|
|
|
【原创】破解Quick Screen Recorder
3 r' P* f2 T9 @【破解作者】 yijun, b5 D7 e9 n1 Z* c9 _
【作者邮箱】 [email protected]
1 Q: p: L( o2 B1 E5 T% A5 O% v【使用工具】 OD,PEID
4 c% i( G; Y. } I) d【破解平台】 WinXP
" y# f* u$ l% |5 u6 [4 T) A; |【软件名称】 Quick Screen Recorder
( J2 |9 ?% ]% Q& I【下载地址】 天空
Z% M }" m' ]5 U ^8 m【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 6 o1 i0 @5 x% L$ f- E% ~. ]8 B5 q8 m
【软件大小】 540K
9 I( ~4 `3 T( z3 @' Y( V1 z【加壳方式】 无' [/ I% o5 j1 r. T# A) z5 A
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）' S' ~! R! O6 ~0 c5 D& ?. W: C9 Y
--------------------------------------------------------------------------------
% q6 ?7 u4 D: U【破解内容】- E4 i# Q* K. C9 {+ O7 C9 z) x" G1 O* D
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
7 |! w' B. p4 C) M/ O' }00404C69 55 push ebp //在此下断
3 J5 ^* H* x& [4 W00404C6A 56 push esi
. a* m& N. G) H6 h9 V4 D00404C6B 57 push edi
! @0 |$ D4 z0 Y8 t4 V7 a00404C6C 8BE9 mov ebp,ecx
; n) G. y" E. J! \% r- M6 B00404C6E 6A 01 push 13 ~3 e9 ~ }7 n2 Q
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
0 m$ U9 y8 \9 T; W9 o00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]! `9 C- h" u+ C+ J* E
00404C78 8BCF mov ecx,edi/ c' w ^7 l' h! D1 F
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码: e' h" M9 Y% P, ~3 G9 n
00404C7F 8BCF mov ecx,edi; C+ P) g/ Q3 G8 `& p& e& S
00404C81 E8 A73E0200 call qsr.00428B2D
$ L2 @" L) L& d4 b' c% n3 B/ T00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]" X H$ d; q1 x+ E0 R* k7 S# a
00404C89 8BCE mov ecx,esi
9 m& K- g: e/ T' t00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX' L4 H" G8 M+ R. t$ Y6 J! `' A
00404C90 8BCE mov ecx,esi6 z- a7 `. Z/ I9 L& v! ]
00404C92 E8 963E0200 call qsr.00428B2D
4 V& e$ z- @# l/ z+ F00404C97 8B06 mov eax,dword ptr ds:[esi]4 C+ \8 w2 U: A
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2: \3 S0 f) I y" W0 c$ a
00404C9D 7D 26 jge short qsr.00404CC56 f6 f b* a: B& e$ A
00404C9F 6A 40 push 40) k( T# }# }2 T
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"5 D c$ `1 r7 g" p4 K$ m
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."# F' W+ L$ c+ S- e
00404CAB 8BCD mov ecx,ebp
+ T: Q$ g, ^6 \2 f00404CAD E8 C3840200 call qsr.0042D175
" w `' y% K# X7 X' t G7 E" e6 A00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]2 {, d" {: D( j' W
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx' k t! e! _" e5 ^# J* \
00404CBD 5F pop edi) Q" D& L# B) Z w4 _; U) p9 h2 A/ y
00404CBE 5E pop esi! l' V/ f- Q9 C8 {+ V
00404CBF 5D pop ebp0 y. x3 t0 W R) {6 U
00404CC0 5B pop ebx. m/ i3 u' l$ j) K
00404CC1 83C4 18 add esp,183 u; p* a# g0 O
00404CC4 C3 retn
& r. [; u! E' `8 V9 o" _* g$ n00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]0 d; `% D# M5 V$ K1 F! I8 b
00404CC8 84C0 test al,al
: }, \1 [1 D( d s) F g00404CCA 0F85 1C010000 jnz qsr.00404DEC
: R6 D# i c) g. Y00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
8 [3 m3 o; k/ U0 k4 ^6 S00404CD4 E8 87E3FFFF call qsr.004030608 m( K- v4 |$ |$ i2 U# I
00404CD9 51 push ecx g* g: A9 S8 T5 ^" b) f+ m2 e. y
