|
|
|
【原创】破解Quick Screen Recorder
, D6 \% x. D, K* |8 U: U) [, P【破解作者】 yijun
+ O+ t0 o4 X$ I$ `4 Y, q; |8 b" m7 R【作者邮箱】 [email protected]
, P! q% V& C) ^# z1 T/ [0 W【使用工具】 OD,PEID" w Y" G. M0 C# G) A7 q6 _" w: N) t U
【破解平台】 WinXP
8 \0 Q9 n8 t9 ^! f+ E【软件名称】 Quick Screen Recorder
( |8 V; \2 h. m7 j【下载地址】 天空
" E* W' R4 g0 R3 d% w- E7 d" N【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. % b) I: L( M- [( R( X% S5 E
【软件大小】 540K
5 ^7 M) @6 R9 J7 D5 x( \" x% R【加壳方式】 无
$ y3 n/ U; k9 d R7 e2 o# O7 W _【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
/ Z8 o* s; F" L# |+ j( w--------------------------------------------------------------------------------# c2 J& i7 M) l( a) T
【破解内容】
% K/ V- M4 z. r6 w. m2 S PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
4 e% o3 [( s) K1 x00404C69 55 push ebp //在此下断 C- Z% f) O* Z: E) J. j( F
00404C6A 56 push esi7 _, \3 m2 Q* D' t# h. E
00404C6B 57 push edi
1 z5 w' `' Q( t' {, J00404C6C 8BE9 mov ebp,ecx
. W4 ~) l8 M( Q# Q: n00404C6E 6A 01 push 1& L9 V2 c. R0 o
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
1 w( e7 m: v; `) I# P, j00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
. |- F7 H4 v2 m, N& N00404C78 8BCF mov ecx,edi" p& e) W X. s
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码1 o+ u7 }6 Z( I
00404C7F 8BCF mov ecx,edi X. F4 Q8 \, u% K- ~
00404C81 E8 A73E0200 call qsr.00428B2D; L/ ?2 ~7 l/ e: J# G
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
+ ^1 t. o; P, r; X6 T$ e# Y00404C89 8BCE mov ecx,esi
6 _& a% W# F" n. V" R00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX+ Y W$ c6 _0 ?2 r, @) R
00404C90 8BCE mov ecx,esi
* B8 q" ^3 q) U6 C" H; O6 t2 E( I00404C92 E8 963E0200 call qsr.00428B2D0 H% `+ s) i/ K" h
00404C97 8B06 mov eax,dword ptr ds:[esi]% }% E9 t6 P6 J% T3 `
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2' g- Q( ]' p% d+ @9 a$ g; i
00404C9D 7D 26 jge short qsr.00404CC5' \* P- C; H% I0 C% O+ R
00404C9F 6A 40 push 40; B& {. I. k+ v6 o0 R$ L% q' E
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"2 W4 W/ s2 a9 S/ X5 B8 P6 v0 g j
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
9 O( `. q5 o9 t: a00404CAB 8BCD mov ecx,ebp
- C( f$ c. ?: C00404CAD E8 C3840200 call qsr.0042D175
4 J- }* `! K. {5 ^00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]9 D/ G. N- b' R) v; @4 o
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
! x4 U) u9 \$ b5 f2 `00404CBD 5F pop edi( X g d* D2 u; s
00404CBE 5E pop esi
8 `+ n) N; H6 \9 Z m00404CBF 5D pop ebp/ D5 F$ ]' M. C; W
00404CC0 5B pop ebx* ?9 A g: z4 x$ o6 j2 A8 G
00404CC1 83C4 18 add esp,18
7 F5 {# w5 Q0 {( N1 c00404CC4 C3 retn L3 v* E5 d1 r
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]% h: K) O* y b. @) z
00404CC8 84C0 test al,al
& k: u* p$ u7 W00404CCA 0F85 1C010000 jnz qsr.00404DEC$ v/ d* U! G) x& y; u) _ W
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]" B1 `3 k2 P6 u; E3 m6 J7 E
00404CD4 E8 87E3FFFF call qsr.00403060
, g0 k9 ?; q9 D! \3 ~00404CD9 51 push ecx( t- I; r/ `+ j/ q5 [
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
