|
|
|
【原创】破解Quick Screen Recorder
! o) R$ Q1 r& e$ } [7 x【破解作者】 yijun
0 h) a4 g, ?/ I+ y \2 ?【作者邮箱】 [email protected]
5 Y+ G3 M( }4 i. w7 @# ^! w- q【使用工具】 OD,PEID
. S- T# p. }4 _9 Z: t9 T【破解平台】 WinXP
4 m. Y. {# Z8 ?/ r$ I9 f. W$ Y: D3 P& k【软件名称】 Quick Screen Recorder
. r" q5 J0 O) L- B: ~* `6 h/ F" b【下载地址】 天空$ x) g( z5 L$ _0 M
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. # M* s$ G( {' F
【软件大小】 540K/ o2 w9 H; H* l* ?; z+ M
【加壳方式】 无
! S8 ^4 z9 G; r2 ~2 c【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
4 B6 b1 k; v$ R- a--------------------------------------------------------------------------------
8 q0 E c" n* H2 J【破解内容】
5 @, |/ r: O5 q- { PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：8 y4 {3 @ U) Q0 ]! F4 F
00404C69 55 push ebp //在此下断
- h. C" E+ n0 \# c% a00404C6A 56 push esi
9 b O% {0 I9 `* M( z8 H00404C6B 57 push edi
3 N- G J4 p# `* m, ?7 k00404C6C 8BE9 mov ebp,ecx
* q& S: [, [) W' ?' E00404C6E 6A 01 push 1
( D- V8 N7 B! v5 S00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
! F, W2 a p9 U. `+ @2 X00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
* D: ~- z! Y- D; @00404C78 8BCF mov ecx,edi
" k$ ^% F& F: k7 M; o, M00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码" q1 P, c- h9 @9 o' I. i" t* C
00404C7F 8BCF mov ecx,edi- O l9 H$ c0 W2 K
00404C81 E8 A73E0200 call qsr.00428B2D
6 |/ r/ \" Z8 Z$ P+ p+ c* T9 R7 O00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]0 i3 ^( A- U( c6 F8 X% K
00404C89 8BCE mov ecx,esi
* R! n1 U+ W) s3 n0 q0 b00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX$ \4 d4 z. n" o( ?2 d
00404C90 8BCE mov ecx,esi
9 Q5 g& ^' v0 k+ N00404C92 E8 963E0200 call qsr.00428B2D
4 t/ a: a* s* f; E1 Z. I. v00404C97 8B06 mov eax,dword ptr ds:[esi]
# j2 I! }( ^" N/ m( ?2 v" {00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2- _9 Q. b: u6 t0 q; R. G& [% o
00404C9D 7D 26 jge short qsr.00404CC5# f5 D \3 W$ G# b
00404C9F 6A 40 push 407 x9 i# ^5 l. n$ W
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
0 E. K# o) b/ o$ {8 C# v4 q4 K$ r# f00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."0 ?, Y# P3 B2 h. Q2 ~: ]4 P
00404CAB 8BCD mov ecx,ebp6 D H7 F7 x, c3 [9 D% T) Y! U
00404CAD E8 C3840200 call qsr.0042D175- k: q3 U5 z8 [$ Y7 Q5 G3 H* ^
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
! }. R" z& J8 q4 x! W; M& r00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
+ t" K" A6 s* y3 B) Q00404CBD 5F pop edi
6 ]' Y& l. Q1 d) a, u: _" {( |00404CBE 5E pop esi
; P( F7 \0 | \$ w) s00404CBF 5D pop ebp5 G* k- H" o9 ~) ?