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],05 d: E$ V) M8 U/ C- A' }$ L$ T
00404CE2 8BCC mov ecx,esp
& _; a. |8 O" h* |! d% k' b00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
- Q% F8 |8 ~; e00404CE8 56 push esi
# k$ j& ?% s, U5 R* p! {6 ?00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0) s3 F4 C% d, v. d% b$ P% V% n2 B
00404CEE 51 push ecx
$ h& S$ h3 G5 p: j) e$ @00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
- P9 {' @5 P- |: o6 H9 V00404CF4 8BCC mov ecx,esp
2 j# P: I, s( z, r1 J# ~' E00404CF6 896424 20 mov dword ptr ss:[esp+20],esp) s% V$ t9 \3 k4 \
00404CFA 57 push edi) h% B2 |7 s! Y+ O0 z3 H6 ~9 Q
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0: y5 B& _& X$ Z5 S# K# a/ H
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
- M4 k* G. e- Y00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
2 \9 D9 }) B3 X00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~2 r1 z, i* K9 P" L+ p3 Y& @
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~9 W. u$ D7 y2 G# r
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
6 u6 x" _# ]/ x y00404D12 6A 40 push 40; F4 U2 z9 h: f) Q
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder") w4 h% t2 ]* P1 ?
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
0 F7 N! z8 k! F' w1 k& b/ b00404D1E 8BCD mov ecx,ebp. s2 [% L* Q0 a2 V
00404D20 E8 50840200 call qsr.0042D1758 l1 S& M& K$ H
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 Y% y5 @; h4 m00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
2 C/ W& u( s4 r6 k- j00404D31 E8 5AE3FFFF call qsr.00403090
5 G, B3 o0 N4 Z" D, Z J% ~00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]6 X5 M& _& O, b' f1 q) ^
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
0 R. f2 t O2 W# X00404D41 5F pop edi
7 m0 `; i2 u0 `, R% s6 F+ ]7 C00404D42 5E pop esi
/ S" l1 |0 R, y! |, U7 h00404D43 5D pop ebp8 H& e+ V( N% m- @/ v
00404D44 5B pop ebx: i0 S! `1 D+ k9 |: f
00404D45 83C4 18 add esp,18
8 z' Z$ ?* S8 T9 P) n; p4 f$ i00404D48 C3 retn( p; ?3 r% |9 ]6 m# H) {6 s% q
*********************************************************************************************************************************************************- y6 g$ \# Q& x
跟进00404D09处CALL来到：: I _% g; x% T( d; C
004030A0 6A FF push -1 //一路F8下去~~~~: t$ t) S6 r0 F$ M V7 e6 a& j
004030A2 68 C88F4400 push qsr.00448FC8# ^+ u d# P) }
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]% h0 I4 r7 Q1 W, r/ L
004030AD 50 push eax, o7 h8 W" ]( [ u
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp) i$ Q/ v4 H4 g
004030B5 83EC 24 sub esp,24% ]$ C1 o1 ^$ V
004030B8 53 push ebx
) k8 q, S2 I2 c8 A004030B9 55 push ebp
) a# W0 P) G/ n" X. C( }004030BA 56 push esi
* e( t/ k- F! G' b4 w+ x* m* A, Q004030BB 57 push edi
0 O( V# Q4 o! H: ^, y5 a004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"8 m S( @& f+ o' C
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]0 h+ t( t0 |3 d0 j( C
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1) V- k n$ l: ~( t, w
004030CD E8 27C40200 call qsr.0042F4F96 ^7 R, F$ ^& l' R% ?# g