, T( r, D% c1 m) \8 R00404CE2 8BCC mov ecx,esp
: P$ ~8 _: P: Z' |3 W. e: G00404CE4 896424 14 mov dword ptr ss:[esp+14],esp# @* c3 `( }! V
00404CE8 56 push esi
! M2 r4 ` [& t8 |2 e00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
* I) ]# n9 |# G% C9 I+ ?00404CEE 51 push ecx
* _ s$ r* ~" e) Y00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
1 [2 k: _/ k, l9 p% \& X/ Z00404CF4 8BCC mov ecx,esp) m" l& T9 i: [8 B% R8 w
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
$ o S. R B+ }6 }00404CFA 57 push edi" l+ f \- l/ H: | [
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
& Y: g9 V: T: I+ v00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: I* F& \7 n1 P
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
3 c- w- y( @$ Y# X/ r# a6 {00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
) z2 `: S$ H' J: x. H8 \- y00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
- Z. x6 ?" a2 H: Y @* S00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
' B* \2 o& C, W% Z00404D12 6A 40 push 40' e- z7 C6 l% ^+ M) R
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"( w% l( a3 X5 y
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."$ ]' N, a% S6 g! d% C
00404D1E 8BCD mov ecx,ebp7 E1 H" m# ` S* x
00404D20 E8 50840200 call qsr.0042D175
9 _6 g+ l4 l& v: R8 e00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 i/ O6 C q# N9 t00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
9 g* O) Z9 [! v8 t( @8 M& L00404D31 E8 5AE3FFFF call qsr.00403090
! R5 r$ S4 H" Q" F0 X6 z1 y+ ]) L* v00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
% i' a; @! O+ i00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx$ \: E5 y: G1 l8 {+ k2 [
00404D41 5F pop edi& o }" E1 ]8 Y$ e. o' {
00404D42 5E pop esi" ^- F5 Z# v$ d& P* Z2 k
00404D43 5D pop ebp R/ y! ^! }0 X1 c: Y: o& J! G! X
00404D44 5B pop ebx
6 x) p( }4 v/ y00404D45 83C4 18 add esp,18
0 N. i+ U; f7 G3 k6 U& J00404D48 C3 retn% A$ H: W2 `+ ^: j. _5 G" m' R4 F
*********************************************************************************************************************************************************
5 ]! c+ t5 H- V" G9 t' |- k+ I# I; G跟进00404D09处CALL来到：
6 [; `3 x5 N) ~3 ?004030A0 6A FF push -1 //一路F8下去~~~~% }- Z1 u$ `: F4 y
004030A2 68 C88F4400 push qsr.00448FC8$ @. i W, P9 f, x
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]& w) O6 s7 B& q9 e/ y7 x
004030AD 50 push eax5 c0 d# }: ~; y$ V: n5 t
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp. z5 f9 }$ Q: U. w: f
004030B5 83EC 24 sub esp,24
9 q2 G# l [5 c8 U6 s+ m4 e004030B8 53 push ebx0 {2 g1 G' ^1 [1 t7 ^( |
004030B9 55 push ebp& L: n0 ~; A4 R0 p( ]1 y9 ^) G) c% W
004030BA 56 push esi
4 o% R! N9 Y" ~ I k& `& E004030BB 57 push edi
& n# [: z) t, z1 i: S004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
- I9 o4 r" [& J& _( W004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]( `5 L, p$ i% _2 I
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1# ]9 x: k$ Z6 H+ I" i
