|
|
【原创】破解Quick Screen Recorder# L- T# t4 E" T8 Z) ~9 C
【破解作者】 yijun9 ?. r% S, f s) w
【作者邮箱】 [email protected]
4 H# r- T7 f' _# C9 |0 T3 N) p【使用工具】 OD,PEID) i& ^: p: n4 |0 M) F+ o. N
【破解平台】 WinXP' Z* |( q- \- Q. y% H# _
【软件名称】 Quick Screen Recorder
3 ?: i: G* f. a【下载地址】 天空, q+ h6 l' s% v/ u
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 7 F0 P" D- O) G% [+ t% ^9 Q
【软件大小】 540K
' m+ F/ D/ h5 g# ?$ p【加壳方式】 无. R# Z, B) ?0 @* x* ]
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
/ V9 _( V5 h {+ k/ i4 v2 B6 G--------------------------------------------------------------------------------
& p$ d7 e; X1 s5 [【破解内容】: \0 m# Q z* H- h
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：0 ~! z, I% `0 G
00404C69 55 push ebp //在此下断
( E% U- S6 L0 d; f e00404C6A 56 push esi
. A8 X2 w, p( {$ j) m- I, E7 `00404C6B 57 push edi4 p# a' ?+ p* f9 W
00404C6C 8BE9 mov ebp,ecx
# X$ h# j, P% {7 ]8 k- S$ q00404C6E 6A 01 push 1* K) R! S% J- w9 i G! @
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
" W4 ~, U _# v5 ^: S00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]- U# r7 @; n0 F- W
00404C78 8BCF mov ecx,edi
; A' L# s5 h" v00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
: ?8 Z0 `- h( L8 P6 r" g00404C7F 8BCF mov ecx,edi
- R! ]7 n$ K# R00404C81 E8 A73E0200 call qsr.00428B2D
; M- w! x' Z" Z& H* Z! |9 |00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
: a/ q2 f) Q4 n00404C89 8BCE mov ecx,esi( X$ [+ [! ?- X) Z+ b9 ^
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
- U$ V8 }& Y$ e' K3 t00404C90 8BCE mov ecx,esi
: l& |1 j3 M, q# p6 Q- A0 n00404C92 E8 963E0200 call qsr.00428B2D
0 O6 v; P$ R1 Z2 v: Q00404C97 8B06 mov eax,dword ptr ds:[esi]
* m9 c1 [- J# d8 ~1 l7 E00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
9 m: q0 g. V- Y4 ~00404C9D 7D 26 jge short qsr.00404CC5% [3 l/ V! Q) s8 k8 r. |
00404C9F 6A 40 push 40! t- R) l. G8 b# A/ C! T" | Y# t% A
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
) O0 S9 l" g7 B, N00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
. ~2 F6 ^1 ~( P( r00404CAB 8BCD mov ecx,ebp
' L, @6 Y, O- h- P00404CAD E8 C3840200 call qsr.0042D175. l2 N0 p2 p5 S2 ]
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] x3 Y" T- k" t
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
; S0 g! K" B* O00404CBD 5F pop edi
$ o0 A: m( N4 u3 z' T4 r00404CBE 5E pop esi
$ t2 c' [/ ~ W% q2 x9 I! s. K7 l00404CBF 5D pop ebp
- N* E4 n4 V- [+ I00404CC0 5B pop ebx' {2 X' W J. y8 X2 @8 L4 G+ m
00404CC1 83C4 18 add esp,18! S5 C' X7 |2 i! M, S. D
00404CC4 C3 retn
?. i) c( O5 ]5 \- Y9 ~% {00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
$ w( I! \4 f5 j3 G& f00404CC8 84C0 test al,al% z I# Y6 T0 m2 X3 D2 D* b& G
00404CCA 0F85 1C010000 jnz qsr.00404DEC
W) T' R# M j! |1 ~2 X% w00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]6 Y/ P5 z2 G& H" n4 C8 i
00404CD4 E8 87E3FFFF call qsr.004030601 ]! Y- m' \0 `) f. n1 f, S
00404CD9 51 push ecx
# ]! F( i" S' g" ^8 Q; X# G/ v( W) s00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
: Q5 E3 _# f+ h9 x$ y+ X) n% Q00404CE2 8BCC mov ecx,esp
% ~4 A; K$ q7 K, j- `- `00404CE4 896424 14 mov dword ptr ss:[esp+14],esp/ \ \6 U4 K+ v) W! S' u3 I
00404CE8 56 push esi, T' C; |. H' _1 ?2 Z. t% l
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0: H/ D4 M8 V' Z, `, e
00404CEE 51 push ecx
( k Z0 R. o/ J& X; i00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1' @. V4 K4 C% @# d) a
00404CF4 8BCC mov ecx,esp5 {$ t, p. j6 ?; ]7 p* g( ]& A
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
! J! b! K6 B( `: s00404CFA 57 push edi# { p7 h" h6 G; k/ J