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
4 U" U2 {+ E. {5 ?# p0 W* L" ?* A004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
) W( F* u8 x4 y1 R004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 |. [# @& I# x2 o7 W9 }5 D
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3% |+ |, F8 F9 A( P& a0 \/ O
004030E4 E8 905A0200 call qsr.00428B793 Y& p4 g" U H: O
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]1 q3 S" [" U; Q( c
004030ED E8 3B5A0200 call qsr.00428B2D
9 Z1 p/ y' q# u( f004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* \2 E1 ~7 n3 a7 O! {004030F6 E8 7E5A0200 call qsr.00428B79
: h1 p% _5 p* {* L) v) z004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]! A* q3 _1 C) Z1 P+ Q
004030FF E8 295A0200 call qsr.00428B2D1 V/ ~4 }- k8 f
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]. z. D' y4 S2 i8 ]5 G# @7 G0 b, P4 o
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]' {: D7 m7 `* U0 t$ J" m
0040310B 83F8 02 cmp eax,29 [7 ? B; C2 |/ i
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳( Y; w* I, k+ `, L7 {8 ~5 i
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]+ d, ^) b! T( c' r$ C. L1 O
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
/ d: U+ S' d$ w$ r; g! e0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
/ V; j; \ h0 S* P* L+ \: N' o00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]+ ]; ?& ~0 W$ ]8 i/ @$ Y! B
00403126 6A 01 push 1
' R7 B ]; H: ?* O, v& M00403128 50 push eax
3 d% b2 e& Z9 S7 Q: J00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]! V" e- f! i% y1 ~! W# z" O
0040312D E8 C4550200 call qsr.004286F6
`9 \, s. J/ X& i" V- t2 K00403132 8B00 mov eax,dword ptr ds:[eax]1 N4 C) T. {" k7 G5 U; ]
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 R- k0 t. ?2 a# x! U( @7 R4 L
00403138 50 push eax7 ^4 ?, j- i. v$ I: R
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
; R/ {* O- y w( @3 y* q; w# i0040313E E8 4D560200 call qsr.00428790
* P! x6 ?' g3 F2 I( Y00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]% i6 A6 M- h$ z- b
00403147 8BF0 mov esi,eax" D1 [+ N/ b0 S1 v+ K
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],39 T' s( f8 d, i! Q
0040314E E8 38C30200 call qsr.0042F48B
p1 Q6 v" v0 A0 _& E+ W00403153 8D46 0A lea eax,dword ptr ds:[esi+A], A {$ i1 N6 Y6 @, v. |3 s& {9 s2 V
00403156 B9 3E000000 mov ecx,3E
7 H. U t# j: ~6 U4 [0040315B 99 cdq
f$ ^' {% a! X0040315C F7F9 idiv ecx- j- ]" c* U5 X: Q
0040315E 6A 01 push 12 ]9 ?5 \, {3 g8 V1 D
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]# L2 V k& M: e1 o
00403164 8BF2 mov esi,edx
8 ~3 B6 H0 j3 x00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]9 I! X# V# y5 }3 L- Z
0040316A 52 push edx( L* @, G( h% z
0040316B E8 0A550200 call qsr.0042867A% h0 e$ E( @2 f1 ]
00403170 8B00 mov eax,dword ptr ds:[eax]0 X+ K) g7 D2 h* b( V& g
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
( f( @. x7 N2 g, f00403176 50 push eax
7 N$ F% o$ S) d+ H& U00403177 C64424 40 05 mov byte ptr ss:[esp+40],55 t# B5 U _1 |5 w
