|
|
|
【原创】破解Quick Screen Recorder
% \0 ^# k6 ]& G/ g【破解作者】 yijun
9 N) d* C0 S! ]/ s7 W【作者邮箱】 [email protected]7 i: e7 v4 D% o& ^1 e
【使用工具】 OD,PEID
8 m6 g$ k& G5 b" f; a【破解平台】 WinXP. O" X0 l l& V
【软件名称】 Quick Screen Recorder- c; N3 c: c$ H/ _
【下载地址】 天空
& {6 _+ s! F9 W: y: s, y" Q/ W【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 1 X9 N. p. K% E7 k. {, `, ?
【软件大小】 540K
0 h s: X$ f( s% g9 Z9 |【加壳方式】 无
7 q/ I( x/ ?3 f( K5 _/ [ \【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）( r: r0 `5 Z$ L. S- ^! O- Y( S. ? i
--------------------------------------------------------------------------------( I" B9 R8 t$ y/ }$ O* }
【破解内容】
: W5 ^+ x! d3 w+ s, n! x PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
: |* {0 o3 c+ @6 X00404C69 55 push ebp //在此下断8 u; {2 o. D6 X$ S: u$ S) e8 k
00404C6A 56 push esi
5 p! I3 L9 _: |: I1 t00404C6B 57 push edi
) T6 ]' f( G! @, w00404C6C 8BE9 mov ebp,ecx( m; I& m# {& a3 K! ?, G0 [- `
00404C6E 6A 01 push 14 D) }4 ]2 q/ w+ b0 B$ b1 C
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名7 g' o6 H# T3 Q3 Z8 k6 [" S
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]8 C d/ V& g1 F. ?) h' u( u
00404C78 8BCF mov ecx,edi
% l8 O. M' e7 m6 ^0 a& {& q! @: _00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码* {& h$ l5 s* O
00404C7F 8BCF mov ecx,edi
- o5 \$ {: d. k" j# t& F00404C81 E8 A73E0200 call qsr.00428B2D
7 e* f. ?% d9 R, O5 c. H5 a00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]; g z' o4 G3 f# c2 e( U
00404C89 8BCE mov ecx,esi
* b5 Y8 {4 f: H! W0 A; v& A" t00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
/ ?3 e4 D% ^, g0 P' Y ?5 U$ G00404C90 8BCE mov ecx,esi
1 z w+ x+ o3 i$ ^00404C92 E8 963E0200 call qsr.00428B2D% G6 Y, @* c+ e7 w( J2 _4 U
00404C97 8B06 mov eax,dword ptr ds:[esi]
8 A7 {- j7 O% l# D00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],20 G U% T+ h* h: k/ e# q/ C9 z
00404C9D 7D 26 jge short qsr.00404CC5
2 y( M I6 {- f2 R/ r00404C9F 6A 40 push 405 Q. E' ]. D6 S
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"+ M! g" _8 @! h6 y# p. n9 q
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."8 S. b$ j* u" u9 t1 Y
00404CAB 8BCD mov ecx,ebp# E9 \3 H8 ^, b( U" f( d0 ^
00404CAD E8 C3840200 call qsr.0042D175
8 f9 p' E. Z$ `% D00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
. b% b1 I' F+ J; j$ E. S* X( I00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
# h, v7 t5 t2 Y$ b; `6 a, ~: Y00404CBD 5F pop edi
, T2 f7 G9 ~+ ^+ H( A% a2 P) e$ f8 L00404CBE 5E pop esi
" O" I+ a2 t) }4 ~00404CBF 5D pop ebp
a7 X7 R& a. h0 d& B* L5 Z. R00404CC0 5B pop ebx8 ~- ~" t$ Y- v4 B6 `+ L
00404CC1 83C4 18 add esp,187 I0 g2 v& w# h' [9 c
00404CC4 C3 retn
4 ]1 _0 u! V& P' s6 C$ ]00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C], x7 q W6 V' i; U8 Z2 p0 B
00404CC8 84C0 test al,al
9 w& f/ b1 P* ~2 S' U4 q* }. \00404CCA 0F85 1C010000 jnz qsr.00404DEC1 m" c, e8 U9 K; Y1 v! D
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. x+ i8 Z, f1 ~- q! K) P1 @00404CD4 E8 87E3FFFF call qsr.00403060
4 I. [7 t( {, {6 V* O00404CD9 51 push ecx/ S1 f, x8 ` U
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],02 Y5 S, \) F" L& l& Z' p8 Q+ ^
00404CE2 8BCC mov ecx,esp
1 c$ F! C4 f2 D! U: _0 U' z# Z& a00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
0 ?7 n9 A: s8 \5 g' I2 g00404CE8 56 push esi
' x; s9 `+ g, n' @- s00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0 ~& u) y7 Y$ l, U* x9 n$ Z7 Y
00404CEE 51 push ecx