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
3 Z; ]& W$ n2 [00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 }! B9 |' w3 ~2 y) F5 Z" d. q
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0- [4 j1 f/ s: O5 l X. ?4 F+ B
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~3 I0 d: v! u7 r7 p- U
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
. w" L7 S( r! K, n& \) F2 W00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
; s/ r* c0 F. T00404D12 6A 40 push 40. O: X$ f* R- a( t8 z; ^+ _( r
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
' u: W# _- E% X2 B- S3 z% \# S) x00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
3 z0 S5 X& ^# [: _) }4 T" A00404D1E 8BCD mov ecx,ebp/ P: Y- t0 L7 T. u. ]
00404D20 E8 50840200 call qsr.0042D175
$ |5 {. A) g4 I00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
1 i$ Q- e& d6 `; y9 v00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
% q0 R! w1 x: x2 m00404D31 E8 5AE3FFFF call qsr.00403090) D4 w. M( S; i( R- U' p0 `& m0 s
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]5 G' ^" u; s" L8 U6 j& R
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
- p8 U3 V% M" D5 d' m00404D41 5F pop edi
- r" K$ p. f1 Z7 y00404D42 5E pop esi1 |% ~. }& h: |; o* \3 {4 ]6 Q9 D
00404D43 5D pop ebp
3 V g/ F% S: j6 K+ w' J8 S H00404D44 5B pop ebx
3 q4 p+ ^2 `3 `0 ?+ v \( w00404D45 83C4 18 add esp,18
) n" @+ F$ k; O00404D48 C3 retn
; s7 x6 s; G( b3 Z0 H0 V! J*********************************************************************************************************************************************************
' e$ j! r2 K3 A) T- Z7 d, ^+ {跟进00404D09处CALL来到：1 P$ C S5 F, u j8 @
004030A0 6A FF push -1 //一路F8下去~~~~+ P+ ?$ z% D/ c! f# |" m
004030A2 68 C88F4400 push qsr.00448FC8. X$ ]! k2 V' e$ r5 O
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]. M+ K8 b* R# J( ?3 ?2 [# F0 o
004030AD 50 push eax0 w4 u- c2 v) w' J. X
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp0 |" x! H/ v1 }5 e
004030B5 83EC 24 sub esp,24. G' l! g/ v" d l8 E: ]% U: ~, @9 U
004030B8 53 push ebx
" q A! R! U% }- U004030B9 55 push ebp' m; E/ E Z) a. |
004030BA 56 push esi
- D. s4 i. n; ~2 j: m004030BB 57 push edi
% R" h2 R1 E) |2 Y7 i4 b004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
8 U1 ~: A# K" o& q004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
* J: G# t W+ o5 A* ?004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],13 J a, b4 O* {
004030CD E8 27C40200 call qsr.0042F4F9
$ E4 E+ r( m. ?004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]; u* l0 J+ E) N/ X% P p$ [% K
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax6 I# u) N* p2 X1 J9 {
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]/ U3 m# T( t2 Y( `
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],34 z8 N% s! G9 t, q) e
004030E4 E8 905A0200 call qsr.00428B79# B, _$ }/ H* `( O: \) `. ~
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]4 H$ o! W7 ]1 I) C" ?' A9 j
004030ED E8 3B5A0200 call qsr.00428B2D1 s" m# d3 `% ]: J1 q) M
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# G& D% u, |. f( W004030F6 E8 7E5A0200 call qsr.00428B794 n) H% [7 P( A, T% j
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
; c' l0 j, r1 _" ]7 l* H004030FF E8 295A0200 call qsr.00428B2D' v1 N8 z% ?$ h8 @
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]0 S- `2 c) L6 v# {* S% e
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
4 b) ^+ c- n8 t* @0 q" l! l5 l/ _0040310B 83F8 02 cmp eax,2
, W c) N; v0 v2 Q7 I0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳, a. V( \& b# i f0 r, {