004030CD E8 27C40200 call qsr.0042F4F96 S1 A) [, q" F. Y% r
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]* m# i h. F' f
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax. y1 w' } v2 Q4 t$ L8 J$ p
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]4 r5 m+ N, x. G. E1 B d
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
; Z- ?) k' b, `2 V004030E4 E8 905A0200 call qsr.00428B79/ H! I, x4 @6 m. ~' o7 h
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]3 D2 ^0 o+ C- K' p. T
004030ED E8 3B5A0200 call qsr.00428B2D+ _ C: ]% h Y6 }- r% @5 i! G$ {
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
. n; S0 Q1 P' ?2 ~0 q2 e004030F6 E8 7E5A0200 call qsr.00428B79 a* |3 G: Y/ f, C6 z! E; G) h
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]0 _! ~7 o# _, T9 t% @! h: M+ O3 j
004030FF E8 295A0200 call qsr.00428B2D8 \1 g* O, r! ^9 E- \/ \
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
3 [+ i" Z' n" F& P8 ^% s( Z00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]/ Y7 n2 H/ g* G
0040310B 83F8 02 cmp eax,27 x+ Z% l5 r) l% q- f
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
: k% j& @8 _; _00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
- M6 U* N5 h( u1 p2 e/ l/ `% p2 j00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
+ z% p; k9 V4 _$ ~$ j! @- R0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳) H3 L/ c1 w. n4 [+ c
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
( G3 u2 k: r9 S$ e/ u6 ?00403126 6A 01 push 1& B! [- T+ o/ ]$ y8 [* S" V: N
00403128 50 push eax
- r# {( E! Z' l3 s7 R7 L( C" }00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
# m# E ~2 q8 W7 B0040312D E8 C4550200 call qsr.004286F6
; |) {4 e7 ]/ x00403132 8B00 mov eax,dword ptr ds:[eax]
( m: F, t3 a9 `: |& k3 g00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]# X/ Z$ J, _2 k1 @
00403138 50 push eax' ]. m! R8 ^: d4 [9 C+ r, s4 u
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
( V+ v1 ~% L& M0040313E E8 4D560200 call qsr.00428790
9 ]& L* V N5 z' [00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. ~+ R* L0 q$ r3 S% m, F9 ^2 w) }00403147 8BF0 mov esi,eax" c; m5 E* i, n2 _0 s A
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3" {. v0 U2 X1 z0 ]
0040314E E8 38C30200 call qsr.0042F48B
& d0 \5 R/ x5 F6 m. a2 v00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
& R+ I( M' n E+ _00403156 B9 3E000000 mov ecx,3E
. b2 ?; g- x% E0 I0 i- o0040315B 99 cdq
0 R8 g# R+ ^& f7 C$ ?; ]0040315C F7F9 idiv ecx* E: N X6 w: v3 o
0040315E 6A 01 push 1
& b# V$ p0 X# U) ^9 S0 |& x1 O00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
- ]# g' u1 Y. D8 B+ ~00403164 8BF2 mov esi,edx: j" K7 o% ?9 d0 G# c) i
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]" T4 f! k2 o7 R3 @" D* W
0040316A 52 push edx
; w; f: Z4 i; `3 j: |& h0040316B E8 0A550200 call qsr.0042867A6 T; ~1 n- l J' K
00403170 8B00 mov eax,dword ptr ds:[eax]5 ]" l, @; o' Q9 d2 a, x2 s9 y( {
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]4 {/ H0 {5 b; I1 s* x
00403176 50 push eax8 D' x+ Y6 k4 n7 v6 l, c
