|
|
|
【原创】破解Quick Screen Recorder+ j9 C4 D5 t; l G# e3 G
【破解作者】 yijun
( O ]" |0 o' L' ~4 J4 s) W4 d: w【作者邮箱】 [email protected]% R$ O- R6 t( O7 W2 R
【使用工具】 OD,PEID: Y8 g8 n2 F# W3 Q( k* \) [
【破解平台】 WinXP
" a5 A) n3 I9 q; y8 p【软件名称】 Quick Screen Recorder
+ n4 j: Z% c+ F【下载地址】 天空
$ U4 v v2 F5 A- S4 f* {6 j% d: L3 C【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
# ~+ Y6 _4 F+ H$ {/ K. @- b( _1 p【软件大小】 540K
- t" \( e) D- R+ H' U2 p, {0 Y4 U【加壳方式】 无
; t2 b' k: J% X# s* O5 K【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）! T: ?' X; F( R( }* V1 R$ \! v
--------------------------------------------------------------------------------
# n5 k8 ?6 k& w+ R【破解内容】! A/ l; W2 A, s4 M7 S* |
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
* j: h5 q X( P00404C69 55 push ebp //在此下断
( `2 \4 R& s/ F. H9 }* Z$ l4 y4 b% f00404C6A 56 push esi
' Y9 Z" G: @' x; q( t* t. j00404C6B 57 push edi
( \$ S- \9 H& P5 y5 ? u. k00404C6C 8BE9 mov ebp,ecx
* k% E X$ ?. S0 p4 V" ], B2 E00404C6E 6A 01 push 1
6 d. d4 [ J( |+ O00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
9 ^4 s7 j! w( u. ~' b00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]$ S. Z- O6 K" Z j0 ^
00404C78 8BCF mov ecx,edi8 I: A/ B4 @! S, s4 X
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
7 u# z. C1 C1 k5 p& j00404C7F 8BCF mov ecx,edi. n& A) y9 R( |+ Y0 ?6 C
00404C81 E8 A73E0200 call qsr.00428B2D
' K& `# ?7 H$ A N4 I3 W, V+ ?00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
8 ?% y' h& W- M! L/ i E" n00404C89 8BCE mov ecx,esi
8 f! n# [, Z* }00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX0 a6 N+ }+ x) S7 `0 |/ ^5 t
00404C90 8BCE mov ecx,esi6 p: v8 a' p8 L0 k" V5 k3 \6 _2 O
00404C92 E8 963E0200 call qsr.00428B2D
( r( a9 M+ l: x. h- U4 ^00404C97 8B06 mov eax,dword ptr ds:[esi]: m! L2 U( N2 F% Q# M
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
0 J5 L' i/ H6 P; w7 T+ b00404C9D 7D 26 jge short qsr.00404CC5, {8 N0 ^) B4 z# {
00404C9F 6A 40 push 40
; q6 b' c& S8 D( ~0 L00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
3 Y! o! _: f4 C/ I3 g00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
. K- q8 s, y, w& h) u" r00404CAB 8BCD mov ecx,ebp
! L$ R* t1 |, _& ~% O00404CAD E8 C3840200 call qsr.0042D175
! b& }/ j" B2 C1 i6 b$ c+ i00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
/ N( K+ ^9 s) H- y9 O( G00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
8 n# }& S9 e0 f# ~$ P; G8 O00404CBD 5F pop edi+ p" Q# j8 K+ E' U; P. y: v
00404CBE 5E pop esi5 a: o2 l e2 h9 ]( |8 E7 A+ g
00404CBF 5D pop ebp
: r# Y5 I! Y) ^# @4 G00404CC0 5B pop ebx
. J5 R5 h+ F: M00404CC1 83C4 18 add esp,18
: z6 P7 _( G/ e. x& { O7 \00404CC4 C3 retn
+ \0 U9 w) U# K: Q00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]6 ?3 `# p) b! o6 U' H. [
00404CC8 84C0 test al,al
, w7 g2 Q, l, C' N+ g1 K1 j h00404CCA 0F85 1C010000 jnz qsr.00404DEC
( K* ]5 c8 ^# @ F00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]2 l+ j: R( j2 M: d A+ M w- E3 P
00404CD4 E8 87E3FFFF call qsr.00403060
) L6 c; Y6 _7 _1 r; N$ A1 i) P& q! V00404CD9 51 push ecx
% J' `: j& Q. D) S4 t3 j00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
8 T/ r' h1 s& [$ ]' d) C: a00404CE2 8BCC mov ecx,esp
7 a* B7 L9 Y& O; F00404CE4 896424 14 mov dword ptr ss:[esp+14],esp$ D" `0 P( l2 n% ~' \4 e
00404CE8 56 push esi
4 |% ~4 y$ w# R, o2 x3 }00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
& O. `6 W( Y- q! v+ ~00404CEE 51 push ecx: S/ Q5 i+ S8 y9 L& d _1 I9 J
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