0040317C E8 0F560200 call qsr.004287903 |/ q/ H$ q9 w: `( s9 t
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 H/ ^6 q. [- C" d* T& U4 g; H
00403185 8BF8 mov edi,eax% |9 D- ^1 S8 L' k! i6 f
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
, V, G+ X! \% [' b0040318C E8 FAC20200 call qsr.0042F48B- g. F* j! j+ S3 F( M/ X5 f. i
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]0 q7 O* h8 ?: Y; O+ O
00403194 B9 3E000000 mov ecx,3E
' `4 ~( n; |- m& d3 V2 D4 X( c00403199 99 cdq
' }& Q( H1 V; o& d/ x- j0040319A F7F9 idiv ecx
# G6 f) q' o5 d4 I6 c8 S8 }. H P2 p0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
# U2 w8 f* M: l004031A1 894424 28 mov dword ptr ss:[esp+28],eax
& ~) C3 o1 r& |- \004031A5 8BCA mov ecx,edx; ?' s) a& u% H
004031A7 894424 24 mov dword ptr ss:[esp+24],eax0 X% k4 i( C0 h% C# Z1 i; ]3 c$ q
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
7 [; i0 `" q/ \& Z004031AF 894424 18 mov dword ptr ss:[esp+18],eax# f, M i/ x6 [4 @( b* k) `0 u
004031B3 894424 14 mov dword ptr ss:[esp+14],eax9 k3 }' q3 D. U: h& X' V! P" n
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
4 x& S8 H6 C' X r" Q$ m; `+ m2 @004031BB 8BC1 mov eax,ecx S7 m: X' ?% E `% N9 [
004031BD BF 0A000000 mov edi,0A
5 o8 i1 `% N& S! z004031C2 99 cdq
1 n, ^$ I6 {# n9 `; J7 y9 u2 y004031C3 F7FF idiv edi
5 K" T& Y2 a3 g$ s3 a$ ^; E' j6 p4 o004031C5 8BC1 mov eax,ecx
' M/ b2 U: C- }! z4 Z004031C7 B3 0B mov bl,0B/ L0 @% h# A/ d# L% I5 b* X
004031C9 0FAFC1 imul eax,ecx, Q' n" [: }5 M& _) L
004031CC 8BCF mov ecx,edi9 `, A, b! [" h) c. V
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
, l# g- @. R( s" D5 v z1 r004031D2 52 push edx
8 g6 s3 I7 ^ D004031D3 99 cdq: m+ N& ^4 R$ J+ k- p4 I3 H- V( C
004031D4 F7F9 idiv ecx% U% F8 K: h; Q9 r* n6 D
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]) J9 i5 S! O9 z: ?) u& A6 o) Y
004031DD 2BC6 sub eax,esi
+ ~2 g p4 Q8 K+ P( a004031DF 52 push edx- M# L( {( q l0 U3 u! y9 K
004031E0 99 cdq+ H1 n! |) D. \! Z2 W7 F
004031E1 F7F9 idiv ecx
4 j9 L) W! ]1 `" G4 x* T004031E3 8BC6 mov eax,esi
% J6 s/ ~* f- B: `$ t004031E5 52 push edx9 y! a' K' W9 Z' ~3 q; F6 y+ m
004031E6 99 cdq* T- k6 U B- f p0 k8 l
004031E7 F7F9 idiv ecx
: T: _, j1 l$ b; g8 \* i( d) F9 G7 t004031E9 52 push edx
3 f, d9 M; n; D004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
: |. o! _2 v7 S004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"5 [ P+ ^" l6 Q+ r; D4 L$ G
004031F3 52 push edx
1 ~+ c6 m; c# Z S" }+ u004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
F6 l8 z# J: I7 D: M; p) u2 g+ f1 X) ?004031F9 83C4 18 add esp,18% G: @( b j: q. \% @* D/ e
004031FC 6A 04 push 4% o$ H+ j, L6 b, j) n8 K7 C( u, \
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]# q9 b9 s o. O* M8 `
00403202 6A 00 push 0 \" x7 B4 y7 U0 s+ R, A0 i
00403204 50 push eax
; p' r0 z0 l: k9 {00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]) r1 }! _ ?% g3 t7 G- E
00403209 E8 D6530200 call qsr.004285E4
. k) s. l; ]- ^ T! c/ w0040320E 50 push eax, Y" I# _: J7 z5 o/ K4 J8 ?