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5; b2 y1 H4 ~, l2 h1 y5 o
0040317C E8 0F560200 call qsr.00428790
3 x6 p* {, V3 `9 M00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]0 H) {2 K2 G1 M$ M# g$ d+ ]$ ~
00403185 8BF8 mov edi,eax, p" [) Y$ O2 f
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3- n5 `- J) m7 q1 H. ^) c' q/ v
0040318C E8 FAC20200 call qsr.0042F48B I& ^, d) q" l1 U; m( p- S' E
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
) X* H0 h9 Y5 P( A0 i00403194 B9 3E000000 mov ecx,3E
' V {- W) J; i, X" x& X00403199 99 cdq
5 ]: H7 v; Y+ w0040319A F7F9 idiv ecx; H4 W4 R3 B1 O0 _9 {: C0 l. o
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
0 n3 p/ }5 h/ G& W3 `) G i' D004031A1 894424 28 mov dword ptr ss:[esp+28],eax1 t# s! g5 n* K; W% h) R& A
004031A5 8BCA mov ecx,edx$ d1 S7 |$ {$ o: F& ~
004031A7 894424 24 mov dword ptr ss:[esp+24],eax8 Z+ f7 P, P. f2 t o
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
5 Z+ N# \+ k# g* q# s- q004031AF 894424 18 mov dword ptr ss:[esp+18],eax
; s8 Z' B' @6 |: {" `, b+ v. R004031B3 894424 14 mov dword ptr ss:[esp+14],eax! ]) y; ^- v5 E$ y
004031B7 894424 10 mov dword ptr ss:[esp+10],eax4 ]* h" K1 F3 s" M7 B/ v
004031BB 8BC1 mov eax,ecx
( l+ R' |* t+ J+ X3 b) T004031BD BF 0A000000 mov edi,0A3 {3 g. k J2 O1 Q3 D
004031C2 99 cdq9 R% V, v6 f9 z$ [! u# D) D
004031C3 F7FF idiv edi2 b5 l0 q, ? a4 L! S0 S+ j
004031C5 8BC1 mov eax,ecx4 }: @, H1 B& e# `# u
004031C7 B3 0B mov bl,0B. G( i; }, W I" Z1 T e" V& m; Q
004031C9 0FAFC1 imul eax,ecx9 T3 L- w' W3 d9 i
004031CC 8BCF mov ecx,edi* a/ N+ n+ ?. G8 o, T
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
3 ^* Q: { G d2 s, g004031D2 52 push edx
0 B0 z' Q, @3 w4 I) {4 }004031D3 99 cdq, {4 |7 n# R' O2 @$ m5 C. c1 s8 U
004031D4 F7F9 idiv ecx3 T0 @6 Z1 }9 V6 \% L
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
% S( F! {/ M0 ?1 h& z3 d004031DD 2BC6 sub eax,esi& B$ z9 `: I& J
004031DF 52 push edx
( A6 q+ g( C% n004031E0 99 cdq) h) Y( a0 b9 g* O; z4 O1 u
004031E1 F7F9 idiv ecx9 D4 _8 T( R/ ~/ t9 e) }
004031E3 8BC6 mov eax,esi
" ]1 V# g0 Q' c6 R9 b# R004031E5 52 push edx
. R7 W# U2 S# J7 O9 \$ W' y: b004031E6 99 cdq
( s) g) ?, y* g7 X8 p004031E7 F7F9 idiv ecx
, f) `- j# \1 M004031E9 52 push edx
8 J+ k# W" \! }+ @004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
- i" N( ]6 w4 M& W" V, [004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
' _/ i' i- c$ z% @* r3 H# ?% x004031F3 52 push edx
( \" ^$ Q( U: X- D {6 y B4 i004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
; u" ] N: ?% j9 O( ~004031F9 83C4 18 add esp,18
" G& e. ]- R1 r% v5 h G. O004031FC 6A 04 push 4
' F4 x" c \/ ~: u& v004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34], n) F$ f( q& m" I) q; x0 e
00403202 6A 00 push 0# ~7 x, Z1 _" \9 m7 g/ I
00403204 50 push eax4 N! n4 O% s) A" }3 S
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% f. }: W5 {, l# g0 A5 q00403209 E8 D6530200 call qsr.004285E44 }" Q% m( @3 A. ?
0040320E 50 push eax( \ A" F# A! N+ }% ?8 Y- ?