5 K' q# I! e3 {" A7 P00404CF4 8BCC mov ecx,esp
6 ^0 c2 t+ H+ P; Q Y4 I/ y8 j00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
2 B8 ?1 H0 b6 o2 U2 P" E4 t00404CFA 57 push edi( O T) O6 w. @
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是09 e3 w- X' Q1 U1 }0 b) S9 K
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
" N' A2 L( o+ G r! f) A8 y00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0* O' q! m" J# ]) I+ @. Q; u y
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
) {5 I) ^6 ~( h- s, n+ `% L00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
2 s: M0 o$ W% P0 J# F00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
4 b& Y- a( R( w% f& x9 \7 a0 Q00404D12 6A 40 push 40
$ E' _. ^# [* {. I3 F5 l00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
3 @# P5 Y! h3 g8 F4 q) d) T00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
+ e5 \8 D( W% |) n( D" P00404D1E 8BCD mov ecx,ebp7 P8 d& H8 v7 x% m/ j& j
00404D20 E8 50840200 call qsr.0042D175
2 _! ~+ i, Z- g9 T2 r00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; I. L/ R) _" a0 {
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
2 [8 j" N a5 M* b8 R0 J2 Y00404D31 E8 5AE3FFFF call qsr.00403090! w" E) E+ r/ M: O
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
$ {, U8 j7 T, L+ X00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx& g) |1 {& u( b' Y; s1 y
00404D41 5F pop edi6 C( y5 P2 q4 }6 w7 f! {' ?. [
00404D42 5E pop esi
6 M2 g0 q- L2 N00404D43 5D pop ebp
4 \ U5 _# L& k( G: J00404D44 5B pop ebx
" D% {4 A; O0 l4 A% n: j00404D45 83C4 18 add esp,18% V% e d* W+ m4 Q& c% z, u
00404D48 C3 retn7 H+ x& ]. p7 @$ I' o3 j" r0 Z
*********************************************************************************************************************************************************
! I$ i# q! ?; V( T# Z! F跟进00404D09处CALL来到：
! L6 d4 ]" K% j1 R% l# |% r004030A0 6A FF push -1 //一路F8下去~~~~
2 h; D' { R2 |1 I4 F004030A2 68 C88F4400 push qsr.00448FC88 s2 x! ?' n2 q& s! Y
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
. D& e. b! ~ O, D2 ?3 z. H5 f1 r( T004030AD 50 push eax
3 r( @3 z0 a7 s. ~2 U. ?004030AE 64:8925 0000000>mov dword ptr fs:[0],esp7 W* Z' t+ D# N% C9 [- K1 S
004030B5 83EC 24 sub esp,24
/ X; F6 z' ^6 ~9 s5 R5 W* o004030B8 53 push ebx
8 E% \9 b8 D8 V2 B0 C( B; ] ?: O. }004030B9 55 push ebp
$ R# W8 m: F V1 W* F004030BA 56 push esi/ l7 A1 \( C3 {: |" I1 K( v! x
004030BB 57 push edi
8 V! Y. c! k8 T004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"" |" t' s2 N$ B: p u: J7 p
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
# B9 M% t5 B& W( Q/ r' R+ Z004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
3 u2 [' C9 {/ U7 r Z004030CD E8 27C40200 call qsr.0042F4F98 X* v4 P1 x5 D7 K6 c9 M
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]& ]: V" |6 v0 E" {
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax2 a. {+ v+ k1 l7 Z* {% o
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]8 R. j8 x. f4 l* A
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],35 T* f) s' w4 b/ w$ l5 A4 H
004030E4 E8 905A0200 call qsr.00428B79
2 ]2 i0 F& E6 Y7 q! S+ ?4 y: r! c7 h004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
0 B1 \: V1 b& H5 t0 m3 ]1 A! |004030ED E8 3B5A0200 call qsr.00428B2D$ ^' ~0 D; H, C) z2 j
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
1 P% i( R/ ]- E# k6 z- H2 F004030F6 E8 7E5A0200 call qsr.00428B79
$ e5 o4 u1 d" ]1 d004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