* E* H. g5 i& k# V00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],11 | ?% p4 P: C9 l/ R4 \' [
00404CF4 8BCC mov ecx,esp, _ B" ~( C' k
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp& s6 v( R( M, f4 G, q- ~
00404CFA 57 push edi
3 B2 N! S6 K. I, p- `00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
1 |& P# J/ {' s( F! R00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]! T3 j) }+ V7 @+ d$ O0 E
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0/ K0 D' q" `2 K$ D5 C+ ]
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
% K' M" Y. L9 c7 j' N! u/ m h* z00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
, z- {. j8 r/ M8 I. d7 }00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
M% [9 N0 L0 Y2 t: X00404D12 6A 40 push 40
- K/ o6 v" b( |4 b00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
+ E' Q9 `/ X% `6 J* w1 ^! z00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."$ w. P, m& \" b
00404D1E 8BCD mov ecx,ebp5 t- P; C X/ N2 i- A! ]
00404D20 E8 50840200 call qsr.0042D175
( Q" ~8 r2 I8 v00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]1 x& D+ A/ _" T5 a; b% _
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
0 m9 i9 t0 l3 f! S00404D31 E8 5AE3FFFF call qsr.004030909 e1 u/ s2 D- t* ]" X, d
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]- w5 R* P, b- d9 D
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
6 U5 n: x& U4 ~! u5 I00404D41 5F pop edi
6 |) |7 J S% N* v00404D42 5E pop esi
2 G% |8 B2 L3 |/ |; n9 s00404D43 5D pop ebp
5 d" S, G0 Z' o2 U( v00404D44 5B pop ebx2 n' K3 N) v5 n, l
00404D45 83C4 18 add esp,18+ l- }! S' J" a$ H4 ]
00404D48 C3 retn
7 s4 Y+ R+ n" e7 Z*********************************************************************************************************************************************************) R! h4 X: C! c+ S
跟进00404D09处CALL来到：! \. o x, H! Z7 Z# [ p
004030A0 6A FF push -1 //一路F8下去~~~~# `6 j6 j3 {( |8 G' V- e
004030A2 68 C88F4400 push qsr.00448FC8
4 ]- Y) [& a: {8 V3 i004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
# A; u s! I/ r004030AD 50 push eax
+ y+ n9 K& E0 w1 R( N+ W004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
B/ f& J5 ?- I* I- E) s004030B5 83EC 24 sub esp,24
- q( x( I; O) l004030B8 53 push ebx5 J% ^8 I& t" w% x& g; l
004030B9 55 push ebp4 |- \7 K& Z# G: D% w2 U) k! p
004030BA 56 push esi# |+ X# d! R: V, [/ P1 I
004030BB 57 push edi
( q% B; F/ v1 Q004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"8 T4 J( n2 f1 ]" ~+ ]/ {5 i7 G
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
$ f/ w. f! ?& R+ {004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
5 C4 F8 X$ ^) E T. j004030CD E8 27C40200 call qsr.0042F4F9/ L$ a- h; Z* w u/ z* ~# ?5 r
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]- Q# I9 F6 k6 d5 K$ ~" g& f6 e8 K
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax. D# r% F5 D- _6 R$ [
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
& c6 x# z! a1 n% M4 R1 a: x004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
. K/ Y! a. \" a- W1 {. l5 g004030E4 E8 905A0200 call qsr.00428B79* U4 Q9 p. L5 ^) X
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" ?9 G# I1 V- D
004030ED E8 3B5A0200 call qsr.00428B2D
/ B2 \9 S/ Z; ~& K7 O7 p004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
: q( h+ I; K+ G5 c9 v& l: f% G" W3 d004030F6 E8 7E5A0200 call qsr.00428B791 ]. P4 u7 h0 f) I, }
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
) B) h6 S! m8 g7 [004030FF E8 295A0200 call qsr.00428B2D