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
1 a8 [4 y: B% e' |4 q00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
. f& I1 b( ~' i: j+ D00403218 E8 A7C30200 call qsr.0042F5C4+ |: U/ ^- Z% s2 n2 M
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* i2 Y [. U1 R" `+ f2 d5 l00403221 885C24 3C mov byte ptr ss:[esp+3C],bl2 v# ], ?9 ~8 s3 i2 q: L M
00403225 E8 61C20200 call qsr.0042F48B/ L) y: T4 ~3 E, F! `- R
0040322A 6A 04 push 4
; O* B# R1 u; i' l' G% c' d0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
7 i/ e' y# Q2 m5 r6 q4 d00403230 6A 05 push 5+ Y; s8 X+ z/ \( }/ L, Y7 p B
00403232 51 push ecx. \! ]0 C( `$ Y6 x
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
# `, [- h9 ]; S9 ]6 c5 u00403237 E8 A8530200 call qsr.004285E4
* W8 p: y* u- N$ n6 ?& m3 q1 c0040323C 50 push eax
4 e: E- s8 i* x; D! _0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
/ X, X' t/ A$ F$ D" i. X6 o Z00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D; S7 U/ K, N6 Z# h5 |
00403246 E8 79C30200 call qsr.0042F5C4- n7 H' z: \1 L# S) }# l
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 y) E- a' c* }& f9 j" l
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl4 ^; P$ S4 c$ T) H: U; x
00403253 E8 33C20200 call qsr.0042F48B
3 M/ k6 V& j* }( i7 m' o4 ^00403258 6A 04 push 4
! H. l. l8 @5 x2 O0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]( M7 W ]( p. N
0040325E 57 push edi
# d4 A# ^7 m- I- [$ J' U( O* L0040325F 52 push edx$ V7 r+ a( v) T4 \
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 x2 p9 [( M: @/ ~
00403264 E8 7B530200 call qsr.004285E4
; j# H/ ]! r) V; w. x00403269 50 push eax
2 U. P2 ~6 O6 C4 n- i9 v$ Y) {0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ X+ C& d$ Y2 w" h6 p; b+ W
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E+ a% T% M0 Z' x: m; u" \. m" c2 O! B
00403273 E8 4CC30200 call qsr.0042F5C4; [; a, C5 [+ n+ M6 ?5 j
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]& Z7 a" ^( W, @
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl# [1 R( {- i: a$ {. P/ z
00403280 E8 06C20200 call qsr.0042F48B; v& \; \# P& ?# e/ b+ ?
00403285 6A 04 push 4' V. n4 m9 m L" C
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
' h2 b' h7 h& Q: T. y7 q- D0040328B 6A 0F push 0F
/ ~" a/ S, ^5 ]. ^& y1 ]3 f* |, V0040328D 50 push eax
& n3 A6 R7 c$ d1 d$ `0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
A6 B# W$ w0 {# _& j, f4 v" ~00403292 E8 4D530200 call qsr.004285E4# e3 f7 V+ U$ q7 z# w0 d& x d
00403297 50 push eax
# ^" I. J, Z, y% \00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
% s' P$ P6 X" v W2 C: m0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
: i% d9 t) X/ e, O$ s$ q9 i004032A1 E8 1EC30200 call qsr.0042F5C4
0 ?/ o8 [7 n2 {# ?8 r V004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
$ s `; f8 `% _, R% k004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl; q4 K/ h2 Z( h
004032AE E8 D8C10200 call qsr.0042F48B; `# N0 z2 j* R% K7 k7 V0 R* p+ K
004032B3 6A 04 push 43 [1 x3 }7 @! \. w( v
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]" `' c9 ], U! k
004032B9 6A 14 push 147 K. P: b2 a1 R9 L; x+ H! M Q p
004032BB 51 push ecx7 `9 U* U5 I, C/ @ U
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]6 X( Y' G& a! l* L# M0 l; h7 q- s! y
004032C0 E8 1F530200 call qsr.004285E4
, s3 s, Z8 f, B+ @- b* Y7 g ?. {6 H004032C5 50 push eax
1 E. g7 g# Q* [: V! d7 Z004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ E9 }7 h4 M) q! C; s
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
0 x* S7 w& d8 c* U# E004032CF E8 F0C20200 call qsr.0042F5C40 D# Z) \' i. k2 J5 d- k, A' @
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& ?1 q: d) `$ i. e004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl# C! { M8 h- p9 Y
004032DC E8 AAC10200 call qsr.0042F48B
7 r- l! l5 A+ N- y004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
( g. O% d3 P* E* a) ~- Z) ]004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX: c& \* M9 L& i; M