3 Z& h( R6 y1 L- t/ l! f004030FF E8 295A0200 call qsr.00428B2D
& ?1 _+ J% j, L% A0 `. t00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]2 X( }, e, C! B
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]) m& X' h9 d6 O
0040310B 83F8 02 cmp eax,2
0 o3 X' [+ X7 z7 z3 O8 p; d0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳, J9 [( ]/ ?7 C" ?# k( p7 q8 `2 v
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
3 i6 q* t U8 P# h" n00403118 837A F8 18 cmp dword ptr ds:[edx-8],183 o" \* @3 e( k! c3 i2 B6 Q! d
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
' a- W- {* |! _ y g- J$ m9 }( h* \' j% b4 f00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]% U* k v; j; X, U0 |* J$ N
00403126 6A 01 push 1( l X; L% ^: w/ ~" u0 N
00403128 50 push eax3 p# }0 i& \) P1 @7 j q
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 m8 F3 r$ J5 s' s0 n0040312D E8 C4550200 call qsr.004286F6- N, [' w+ U6 a! F! M5 d- m/ m
00403132 8B00 mov eax,dword ptr ds:[eax]
+ n' \+ V- l, d* ^9 S* [00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
_; G8 u, [8 S00403138 50 push eax: C; l, r% { X
00403139 C64424 40 04 mov byte ptr ss:[esp+40],41 V; [" r6 f5 K* y+ R8 v
0040313E E8 4D560200 call qsr.00428790
9 Q( Z0 K: I& k# }4 R4 w3 C00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) ? v! H* i; e" W* Z0 p' Z
00403147 8BF0 mov esi,eax
3 \, h( V8 b* j# @& q8 w6 D3 [00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],35 N3 ?! t7 j3 U, G7 s) ]
0040314E E8 38C30200 call qsr.0042F48B1 @2 i" d* x* U; p; U, X
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
* [1 @% [; q* X/ A. _* x00403156 B9 3E000000 mov ecx,3E$ N3 q& E, M; s% e Z: X
0040315B 99 cdq# r# B+ z3 G. j7 a2 }; i) O
0040315C F7F9 idiv ecx
3 D, x# b% F/ U) H0040315E 6A 01 push 1
6 o. v$ g4 W( O9 W: }5 @00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]; M. d0 m6 m. {
00403164 8BF2 mov esi,edx4 M6 S U1 v; P% I" F
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
0 V- k9 v! B3 E9 N! `0 L# n! ^$ _, Y3 H0040316A 52 push edx
7 J8 l8 L1 Q' ]7 [0040316B E8 0A550200 call qsr.0042867A
; K% I) a) @9 `! c00403170 8B00 mov eax,dword ptr ds:[eax]3 Y% `. n/ q7 @! m
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]# E0 A1 b1 M8 A5 H9 s8 V0 |. N6 k
00403176 50 push eax2 }+ b9 n( Y* ]# Z/ z4 O, h) Q
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
: r9 C- T5 S: E% S6 [" L0040317C E8 0F560200 call qsr.00428790
% X8 i% g7 Z4 T00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- X. @! u1 `: u+ q: s9 m00403185 8BF8 mov edi,eax9 N5 {/ q( L( p- N8 N% \
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
a' C& P7 O/ @ Q5 N, A0040318C E8 FAC20200 call qsr.0042F48B
' U( \1 u3 _! K- V0 o- J" D/ Q1 X00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
% C5 P- y, [9 y2 G00403194 B9 3E000000 mov ecx,3E% T3 e$ b1 A0 a9 Q5 d% i
00403199 99 cdq e9 l) @$ P7 j; r
0040319A F7F9 idiv ecx5 z: Z3 l9 J* G4 b1 l, i1 B
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]& a% t9 h( b5 i( N. X+ x
004031A1 894424 28 mov dword ptr ss:[esp+28],eax! @3 H/ _9 c: k ~
004031A5 8BCA mov ecx,edx
9 N0 o; ?- c+ D. x2 b004031A7 894424 24 mov dword ptr ss:[esp+24],eax
& X! |4 W3 L4 V6 c3 Q004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
# E3 ?4 F5 R0 f004031AF 894424 18 mov dword ptr ss:[esp+18],eax$ c8 z: F4 H" a" X3 ` M n- s
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
/ m2 I+ Z9 A( ^2 E( s+ x; D004031B7 894424 10 mov dword ptr ss:[esp+10],eax