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
: {+ H& s$ s( J* t1 c2 B3 b+ l% I6 l* S00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
) c8 A" q/ P! i" k+ a4 ?0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
+ L& a% e. K& v00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
8 m5 V) k* I- A d, K' p5 u00403126 6A 01 push 1
; k0 [7 G% o' \0 Y00403128 50 push eax, e# w7 m0 M/ M6 o7 R% h
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
# J1 z, u5 F" T7 B. k. @" k0040312D E8 C4550200 call qsr.004286F6, Y/ y8 Z9 n7 Q+ x
00403132 8B00 mov eax,dword ptr ds:[eax]+ m8 P5 R- Z4 k, v
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
) S' P$ h, _. v3 p00403138 50 push eax2 k0 k8 K. [3 _9 w
00403139 C64424 40 04 mov byte ptr ss:[esp+40],44 g! x! I" L/ E! U
0040313E E8 4D560200 call qsr.00428790
9 i- Q! l' s, u9 M00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
3 e$ @- o# T* a00403147 8BF0 mov esi,eax
/ P- p3 M3 M" C% L0 O( B) v2 q4 q4 a00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],37 ~7 ?" [9 `9 d( H0 ?* M ~/ k
0040314E E8 38C30200 call qsr.0042F48B- B3 M% ~* L, [& j
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
; H% O+ Y! j. X6 y* @4 G4 r00403156 B9 3E000000 mov ecx,3E
# `/ \& x8 ?1 v5 i k0 h0040315B 99 cdq! v/ g) f2 \4 w. x% _/ q
0040315C F7F9 idiv ecx
/ T# b0 _' M6 ?- w! u- U0040315E 6A 01 push 1) y: {" T! A3 A0 G
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]+ T1 }6 b( a1 K
00403164 8BF2 mov esi,edx
v5 v3 e" w( ^- o3 v" X3 W$ `/ D00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
: m: k1 |$ Y/ O$ _6 [# M" Z. P6 v0040316A 52 push edx
6 G8 h9 ~ y- @0040316B E8 0A550200 call qsr.0042867A% [: }' T' G3 s+ r' K# K
00403170 8B00 mov eax,dword ptr ds:[eax]
. ?0 o5 g6 x0 [8 m/ {/ q+ _00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
+ D" W+ R3 W P3 y" A3 r" i00403176 50 push eax" d( _8 J0 w2 ]
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5( H; I3 I: l: V# c* U- ^5 o5 h
0040317C E8 0F560200 call qsr.00428790
7 r0 s% Z' r; e \7 y# s- C. s00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, x( L- b* [* Z$ d \00403185 8BF8 mov edi,eax4 ]8 c$ S! l" a% T/ n& H! S
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3% k* r1 L7 K% Y+ l( K' T7 }
0040318C E8 FAC20200 call qsr.0042F48B8 P8 ?& b4 x! u: W
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]2 E* a1 C5 y2 X5 l+ b8 ]) O
00403194 B9 3E000000 mov ecx,3E% c5 x! }, W* K, x* R. m
00403199 99 cdq2 n( d- ~0 T0 M0 y# [/ X
0040319A F7F9 idiv ecx# R/ D/ j/ e1 y
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]# T% u, A- S5 v
004031A1 894424 28 mov dword ptr ss:[esp+28],eax( k7 w% t; @! r6 E" o. c9 O
004031A5 8BCA mov ecx,edx7 U6 x/ u R! z, a5 t% ~
004031A7 894424 24 mov dword ptr ss:[esp+24],eax8 N1 F9 v4 }2 d3 P
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
( \, a0 V3 W. }; [8 B3 c1 T. W004031AF 894424 18 mov dword ptr ss:[esp+18],eax2 i6 Z4 J8 C0 _) v. F- F2 |9 E
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
% v3 z C, x' H. _6 ~, _004031B7 894424 10 mov dword ptr ss:[esp+10],eax3 l# k" [6 W) n o. I! z5 ^/ Y
004031BB 8BC1 mov eax,ecx' j0 { e0 P$ T1 f, b5 n
004031BD BF 0A000000 mov edi,0A" F3 E4 M2 R; @, C
004031C2 99 cdq
# W- W; i! m' y- ^5 @004031C3 F7FF idiv edi4 [9 m- i% y; ~ P
004031C5 8BC1 mov eax,ecx1 N( z7 W, v! C8 G
004031C7 B3 0B mov bl,0B+ s' `& g5 B% T& ]
004031C9 0FAFC1 imul eax,ecx
5 v' g+ P$ j+ C+ E004031CC 8BCF mov ecx,edi
- M5 T$ b1 F$ v1 _/ b! S004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
- U# V4 c& j/ r( a: [4 P004031D2 52 push edx+ y" q8 X8 o5 P: K: x; g) Y0 ?