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL8 q) f# x" p; ]5 F9 @8 r% p
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
6 h$ c& H j. f( J3 s# n004032ED 8ACA mov cl,dl ; DL送CL0 f; r3 e8 x( P$ c* p
004032EF 3AD3 cmp dl,bl ; DL和BL比较5 g% e: g, e6 Y% A4 W% X
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
- K& m4 Q Z- f: o# h \004032F3 84C9 test cl,cl5 f( S$ j/ a4 n Q+ i
004032F5 74 16 je short qsr.0040330D
6 G: Z2 r/ i* @7 g' {004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
$ l Y1 x' ]. F004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
4 b7 u! @" L! c% _. L' N004032FD 8ACA mov cl,dl6 U$ u& H1 c4 [1 V) v; R
004032FF 3AD3 cmp dl,bl ; DL和BL比较$ T$ x4 \. B/ ]. a+ u
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳） {3 G' Q/ y1 E
00403303 83C0 02 add eax,2 ; EAX加28 K9 o: n! K9 A8 z
00403306 83C6 02 add esi,2 ; ESI加26 ?! h( N1 E; k, ~& i
00403309 84C9 test cl,cl" f% H. _% J: Q# [, P, H
0040330B ^ 75 DC jnz short qsr.004032E9
( b. \" c9 Y9 G) F) M( C0 f' _8 `0040330D 33C0 xor eax,eax" \6 `) d# u- Q( {- _
0040330F EB 05 jmp short qsr.00403316
) a7 S9 R6 P& B' i5 `; }00403311 1BC0 sbb eax,eax
1 W9 C5 \! F2 B {" v1 D00403313 83D8 FF sbb eax,-1
) u) \0 |3 r% M. m. X. Y+ k5 S00403316 85C0 test eax,eax
6 o8 w+ H+ b# ?0 i3 l. L0 {" U00403318 74 0E je short qsr.00403328
* q7 G( Q3 t" L5 `, X0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A0 i a. ]" m/ W0 G$ n. e9 {* `6 s
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
1 R& ]. `# f1 j d* E# K00403323 E9 F0000000 jmp qsr.004034180 ^& u" _ ]" G; p8 E# L! l
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX7 \2 v; n+ ~3 ]
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* U1 }' M5 B! ]4 Y
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]8 f6 O9 t) v x1 |& I
00403333 50 push eax
6 ]# ]/ @* n F B00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX, q7 u0 t5 \; h6 H: Z/ ^9 x& w
00403339 50 push eax$ ~6 A( i, L0 r/ y P1 o5 y$ E
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
8 ^& {, b3 k, d% c- E0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX2 ~6 s2 P: I- K; g. c
00403343 83C4 04 add esp,4 ~% ]9 T! U1 p! x
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
, p/ ?. k, s3 _8 ~. I( x% D7 i00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]. ], h; m2 V; O$ M
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18] H$ ?: H2 p E( Y/ O
0040334F 50 push eax) h0 \6 [) C" s6 r# x% t1 q
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX# i$ h* c( M6 q% Y
00403355 50 push eax9 E8 j; M5 h" g# s
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
+ w( V( K& Z0 F) }3 m/ h0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
+ X' X( w* H' o2 \; h1 i! K0040335F 83C4 04 add esp,4% n( U! V' L) Z% F, I
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI4 L9 o1 l4 @. d
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]9 r3 l0 L7 w3 k% l9 F4 X" Y
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
0 l8 i8 G; K( w ?2 P0040336B 50 push eax# k: \2 j0 O5 E! t2 y/ o7 c
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
1 K4 I& ]1 o) b, O3 b/ `) t/ G3 f00403371 50 push eax$ a, O. p1 Q) e2 A, |3 z0 y
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX5 q9 q2 k9 Q6 I1 v. n* G9 g! B
00403377 8BD8 mov ebx,eax ; EAX送EBX! f9 k) B/ N5 I: C/ \! ~+ Y) q; B/ [
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX5 F2 C; ~* @1 _8 y" a3 Z, ^
0040337D 83C4 04 add esp,4& G" N/ r) v. @- F$ Z
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10], l0 G1 ^+ [1 F. a: \4 A0 n
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]6 O! ^! W! H, W1 X: e4 E! s7 @; L$ V
00403387 50 push eax
( x5 e8 G- Y5 c00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX: h' O) ]- p' ?1 L
0040338D 50 push eax
+ }. q" @7 j: [# S! [0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