) k! C9 P( a0 Z" S00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
" x8 J& c1 Z, C8 D00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
/ _. z8 _8 ~. y% P0040310B 83F8 02 cmp eax,2
% o& S$ l5 H: W! @+ u7 g0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳$ M* A+ o$ w! I4 z7 N8 k
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]0 @5 W# s, D8 Z* j) E/ K' F7 z/ y' Y
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
. v/ K9 u3 v2 n4 @0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
, b$ u. R* ?% Q00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
6 {* K( h; _4 ~0 p3 S. K00403126 6A 01 push 14 K& v5 S( S1 L3 b
00403128 50 push eax; l* \- b1 s( d( b
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
4 A1 `, }7 V: Y5 G6 f( |8 Z0040312D E8 C4550200 call qsr.004286F6/ i( Q9 C5 U/ S l! E- b+ S2 d, u
00403132 8B00 mov eax,dword ptr ds:[eax]( l4 G3 C, b& o" J0 a6 v }, Z9 v+ v
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]! }. M& b- ^) [3 t6 j0 \0 k4 x
00403138 50 push eax
1 y [8 Z: t. S7 h1 j& t00403139 C64424 40 04 mov byte ptr ss:[esp+40],4( ]0 z! C. _9 R4 U: o% J5 z1 b: b
0040313E E8 4D560200 call qsr.00428790
4 I1 e! _/ N& Q" T0 R: C6 X9 A00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]/ v% K4 X- S/ @9 }
00403147 8BF0 mov esi,eax7 `* w+ X" D" I2 P w
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3& _" H& Z% m K+ C; W
0040314E E8 38C30200 call qsr.0042F48B8 w: ^7 o9 S3 C7 y( ^7 m2 h4 P
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
+ Y/ z" E: j; l$ h3 d! F1 m( X00403156 B9 3E000000 mov ecx,3E& f. {( W" N' n$ J
0040315B 99 cdq
. s/ }+ u$ d) u5 A0040315C F7F9 idiv ecx$ s$ j/ Z' `7 S2 O2 e( S
0040315E 6A 01 push 1' S0 }& K- [) l0 h J2 E/ v/ q
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]" o- F. n. H$ O% v4 R- g, ?* F
00403164 8BF2 mov esi,edx% ^% w! L4 e+ h% {% f5 f" Q
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
+ m$ _: o& J* C) w- A0040316A 52 push edx
: M5 x& I9 i' W) d0040316B E8 0A550200 call qsr.0042867A
. t/ [+ P; H P00403170 8B00 mov eax,dword ptr ds:[eax]
' A- `+ l U- x. Z00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]0 t* E1 y8 c* G! i6 @* ~- t- I$ ~
00403176 50 push eax
) ]( T& O8 q- D" d. v00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
% k6 e- d5 K8 }5 | T. h0040317C E8 0F560200 call qsr.00428790
/ V1 a, G/ i* ]00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 G) ~" m3 G5 h0 J$ M- i
00403185 8BF8 mov edi,eax; A& n" B% \, ?6 P
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
0 k( T% x( s& x0 `0040318C E8 FAC20200 call qsr.0042F48B
9 l7 ~+ c% v/ I( P, K+ ^00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
# K: l- }; u8 @% l00403194 B9 3E000000 mov ecx,3E
9 l" N9 V" {9 U00403199 99 cdq
2 [+ \/ w9 O+ g0 S, h( R0040319A F7F9 idiv ecx, m5 {9 Y* ~8 E8 I7 o: O
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]! {2 E E6 c I
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
5 M/ X$ N* T1 W8 V' v004031A5 8BCA mov ecx,edx: U0 l' c) A6 J _
004031A7 894424 24 mov dword ptr ss:[esp+24],eax0 s7 h4 [6 q1 D# ~ {1 Y. P
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax% H+ v1 K) D' Y3 p: `5 J
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
6 z% D! a2 H0 _. M4 m" @, {004031B3 894424 14 mov dword ptr ss:[esp+14],eax
: }$ q9 W4 }! R* U8 F8 h) b! {004031B7 894424 10 mov dword ptr ss:[esp+10],eax6 f, s5 L2 k$ |0 H
004031BB 8BC1 mov eax,ecx! _% p$ q! V P. C4 U
004031BD BF 0A000000 mov edi,0A
$ [4 e' g6 V, ~004031C2 99 cdq