004031D3 99 cdq, i/ [% @: y: a7 d
004031D4 F7F9 idiv ecx* K" C: L* |% U
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
* ~3 `! M! N( F5 [2 Q S004031DD 2BC6 sub eax,esi5 w# \ q" H t
004031DF 52 push edx% K" M/ g. v" y& D$ |( |+ R
004031E0 99 cdq2 }" z( E# C! V2 L A% o
004031E1 F7F9 idiv ecx+ ^+ W6 k( D/ O3 y% t% T6 I' R
004031E3 8BC6 mov eax,esi* D( k+ O, {' A5 s
004031E5 52 push edx5 y8 {+ W+ X! [9 i& X( Q- a
004031E6 99 cdq. i5 D3 ^$ q# B5 x! ~
004031E7 F7F9 idiv ecx
/ Y" I9 G& ]: s% x6 |# j" h! F004031E9 52 push edx, q/ J, J5 r# l& N9 x$ i: l+ e' V
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]" ~) z) j; y# C
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"# V' g R% w' D1 n: \- J! n/ L
004031F3 52 push edx6 x3 S8 C, U/ ]8 m
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48934 m* \/ ?* z$ |1 G- D5 i3 H
004031F9 83C4 18 add esp,18( S2 S, P- D& {) g
004031FC 6A 04 push 4
) q% h4 O! n8 j5 @1 U/ c+ b004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]6 [# g, i, u+ `" f" a+ a
00403202 6A 00 push 0
; Z4 _$ R& O. Y4 w00403204 50 push eax
! S& ~# X0 V5 j5 h& f! m' k8 @5 I) }00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ D/ M, y$ ]: b) ?7 V: h
00403209 E8 D6530200 call qsr.004285E4
% e1 D) i6 [/ k" c% i" ^0040320E 50 push eax* \6 b# |* C4 y' g" ~: t
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]% a4 q8 X7 e" A0 \5 o4 s; |* h
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
. y4 i( S& j1 P. L" T00403218 E8 A7C30200 call qsr.0042F5C4
1 n$ S2 _$ |' J/ ^5 E+ Y. Y9 ~0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 C% S9 }" q$ R8 y& W7 m0 U# C
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
/ Q5 u }: q9 Q00403225 E8 61C20200 call qsr.0042F48B" k" U! \1 }' u( r! i% T
0040322A 6A 04 push 4
# L6 Y' [% y( v6 d; m( O1 R4 Y2 O. k0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]( _! T" I+ n6 k, S. @
00403230 6A 05 push 5
4 h3 `5 P' h8 ^; \00403232 51 push ecx1 Z" |6 \: ?' `' v) e2 e* e6 u
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 C0 O7 C) V5 J0 H" C00403237 E8 A8530200 call qsr.004285E4. e/ S( O8 b; S: j: W$ c
0040323C 50 push eax
. Y) z: d% S; S3 e- t2 h: A0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
8 e f& J. J7 }4 ~' F% C5 H9 h00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
% `- T2 M- I; p( f$ D4 C6 w00403246 E8 79C30200 call qsr.0042F5C4: M& q& B. A& ?) `% `+ W
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]4 S, ~, ]7 O2 h% U% h& y) i
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
" E+ C: {& F( c5 ~00403253 E8 33C20200 call qsr.0042F48B
/ m' T3 v( j" w00403258 6A 04 push 4
# q) S4 `# `3 U" E, p# u0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]' D; r+ w9 |" Z) a# N$ |" g
0040325E 57 push edi8 e9 Y# v9 B! |& l' v
0040325F 52 push edx4 q+ `/ G$ w8 h( B& }
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
$ U" U5 |9 Z: i8 z00403264 E8 7B530200 call qsr.004285E4/ Y$ M1 u0 l: ~/ ~* ^7 }' a
00403269 50 push eax
; a j: ]9 D+ ^$ j- H0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( W# R/ n) v+ C# ^0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