00404CC0 5B pop ebx
0 x9 E4 `2 O F0 \! B00404CC1 83C4 18 add esp,18
7 ]$ o7 G) C/ E0 I' y2 |7 H5 c; ]9 T00404CC4 C3 retn7 `7 i* ]. k# g. I9 d% F5 ~6 o) D* c
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
, `2 U' C; w+ e00404CC8 84C0 test al,al
! U$ n/ g8 b: s( J' @00404CCA 0F85 1C010000 jnz qsr.00404DEC6 p9 O t9 J: ]( Z. V# Y
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. N5 K" v# @+ t$ Y! ^00404CD4 E8 87E3FFFF call qsr.00403060
8 H: M# O" @" D( F# E- l00404CD9 51 push ecx
! r. Q3 a8 l* Q! i3 y00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0! ?' g m/ N" y5 r7 d
00404CE2 8BCC mov ecx,esp
( L- J P' v" w Y00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
T5 f {0 A- j9 U: a) `& [00404CE8 56 push esi$ J* l9 I& \4 ~# f
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
6 H6 B: L. X* x7 ]00404CEE 51 push ecx' N' u( N7 H0 v
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
6 Z( V: Q3 m/ W" t8 ]( x00404CF4 8BCC mov ecx,esp3 p" R2 q0 a( b* f
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp, r! h, j6 M' q3 g1 E
00404CFA 57 push edi0 \4 Z+ i; c7 `& m6 s4 a3 z
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0/ R. R+ \# h7 S/ \/ Z, ^% ?
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& i& H+ y% S( h1 Y0 s2 S, V00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],02 |& ?8 |6 C9 W. r/ k
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~2 @" z3 y6 ?- T% I0 B# B1 D6 Y$ t
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
7 V' ]9 d! j' G7 Y( {' o# n00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
: N# T8 J6 ^( u+ o. r+ F00404D12 6A 40 push 40
& R' J2 T% z( }" {' f. |00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
( |$ f5 A4 B6 X+ j8 u4 E! J Z" ^1 {00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
- U9 K6 t7 f& ~' G00404D1E 8BCD mov ecx,ebp
$ C! d3 [. y; G" N00404D20 E8 50840200 call qsr.0042D175
8 b* |2 i. j; N* f" m$ [0 V00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& g! q& O3 o" a" k$ c. x00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
. U( ~! [) {: k6 t. O0 y1 h9 e00404D31 E8 5AE3FFFF call qsr.004030906 G9 i- R W9 p" [: D
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]7 ?- c! h& n9 d6 t# t! H5 k
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
$ _- e% q" Q2 E! n00404D41 5F pop edi
% U" m0 O. {7 @00404D42 5E pop esi
" Q$ Z7 e6 `* A4 t- t B00404D43 5D pop ebp
: w. J' Z. v7 L: I4 |00404D44 5B pop ebx
2 D9 L/ e w% ? A+ T q6 Q00404D45 83C4 18 add esp,186 a# }, X) x# ?* ?0 i; ^9 [' O9 E
00404D48 C3 retn
# H) I( F( d( J0 i*********************************************************************************************************************************************************5 `4 u; |& ?+ K; F3 p' l2 G
跟进00404D09处CALL来到：
0 C5 M/ [" {/ o5 F/ C8 Z004030A0 6A FF push -1 //一路F8下去~~~~* C6 K# J: H: z: c! g0 O4 r
004030A2 68 C88F4400 push qsr.00448FC81 \0 p% v8 b0 H
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0], E0 J2 G" d& R" d: |# B' {( @
004030AD 50 push eax
$ k" O- G9 F7 \5 t- s# }) P& {004030AE 64:8925 0000000>mov dword ptr fs:[0],esp2 D& _! T6 i {, F. Z) u
004030B5 83EC 24 sub esp,24
9 d# A1 F7 ~) B/ h w004030B8 53 push ebx, R& w3 \) _( M" S
004030B9 55 push ebp1 V0 z" w. }* F7 m) W
004030BA 56 push esi
x, m9 G- c$ _5 n' l( X0 j2 r0 }/ N004030BB 57 push edi
* J8 Y4 S6 ~2 l4 X6 e! B, t004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"! D1 U& g4 H: E+ k
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
0 e1 H3 X f6 C9 n; U! n004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],15 X+ |; \' K' w# ~- Y% F