: l% i/ \ `2 |. ~8 M004031C3 F7FF idiv edi
, @* F% V4 @7 h- H: t1 ~, y" P004031C5 8BC1 mov eax,ecx8 h' O+ I, K! d1 M: ]$ ?1 ~* A
004031C7 B3 0B mov bl,0B
/ S5 P7 f5 W: T004031C9 0FAFC1 imul eax,ecx
7 I+ c& `, M+ ?6 l4 Y# e5 L004031CC 8BCF mov ecx,edi, k6 R( R- m- _
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl2 z' g z$ ~( Z8 L
004031D2 52 push edx* r0 q: Z' I) g6 C
004031D3 99 cdq2 r) Y8 Q# G, _. c( S. ^+ N! [7 d
004031D4 F7F9 idiv ecx% O0 d! G/ \/ T
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
9 Z+ n/ V; i" t) z/ V004031DD 2BC6 sub eax,esi2 j; f) Q4 g6 b5 w7 o5 E$ Q
004031DF 52 push edx
& ~) m F0 ~5 P7 G$ x* {0 g004031E0 99 cdq
* b' Q2 w( Q' m/ a* O' a004031E1 F7F9 idiv ecx$ E. K) o1 P# v2 S
004031E3 8BC6 mov eax,esi
; q0 k/ a6 n4 {* m0 [004031E5 52 push edx5 f# t: c4 M6 c$ N) Q" d8 G
004031E6 99 cdq6 Q8 a& N: S; w& z8 W. O* R
004031E7 F7F9 idiv ecx
: V+ e' _+ ~# P. t+ e004031E9 52 push edx
, j3 h, `8 `8 M; s3 h3 v* ~: O3 S' b004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]' X2 F: c/ J+ O% j
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"! @2 w6 ~# E a+ _$ F- E: k/ @
004031F3 52 push edx3 l. U r% u; u
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
n+ v. d9 L" |004031F9 83C4 18 add esp,18
- F; W1 |' H3 m; H+ w004031FC 6A 04 push 4
* F8 D! X, s o1 A4 v004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
. Y) i9 `7 @/ n( C& @5 z' R00403202 6A 00 push 0& Z a- W) Q* G% z
00403204 50 push eax) N) ^5 W. Q7 n
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]4 r3 s1 ~8 N1 B C7 R' [
00403209 E8 D6530200 call qsr.004285E4
! b6 }1 l& f4 d3 t0040320E 50 push eax
2 Z. _4 N6 h/ \' Y G0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
3 ?3 h7 [% X5 U+ B3 b00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C& ]$ r* \, t2 f; W' ^
00403218 E8 A7C30200 call qsr.0042F5C4. e; c0 w5 N5 c7 q5 `$ D+ n
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 ^" B, h6 k5 m9 R3 P
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl1 |. R0 q# R( u
00403225 E8 61C20200 call qsr.0042F48B
# p" L! p8 h- ]! c0040322A 6A 04 push 4) H: |: o9 S2 f' v1 h+ Z
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]% i% B+ Y; I1 M: K
00403230 6A 05 push 5
4 h0 w2 \. B' F: x2 W: y" ?00403232 51 push ecx
& l. J: ^. {, }3 `00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; f3 k/ b/ |6 g( p2 a5 s8 `1 f00403237 E8 A8530200 call qsr.004285E46 k1 Y# |+ l4 R2 w
0040323C 50 push eax
; f" G5 q8 O3 U7 j4 g2 G0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 i, Z9 Q; O3 W" f8 f& ^00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
) A" l6 x1 m: }, M3 j! I E00403246 E8 79C30200 call qsr.0042F5C49 ] {7 t0 I- Q
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 @2 q' \, F* G7 o
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl8 v R% t7 l$ ~: c7 { d+ R7 B# U
00403253 E8 33C20200 call qsr.0042F48B
- P- e1 c" K5 Q* s% E7 M00403258 6A 04 push 4
3 P) f U! H, \* V0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]) ~ G1 g. x' _
0040325E 57 push edi! ?# ^0 t$ C: C# q4 \4 u+ o' J. Z( v: q
0040325F 52 push edx5 }; O) P; m9 V8 w6 |- V5 h
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
5 B& _6 |. {9 D' J/ z5 }' _- ?2 Z00403264 E8 7B530200 call qsr.004285E4# x; e- X- B& @/ H; \
00403269 50 push eax
3 Q2 M: d* }: D$ g B1 a0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 s" q$ x- _& ?) Q& z! \
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