! C6 q: n1 |6 R/ K; ~7 T0 v, D U) g00403273 E8 4CC30200 call qsr.0042F5C4
+ d8 i8 {# r2 q+ E9 P. t00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
! t Q1 c# j, ]: H1 M0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
$ H$ t9 {5 o, F8 D, [00403280 E8 06C20200 call qsr.0042F48B
" U5 T& b: P: f$ v00403285 6A 04 push 4$ x; K2 R: M1 z ~7 b$ _$ h0 P
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]1 Z5 ]4 G e: C. @/ K- O
0040328B 6A 0F push 0F
- c. |5 ?. g) k, w1 [9 j& m0040328D 50 push eax6 ?2 o% U& K$ K% a, D$ q7 Z7 c5 Y4 ^
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# q2 o! N4 T: T
00403292 E8 4D530200 call qsr.004285E4
- u; R3 w+ ^, A. i3 a* V, ]/ q00403297 50 push eax7 [9 E0 S, @( A
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
. `* b j. C6 o+ q2 x7 D5 R0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F5 [0 N, ^7 [. W7 g; C
004032A1 E8 1EC30200 call qsr.0042F5C4
5 [7 o, [2 n8 T8 t2 N7 a' ]004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]& F h. @. w) a' P: X
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl/ S N5 V4 U, Y5 d
004032AE E8 D8C10200 call qsr.0042F48B$ Z# @" ~) X9 ~- }. u- n ^
004032B3 6A 04 push 4! W" S6 }2 c! [6 ^: j8 Q) b
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]6 N, ~- u6 G9 P6 Z
004032B9 6A 14 push 14
* v; j2 s4 I7 H0 z7 U! Y/ K004032BB 51 push ecx
/ f5 \! l" ^# z. b7 v004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 @# W2 d" ]1 X8 z" X- d- k
004032C0 E8 1F530200 call qsr.004285E4; I3 t/ I! z) y7 i
004032C5 50 push eax
6 T( `! S% ~1 Y8 `004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# s% F) v6 d4 q% x) M004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
* m) g( o3 L8 |4 C+ b+ M* d004032CF E8 F0C20200 call qsr.0042F5C4
4 W$ h2 b* ?+ _: R004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]1 S7 {- z3 ?; X. \) F9 O; }
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
( D& o9 O e; }% q* [004032DC E8 AAC10200 call qsr.0042F48B1 Z# K* g! j3 M- i
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI0 x0 `/ u6 N* B+ {1 W
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX% @. x. X- ~5 W' I9 t6 {9 Y/ h
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL$ r) C, B5 `: b' W# ^9 t
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL6 z' X% x$ G6 j$ v+ ?& D( j
004032ED 8ACA mov cl,dl ; DL送CL
! A" [3 K, ?5 o* a1 _004032EF 3AD3 cmp dl,bl ; DL和BL比较" U4 W3 ]1 ?* D1 ]' A/ f: \
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
! `+ N" i; m: T9 P( [4 [; q" G004032F3 84C9 test cl,cl- t) N) d: f% |
004032F5 74 16 je short qsr.0040330D$ _6 G/ L3 i$ D# e9 B
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL3 f! |3 f( l4 r1 k3 d N1 L
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL1 u% v$ }; Q0 L6 h
004032FD 8ACA mov cl,dl/ T2 Z! k0 D% {- T+ j
004032FF 3AD3 cmp dl,bl ; DL和BL比较- `% }) u" y: \0 c, c
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
7 v2 O3 Q# q+ F$ q2 o00403303 83C0 02 add eax,2 ; EAX加2; }6 v& k2 r$ g. {
00403306 83C6 02 add esi,2 ; ESI加2
4 }! I8 @( F4 D/ L1 D3 A. F) J! {00403309 84C9 test cl,cl: }" L4 o" x+ A- }+ R( y3 |$ N# M
0040330B ^ 75 DC jnz short qsr.004032E9' S& @ O& |1 {& ?