# t, n) |5 j1 z& q7 W! i00403393 83C4 04 add esp,4; w# G4 H. T* d' O2 P( B* l- R" ]
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
3 Q: v/ m+ h" ~# k- D0040339A 8BE8 mov ebp,eax ; EAX送EBP0 W. P+ P- W. h% S U2 S( b7 U
0040339C 6A FF push -1
; M" K# c9 p5 Y: g& m7 X0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
& Q+ ?% N7 U7 _2 F004033A3 6A FF push -1
; b5 O+ V' ~2 A! a9 q9 k# `004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
- _0 f) _7 p0 ^004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
# Y/ L% l0 D; s! W- K004033AE 6A FF push -1
2 f: E, q/ b" z( N' O5 \004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
( i, D$ c. a% l, y0 k004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
+ i% r' I! I2 M2 v# U4 x; K7 O004033B9 6A FF push -1; h$ k* j8 ]$ D5 F1 ]% F
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX& n* I( q# J% y5 J, k0 [
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX3 R7 H$ u) D% x6 Z7 C# h
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX3 L6 S+ {% f, [1 [9 K+ _6 a
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
. x1 J' Q$ z6 M. N. j( A004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX2 I1 e3 x3 ^) ?. W3 }, L; L: p
004033D7 D1E0 shl eax,1 ; EAX左移1位! d1 L6 M) |2 C( @" v" ]
004033D9 99 cdq ; EAX扩展
5 c6 N b" J9 F004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中$ C$ U% k& k5 b5 |- B+ R0 Z; o
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
. D) j4 r& F! n' y: a% o4 ^, I004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
8 _) @- f& ?5 H9 w9 M; J$ w004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A% Z( H! o: V9 U0 b( P, R; |5 Q
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
% u5 k& l* _! x# b3 s8 U004033E9 EB 2D jmp short qsr.004034187 b' K ~' ?* t z# F; O$ M) p
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX8 p. z, F$ q+ U4 ]& ?8 {: f' v) X
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2: F8 r8 ~- k2 B
004033F7 99 cdq ; EBX扩展. E ]( C. n5 H) y" X
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
9 e) E; B; y8 L( o" h004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
6 T( ~2 A* D; Y- q004033FF 2BC2 sub eax,edx ; EAX减去EDX6 t/ S3 X0 C Z5 s8 ? L) Q0 W; E4 G
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C], w, k' a; o* k: A r7 b
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
7 E2 W v& a4 S% r00403409 99 cdq
]2 e+ n4 E$ l m2 _" H0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
) w ?1 L# N; s: L/ T, N" W0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX M8 J% l2 ^5 H. P4 ], C
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
8 W8 l8 B' V) Q00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）. D0 j6 g# d) [
00403418 E8 6EC00200 call qsr.0042F48B ; - k9 b6 a+ e) V
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 s% \6 c ^' e9 C: b2 s9 T00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],91 ~2 b5 h' g- B/ E/ R/ u6 c
00403426 E8 60C00200 call qsr.0042F48B H; U' ?0 f6 A; A0 \( r1 c
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
, }* Y5 ^2 V4 r+ E- i& d4 Q0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8& o$ T( a/ w% c8 H: v' P, P' F$ {
00403434 E8 52C00200 call qsr.0042F48B7 H3 l' G Y7 Q7 ^
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) O/ S K. y) ~# k; k3 l6 x' o4 K A0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
7 ~/ _- j9 I4 y6 b" x00403442 E8 44C00200 call qsr.0042F48B
3 ^& \1 M: D# m0 Q4 n& k5 w/ _00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
9 D' p% @( O: g, z0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
; P$ J9 T d, n. |00403450 E8 36C00200 call qsr.0042F48B
2 k0 q# {9 }; B# Q00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
2 O* V! \; t+ X# ?00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
8 |- F F% T4 p6 a7 k0040345E E8 28C00200 call qsr.0042F48B9 U5 @1 E: a. E) E6 e
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]# b8 ]" T; O$ S: `" u$ `' L
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