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
& @0 ~5 V* Q+ Z00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C6 z8 S) e5 i6 U+ |$ Z9 y
00403218 E8 A7C30200 call qsr.0042F5C4
3 |- U, O7 _! a6 G) A! I0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
: q1 L) q" Q1 S00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
8 ^* q6 ?: x9 K7 f) u00403225 E8 61C20200 call qsr.0042F48B
/ J; @ q1 X: I, _5 ^0040322A 6A 04 push 4* M. i3 ]; F- C6 w6 G% F7 q) C% P
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]1 ]' C, b) I, ]# C8 E+ ]. H
00403230 6A 05 push 59 v8 R, o4 ~' c. I5 e. O: j4 } p: f3 i
00403232 51 push ecx
( M: T/ v: Z" l0 D% Z00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]8 ], g6 A. M1 D; \0 A
00403237 E8 A8530200 call qsr.004285E4
$ M( k# f% i. K1 _0040323C 50 push eax
9 d5 |1 i i' g6 g) y; }( O7 |0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
- U" w( f4 b6 ?5 u2 J( L9 X7 e00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D6 e! @4 c6 T H' y
00403246 E8 79C30200 call qsr.0042F5C4% G$ ~# o/ a" x1 i2 D' r
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& U: _$ L5 P% |, P+ u0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
) s4 o. Y- V" y. C: M/ ~$ B4 Y00403253 E8 33C20200 call qsr.0042F48B
1 {- p# M. |$ H" M' X; x5 A. |' B00403258 6A 04 push 41 O: k0 G* t9 c0 v* Z, a' x
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
+ _' u$ G! [- p4 G$ H0040325E 57 push edi
0 L( l* {; @; |# P2 V2 f G4 H1 l. R8 B0040325F 52 push edx! u/ x5 V4 W, Q
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ l1 O0 Z/ B% J5 S, P3 K
00403264 E8 7B530200 call qsr.004285E4
$ F! {8 H/ }- e7 y00403269 50 push eax" j! t5 E) R; M: {! \ X; `* ?; B
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 t8 H& i, C! c v" H
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
% I" g& D7 ~) A5 c4 L00403273 E8 4CC30200 call qsr.0042F5C4
, @: S/ b$ s( w00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& n* m5 y" V# T6 d" o0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
0 ~. x ]. P* n! @. [* K00403280 E8 06C20200 call qsr.0042F48B
) ^/ d) N4 u) C, X9 k00403285 6A 04 push 4* @9 ^7 e& @+ K! ^
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]8 _/ F9 O" ]4 x
0040328B 6A 0F push 0F
( Q# V' {3 h3 t' S K0040328D 50 push eax
/ J0 p. g$ e1 n4 v. E2 j0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]& A5 i1 q. H* `3 M- G) c
00403292 E8 4D530200 call qsr.004285E4
" R7 b' ?' ?6 r% `00403297 50 push eax0 U( K. e3 w+ L4 N$ S
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# n k) Y' V+ J+ x% j
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F! |0 J1 h: r5 W1 ~' B" ?) h( p
004032A1 E8 1EC30200 call qsr.0042F5C4# i; s( V- {* j. {, [) M
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 @7 I3 U! t- Z
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
% [1 `- E) Q$ V. U' Z% n G004032AE E8 D8C10200 call qsr.0042F48B
2 B0 y" X0 f. C' j# e( Y004032B3 6A 04 push 44 X: V. K7 N m
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
, C* n" l8 z/ |$ k K1 H! F. E: f004032B9 6A 14 push 148 b! @5 ] ?- I- x3 e7 F4 R* O: @
004032BB 51 push ecx: b. ]8 ~6 T5 r& N! J
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" \6 S& O) {% Z- l004032C0 E8 1F530200 call qsr.004285E4/ [% T3 h* V/ g8 |* ~6 {; l9 _
004032C5 50 push eax
3 g8 m' A! N4 R; H004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]1 v8 m5 m; f9 J1 e2 P% @0 }4 y
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10' q7 J3 I, T: C' k r6 d
004032CF E8 F0C20200 call qsr.0042F5C4( C; I+ u( `1 h; R
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]6 p4 i- \; p+ H$ `0 Y
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl! c* P* ?1 u) D7 h
004032DC E8 AAC10200 call qsr.0042F48B
( i2 z7 `' b! ^, h0 s0 O004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI1 A9 }" m: t3 I4 r& j/ F+ G
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
4 K! j6 @) ?; H! K+ H004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL, _, d! m1 S' G" ^( e& ~$ v
