|
|
|
【原创】破解Quick Screen Recorder
; w$ ?; m6 u" \0 H" S$ [- Q! U【破解作者】 yijun
& K& `' ]( O! T S! W【作者邮箱】 [email protected]
- C0 a3 G9 _7 z. z) E6 t【使用工具】 OD,PEID
k3 p% }7 j' f" u【破解平台】 WinXP; g9 Y# H; e* S+ O
【软件名称】 Quick Screen Recorder# J* ^1 ^1 [: `$ ]% |1 K/ y# F
【下载地址】 天空
( z/ i, @5 m) [, g6 Y6 w【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. L/ n! x2 o- Z: a1 K! |
【软件大小】 540K- F6 i) t0 Z$ j
【加壳方式】 无
4 M, i" f1 v3 B4 W【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
( P( q; O# |+ f9 y5 W0 @7 [- A$ F--------------------------------------------------------------------------------% k2 N2 ?; T8 @. E
【破解内容】" o* }4 E) h9 [2 F4 B2 R+ W
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
) M/ x# p6 J7 T) m00404C69 55 push ebp //在此下断( v8 @$ H: @+ Y/ X, l8 b0 s
00404C6A 56 push esi+ d! f( p- }( B4 ^
00404C6B 57 push edi: h& _6 n" u( z3 y
00404C6C 8BE9 mov ebp,ecx5 T. K4 p! k6 L( l) P
00404C6E 6A 01 push 1
0 \* | c4 f& p, r: p00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名9 a& {7 _$ ?+ [7 u% M2 b. g
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
- g6 s/ i( a. u; N00404C78 8BCF mov ecx,edi! M. ?- f, n& w6 @- d& b
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
1 p5 K: [% y: i5 b3 Y- b( w00404C7F 8BCF mov ecx,edi0 L/ k" K* o2 [
00404C81 E8 A73E0200 call qsr.00428B2D
- x7 T. `: N$ M c) O1 o1 I00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]# u3 }4 b/ k; G* Q
00404C89 8BCE mov ecx,esi. s1 `! w- r0 Z( u# q
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX* r. g7 u+ x0 z% S( x' e
00404C90 8BCE mov ecx,esi: x9 g; i; k6 j2 R
00404C92 E8 963E0200 call qsr.00428B2D& O1 C9 x" {* T$ O" x% x% f& ]
00404C97 8B06 mov eax,dword ptr ds:[esi]$ p- _ }1 i8 M- _) h
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],25 K/ F/ Z0 [* t
00404C9D 7D 26 jge short qsr.00404CC5" [/ ^4 F+ ]& @- p }, g! e( Q
00404C9F 6A 40 push 402 D4 L0 f: A, u7 z
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
8 h) |& m# |3 v; j. g00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."5 v8 }. @. L* t! F8 \, Q6 q5 W- r
00404CAB 8BCD mov ecx,ebp! P8 e5 R4 y Z: N, c( }& i
00404CAD E8 C3840200 call qsr.0042D175
; g; V$ L8 u% f H5 n) I# a8 u( i5 u00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]) i% a" U' T$ g' y* w" f) c
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
3 T! o1 m" d; C+ T# I2 t/ Z00404CBD 5F pop edi3 V/ t: m9 @% V2 Y g+ e
00404CBE 5E pop esi
' ]6 |: Q7 V, S# J( _00404CBF 5D pop ebp" t# D1 m7 q4 `- T
00404CC0 5B pop ebx
' y8 L9 O# o2 _4 P, n! l' u* T6 ?8 t00404CC1 83C4 18 add esp,18
! n& I% X) \; G* C7 ?00404CC4 C3 retn
`% H! t8 U+ G1 p8 T$ `00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
( I- h, d a( V* [* B; q00404CC8 84C0 test al,al' q4 h% Q. o6 _7 _
00404CCA 0F85 1C010000 jnz qsr.00404DEC: |6 ^6 W5 n6 z
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: G' I8 J6 A+ C( |" H00404CD4 E8 87E3FFFF call qsr.00403060
; o4 s4 O, D! u/ r00404CD9 51 push ecx
% x' D* \: |4 }% Q# A7 m. g00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0. o* I4 F/ T+ N" d4 r8 K X% j6 V