004030CD E8 27C40200 call qsr.0042F4F90 u6 N, c! R' ^: k) a1 M8 a" o" g
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
) [* z5 F5 m* i, U B+ ~004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
' T; K' ?0 s! S7 q" a6 K& x004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
0 y" h4 u$ s' y) s0 t& F1 G004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3; w; w1 l+ S- Q9 J. U6 P$ j
004030E4 E8 905A0200 call qsr.00428B79
9 ~- q% n N" Q0 x2 I j0 q$ s004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 h8 Z+ |- H: k5 \; T" D
004030ED E8 3B5A0200 call qsr.00428B2D* I k$ h" j# h5 T: ]8 G
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]+ S* Z, R( O- H% O1 [, n/ {
004030F6 E8 7E5A0200 call qsr.00428B79+ W/ E1 W) q4 t
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
& H* S9 u+ R" R0 [( W7 t9 j- `004030FF E8 295A0200 call qsr.00428B2D7 d$ B1 ?) L) O3 k0 x- g
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
& y7 l3 C5 o/ k2 h$ O00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
9 o9 y/ B% i7 b7 z! M0040310B 83F8 02 cmp eax,2
$ r' x: I' a5 D$ f o# R4 I0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳9 q4 B: r8 [* A, Z0 A
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
4 }+ e6 w) I! J; y7 d$ d00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
3 ~- C1 f, ]- }, }0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
% I( |$ Y" G) Y% z5 I* G* _5 A00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]# I# R/ a+ b* W& r9 m
00403126 6A 01 push 1
7 \/ E1 q* b7 _, m7 h; O* B00403128 50 push eax( [' _1 v! B8 {$ M( A
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' b9 x |/ }& |0 p
0040312D E8 C4550200 call qsr.004286F6
' M$ U X. U$ q1 `' t& x' W00403132 8B00 mov eax,dword ptr ds:[eax]2 J1 K/ ]3 e C9 @1 r; G8 W
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ [. Z2 R: Q( T3 \& c0 w
00403138 50 push eax
6 E" q- j( f2 {/ ^) J" E00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
C# K( j. e6 P! O+ X( M; s! n `( x0040313E E8 4D560200 call qsr.00428790+ e* a8 u3 l3 w2 O
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 O$ ]2 R* i2 Z8 U1 f00403147 8BF0 mov esi,eax
& B0 l$ G4 ]! N8 L$ W00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],31 E2 I4 X$ c4 s
0040314E E8 38C30200 call qsr.0042F48B" c9 v1 R1 h: W. t& H6 p8 M( k
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
! o9 ?; G* c e00403156 B9 3E000000 mov ecx,3E
% i/ V* O+ F, `8 `, G( C0040315B 99 cdq
1 w( f0 i+ X# M3 [4 k( {0040315C F7F9 idiv ecx
) W2 d; m& { Y0040315E 6A 01 push 1# u. r" o' s1 B6 b6 A6 f1 w
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
4 U4 |1 |) \* e, X5 y+ m00403164 8BF2 mov esi,edx
0 p$ E$ |3 J" }3 o* l8 ^! a: X00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]* s( s7 S5 i a7 F1 p* x" i' l9 P. }
0040316A 52 push edx/ R- I6 i) E# A7 b: U( h
0040316B E8 0A550200 call qsr.0042867A0 K a+ L) o" Z. J5 `& k4 Y
00403170 8B00 mov eax,dword ptr ds:[eax]1 L7 a6 W1 Q/ w. I
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]6 F. d- Z9 f/ k1 T
00403176 50 push eax) d9 |/ a, b" y/ g% S/ s
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
* R6 s; K5 e; w6 S) q4 F0040317C E8 0F560200 call qsr.00428790. {: Z! }$ G: v
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 A. g6 w/ b/ m4 h6 X+ z& E2 M# C8 @! V+ e
00403185 8BF8 mov edi,eax, Z* g% ?; K9 P2 B& S# W
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3 a- m5 S h: y
0040318C E8 FAC20200 call qsr.0042F48B: y& s* S0 ?" R' s3 S
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
" [3 B) h. ]- v00403194 B9 3E000000 mov ecx,3E
% U5 |0 z) N- S# S& `00403199 99 cdq