9 C. I. A+ R# ^0 \% |# w$ t: y6 n00403273 E8 4CC30200 call qsr.0042F5C4
: x0 r% h0 z* y5 I5 k00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]; j0 Y# j4 L. \& U8 n
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
n6 q! L; c4 c5 |# _00403280 E8 06C20200 call qsr.0042F48B2 i3 h" ]; ~8 f; W9 {4 ~
00403285 6A 04 push 47 a1 L/ R. B V
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]/ G: H+ Z* n7 u( Y3 ?8 ~
0040328B 6A 0F push 0F7 h5 ]$ p4 C2 S% Y* X
0040328D 50 push eax* i. M6 c6 C K
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]6 [% E: U `& S b% B8 {. f7 U
00403292 E8 4D530200 call qsr.004285E4
: ?8 H) D" R+ Q* v& G+ _00403297 50 push eax
2 r8 R# m6 w) k7 K1 [00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
0 N3 {0 G; G0 v" H+ y/ b) K) O: N) a& Q0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
2 r; B0 ]! h* K) X7 m! F4 x9 e9 H004032A1 E8 1EC30200 call qsr.0042F5C4
' Y7 e) F2 U* p004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
: T5 w- y4 T7 J9 \' D( t, y/ P0 Y# f004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
6 ?6 Y. ^) Q# f0 j' V% B004032AE E8 D8C10200 call qsr.0042F48B
* x2 q) ~4 @* ]9 _# w004032B3 6A 04 push 4
( O! |0 v4 z$ f; q4 y2 T004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
6 O( m; f- Z9 `/ }& g004032B9 6A 14 push 14+ s. B( q8 c7 U9 L
004032BB 51 push ecx) v" |( M4 F: e
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50], L3 L" c1 D% Z' n( E8 C9 H& d
004032C0 E8 1F530200 call qsr.004285E4
3 n- Z( Z0 \( R% U. v004032C5 50 push eax k! c# ^4 k; q
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& R0 k Q% J4 s/ P- j$ S# B004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
/ ?) P2 ~( S, E$ q3 n004032CF E8 F0C20200 call qsr.0042F5C4
0 ]7 L. y+ a% I7 C6 U004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 q$ e4 n* m6 w* X004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
1 ?' G$ f- W/ {& C1 B004032DC E8 AAC10200 call qsr.0042F48B1 M& ^, Y m7 _" c) b
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI' Z$ U+ Q8 Q* i3 y& s1 O3 I* x2 V
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX% F- j' p! n% M
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL5 B* Q# @2 x2 R; W
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
) ^8 J2 s8 j! L# s$ c9 I4 S. t004032ED 8ACA mov cl,dl ; DL送CL R, }$ V, h# C) s
004032EF 3AD3 cmp dl,bl ; DL和BL比较
- x! i" p. u; R. Z004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
+ R" h+ n3 F3 P [( z7 c$ f/ q004032F3 84C9 test cl,cl
: R0 ?. r: ?$ g, H8 P004032F5 74 16 je short qsr.0040330D9 Q3 x h Z9 h$ [
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
4 |+ `: E$ d, x5 i8 }" Q8 @' c) L004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL% r5 n: K+ Q3 L- r
004032FD 8ACA mov cl,dl* h; N' |' `6 K( c+ x
004032FF 3AD3 cmp dl,bl ; DL和BL比较
3 |0 A4 C7 r: U6 R00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）& g% O1 Q( n: X9 `
00403303 83C0 02 add eax,2 ; EAX加2
, V7 @; {( j6 q" p8 ?00403306 83C6 02 add esi,2 ; ESI加2
3 ]# P( u3 r! G; C00403309 84C9 test cl,cl
! ?0 x4 c$ Y j0 v M0040330B ^ 75 DC jnz short qsr.004032E9
: v" s* p+ g% i: h0040330D 33C0 xor eax,eax1 u) K) h# Y# u, X
0040330F EB 05 jmp short qsr.00403316
. |4 @( F/ P" U3 _3 r( {) X) ~- _7 a00403311 1BC0 sbb eax,eax
5 h1 ~/ e: f" Z" ~4 I3 g! g* z00403313 83D8 FF sbb eax,-1
- c' M* t- N: L' ]9 B( j3 S6 d00403316 85C0 test eax,eax
0 ^/ P- H I Z, }- G) _# F6 s00403318 74 0E je short qsr.00403328; j$ `) G* ]) x7 f; U. k" v
