ _. N7 O
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]* n# L" ]$ W* Z0 R
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
* M T0 M( O2 u& r004034F9 E8 8DBF0200 call qsr.0042F48B
; u1 c* G4 ?3 ]4 Q1 l004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ f- s7 j9 [" ~; l7 @" M
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1. b# ]8 Y0 p8 J/ S
00403507 E8 7FBF0200 call qsr.0042F48B
u R5 X9 p5 i* h0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! P$ }. S( `- p2 u {5 E8 Z3 y+ E2 A00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0! Y6 h& @$ O' L, q" ]
00403515 E8 71BF0200 call qsr.0042F48B0 C' t( s* H1 L8 Z. }" m
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
% w0 |, K- B ?2 \4 h0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1, X- R+ G' D* C5 g
00403526 E8 60BF0200 call qsr.0042F48B9 c5 t+ t, q( ?, {: W: U& p" o
0040352B B0 01 mov al,1
! q( a' r y: F9 X0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]* i# Y1 u+ G' K
00403531 5F pop edi
# T m. P2 Z% v00403532 5E pop esi9 |5 _0 E- N- r; E% ^7 l; t
00403533 5D pop ebp. u3 k" H8 i0 k, l! |3 d
00403534 5B pop ebx
* Q" r$ ~2 q0 n: Z" k( w# V$ U% {00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
' m3 t6 d4 |& L, P+ i3 X- p9 v0040353C 83C4 30 add esp,30+ \$ y- ^4 M2 q4 s- q& y8 ^) u
0040353F C2 0800 retn 81 J7 t3 I1 P! b3 y
--------------------------------------------------------------------------------
+ O; ]/ W" c/ N$ F1 ]3 e# [( a【破解总结】
8 F3 `. [9 V! `: W; ^* l 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
! p, z$ o0 r3 f用户名：yijun
( r. S3 {# k3 `注册码：4893*7777*3726*7777*0529
9 t( p1 ]4 v [1 t6 e--------------------------------------------------------------------------------
. ~( a" K. x, s4 ?【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