0040330D 33C0 xor eax,eax8 ^& W Q0 S/ K2 \9 R$ w
0040330F EB 05 jmp short qsr.004033164 [* b- s, O3 E! r R
00403311 1BC0 sbb eax,eax
) V4 v# O) S4 K4 x00403313 83D8 FF sbb eax,-1
, V: K" s; y2 A/ N$ ^00403316 85C0 test eax,eax1 _. y$ Y3 m" Z& `" J& y! d
00403318 74 0E je short qsr.00403328
8 H; ^0 l( f! {/ I0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
4 L9 K2 t3 n3 P9 Y, d0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]7 O+ l4 L2 Y: x
00403323 E9 F0000000 jmp qsr.00403418
2 g3 l, o$ @! y& ^) B00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX1 {( q0 S. B/ F: z
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
, h, f `% x' ]6 \2 g00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]9 d; m O: }: R% v5 Q7 g
00403333 50 push eax
4 }! t9 [: R. T3 [8 A/ L! x5 l00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX4 l3 }/ [0 o, b; Y; k; m n
00403339 50 push eax2 r# f% N' K+ U( e2 T3 e3 J! t* n# L
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX+ ^6 X8 U, a; K Q, i! K+ U- d
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX* w: {+ v! e* v3 u
00403343 83C4 04 add esp,4
$ U/ G7 r$ g* p* ]2 i00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI- Z6 ~7 [! n( q ?. q
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]+ u6 i' b$ W# ^# ]
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]5 Z0 B, m" p) v# }
0040334F 50 push eax
7 O& l' c" r" j) v00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX% a1 }, T6 J8 Q! P
00403355 50 push eax
: a1 F! l6 N- j K6 f2 K00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
. p2 E3 h n, @; V% P2 {0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
8 A% Z0 d2 E( i+ }. l) _+ m0040335F 83C4 04 add esp,4- B& z7 O" [$ B( H
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
3 i, @. V% d8 Y ?/ P% j00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
" S' O+ b* `2 g5 E/ A# o00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]3 x/ O( H. b8 P0 \: m: Q7 e
0040336B 50 push eax7 M0 ~+ a' w o
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
1 S& U; Z9 F2 X8 ^6 P' N/ A& B. t5 H3 g00403371 50 push eax
' ~% w9 {1 u [2 X* C/ E: X; O3 c, O00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
4 a# _8 H+ f7 `! c9 J00403377 8BD8 mov ebx,eax ; EAX送EBX
: X" W4 y; Z# z2 A! d2 R9 B8 c00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
' o# W' ~7 v( }& s0 ]8 j4 i1 w: v0040337D 83C4 04 add esp,4" n% c" ~; W: i& F# J1 ~8 W( t
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]3 J" J* ?! a- O' L
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]/ }# a# w3 I1 S- a$ L3 V
00403387 50 push eax# Z2 W+ X- ^; H" Q$ J# E7 L$ X
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX- F; A! A6 D/ i. z
0040338D 50 push eax' s9 z& V6 l: ~9 X/ n
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
3 k" t' @) H6 E* g00403393 83C4 04 add esp,4
3 s6 n' ^# f6 A2 `+ _00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
, c' Z% o q* F% o3 H. `( Y& Z0040339A 8BE8 mov ebp,eax ; EAX送EBP
/ ~, C( q" t% }" g) Q1 U' a( ?0040339C 6A FF push -19 {& `8 o( j+ A1 l$ Q6 u
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
3 R: g5 _, m* L004033A3 6A FF push -1
9 ]9 M& M" q% W; B) U% T+ d004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
0 W6 d- M5 q( N' A4 O4 L004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX- p( |% y# v6 I: D8 W+ ~% f
004033AE 6A FF push -14 W6 ? \% Q$ ?