0 e0 Q- o' y3 j4 f+ |004031BB 8BC1 mov eax,ecx
9 u) x& h) C( O ]004031BD BF 0A000000 mov edi,0A
7 O8 ?) K p4 z8 ~& e4 _3 d$ w004031C2 99 cdq; ^0 Y: v6 _2 P0 Q7 r
004031C3 F7FF idiv edi
& z; z7 f! R8 C1 S% _004031C5 8BC1 mov eax,ecx
W, _! R6 M% H; p$ n004031C7 B3 0B mov bl,0B
' q7 {, y4 e& n3 j$ b9 J004031C9 0FAFC1 imul eax,ecx; w( b' x( D/ c& Y% E8 R3 d
004031CC 8BCF mov ecx,edi0 |4 J5 z' F9 K. ~
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl& u5 g0 O; q9 P2 @' w
004031D2 52 push edx
: s7 `; n5 ~$ z$ {3 \004031D3 99 cdq
% M2 q/ ^9 u, K* A5 W004031D4 F7F9 idiv ecx0 @" C8 h# z- _4 s
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
. |& W, t/ g, z( |9 _2 i004031DD 2BC6 sub eax,esi7 J, x3 b( F0 m% ?9 Z
004031DF 52 push edx j! J# `, l6 x/ C( B
004031E0 99 cdq* l- F1 R) K+ z- `% T, z) {
004031E1 F7F9 idiv ecx
" @2 w5 ?! i1 K1 y, |/ ~2 m: s s! n004031E3 8BC6 mov eax,esi
% Q5 e" Q8 \" u, E5 I3 O% z" |, j7 Z: Q004031E5 52 push edx
/ Q2 t& S- h4 c) k* ?) J004031E6 99 cdq& i2 f4 {4 ?( R! I
004031E7 F7F9 idiv ecx
% A( c) r& M; J8 I: p004031E9 52 push edx9 M0 J+ |* e+ M4 |+ Z' ^4 u
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
; }$ U& S; a! o6 V& |2 j# F004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
8 V( c4 w3 h2 L: i! i; ~3 Q; l* {5 p) v004031F3 52 push edx
# [) t3 |7 r9 H; a! \* P5 H0 W004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
1 g$ d3 P& z4 f9 [3 f3 _004031F9 83C4 18 add esp,186 m4 @$ S, V9 ^
004031FC 6A 04 push 4
3 Z. u, F" E0 _6 {004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]5 d6 I& x. g( ^8 D1 a. `% \
00403202 6A 00 push 0# m8 \, l' V) A8 j( \; D
00403204 50 push eax
1 k% B% b J, u* N00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 o$ |- ~6 k9 C! n/ D- Y# c00403209 E8 D6530200 call qsr.004285E4+ o V, ^) _( r E7 B
0040320E 50 push eax7 T1 C; h, Z7 Q% E8 L" S
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
^( D! ^2 @+ j7 s00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
/ B @# p; b* l3 K* ]2 F00403218 E8 A7C30200 call qsr.0042F5C4+ r5 I( n1 [/ o( z
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' x, f) @$ h- f
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl$ Q9 v" n# o. _3 Y- D. T+ q+ O
00403225 E8 61C20200 call qsr.0042F48B
% u8 K9 V/ R% g' K) N4 Q9 p+ a7 k, I0040322A 6A 04 push 4& ]/ z# A: y) q( }. H" u0 n& v
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]* E5 `, V i! @* y# b
00403230 6A 05 push 5
" R. W2 q! j1 e4 H/ P00403232 51 push ecx3 _3 h/ I2 |" f" o2 B6 V8 u/ G
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]$ B+ K. v; l& R% M* z5 ]" [
00403237 E8 A8530200 call qsr.004285E4
4 {# S# L/ m3 k0040323C 50 push eax
4 G/ P3 A/ i+ @- g& E$ a" ?0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
3 @! g3 Y7 G+ f* {- a2 K4 `; L/ z00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
0 y h3 B1 c; `00403246 E8 79C30200 call qsr.0042F5C4! ]" G% O5 N5 v2 N
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' [5 o6 Z9 c# D: J$ q; |$ Q0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
0 r$ ?) r8 Q6 d- O5 l8 `: A4 V00403253 E8 33C20200 call qsr.0042F48B
7 n) h2 \( a& v00403258 6A 04 push 4
) x/ \ R! i7 g9 A$ a: p0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
! d3 O! E, N( ?$ K# y/ w0040325E 57 push edi1 q; \' P5 a+ j. Y- r' q2 B
0040325F 52 push edx
- m4 ?# K$ u4 A6 [00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]0 g% g+ C* |2 N5 H0 X* T
00403264 E8 7B530200 call qsr.004285E4
% q1 V7 S8 D/ `% ~00403269 50 push eax" V, v" d4 s+ i