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A! {3 x7 z) q: }: k6 T7 B% M
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
" p# A1 t2 G' i+ n( b$ D) B/ ?00403323 E9 F0000000 jmp qsr.004034189 [" @ o: w" Q$ v8 }% X; i- r
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX# I2 @" `' M% }$ \1 P& c% g! J2 E- C
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# H- M; y$ c' P; P9 X+ ^
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8], ]! `9 Y- ]- r# o" R+ u3 `
00403333 50 push eax
$ q7 [! v4 \5 I& ^ N0 Z: n% f) b00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
* Q$ D, m& q2 V3 x' d# Z' G4 J4 |00403339 50 push eax9 U. o" R- c5 p t: E
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
, B1 j1 R/ \2 r2 c) n0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX Z* n- U8 Z6 U0 ~5 W; {
00403343 83C4 04 add esp,4+ x, u) z$ s- J+ Z8 p' ~2 H
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
: @2 K: g3 z- |: `1 A00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]4 R) U9 V- S- X4 ~. G' |) T
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
1 t. C" m) }% f0 J% C0 O0040334F 50 push eax0 k6 u! L, D9 ^6 H2 S' c) i! f5 O
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX5 W3 b# d! B- R: |. `! L
00403355 50 push eax7 I" Y$ U$ c3 z# ~
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX5 k' G# R& C& y) `* m
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX' A* u- J9 ?. P( i: e# u: v2 T Y
0040335F 83C4 04 add esp,4
; b! Q8 r6 I. o/ L& x; l00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
- x2 O9 q0 X; t) {0 F9 R00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& p3 }; A* }+ v6 c00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]* x5 l% d( l( k5 k3 N" n' _
0040336B 50 push eax: w* x) T/ b. @( {1 I9 y; |
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
" i8 u6 Y* f" g/ e! O$ h8 g& g1 E00403371 50 push eax! m& A6 \: Y. S
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX( F7 a! D- { Y& C7 P' @
00403377 8BD8 mov ebx,eax ; EAX送EBX
9 r& Q2 r7 ^2 p/ `' Z/ v3 `00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX% Z& \7 h! V& `8 T' I
0040337D 83C4 04 add esp,47 Z$ J$ [6 d( [ ]
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
* k7 F* C5 Q9 H. E" g8 o7 U1 F( A00403384 8B40 F8 mov eax,dword ptr ds:[eax-8] n( s3 l/ [% L' ^- _$ W$ {
00403387 50 push eax
! G' _4 r. Y% R- J0 Z00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX2 Q3 H, a3 m) R$ C
0040338D 50 push eax2 T2 ]: ?( [- `3 p0 r. l) l5 \7 d5 T/ |
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX& Z* p5 j' K/ ~8 v
00403393 83C4 04 add esp,4
' E. c: g% L0 |7 y( p00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], \) D O }: g
0040339A 8BE8 mov ebp,eax ; EAX送EBP
- j2 y; B; M; D, B0040339C 6A FF push -1! J6 W) R; ^/ G+ w$ S; J2 ~
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX0 Y1 z$ ~$ D3 ?. d9 w/ u" M5 V4 k! q
004033A3 6A FF push -1# `' B, o9 T# t- f+ W! A3 {& U
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX. ?( {* ?9 }! Q8 s$ ]
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
/ b$ l) f: {3 k" D004033AE 6A FF push -15 _2 v, X+ S% G) S% K3 m* T; `
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
1 k- d7 O, l0 q. G" l004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX/ }+ V% C5 ~, n2 u9 X. ^$ y
004033B9 6A FF push -1
7 S; j/ t7 V8 f6 S; T004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
1 c( {. R& S4 Q, U$ |4 F' j, A004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