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX& c( a( D8 ^1 }- q2 z- s- W# ?" V$ \
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
7 F- R+ ~8 `" K( r9 |3 L- s# R004033B9 6A FF push -1% l; ~6 P/ |9 I# A& n! m8 i
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX/ X) E `7 S4 R' W, I
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX! M0 N( v( P7 O$ X# |
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX l& a! F- |& i! D; j
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX* N! t) a) O4 W/ |% Z9 s# Q! n
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
0 s( D* c! w8 O7 ~004033D7 D1E0 shl eax,1 ; EAX左移1位7 A1 d; W+ F9 R0 Q. `: G! B+ h9 E
004033D9 99 cdq ; EAX扩展
* T$ i( b6 M# E' N. ~8 z* v004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中* {6 S7 F+ k6 j4 [5 T) u L1 r
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较8 |+ I/ R- N+ f7 u* V
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）- x/ a3 K% A/ ~
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A$ s6 F! e e' b7 W9 B
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]$ {% s7 K/ g. V3 {. u7 Q) \
004033E9 EB 2D jmp short qsr.00403418
8 d3 V* l+ s$ N- Q1 \$ B004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
9 D. _, r3 V* p004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E28 u/ }! y5 u8 d4 g2 A
004033F7 99 cdq ; EBX扩展
% T1 N* M! X( Y! d. c( H* V004033F8 33C2 xor eax,edx ; EAX和EDX取异或
0 G2 y6 N$ h4 @! T004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
! t% K. g4 v- W; l) ]2 G5 Y* c004033FF 2BC2 sub eax,edx ; EAX减去EDX
4 S9 S" i) ~' j00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C] d$ g9 ?4 V% y/ v, q+ X$ M
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX9 f' q4 l3 l, q- v: ^
00403409 99 cdq4 ?. n; E+ o* r( z
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
; G* J# ?5 \( j. I5 x0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
5 C+ p: |# c- O9 N* m/ ]5 s# ^00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
/ R; N2 a- b8 n6 L/ g$ ?00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）+ s H4 h& l. A# ^3 r) {' y
00403418 E8 6EC00200 call qsr.0042F48B ; ) L' ^* t( I* C
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]) G) {9 H0 D" ? v. q0 t. L/ Y
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9* j7 g/ O, r6 J" K# H. A( Z6 _
00403426 E8 60C00200 call qsr.0042F48B3 Z9 q; s3 v( s3 b! S, I D* t1 X$ G
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
8 I8 g5 f3 d; t+ U( p4 ]1 Z0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
y3 F6 |: v2 L$ p8 I00403434 E8 52C00200 call qsr.0042F48B
+ z; f- e$ Z' i" O8 w+ S4 q+ O2 B00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 w- S3 x$ R( x( A2 c
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7) q- e" i7 p0 l1 L2 g6 A. n+ x2 |
00403442 E8 44C00200 call qsr.0042F48B
; K: ?% i# w4 ?) ?2 j3 r7 v/ b00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, e Q2 ?5 _% D3 I7 ]8 Y8 u9 u5 u" \0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
+ T. `7 P+ g+ p- N00403450 E8 36C00200 call qsr.0042F48B' a1 w) R1 r2 @
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
) F9 K Q6 |' d( L1 o, b$ R00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],33 L& y" X4 v' ~5 q8 |6 ]9 |
0040345E E8 28C00200 call qsr.0042F48B# _ ?# V+ Y* e# K1 J! [- T
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]8 y; ^2 B8 G+ Q; Q! l) \ {; W& [
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
8 M4 t0 j8 M7 f, H1 H0 ?0040346C E8 1AC00200 call qsr.0042F48B3 F2 n7 q E% U |+ w5 K
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20] n ?( H! j; a! |( ]' u. d# T5 B
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