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], ?! E- k, b# }& r2 H7 [
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
( p: a4 U3 v$ _0 J00403273 E8 4CC30200 call qsr.0042F5C4% x) b' [. F F1 f
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 d7 M; i7 U) j4 g; O0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
: \! ^7 @# e2 r p1 v' t9 ]4 Z00403280 E8 06C20200 call qsr.0042F48B/ _* b" ]0 [1 R; m+ D
00403285 6A 04 push 4
: ^$ V% U3 u0 {. P6 a00403287 8D4424 34 lea eax,dword ptr ss:[esp+34] }4 ^; y& _9 o/ t' B
0040328B 6A 0F push 0F- C/ X" H& m. H3 d+ ^# N$ z% z
0040328D 50 push eax
, H& | X9 b( I& L) a, t0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
4 x3 O( o, x* E7 }) M! u' ?00403292 E8 4D530200 call qsr.004285E4
- H! u; F* e' Q4 u( V$ I; l00403297 50 push eax* o, L& l H# d) A% {
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]. U: a" M2 l5 ^
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F7 ^6 I* G- l" V# {1 m/ s; _
004032A1 E8 1EC30200 call qsr.0042F5C4
( u6 G& C3 v/ E004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 k0 J& a# D! J
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
. J+ y X' @9 [5 D+ N8 `004032AE E8 D8C10200 call qsr.0042F48B
% I" U9 ?1 v; L! w8 O004032B3 6A 04 push 4! Y$ {2 b" W$ m R4 I# z+ [
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]' e5 {( V/ j0 {8 W) n" F5 @
004032B9 6A 14 push 14: S+ A5 X; k3 E' b6 t
004032BB 51 push ecx
; g) T5 T, k ]5 y6 ]1 A* r! \004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 {$ E# E+ L+ y1 B8 c004032C0 E8 1F530200 call qsr.004285E42 g# ~' W3 p& _. ], _/ E
004032C5 50 push eax
+ l: ?" ~; N7 i7 ]8 l004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
( `7 v, o: f9 k; v, [004032CA C64424 40 10 mov byte ptr ss:[esp+40],10- J6 x; N, @7 X
004032CF E8 F0C20200 call qsr.0042F5C4
. p# s7 Q& O6 y9 I% |004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) C& g' Q% Q4 h004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl; N) k7 n# U- E& A9 C' N9 s H
004032DC E8 AAC10200 call qsr.0042F48B1 V. t P! S9 _ ^" q
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI0 G5 j/ c/ G0 J+ t7 K, [& M, j
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX9 t) R- Z: E( J9 }, B
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL$ ^8 B, ^# r/ W3 z
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
0 O7 X' f) F& Y! K5 f1 p: p004032ED 8ACA mov cl,dl ; DL送CL
6 f2 p ?' U; X004032EF 3AD3 cmp dl,bl ; DL和BL比较3 x6 R+ M, X5 n" I) M3 J
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
0 z1 u q6 `: H8 |" P7 T9 H$ w004032F3 84C9 test cl,cl
/ z3 u5 w; x% [4 E004032F5 74 16 je short qsr.0040330D0 Y# }# `: V& {8 r, W' I+ p- A
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL) |) m' f+ n* a' m
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL" l% B( P8 h9 | t7 s
004032FD 8ACA mov cl,dl
1 ]. ]# `+ ^- e9 L% o9 A) k004032FF 3AD3 cmp dl,bl ; DL和BL比较
( _2 |5 E3 `; W: v: z5 F00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
' n: R4 j( H2 D; @' e5 V$ }00403303 83C0 02 add eax,2 ; EAX加2( l* J7 P! d, V' H
00403306 83C6 02 add esi,2 ; ESI加2
7 l6 T! z3 B1 G2 q, ~# i00403309 84C9 test cl,cl
, u3 ^5 x) h o1 S0040330B ^ 75 DC jnz short qsr.004032E9
+ R% R; U: K& [3 J- G& H. }0 l0040330D 33C0 xor eax,eax! Q9 B$ }2 }% t5 y( s, o3 o
0040330F EB 05 jmp short qsr.00403316
" l4 k, c8 g* x) i2 S( |00403311 1BC0 sbb eax,eax
. J- A) Z+ I, h+ r00403313 83D8 FF sbb eax,-15 n9 V! G! r/ ]8 s9 c