00404CE2 8BCC mov ecx,esp- r7 B& z, l W* B; v2 L
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp; T1 H% ~6 H6 T2 A: u0 A
00404CE8 56 push esi
- }$ L3 j. `# f3 S6 S00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
! ^. @' o6 \# q* q1 o* K" T$ Q00404CEE 51 push ecx
# l9 |; M3 E2 F9 V00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1, ?- A% n/ ~0 R
00404CF4 8BCC mov ecx,esp& J+ L; M9 P$ y7 @8 C
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
0 W9 `7 X/ O$ f! e% T3 S00404CFA 57 push edi% W+ Q) B" y" F6 ^8 }2 I- w8 Q
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
6 @* O" p6 h7 J R- I& G00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] M/ }# j) ?3 _ e
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
) y8 X( u& {0 ^, B00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~( S `; E! V- Y3 p5 }
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
- A2 Z' H& M2 E00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
- Q! O9 U2 @+ M3 I. G. f7 K0 f2 U! c B00404D12 6A 40 push 40
# J' I! W" }, w) c2 P& C- e- ~00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
$ Q! v: J5 N" L9 t7 j4 B& |* E' D00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
) J( E, R) ^( A00404D1E 8BCD mov ecx,ebp
$ u; l( h$ ?6 ^2 }5 R3 H4 `" L+ q00404D20 E8 50840200 call qsr.0042D175
: Q. f/ }. `/ B* o1 G' b00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 ^0 c& r6 `: F" U" {' p00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1, o6 U. q& v0 l, a
00404D31 E8 5AE3FFFF call qsr.00403090* z |( B- Q: M# [+ d9 n# z; g
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]5 \: l. q) Z# ?& c& p E& C4 u
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx# i- k0 q9 x: H" b: m/ I
00404D41 5F pop edi+ q1 {, I, i( J
00404D42 5E pop esi9 Z( X- }( [- A) f$ P6 H
00404D43 5D pop ebp3 s1 Z6 @& C2 h5 D8 V
00404D44 5B pop ebx
! f$ @2 K- G' a* u5 ^00404D45 83C4 18 add esp,18! O/ I: I% v. R/ Z/ `, [
00404D48 C3 retn: g" q& o4 T, i5 N7 _% Z
*********************************************************************************************************************************************************
' @ d$ |4 n: l: e' `跟进00404D09处CALL来到：
) D, [( E# d, R+ ?/ |004030A0 6A FF push -1 //一路F8下去~~~~
. A( U* J" V I7 K4 o9 ^9 j5 }004030A2 68 C88F4400 push qsr.00448FC8
2 P2 }7 t3 c" q2 V3 w5 v' P. j004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]% |; u# g' f9 u2 L7 J1 N* j
004030AD 50 push eax
8 L7 R4 j6 ]& U5 `% `6 G; _ h004030AE 64:8925 0000000>mov dword ptr fs:[0],esp! ~( F9 J! {# I
004030B5 83EC 24 sub esp,243 d% g! k, [( n5 x. i
004030B8 53 push ebx+ M& a1 R) x# d5 x' h
004030B9 55 push ebp% \# [, K. T: f/ [5 X
004030BA 56 push esi
' F: S1 a2 K7 H/ }004030BB 57 push edi" o3 j$ Z) [* t: C- N- f. r
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
6 ^! O1 I8 H; N, f: K004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]6 [* u7 a, \7 z9 n
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],19 T. z9 w: a3 N8 _* P
004030CD E8 27C40200 call qsr.0042F4F9