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
/ N) y8 T/ s! S% V* {; R( V004032ED 8ACA mov cl,dl ; DL送CL
2 A# V* d; Z: j ?004032EF 3AD3 cmp dl,bl ; DL和BL比较+ p7 W* r: Z+ z/ j' j) M8 |
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
( G4 s4 y; R6 P: R9 z% x' S O7 t004032F3 84C9 test cl,cl
4 S4 [7 Z$ |0 g0 X004032F5 74 16 je short qsr.0040330D' y6 F' _+ l- I( Z
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
" \! r1 X0 q# G7 `6 S3 N% H004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
# X k. g9 P9 L u004032FD 8ACA mov cl,dl9 R6 n" u4 g" L" ?* W, k7 |. B
004032FF 3AD3 cmp dl,bl ; DL和BL比较
1 u. E; a* j+ R$ h- c00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
8 a( Q1 n' ?* B% ]00403303 83C0 02 add eax,2 ; EAX加2% o2 D/ D" a& H1 `' v3 B6 t
00403306 83C6 02 add esi,2 ; ESI加2) i9 X) l6 u3 H
00403309 84C9 test cl,cl5 k8 Z N# Z' w% w# n+ N. n' l
0040330B ^ 75 DC jnz short qsr.004032E9
2 p. ?1 V! ^: a$ O4 m. c0040330D 33C0 xor eax,eax
- J) D7 a+ N: c# G, d. ~* G2 L0040330F EB 05 jmp short qsr.00403316/ n; K$ W0 n! }; ]; b! x$ a1 v
00403311 1BC0 sbb eax,eax
8 h: U* z8 r$ R- R00403313 83D8 FF sbb eax,-1 M# V6 C" x6 ^/ p
00403316 85C0 test eax,eax% ]3 I7 [5 e. }9 Z6 t
00403318 74 0E je short qsr.00403328
! g. b2 T& y' Y; W* A0 q0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
8 ~+ D( c/ f- }9 L* J0 D0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]; Q, z% Q, L! y6 {( Q- R! ~
00403323 E9 F0000000 jmp qsr.00403418
) Z; e7 T, e6 i- O4 r5 q8 I" U00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX, M% @6 Y- j0 s- V/ ]5 D% v7 c- K8 b
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]' [: B3 }. E; s) Z7 W
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
- g; O5 H" g8 H5 T1 R- a00403333 50 push eax
( t# ~; j# ^6 j0 v! E9 t) }00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX9 q( P6 g9 I7 e- s
00403339 50 push eax
* `, ~4 l3 t: f8 H% h/ X5 P: P8 ^0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
; C& ?3 L* d. G; w0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX7 i9 A0 H: z: b# X2 t
00403343 83C4 04 add esp,4
5 n {" F8 {& [8 n8 I/ h00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
0 ^' [* Y; K h- w00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
& {3 V; c/ y( B0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]+ ]( r9 t8 Y: u) r: D6 z8 O: D
0040334F 50 push eax$ R5 [% x, H. [1 z1 t
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
Z8 R% H% s- V; I6 w7 i00403355 50 push eax
0 c; u9 A9 P* q a4 [00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX7 }% h d7 h* q. K0 [8 \
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX$ s/ x; }( k8 y7 \$ O" O
0040335F 83C4 04 add esp,45 X9 F0 N+ g( i2 X. P/ S
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
% } n1 Y; w* v1 w) @00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]9 \# N6 L# K+ x( @3 O# ^ ^$ @" y
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]1 k- d5 N2 k5 N
0040336B 50 push eax
+ c9 Z* U" y) ?& y* N0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
9 w1 T. h: i; Y( |2 I! h00403371 50 push eax
" Z0 |6 I7 e% h; ^00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
" }% B' H; x! A' s1 Y00403377 8BD8 mov ebx,eax ; EAX送EBX
( G5 _1 a, \3 ^8 H2 Z2 {00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX9 N) ~! l5 N& x$ c" Q+ k2 Y O
0040337D 83C4 04 add esp,4- e" M7 c6 K/ X e5 B$ G& O2 U7 b9 J. y
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]: i0 j0 s1 m2 l! B# F0 j1 Y
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
! G$ |/ O: v. [( b2 E00403387 50 push eax
: o, J& R7 F I0 A0 c" [6 _00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX/ X6 A U B* G6 J5 h
0040338D 50 push eax
. O: m+ @. c( V9 q* F. N/ C0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX1 e. H" Q5 H& V, x5 @
00403393 83C4 04 add esp,4
: s. W z6 j+ _+ g. t; s0 R00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]' J% i# n. H5 V- O1 ~
0040339A 8BE8 mov ebp,eax ; EAX送EBP
- ?' B; i- W) r Q" ~8 w0040339C 6A FF push -1