00403316 85C0 test eax,eax- M W9 I/ S" P8 H# G1 J
00403318 74 0E je short qsr.00403328
, `! |- r6 y" a0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
/ }* S4 D# a9 ]% J0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
, C; q+ z" K9 w/ s1 U q3 \; R00403323 E9 F0000000 jmp qsr.00403418
, R; [2 v9 }% ~5 K' X00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX. X$ Z0 l8 ~+ [9 D) n5 m+ n( g- H" M
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 _6 r- T A2 X/ u5 I! ^
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]: g$ `3 w, q! Y: W) p- W L
00403333 50 push eax
" J2 u. M- y5 i7 K4 }2 f00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
/ `6 y% v4 C7 C00403339 50 push eax3 p- A6 I3 N& @3 p) Z" E- U
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
, X1 J! f# `% g$ z; }, X/ R0 E; U0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX W G* ]; ]2 B) A/ w5 M. i0 m
00403343 83C4 04 add esp,4$ a) g- H2 I5 A: |3 |
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI6 K9 O* Q9 [6 Q/ S
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]9 G+ b9 C* a; T: w% t8 F8 u
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
+ }! K% n% S# o8 H) F$ [ X5 g0040334F 50 push eax4 U( G- x3 @% e" \9 R
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
, l# R! p5 Q$ |* X. I: W00403355 50 push eax
; z- D5 k! e! A00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX+ L1 e2 Q+ K9 x& V( ?, P5 _1 |# \
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
" Z U# H6 B- @' \0040335F 83C4 04 add esp,4, J! S& w! j+ b; K6 F# u
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI3 u7 F. [8 D% f6 M. K
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]" X; R2 e/ N+ @+ g. a, w! v0 N
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
9 h9 M( k8 X* {0040336B 50 push eax% c9 J7 H; F7 v( e7 M2 r
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX& h& H( D' c4 l/ _$ l# Z2 E
00403371 50 push eax( b8 G j- J* X w
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX- J/ V9 T) Y8 c6 G: c7 Z2 u1 ~+ f9 n ^* T
00403377 8BD8 mov ebx,eax ; EAX送EBX
3 k3 L/ l, ?( j5 j. z00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
: a: [' [ R' c0040337D 83C4 04 add esp,40 Q/ [0 E7 i# Z. B' g8 L/ ?' `
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]: e n& H0 i! h* v- b* k
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
) I' B* k) I9 M$ x00403387 50 push eax- ]7 Y" I1 j7 w
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
( `3 ]8 y2 ^6 `, b* D0040338D 50 push eax) E0 C: t9 r# P5 z+ E) ^
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX# C4 C- M8 c) W% W1 T
00403393 83C4 04 add esp,4
0 p" a( x( s# a8 s7 x00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
9 @6 I/ Z/ L5 Q2 x0 Q0040339A 8BE8 mov ebp,eax ; EAX送EBP
* h1 w$ l. M$ |: m0040339C 6A FF push -1
3 ?: U. ^. U' t3 i d, v0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX: [9 L( I! c& G' k0 _/ A4 {
004033A3 6A FF push -10 X$ \4 r6 a3 O3 W# a: \, F
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
8 h. V- d/ a% `# P- N& T1 {004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
& s# v* |* q7 N3 K004033AE 6A FF push -1
% l# o9 W% ^/ e# \7 Y3 t K' g004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
; x/ s' b; P1 f6 C3 ] U/ K) ]004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX3 h. y$ i% G3 X
004033B9 6A FF push -1+ g5 I: W5 ^+ l/ ]
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX _. C' k+ }8 _. G! G: J/ }3 B
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