1 |0 L8 F$ T8 |" v' H004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
5 q- d3 k: X2 _6 p' t! |4 ]: y004030D7 894424 2C mov dword ptr ss:[esp+2C],eax+ e$ o% c' S# J7 w$ y( |
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
, y6 _! I# X* O& D004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3) \, L% u4 Q5 L3 A, j
004030E4 E8 905A0200 call qsr.00428B793 b+ K1 J" u* c2 e
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]* T# ^2 e+ x' }8 s3 q5 w- b
004030ED E8 3B5A0200 call qsr.00428B2D
) \2 X; ]. z8 V* V7 B/ {# N' |004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]/ m5 D, [' [/ j5 N
004030F6 E8 7E5A0200 call qsr.00428B79/ V) K- }3 a/ F8 j% v
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
/ B# V0 ^1 y; v004030FF E8 295A0200 call qsr.00428B2D' L: P; G0 G/ A9 w/ v
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
' \( w [: e4 E; S, I00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]( A, G6 Q6 A7 }0 M$ s6 v2 d% h
0040310B 83F8 02 cmp eax,2
! W2 E5 u& \3 g1 `/ p0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
) Y; c7 [4 z" O8 M7 d1 `2 Q00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
7 D; d# P: Y r7 O3 E00403118 837A F8 18 cmp dword ptr ds:[edx-8],181 K% B4 ?& e% ?( d* w* t0 X
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳+ \% A4 ~5 }* y- e% A- ?. {" h
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]' n; I# ~+ I( `- Y
00403126 6A 01 push 1
' w% o. T' T, o$ R; h8 A00403128 50 push eax
6 D$ w, S3 a2 S$ L+ a! r1 N$ P00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
7 H; I* \4 p Y* ~0 W0040312D E8 C4550200 call qsr.004286F6
; U) L) D; y" s. q+ l; v# F00403132 8B00 mov eax,dword ptr ds:[eax]
* D) H. [% K, b: f& J, H00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ c# r+ O$ c! m4 P
00403138 50 push eax! w1 y& w+ a; F
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4/ \1 a9 H4 a" ~. o2 C+ V
0040313E E8 4D560200 call qsr.00428790
- b3 _* N t2 M, z00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) F) f% K& r& e/ R( N5 W Z00403147 8BF0 mov esi,eax' K% _( }! w* g! ?5 l
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
2 J Y. n& P0 k& |9 _3 v7 B0040314E E8 38C30200 call qsr.0042F48B
7 ~# \2 m' m/ m( `) w' _7 q8 s00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
* t$ G$ q8 r5 j5 h00403156 B9 3E000000 mov ecx,3E: W- K l9 \1 V' A6 Q
0040315B 99 cdq& o: d( S: q" ^0 a: v" U3 j
0040315C F7F9 idiv ecx d9 b ^0 _% g @2 E- i6 T
0040315E 6A 01 push 14 e8 U7 M6 x9 {, e$ x4 Y9 w
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
6 a J5 s* K( k" ^( \0 Z00403164 8BF2 mov esi,edx
7 b" c9 B0 w$ Q+ u, p00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
1 c& e- a2 I$ X( F( o/ v2 @0040316A 52 push edx
( S! b( n+ Q4 f# Q" _" T+ u/ n0040316B E8 0A550200 call qsr.0042867A
- L; n, {+ c7 G! v. T3 ]" i00403170 8B00 mov eax,dword ptr ds:[eax]% h* W7 Y$ q; B5 h7 g9 X9 r
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- e4 f3 P* |& Z% b8 I( e
00403176 50 push eax# g7 W+ O( _# p, F
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