# P- w) U' j% \0040346C E8 1AC00200 call qsr.0042F48B" C9 W7 ? { }# U( z* ~! j9 `; E7 l
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20], V$ Q2 o' V: |. e* [
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
+ s6 M$ k9 R# ~* x K* W0040347A E8 0CC00200 call qsr.0042F48B
% E: u/ I0 T" N9 j/ m) y0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# _1 A) ~- ~6 F, J00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0* ?+ \/ E; Y& @0 }
00403488 E8 FEBF0200 call qsr.0042F48B3 f/ a% H; F" S* z; o+ R
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]' O# N% {! I7 ]
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
" T+ K# }% A, Z/ E% n- J00403499 E8 EDBF0200 call qsr.0042F48B
5 J8 u) k! j* T( ~3 L2 ^0040349E 32C0 xor al,al ; AL清0
& Z3 C: J G y/ K# L0 h3 C4 i8 j004034A0 E9 88000000 jmp qsr.0040352D1 T. A; c' p- p- z4 ^0 C
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~# z3 c) N6 P K* I* l2 h% [9 F
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]1 [# n. `7 [2 R2 |/ Y) P: N
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9 }, t% S& K/ ]* S' [, Y9 v
004034B3 E8 D3BF0200 call qsr.0042F48B" k' U& f# i# f' v
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
! A5 p# _3 ]- q2 J1 Q8 }004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],81 U3 N$ x; c! t/ O+ h. ^% H
004034C1 E8 C5BF0200 call qsr.0042F48B
( p* t' F; `+ ]0 {1 ?' |" V004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 _; \* N% b! L+ a
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7# m( @! F4 c& n, K8 N: F) e+ |3 K! E$ z$ C
004034CF E8 B7BF0200 call qsr.0042F48B
! E) E: ^2 N. d8 s+ V9 r$ V' z# R( z004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]& w2 m. `7 U R, ]8 s1 ]6 Y. j# e: C
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
3 g ]0 |" l [004034DD E8 A9BF0200 call qsr.0042F48B
# A( m6 J: T; l$ b4 C/ J2 P4 z* v004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]+ M5 i$ _- X! `, ^- }
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3+ l7 x) v k8 U+ b3 c/ m' }5 Z: U6 B
004034EB E8 9BBF0200 call qsr.0042F48B
7 a- ?0 A9 M1 d0 p% c004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]! \' T& A3 E( X
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
) h {) i# F) L4 T# D) l# h004034F9 E8 8DBF0200 call qsr.0042F48B; m% M. P* [2 H: `
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) q: K8 W9 `4 t2 G2 r
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
! q1 \# _6 o* k5 G: q3 E; G0 c00403507 E8 7FBF0200 call qsr.0042F48B
. I- ]" H; Z; l7 d O, y. r+ {0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! T* j$ E/ y4 L6 q; x00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],03 C1 d7 m4 E, k: |6 h4 l7 K
00403515 E8 71BF0200 call qsr.0042F48B
; V9 J& t3 \' s% Z7 Y0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
5 w- w; I' F/ W0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
- |: P! Q! b4 |" b4 H* U7 t& V00403526 E8 60BF0200 call qsr.0042F48B6 Y/ G7 C; m C) J) y' l- [
0040352B B0 01 mov al,1: w9 M5 `# a6 [! r
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
* x3 _1 ?1 H0 X6 [4 E3 U O00403531 5F pop edi
1 [7 M, Q( i( L5 C' c00403532 5E pop esi
- l/ W0 n3 D& |$ m; j00403533 5D pop ebp
. ^# O2 T# M1 }00403534 5B pop ebx% |7 [* r! }+ I* X& h
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
( j/ k1 L0 M) s3 H; a% N: E, b/ J0040353C 83C4 30 add esp,30# ~6 b- ] z/ o$ V4 o7 V/ I1 c/ F- a
0040353F C2 0800 retn 8
% g8 T: L# X0 ^$ }1 }--------------------------------------------------------------------------------
3 y8 t6 _" Q$ m ]6 @" S# _【破解总结】; H+ i0 l4 i4 T! j! C9 y' p
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
7 ^: \" s3 d" B5 |4 A% f用户名：yijun
) `! {3 k2 G, C M注册码：4893*7777*3726*7777*0529
. S" M" N0 G3 O6 U6 H$ F--------------------------------------------------------------------------------
7 x ^4 `/ E6 l$ {4 | P8 r【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