2 y/ E5 z( D. v x4 o* Z1 s0040319A F7F9 idiv ecx
' ~' p6 V2 l+ p" ~' y0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]8 g! K1 f3 s9 L' p: G% R) G
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
5 V; `9 g% K5 g4 s004031A5 8BCA mov ecx,edx
9 O/ i8 @! \7 w7 O! c5 y004031A7 894424 24 mov dword ptr ss:[esp+24],eax
, e& x" t' u- C' Z004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
/ u# V/ I* h6 l8 x004031AF 894424 18 mov dword ptr ss:[esp+18],eax9 n: J7 E- l3 ]* z
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
0 N8 f0 U+ {9 V) L, E- I: n004031B7 894424 10 mov dword ptr ss:[esp+10],eax
6 v1 a- E8 N0 x' B) G$ [004031BB 8BC1 mov eax,ecx
$ J/ V: ` Z4 P6 ~- l* _004031BD BF 0A000000 mov edi,0A
. j+ r) C. a" f& B$ n; \) L) `004031C2 99 cdq
& r x! p9 T. i6 q8 ]004031C3 F7FF idiv edi
& n) R% M' U5 x3 ]004031C5 8BC1 mov eax,ecx
2 C& M ?: I ?$ ~! f004031C7 B3 0B mov bl,0B
0 H$ `6 d8 M8 H& d( r004031C9 0FAFC1 imul eax,ecx3 D( _4 t! ?7 K$ w* m4 z' Y9 ~3 X9 \5 |$ y
004031CC 8BCF mov ecx,edi
2 |* \9 J/ z9 y# D, W9 Y004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
8 ~1 [, q A; w! u- ~3 ?0 m004031D2 52 push edx3 q+ C U5 g" @
004031D3 99 cdq
& g0 h6 V% t8 d004031D4 F7F9 idiv ecx K' ]: s1 m& V: t! H* [2 @
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]# }$ {0 Z: w5 R$ H: }# A7 h0 a
004031DD 2BC6 sub eax,esi
( b% E' c3 g- }$ g/ c" {004031DF 52 push edx
6 ]- o0 y: R) m004031E0 99 cdq- y7 i! G2 x/ A. K% f; j0 L. I! N
004031E1 F7F9 idiv ecx8 G. J' v/ O$ o( [' Y, N0 t( h( o
004031E3 8BC6 mov eax,esi% \2 m7 |7 ?; O4 `
004031E5 52 push edx
1 i& v5 j' p) j004031E6 99 cdq
7 k+ p' c! M* _ O2 H8 ^7 B. X, L004031E7 F7F9 idiv ecx
3 j7 y/ y( C; |) b* G) l004031E9 52 push edx
0 S6 `8 L5 V& H4 J0 h004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
: U- G h9 n* q4 M! D004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d", M' j* d% ]& q+ q3 Z# e5 @9 [
004031F3 52 push edx7 n9 E4 v5 p! F; @1 v$ X+ p7 a
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48933 [! k- b0 D0 a2 \# ~8 ?
004031F9 83C4 18 add esp,18
]1 a( I# @" T9 W004031FC 6A 04 push 4
0 p5 o& f; Z }" I+ x! ?, h004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]0 F1 o* v# w5 f, f# l
00403202 6A 00 push 0
) }! N. m ^8 e/ d/ M00403204 50 push eax
1 l) o% g9 o; O/ J00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 v9 y/ ?* g" L# m8 @: d; s) T4 V00403209 E8 D6530200 call qsr.004285E4
n+ {0 r D! B" A5 C0040320E 50 push eax# w) t2 c' ], o6 g
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]: D+ M z* C5 m3 F! f% E
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
& z6 r% F' b9 W9 I' N) }+ e' V( S00403218 E8 A7C30200 call qsr.0042F5C4
7 w0 H; V* r) H0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]! _8 l8 C* Z% K1 [9 j7 _
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl0 \( k& J7 f6 P. ] [* y1 P) i
00403225 E8 61C20200 call qsr.0042F48B+ B3 X( _/ P% g+ E I
0040322A 6A 04 push 4
H' T5 U2 B* P0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]1 d5 w% E X h H
00403230 6A 05 push 5) `& h# `, _# ?% e3 Q
00403232 51 push ecx1 d! |" M1 Z! @# m# ^7 q
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# ?# T6 }, g; C8 A' g
00403237 E8 A8530200 call qsr.004285E4' p' W* P; I. x* [9 D4 W8 a
0040323C 50 push eax0 d: k7 {# ? ~) l1 E7 T
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
9 z; G& S6 V8 J% _00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D1 @8 y: w, A) J$ ]2 B9 v
00403246 E8 79C30200 call qsr.0042F5C4
! K( j3 o, m2 l% R2 C1 s. T+ e0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 g& R) c! m. Y7 C* s0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl0 @5 k0 R- V2 X1 a: A1 i0 {