, B+ _1 T% }$ ~# ]004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX& X, e6 m$ ~" A: W
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX! G3 y# ?3 P9 k- T, a9 i
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX) e* z" }6 @' U. n
004033D7 D1E0 shl eax,1 ; EAX左移1位* ?9 `; m9 D3 I& [5 M# L
004033D9 99 cdq ; EAX扩展
- O$ R, }2 {1 Y: q' v3 S) ]004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
! h- u, ~- v9 K( }004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
8 u: G1 w* ]; j# Y! i f004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）& |* f) w9 f3 a
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
( c( n) H' o& N: c: l4 |% x004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ O7 p* I% O6 w% }/ L004033E9 EB 2D jmp short qsr.00403418
8 b I2 M' |8 b5 B$ b: ?" b5 ~/ T5 e004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX! N+ Q# ?* P4 ]1 v) g; E* [1 M
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E24 m( o. i, p4 a: @9 v) c& f6 q
004033F7 99 cdq ; EBX扩展
$ D* ?) b% S" \# y9 ]004033F8 33C2 xor eax,edx ; EAX和EDX取异或
& a; _4 }) h6 T* {9 f" ~% C; r004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
y8 P+ G2 J3 Y2 c- L- d004033FF 2BC2 sub eax,edx ; EAX减去EDX
1 e+ q0 f1 j0 r( H* w& `$ n00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
& [$ c$ ?3 ~/ O2 i8 p8 r. h00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
+ e5 N e2 T) A$ ^! r& j00403409 99 cdq
0 [2 K+ S: g4 [+ _7 n( D+ h; Z% {4 z0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
' c! K; _: {1 }# N% Q0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX& s7 L. E; v5 D' B1 \+ O8 P6 n
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
( [" v$ q( |/ ]% [1 u |% i00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
A( t1 o; O+ ?# \) q00403418 E8 6EC00200 call qsr.0042F48B ;
3 ?/ y/ W, o' W. y/ F" y0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
! _+ g" R( y* K! {* Y) F2 Z, i; o00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9* G" f J# V! \% C' N# }! t
00403426 E8 60C00200 call qsr.0042F48B
, s+ T" M8 C- W2 q0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
) f. a: a2 |% ?3 U! }" Q3 ?0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],85 I; ~8 j$ C5 |
00403434 E8 52C00200 call qsr.0042F48B
: j( I: t6 g9 y& a00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 b4 k; `3 I8 Z. l- K
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7- M2 q3 ~8 S* f; j+ k
00403442 E8 44C00200 call qsr.0042F48B/ D3 ?- ?, z9 G0 }+ t9 V
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]2 S' v( h( y8 O1 g7 s0 U; D
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6- q6 i+ E; K& W4 f9 S2 f7 Y% J* m+ p
00403450 E8 36C00200 call qsr.0042F48B! S n* Z" d; o7 q9 M5 W# a7 ]
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]* }0 V3 {( o2 |6 a
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],32 {7 S; K+ \6 q( Y+ C. H8 @3 I
0040345E E8 28C00200 call qsr.0042F48B9 w5 F4 T2 ?0 V7 p, e
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
3 R7 v2 U. Z/ ]7 V) M+ m; Q6 g00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
2 {; ~' f/ a# i& W P0040346C E8 1AC00200 call qsr.0042F48B3 i2 c! d) q" `8 c$ M
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]( b1 w, {2 k+ | _' h
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1% n( B) C! f+ T1 X8 C5 {
0040347A E8 0CC00200 call qsr.0042F48B
2 D# c# @6 ], [2 B3 M+ N5 p0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