3 H1 W* B+ k( n: P0040317C E8 0F560200 call qsr.00428790
: d9 K% K8 B/ n6 f1 y00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- o8 w/ S9 Y$ Y/ G5 p4 u$ V+ g
00403185 8BF8 mov edi,eax6 A6 }' h5 D$ J; p3 s7 [
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
' @9 E( ` B2 d' S( ?$ w0040318C E8 FAC20200 call qsr.0042F48B
4 R# M& Y- w+ J$ _00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
* s: a& l9 ?+ n00403194 B9 3E000000 mov ecx,3E# A) P" F; t2 R& T2 \) M5 k
00403199 99 cdq4 M) n) N% [. @9 \! E6 g2 y
0040319A F7F9 idiv ecx) h- x1 V( o5 V( ^
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]; [' r( \# N4 P. o6 E
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
* ]! v( K1 z' T004031A5 8BCA mov ecx,edx
) x* N) U9 j- I, @7 B" Z& X004031A7 894424 24 mov dword ptr ss:[esp+24],eax
. W0 k3 s6 z4 A( {004031AB 894424 1C mov dword ptr ss:[esp+1C],eax. r0 Y& o1 S6 K2 C! r- q8 `
004031AF 894424 18 mov dword ptr ss:[esp+18],eax3 x$ U! w! k0 H# F: ^$ q, i
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
! @ P: R, @8 a9 T4 j004031B7 894424 10 mov dword ptr ss:[esp+10],eax
. f2 g# i9 S: T8 T _004031BB 8BC1 mov eax,ecx5 A8 d! `" B0 `8 k- G
004031BD BF 0A000000 mov edi,0A
/ e4 x! h4 q& Z0 ^- q004031C2 99 cdq" a6 P. |, A4 X, F1 c i, T
004031C3 F7FF idiv edi
$ Q' M# V% V, \) T- C/ d004031C5 8BC1 mov eax,ecx, a, j3 Q1 ^3 m0 `6 @) q
004031C7 B3 0B mov bl,0B
+ ?1 D+ f6 B) c004031C9 0FAFC1 imul eax,ecx
5 R- u8 R% o. m$ O* x( w/ e004031CC 8BCF mov ecx,edi
% j' \5 `1 z9 |% Q& d0 Q3 [& Z W004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
0 j) c+ V+ r# x* \# Y4 q8 u004031D2 52 push edx2 l9 n6 d% T3 ]
004031D3 99 cdq
) ]7 N5 w( _2 c' s. K004031D4 F7F9 idiv ecx
A2 K. Q2 N' ~$ ^% [* Z8 P) s004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8] ~* z4 V; X$ O! |
004031DD 2BC6 sub eax,esi
( r' W7 P8 w' }7 g0 c* i9 l" p7 i004031DF 52 push edx6 ~# a B. |# a) K* V
004031E0 99 cdq
9 X- U+ k( h) E* j" W) d3 ]. U004031E1 F7F9 idiv ecx
% ?4 U& A4 I( c6 z0 h' T E8 m004031E3 8BC6 mov eax,esi) e P6 z, }6 c- v! s, a
004031E5 52 push edx' f# G" t+ k% h% k. B/ L' Y8 b6 z+ K
004031E6 99 cdq
" A; y1 N7 x% J) W004031E7 F7F9 idiv ecx
( a$ k/ Z3 f' s" C5 L7 u004031E9 52 push edx- E8 S# ]2 {9 }! b* P9 L& {
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]4 }' r: I l1 L) g
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d", ~( E" }! L0 c( J: H# {) x% u
004031F3 52 push edx z3 v! {; Y ?% X% m& U9 C- _8 i3 h
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893" Z. Q/ S4 M2 B( H6 n
004031F9 83C4 18 add esp,18- |0 w6 z! G4 ]9 D3 Y% B# _
004031FC 6A 04 push 49 P* j( p& w/ {" F" ^2 x. z; v$ O
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]5 i+ Z; V1 b9 ^+ j" y4 A- d" e
00403202 6A 00 push 0
6 {, P& a$ f, b4 {2 s00403204 50 push eax
: O2 h: z) I: L9 X& \ G00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]! q; f, I' l! l0 B/ X6 b
00403209 E8 D6530200 call qsr.004285E45 u# S5 h4 q1 j* l% u" G. T
0040320E 50 push eax
/ b" `! F8 z7 _# u1 i a0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]- \1 S/ r! q* J5 g" S% f* F7 X8 t