00403253 E8 33C20200 call qsr.0042F48B" i( w+ M# |9 t# z; H
00403258 6A 04 push 4
$ c4 p% ?- R) u0 O0 X0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]$ P* {9 @& N3 K8 ~
0040325E 57 push edi' t! \ Z5 m& l# ~7 v. k
0040325F 52 push edx: K8 f0 b' `# n( s/ k
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
6 i6 d& E4 P9 |) T4 @& Q2 S1 a00403264 E8 7B530200 call qsr.004285E4
9 b! _" k6 h0 i' _00403269 50 push eax6 c; d9 \- l% o. S$ T1 i$ e. }4 U
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& R8 \1 P) G) Z: X. k: y7 V0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E% C! d/ m$ {8 `- r' ?+ w
00403273 E8 4CC30200 call qsr.0042F5C4: r# T; V5 B- g8 O9 E6 D M Y
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30] h7 }! c+ `7 S' b8 J
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
7 S( b7 Z) { b6 |00403280 E8 06C20200 call qsr.0042F48B
. m# z" x7 L q. ~: Z \00403285 6A 04 push 4. s7 Q5 j# c$ m) D5 e+ @# I/ F7 _- U
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]+ E, Z- N% q1 t9 p% Z) U/ c
0040328B 6A 0F push 0F
6 X G3 O; }0 O; v0040328D 50 push eax
' z( {, _8 l2 v" e0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]6 V& v/ ^$ J4 Z0 \. w
00403292 E8 4D530200 call qsr.004285E4
9 x$ `: j" F4 H% Z; `00403297 50 push eax4 v, Z. Y, @5 [5 u; k
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
. o2 w7 z5 D+ _' J0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F+ t' ?( O9 O }% O* T; D: u
004032A1 E8 1EC30200 call qsr.0042F5C4
9 H( P% |* m8 i004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
7 t, J" O" O7 f2 _; [! n. m: X1 }& u004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl$ |& a$ v$ F7 Y& M4 Z9 c: T' [
004032AE E8 D8C10200 call qsr.0042F48B
6 K1 g& C @' \8 j5 q* G1 y004032B3 6A 04 push 49 p7 r% E& q$ N) w8 L# x% u6 s# w0 x
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]( a) T. E7 W+ V( [7 w
004032B9 6A 14 push 14
/ M' ]0 C* q/ ^$ m+ S004032BB 51 push ecx
. ]9 j1 B2 A* d, M1 u9 B5 w: [& @004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: v5 x9 i, b9 m
004032C0 E8 1F530200 call qsr.004285E4
' R K9 ~7 S9 T$ x; ^1 z- L0 n Y7 y004032C5 50 push eax
* {7 Q/ [+ i- B; p" r! M7 s004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]8 }4 W4 r: l$ h4 F# K1 H# e# p
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10; t$ m; v* Y: }8 k
004032CF E8 F0C20200 call qsr.0042F5C4: c3 e0 M9 ^1 E) M# h1 L8 }
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 n& a3 v) B5 Z0 G: v0 D5 E, i004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl0 k/ ]4 k: v6 c$ n C
004032DC E8 AAC10200 call qsr.0042F48B
, x# z1 v5 w) G& ^7 c. I% Z% L004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI) x; f) x4 z( J7 z6 ~% z% e2 a. s
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX; Y$ E' |/ f! n9 G! X1 z
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL1 s" W0 A$ g& }
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
E( C- B k- g& J: `4 D5 w004032ED 8ACA mov cl,dl ; DL送CL: ~# }& l+ y1 x2 E' A7 C
004032EF 3AD3 cmp dl,bl ; DL和BL比较% e* I( ?. D$ W0 Z; `
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
+ a1 i2 o5 A% M2 h8 ^# V' ]004032F3 84C9 test cl,cl* _6 V# z0 T3 K0 z/ w$ E
004032F5 74 16 je short qsr.0040330D& K+ g+ C& E0 B
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL& o2 J! ?1 j' O6 `2 e) h
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
0 G. }8 a. G& [7 F1 a4 ?$ L004032FD 8ACA mov cl,dl; U6 {8 h/ ~' f+ j3 v& o, J* J
004032FF 3AD3 cmp dl,bl ; DL和BL比较
- l# b6 M" G% S00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）0 Z' t' U/ N$ R, i4 |% |- I