2 E8 w# a. r% W/ ^3 Q0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
% \/ O5 j; p/ r- U9 B004033A3 6A FF push -1
) l! q7 J" Z3 e3 N# Z$ p$ k9 n004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
7 y0 {. [/ z8 J6 D4 x; V& s8 i004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
. |! V5 _, I' y/ W `7 w, o004033AE 6A FF push -1
, A; A+ k% ~( k5 t" [" d- h3 {004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX J5 b& u8 S1 B) X7 p* d
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX# `1 P; e8 M @7 \: d/ i
004033B9 6A FF push -1
) o5 p( D! o; k4 {/ \004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
' t! Z! [) `. Q8 ]004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX- Z2 B. u9 g5 f `8 j/ T+ `9 ^
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX* k* i+ C0 ]* N! t' s
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
) a h" v* j8 Y# Y7 K8 F! H004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX: i7 J1 _8 X% {
004033D7 D1E0 shl eax,1 ; EAX左移1位
4 f5 d$ {* ]* h004033D9 99 cdq ; EAX扩展6 t6 I) p& s; j; e8 `
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中) a! G, u: F4 I$ ~5 o
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较! G, D% l8 m" y9 [" g7 @
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）: K" \( j# F8 G. j6 A) O' o: k$ G
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
8 h% c7 b! E( S$ {- S004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
9 r9 A# D2 j. E) W004033E9 EB 2D jmp short qsr.004034186 q- P6 \8 w" q
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX3 ] m; n2 ?* c- {, I
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
$ y2 U, a) x, E6 u4 Z004033F7 99 cdq ; EBX扩展
6 v. {6 r# _+ }! G004033F8 33C2 xor eax,edx ; EAX和EDX取异或* w4 c* a/ S8 ?* ^2 u
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
) c6 }+ r) m0 _7 k8 l004033FF 2BC2 sub eax,edx ; EAX减去EDX
+ T2 Y' s }, V3 d00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
& N& o2 g! y/ j6 j. b" [00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
5 U) u; b; B& y! ?0 U# ~00403409 99 cdq3 s( z I& c- p3 H& ?
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中' }' D; t! M$ R1 o/ Q1 p/ e* K- L9 p
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX/ _. [2 ?& p- U% Q5 a( C f$ a
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
^4 b* S& H- G00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）1 s, ~% }6 w* v; T" D0 |
00403418 E8 6EC00200 call qsr.0042F48B ;
8 v9 [: h1 V h! G7 e8 j0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ v- z# H, s8 I$ ]5 O00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9+ p4 B- y) d7 x' i; e7 B3 `6 |
00403426 E8 60C00200 call qsr.0042F48B1 d2 I. ]& V$ }, D$ I. C
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
1 i& m3 V* C( f2 f0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
: A4 x$ P6 N( R. a( C00403434 E8 52C00200 call qsr.0042F48B, F/ R" G1 I. s9 E
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], P' f3 ?. T0 k! n5 ]! B
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
8 ]) ~/ D: \6 E4 ]9 y+ L00403442 E8 44C00200 call qsr.0042F48B
! W8 h$ F6 p2 ?- {5 `00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]: l7 Q, l# |* F8 m8 I/ T
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
. l {9 ]4 i/ G# h0 ?& [00403450 E8 36C00200 call qsr.0042F48B2 Q8 l* i7 W; d# p) Q7 c
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
% B0 o5 P* L2 I; t7 e00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],34 I! ^9 k* u3 O' d2 L; X" a
0040345E E8 28C00200 call qsr.0042F48B; ^4 c& v2 G7 o* \8 J
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
0 s: r! @4 R3 o00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2) X8 g( n+ R: I* {6 y- ?3 V
0040346C E8 1AC00200 call qsr.0042F48B
- a4 n$ L, y' M K4 i, x00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) c# w1 a+ d* Z8 R& [& f: Z
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
( a3 D- J* e( k0040347A E8 0CC00200 call qsr.0042F48B
6 \+ r1 \6 J, D& l0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]$ ^% H5 V1 B. k& }# _$ ?