1 A9 u V$ s2 h$ y k* t00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
) E7 E* q0 \+ A& Z% e' w1 t00403488 E8 FEBF0200 call qsr.0042F48B5 ~) }! Q" i! p$ }
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]* R" v. o0 s$ W* E" D
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
9 @! N: i N% B' M) q ?2 q00403499 E8 EDBF0200 call qsr.0042F48B# y5 A$ D5 ?1 ^9 f) @: C0 V0 c( t
0040349E 32C0 xor al,al ; AL清0
3 C" j6 [ `8 ~% }) q2 M) k# y004034A0 E9 88000000 jmp qsr.0040352D T: [. ]+ p; o( a$ x$ J
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~7 ~* f. X: `6 `& d, ~6 Q! z
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ |. G1 Q9 _8 z2 y: e) v
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9( h+ M9 w D" W! \+ Z* i' T5 M
004034B3 E8 D3BF0200 call qsr.0042F48B
9 q6 E0 Q! {) `004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
0 h" q. \8 W5 d1 ]8 C8 l) w004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],88 z2 N9 L5 W$ @( f: |; \: A! Y, ]
004034C1 E8 C5BF0200 call qsr.0042F48B
6 V! {! m! Q/ v/ ], c- F; w004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 P1 }% P5 ^0 d2 A/ R/ U: I; Q
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
( Z! x: T7 M- `: ]7 S+ t$ d004034CF E8 B7BF0200 call qsr.0042F48B
' ?, r3 Q. l, {0 y# F) C004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]4 m" H- ?# | c' I, Q8 }
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
. J: B- A$ ?( }" S$ g+ i$ m* A004034DD E8 A9BF0200 call qsr.0042F48B
1 r- {9 D/ P( |0 Q, n: d004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]' F- k0 b7 d' N& z
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3! Q% ~, Q' I& l% v" x' Z' c
004034EB E8 9BBF0200 call qsr.0042F48B
& N: }) |, I! Z& ?7 n# J( A004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]1 K! h! \8 Z: ]$ V
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
& Q* T6 {, c9 y( M+ C004034F9 E8 8DBF0200 call qsr.0042F48B' Q" @# L" K, B4 J) |7 ~
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]& |& ^* i+ d9 W7 C
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1& a; j) ]$ J8 b, v
00403507 E8 7FBF0200 call qsr.0042F48B
' X3 L- R6 N- q0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
$ F: i8 B6 V& y& Z" q% X00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],09 s1 `% y- F. w( G5 Q: I
00403515 E8 71BF0200 call qsr.0042F48B: K6 v+ @& Q" S, E$ j% @% F8 V
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
/ a7 P' Y, K) F, B: N0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1 X8 R2 @( @ p* ^/ w& ~
00403526 E8 60BF0200 call qsr.0042F48B
/ x0 R. H4 @; e, W0040352B B0 01 mov al,1& ^ ?( A. z' Z7 j
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]7 W( \( N' Y5 T( {
00403531 5F pop edi
9 }$ I: N# M: c) I00403532 5E pop esi0 m2 w( q. f: I
00403533 5D pop ebp
/ x3 w& ~) a U! r00403534 5B pop ebx: e2 n$ V) o5 k* C: ^6 W! a- T1 g
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx! d! w& q5 j; b( D l' p/ |
0040353C 83C4 30 add esp,30
7 u8 G4 A& e. I T0040353F C2 0800 retn 8* o: Q8 P. `) k% |
--------------------------------------------------------------------------------
: x4 X' n2 B: p- Q1 k$ w1 N【破解总结】1 }& M) \' y+ y$ s
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
; _8 t* p" g; L/ C& N$ V' e! f用户名：yijun4 |4 C8 y* f. d) j8 z* G
注册码：4893*7777*3726*7777*0529' i1 X% Z! H8 p
--------------------------------------------------------------------------------
& E" d \4 c( Y2 F3 W【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