00403303 83C0 02 add eax,2 ; EAX加2
% H0 ]2 O; \+ w& }00403306 83C6 02 add esi,2 ; ESI加2/ f9 @5 @ e# `/ P
00403309 84C9 test cl,cl
6 D0 W, A) F2 ?0040330B ^ 75 DC jnz short qsr.004032E9
7 @& U. j, q* U8 n0 n0040330D 33C0 xor eax,eax: K' J# r- H: I7 H
0040330F EB 05 jmp short qsr.00403316
3 J4 m# O5 I) a00403311 1BC0 sbb eax,eax+ Z: r( V, y" V# Z7 z2 h j9 X# g0 B
00403313 83D8 FF sbb eax,-1
T) r/ \/ X( h7 N2 D* s0 w! o00403316 85C0 test eax,eax
& L/ G1 f% B- `- Z# f00403318 74 0E je short qsr.00403328
/ S: `6 y3 A) o3 c0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
t& x) u4 F( ?- r3 v0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]) ^9 W/ q0 ~4 Y3 i% m
00403323 E9 F0000000 jmp qsr.00403418
# B2 c2 j/ `$ _/ C q: n& [7 `00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX: P6 O5 r+ q7 n
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ ^& g* l+ K& z( F( F
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]" l( E% T( L" T; ~* X F+ }, |
00403333 50 push eax/ Z" @( u R p* G7 n( ]
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX3 A; b) @5 `* X, A5 {
00403339 50 push eax, z5 e: W- d/ T6 o- f \, F8 V
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
9 s, K8 K8 @) Y0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX# z |: e# f9 A) z) W, n
00403343 83C4 04 add esp,49 e( [8 |! R, r; R# L3 X i3 W s
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
( F3 M+ X# g: e00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
+ D$ I; H" Z, b6 F0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]) t+ M f6 O9 g4 N! J! H; r
0040334F 50 push eax1 f& p J# j5 t8 x# Y H6 ~
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX1 R( o' ~8 K( A4 ]
00403355 50 push eax
+ j, k1 ?; Q* \$ |( s% \! v# S& O2 }7 c00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX7 M' s- B9 x$ B3 K# G! {
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
3 ]. R$ f2 L* f ^' N- z' N/ ?0040335F 83C4 04 add esp,48 J5 F5 g1 `- R; K
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
( v R" T" u, a00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]% _8 c: ^( Y" ?2 ~
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
2 y% ]3 G% X5 s$ D+ [0040336B 50 push eax# A, }8 L" {7 h
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
3 r- E- O: v" {00403371 50 push eax
3 F) }4 Y f* X0 b2 r8 j00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
4 Y( d3 C: ]. T" I9 W& E00403377 8BD8 mov ebx,eax ; EAX送EBX2 W& r' l* M! a0 V6 m
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX' j3 e$ a$ C! [# l
0040337D 83C4 04 add esp,4
, n1 a, B6 P: `! L00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
8 w& D8 `- C3 W9 [+ {7 O0 j' v7 K00403384 8B40 F8 mov eax,dword ptr ds:[eax-8], r+ k" d% r, p/ U6 @& g! ]
00403387 50 push eax1 p: Q" \% a. q) D9 o
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
! z1 y, h/ P, y8 L, S' X0040338D 50 push eax
/ ~7 d$ O1 r6 T8 }0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
; _( ]( a! z* F00403393 83C4 04 add esp,4
+ F4 z5 D0 H7 F2 ^" w! m00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
2 e" M) W/ G. W; M0040339A 8BE8 mov ebp,eax ; EAX送EBP
8 r3 g1 ^9 }: b: Z* ?& F* T0040339C 6A FF push -1% M2 z) J0 ~( [& Q
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX# H0 d/ C& n- t
004033A3 6A FF push -19 T$ x' E/ j' U Z! u
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
, u2 o1 B* z8 }' H004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX% M- B* B/ T5 D7 p3 k% ]: G5 U
004033AE 6A FF push -1" K( a3 f1 a( f7 S
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