1 f" H) Z0 ]: ~) v004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
& g# N" x8 }6 K1 t& b004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX; t5 i$ @+ \& ]* N( p% h
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX# |( b% r5 c$ z. h! @
004033D7 D1E0 shl eax,1 ; EAX左移1位8 ^% K, z$ M0 R8 G7 z5 x+ Y
004033D9 99 cdq ; EAX扩展
) _& @/ z4 x6 U8 R5 p# m2 } ]3 _$ y004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
W4 i$ j# w. `+ |4 R) p004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较# z& J) [; _" i8 A% F
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）8 l0 I; L; A6 |( ?6 q0 x1 c
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
% Q* n( ]# Y+ d; L" o004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10], y$ ?# J7 ?, i
004033E9 EB 2D jmp short qsr.004034180 |3 W; I+ r& p6 Y; o
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX8 l" ?4 c5 Q. Q+ V* }
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
1 q1 {% d& I, S/ ^) p6 \004033F7 99 cdq ; EBX扩展
2 s7 R% Y- e5 _* ]) D004033F8 33C2 xor eax,edx ; EAX和EDX取异或- O" ~7 `6 @, h6 j+ F
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX* n7 o! r. y( A& N) w$ ?& f$ M% X7 b" y
004033FF 2BC2 sub eax,edx ; EAX减去EDX7 O; q7 [$ G' {) L) q
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]4 g; ]% A8 ~ \- ^3 L6 k9 E. y
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
& l* B& s5 l. Q3 D7 `4 C00403409 99 cdq/ h' J! d$ b+ l' K) [) ^1 ~
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中; l. x, f( [2 R" N- R2 t2 L5 N; M# x
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX. `7 V4 ]% J2 w& F
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
7 n0 Z" X* ?! {5 G! v00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）4 _4 r' h0 m) \' p+ O
00403418 E8 6EC00200 call qsr.0042F48B ;
* `8 ~# i ?4 J f& ]5 M: j0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
% E) H$ M. {/ O00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],90 h5 `: D# f( d# ?& N& |! l8 ?
00403426 E8 60C00200 call qsr.0042F48B! H, g# ]6 `% E7 q5 i' `
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]8 c1 O2 I+ {9 S% L( f; ^
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
3 o, ^1 `0 ^8 @$ N% s00403434 E8 52C00200 call qsr.0042F48B$ b- i4 ?4 b4 {
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ W7 r V, h% n, F3 }; i) t
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7# I: v- c5 H5 {! v! T, w8 A
00403442 E8 44C00200 call qsr.0042F48B5 N9 c- k4 Q+ l: }) w/ z' O: B& |
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
: U) w; J7 y& P" a. s& ]- A0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
" B# n2 p7 X# {& {7 J00403450 E8 36C00200 call qsr.0042F48B+ \9 `0 e; P/ k" K
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]3 ]) l4 H/ |/ ]8 Y; s0 W
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3. } R o2 \: _/ c) z2 A" p6 J6 T8 o
0040345E E8 28C00200 call qsr.0042F48B
; q9 t* m' Y. R; t00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
) t) N; ?0 H) t3 \) ?6 X1 B00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2* L4 S) R% F2 d, a: Y" i! [
0040346C E8 1AC00200 call qsr.0042F48B
4 }9 ]* ] k- e0 i( x/ M00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]1 S* O5 Z. S- @ O4 a& `
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
( ~/ ?- \5 ~5 R2 X' \4 n0040347A E8 0CC00200 call qsr.0042F48B
( s% T8 z9 w; V V3 K( l0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44], |8 v* E% f- C* J; J* F- C0 m9 N( m