1 b/ d' [* @! Y; K0040347A E8 0CC00200 call qsr.0042F48B8 P* ?- y) b6 {6 q& S9 j, T. c
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
$ B, L9 t6 _; h3 w. q00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
. b2 b* ^' A; f, m; o4 D00403488 E8 FEBF0200 call qsr.0042F48B
) Q2 h1 E* O$ d% t3 E* }. f0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% n5 x7 J! k E0 |& ]$ I: E
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
/ @& b! [2 ?* ?6 v- L2 ]' R( S00403499 E8 EDBF0200 call qsr.0042F48B* F$ o. N% }, w0 a* `& U& H8 X
0040349E 32C0 xor al,al ; AL清01 W. w- m& u3 d- v( e# v( A
004034A0 E9 88000000 jmp qsr.0040352D6 F) A9 S! ^ g0 J
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~9 x$ H) S9 @7 N3 O( [$ E' K# m: d/ F
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
$ J2 v% ]+ C5 A) b; C/ `$ V2 Y004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
# z# h' N# L5 f" ]# `: e2 [( @004034B3 E8 D3BF0200 call qsr.0042F48B" D0 e1 O2 f( k# ]& X N4 |' f
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]( Y9 g' v/ b% c5 d
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],80 k2 q& ~7 z/ }- e7 \6 ~
004034C1 E8 C5BF0200 call qsr.0042F48B' U5 B+ i7 T }3 H6 ?) @' |
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]2 D- q% w2 @1 W* x" F
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
; A$ J' k; s! r1 C8 N- X+ \) l1 p- K004034CF E8 B7BF0200 call qsr.0042F48B
* _4 m1 s8 V# f# d004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]4 r9 `: e4 x% f X, ^! d
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
+ h& X& c; ?4 l3 `4 S9 c004034DD E8 A9BF0200 call qsr.0042F48B
+ N5 h1 _# v+ K* f, _# ^004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28], H6 f) K5 s6 \" J) e
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3* o5 L' q) y/ }7 h5 K$ C2 L2 I2 b
004034EB E8 9BBF0200 call qsr.0042F48B
/ U0 ?' t$ M8 O4 l! D* Y+ D$ \004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]& q( c4 x9 T! a$ _
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
9 }3 J" x% u: d; Q% e. x2 W5 d004034F9 E8 8DBF0200 call qsr.0042F48B
! U6 @/ W7 J, A6 I. B; `004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20], T S! E: y6 m0 F, K
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],17 w- q& q; }+ I1 S/ Z# n
00403507 E8 7FBF0200 call qsr.0042F48B
# D& H8 K& h$ G. z8 R0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]0 e: t3 I5 T2 B& V! q' U4 o- @
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
* g$ H- {* C; H' p4 T/ K6 n# ~6 z3 e00403515 E8 71BF0200 call qsr.0042F48B
3 }+ n4 B' b7 C" s+ o0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
+ E' I- }+ t' i( T0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
! T0 A" g* x' Q- }/ k( x+ E00403526 E8 60BF0200 call qsr.0042F48B
% M+ Y9 ^7 k: {) l7 X0040352B B0 01 mov al,1$ W/ s* l% h: q1 b
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
! R4 T2 s1 v A3 k00403531 5F pop edi
/ z' ]: v9 G; E$ i) N9 F' N; \00403532 5E pop esi# w* C2 |% D Z( c( q" f
00403533 5D pop ebp
" n" F1 L/ J5 P# _% o; B00403534 5B pop ebx3 @1 n: V8 w1 }7 L0 {
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
; m& |. e* o5 `/ y0040353C 83C4 30 add esp,30
$ d& V4 W% G9 K O! s0 Q0040353F C2 0800 retn 8# m* R- D9 b7 O6 u; a+ A8 w$ W1 J/ O
--------------------------------------------------------------------------------# K ^$ {4 {8 j' m0 \2 f/ o: T7 h& W
【破解总结】0 W' ?# q8 I& {4 y
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
2 D Q T" ~ M: J7 n2 R% i用户名：yijun9 Q1 |6 F: j( y, ]1 ~
注册码：4893*7777*3726*7777*0529
4 f0 o+ G% A3 z+ @5 z0 r--------------------------------------------------------------------------------7 g3 n$ I# }& ]
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