8 J1 s- |& u9 V( ~3 s$ x004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
9 _/ ~ ^7 E0 K' j004033B9 6A FF push -1
" o/ T: N* n9 A" m+ ^) A004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX: k2 m# j% C% z5 M7 `
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
. b/ {3 ~3 `( Q3 T4 i004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
9 t, |0 { H# ?9 N) B7 c004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX$ j( ?. d0 i* ?1 l9 _$ U
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX# ?$ m# g9 n7 ]# O7 `
004033D7 D1E0 shl eax,1 ; EAX左移1位3 b9 E: _& B) o" _: R- z& c
004033D9 99 cdq ; EAX扩展. x, X- r$ B$ {9 W* S8 R$ B
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中2 z, b+ z* |5 y% ^
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
: O# P C0 ], b X0 r. D004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
- \9 P1 m2 v1 Y, h0 w004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A$ ?) M$ s* N5 i+ _; f
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10], b. v) u" z% z' Q c9 p
004033E9 EB 2D jmp short qsr.00403418
& i; `* ?( `( W4 ^# S6 x004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX) ?7 @ R& ]" G( F
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
+ @( L W5 z3 k$ f7 {9 }/ l004033F7 99 cdq ; EBX扩展* y) p2 k( [' [$ I9 ]; f
004033F8 33C2 xor eax,edx ; EAX和EDX取异或+ D; r; _5 ^3 I* W* e, j- n9 T
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
% A: i; r7 H4 I) @* S9 p004033FF 2BC2 sub eax,edx ; EAX减去EDX/ T9 M& ^7 b% I: ]4 H0 ^% e' j
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
' K6 W% g' ?' V- O00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
! E2 [1 P! C+ s7 R4 B# ]00403409 99 cdq
8 m, m0 o( N9 E2 q0 \8 K: L0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
7 A2 r+ J% M! V+ x0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX8 z# T7 Y( X+ L' b ]# \
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较7 i; L4 F/ L4 B! I( D
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）) r. w) o# a8 ~" A$ A/ u
00403418 E8 6EC00200 call qsr.0042F48B ;
* C1 a7 g4 E; h+ P0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& I0 k# A" [" p9 g8 i' k7 w% m00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9$ t0 Y& K$ X z5 i& e6 @. e
00403426 E8 60C00200 call qsr.0042F48B
0 ~6 F5 A3 @3 M6 E, m0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# g( z0 C- N& h7 A/ Y# N" Y; W
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
3 X7 `/ P0 |6 v! P2 g) ^00403434 E8 52C00200 call qsr.0042F48B7 j2 Z2 u1 q+ f/ @- a ^/ m
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 t9 Q* @$ c0 m$ i7 e/ ]
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
0 S8 q/ }( p J8 M6 w D3 v/ b8 N0 K00403442 E8 44C00200 call qsr.0042F48B
. T; w0 E$ P/ ^1 c8 _7 s00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]( g+ L9 I/ _6 ]: B0 i
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6/ c$ I: w0 q6 V
00403450 E8 36C00200 call qsr.0042F48B! h1 y: ~( W- m/ S0 Y. \4 n
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
+ r- s _6 l4 T5 P3 I+ E00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
* a& I: M% O1 \* \0040345E E8 28C00200 call qsr.0042F48B
C: q. Q, d0 J; a! D00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
- D3 w* ^. d& ~' n! f3 }9 j$ s00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2& n. }& O7 [: w; ]3 H
0040346C E8 1AC00200 call qsr.0042F48B
/ c, T4 n& @1 i/ e# D$ M M! p00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
0 b- z2 k/ |. s- N00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
, _6 s, }2 M$ C0040347A E8 0CC00200 call qsr.0042F48B