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0! Y0 P; O8 X3 P7 [# E" H
00403488 E8 FEBF0200 call qsr.0042F48B
' ~- a' Z# z5 B: {! j+ }) ?0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& K$ W9 @+ o/ |7 I! ^
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
3 } U- k0 M. r& B7 V$ C w00403499 E8 EDBF0200 call qsr.0042F48B
& W8 t; K3 H$ ^1 Z+ [0040349E 32C0 xor al,al ; AL清0& g$ x% }+ S: p& n) Z" ^6 ]
004034A0 E9 88000000 jmp qsr.0040352D3 m1 g1 Y, C; Q$ T( L8 K$ s
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
E. B0 a1 V2 a' G* h7 M( q8 q0 I: D004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
, c' d3 A2 Z1 ^004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
4 s/ s! Y# Q( Q; o% |2 S) |004034B3 E8 D3BF0200 call qsr.0042F48B2 i1 q1 P- y7 k* k( Z
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
6 O; l# s* D! ^5 J; P004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8- w( I- z$ X" G( ]
004034C1 E8 C5BF0200 call qsr.0042F48B
# _& P' M |! ]' U( E004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 I# X* P/ d" X2 e
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
( R5 B; Z" {. ? q! [! N004034CF E8 B7BF0200 call qsr.0042F48B# r- ~+ y# O# r' h( k
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
; N1 Y. [ S0 Y) c& u. i004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6& f8 ]- @) Z8 R' a8 C
004034DD E8 A9BF0200 call qsr.0042F48B( }$ T$ ^) P" A! W" A0 n0 M& k
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]: }- n, D4 \* @5 G
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
1 ^$ b7 N( M8 c) H! {5 Y$ r% q; P004034EB E8 9BBF0200 call qsr.0042F48B# J$ M3 o9 K1 F ?/ [' O! e
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]- c5 l# x: i7 l: A
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
* f( K* T$ f: r5 K; G9 _' Q, m004034F9 E8 8DBF0200 call qsr.0042F48B
u1 B& `& R: ^4 s, o004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]8 Y( b3 p& s4 Z
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
$ E4 s+ v* m7 H/ M- q+ U, b6 E00403507 E8 7FBF0200 call qsr.0042F48B
( ^. i! S* T: S6 `; G0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]5 R$ e% \3 l% e% y% b3 m
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0/ w: c6 ^- g) o& I7 J
00403515 E8 71BF0200 call qsr.0042F48B, P4 }: y6 h9 n l4 G
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& ~& E8 b4 N4 A! s
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
# G. Q8 L3 |9 |00403526 E8 60BF0200 call qsr.0042F48B5 @6 j) A) C; {& K' p
0040352B B0 01 mov al,1
7 b" D3 _' V/ ]/ a3 h R0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
' b ?0 X; V/ i: P" l00403531 5F pop edi" A' X+ z8 \4 V# ?
00403532 5E pop esi) n6 B h0 y3 j( W4 X7 }
00403533 5D pop ebp6 H; N, t0 p; n* l O0 p% ]
00403534 5B pop ebx
) ~# ^% }7 |) \" {. r8 V00403535 64:890D 0000000>mov dword ptr fs:[0],ecx/ h/ ^' i: @( A# G8 C0 Z: i0 W
0040353C 83C4 30 add esp,30
* V0 j0 R' O4 K ?7 u: l9 q! j" @0040353F C2 0800 retn 8
1 z ~" L* L$ s; B( d" p--------------------------------------------------------------------------------
7 Z% Y% G# B$ H# D, L; C【破解总结】4 C. O( I4 x ^" v& O1 k3 S. V
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^1 n& x" D6 l3 t+ A! d" x2 x
用户名：yijun3 w! n+ O& ~+ Q; L9 Y0 s. t
注册码：4893*7777*3726*7777*0529 T i0 p# W$ n: T) }# S& l9 g8 q v
--------------------------------------------------------------------------------3 U$ i2 t' ]0 D; g- g; C
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