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
9 T" s6 J+ t# \00403488 E8 FEBF0200 call qsr.0042F48B# g0 t9 F/ L& ^$ {
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
+ E& q8 |/ N% R% [% j: W& ^* l7 \* x00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
2 {& U4 `+ S% _9 q5 c00403499 E8 EDBF0200 call qsr.0042F48B- v) L1 H) w% C: L8 H$ E
0040349E 32C0 xor al,al ; AL清0
( _8 x2 T/ F, X! A004034A0 E9 88000000 jmp qsr.0040352D# X. z" d9 x1 j* G
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~- v5 R! v- {: P, [/ L& s, W# a: O
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( O, W. m1 |9 F4 U5 A j
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9+ Q# L3 h0 L0 R8 c; p4 I+ U$ A
004034B3 E8 D3BF0200 call qsr.0042F48B$ X7 Q* y% N+ e% C, E. H! H, a4 _
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# G% b+ ~ u/ c! P1 s
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],85 }8 O4 h# f1 {
004034C1 E8 C5BF0200 call qsr.0042F48B" F8 s4 [% L! ]6 C u: T( Z5 C
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# ^* T! b/ k2 c
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
! P& \( X( j; w+ r4 m: v2 s5 ?( I004034CF E8 B7BF0200 call qsr.0042F48B
) ^8 n8 ?2 { F1 O+ ^( o! r4 s004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
) f h: \ x6 O9 I; F: o1 v004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],60 \8 _+ t4 g, g6 W
004034DD E8 A9BF0200 call qsr.0042F48B4 o5 _. Y8 v# m
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]/ R0 Z1 \9 { {+ l- T g# U) U
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3/ J/ `9 S0 |2 B# f7 Q
004034EB E8 9BBF0200 call qsr.0042F48B
) C0 E4 n* P" X2 J004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]0 U- \% A! i7 J/ G* n
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
( T. v9 S: Q: t& x$ J! F- p004034F9 E8 8DBF0200 call qsr.0042F48B
# ~( M" t0 H& E) P9 v2 a. v4 |004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]: [0 G+ J4 v( j$ r
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
. |: ^) X; o. y00403507 E8 7FBF0200 call qsr.0042F48B0 c1 `' k, B2 R' `9 m6 W
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]9 ^' r+ ?- ^; ^
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
$ H5 Y/ Z+ y! p9 F00403515 E8 71BF0200 call qsr.0042F48B
4 _4 k3 S" E! }* \1 W+ A$ B0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]9 W# F! X4 y5 h+ G
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-18 y1 |7 D& F- C
00403526 E8 60BF0200 call qsr.0042F48B
) a: }( ]7 \- [* R* | A0 Q- d0040352B B0 01 mov al,11 z7 @) Q7 B1 C6 C5 a
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]1 r1 e; e& X2 e1 A
00403531 5F pop edi
" F, J' T) ?* C00403532 5E pop esi
0 s6 {; B( o' P% f: G00403533 5D pop ebp# N" R' _5 ?' h8 R5 C
00403534 5B pop ebx; h' M4 {9 O; A7 B
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx& ` d0 _4 h$ q: F* w! g
0040353C 83C4 30 add esp,30
3 x1 | I* q" j- \( X& J0040353F C2 0800 retn 8
! C# H9 k3 c$ O9 D--------------------------------------------------------------------------------
3 f& G* a7 N1 O4 U* K, D# i【破解总结】* Y4 A! `4 Y) W( {: `
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^" b9 ^4 H; T1 {# a
用户名：yijun
y) R& U( i. v L0 w% Y! b6 a注册码：4893*7777*3726*7777*0529
: J$ u% y, J: J: T--------------------------------------------------------------------------------
% ?* f. i4 E5 u2 N" P【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