- @; M/ C# f' I& F4 n0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]! w7 A; x& [( A; D7 \$ b- c- ?3 U9 I
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0/ a }6 G0 I/ O1 V( ~
00403488 E8 FEBF0200 call qsr.0042F48B# a m0 [; C. M |, m) Z8 T
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% q! D& a1 q' Q1 }( t0 g, B/ T
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-18 n7 [9 S. m* [% E6 \% ?$ Q8 k9 R
00403499 E8 EDBF0200 call qsr.0042F48B$ w. c' ^' j' H& [. Z7 n' _
0040349E 32C0 xor al,al ; AL清0
$ j" e5 F K9 Y004034A0 E9 88000000 jmp qsr.0040352D% e( f+ Y$ N; E2 J# D. Z+ B% G
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~, ?7 a3 I$ H* u' c
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]# W3 \1 |6 N9 o% ~' f
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
. k' v' H7 B: Y7 a6 T3 `004034B3 E8 D3BF0200 call qsr.0042F48B
# [3 Y; H" p! T# O% G# h7 `0 E H004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
0 J$ g- B1 F# i* p6 Y4 v004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],80 j1 c Z$ [% V" S n# u7 T# w
004034C1 E8 C5BF0200 call qsr.0042F48B& {1 `. a$ E) ?+ l; a
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ E5 S l5 L8 g* ~( o
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
+ s$ W. f6 {' z; r6 H {, U8 C' Y# ]004034CF E8 B7BF0200 call qsr.0042F48B2 [; T4 m9 b& J& S \9 p# X K
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& _6 G* Q' N. g+ y+ N: k+ t004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6! S r9 I* c, k* U+ g" x
004034DD E8 A9BF0200 call qsr.0042F48B
/ G3 N' r5 Z9 p( W. T004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]7 B% m: `* F" G2 ^, h. l9 R5 U
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3. K9 S6 `4 e3 w, x7 I) G' V1 T
004034EB E8 9BBF0200 call qsr.0042F48B: a2 {, h/ s! _
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
/ ?0 H$ s5 J2 b6 K004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2& S+ o6 {2 k3 E
004034F9 E8 8DBF0200 call qsr.0042F48B! ?7 y8 y F v7 j7 d
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 l2 d' l% w/ L2 A2 u00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],13 V' V% R$ k& J" X" f0 S
00403507 E8 7FBF0200 call qsr.0042F48B' g- S2 W! I5 o6 U7 S
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]- R Z! U# v# D; x! x
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
8 F0 ]; P8 w% Z! w6 U00403515 E8 71BF0200 call qsr.0042F48B* f6 C3 i9 o7 G# |3 B8 i
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
: A. e4 Z8 R% o$ A2 z/ D- d0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1" x! A" y M4 T* g- y) g0 J) [
00403526 E8 60BF0200 call qsr.0042F48B
4 ^4 \) E- ~1 r( u6 w0040352B B0 01 mov al,1( o+ _# O% \5 ^; g% I- w
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]( c6 q- D& M: e$ m% ^( S9 B) b
00403531 5F pop edi
) @% _. A! y' ]8 d; m00403532 5E pop esi
' x4 y+ P5 z/ l6 d6 b- R00403533 5D pop ebp4 `5 j ^! r \: Q5 f9 y" ^
00403534 5B pop ebx6 V6 D: { B: m: U- _ P
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
8 {- K& g+ U* Q0040353C 83C4 30 add esp,30
p0 ~; B& W3 X1 d, @, `0040353F C2 0800 retn 85 f" t% [9 t4 v# a7 z
--------------------------------------------------------------------------------
3 E6 B9 ~8 x/ s9 ]【破解总结】
/ e6 u$ p2 y4 R' |- ]! y4 Z 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
, q- L" l' j: `; F% L* \* V用户名：yijun6 A( q* M) f0 j, J6 {
注册码：4893*7777*3726*7777*0529
) V: s/ d4 B. R8 p--------------------------------------------------------------------------------7 K& F/ l: @" g0 D0 d5 z5 }
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