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C+ q4 A1 N- @, [, P0 Y( y$ N
00403218 E8 A7C30200 call qsr.0042F5C4
! C) d0 S) a, T' c0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 u3 Y1 W4 z5 \/ U5 K00403221 885C24 3C mov byte ptr ss:[esp+3C],bl* {6 _9 @8 I, y, Y! z
00403225 E8 61C20200 call qsr.0042F48B5 }* C- a9 L6 t: v* N6 X
0040322A 6A 04 push 46 p. n8 i" V0 ^! a) W( P; |
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
- b+ s3 u; R/ U00403230 6A 05 push 5
7 k7 q3 |* I* L7 l, O00403232 51 push ecx& N1 f; J \ [1 b; f" d& [7 X; V
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" d, M2 `# s4 |6 s00403237 E8 A8530200 call qsr.004285E4
8 n y- C' ^& a$ W( q; z0040323C 50 push eax" w* ?, |! [8 l9 f
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
& p" w7 N) F, F, c0 h1 K! h" @: x00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
) I6 l: i, U! k. ^1 m4 q, m# }00403246 E8 79C30200 call qsr.0042F5C4
. G$ m j4 J% p3 f q! f0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]! M. f' x! a* x/ J s
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl! e2 G" T$ a1 d' ?% A. ]4 d1 f
00403253 E8 33C20200 call qsr.0042F48B
- `/ q4 ^# s7 F7 a00403258 6A 04 push 4
+ T6 \. u+ R; Z0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
% Y, C% W K* z( ]" [% @- v0040325E 57 push edi0 x8 N5 k. w2 g3 ~$ w
0040325F 52 push edx
* R/ D- e5 S" p00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- }) T1 q7 D- Y" R1 y00403264 E8 7B530200 call qsr.004285E4: ~: b7 t0 F+ \6 G3 q0 \! h9 R5 ^
00403269 50 push eax |" D: K, R5 ]6 |7 d
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
, t) I* K: k3 e' L: e$ f0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
- A9 P3 F2 W7 n n8 X00403273 E8 4CC30200 call qsr.0042F5C4
0 g# s. {) ^2 P3 R00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30] q6 G8 d. |9 O0 O# a' i
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
$ b( \3 _$ p3 @00403280 E8 06C20200 call qsr.0042F48B: e. p" Y) x& f: M( a4 ~' m- h, C
00403285 6A 04 push 4
+ b: Z* N6 ?: O9 U00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
0 `# E/ k6 ^4 B7 p0040328B 6A 0F push 0F
+ x2 w( t9 [& a1 N& P/ C* A0040328D 50 push eax
5 l$ v0 o f) k5 w& M6 S4 c* {' `0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 H W, u# v7 T4 B3 S. B- }00403292 E8 4D530200 call qsr.004285E4! o3 v- o! E: D" {1 T4 k4 L8 B: W
00403297 50 push eax, b+ u9 W8 T S3 [ o5 d/ n+ t
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
4 }1 X: I* b4 ]. I; n# |0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F9 x r' Y9 \# l2 `4 p$ |
004032A1 E8 1EC30200 call qsr.0042F5C4' x' P9 o7 E. |; n' r& G H
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 T8 m0 v1 S/ k2 u004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl4 h7 A- {" a/ x9 t% q) }
004032AE E8 D8C10200 call qsr.0042F48B
, w% ~* o/ [+ E0 A1 H" O/ a004032B3 6A 04 push 45 P8 p) M4 O. s+ k. }" R2 }0 x) K
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
. t" k$ f) t/ G6 S004032B9 6A 14 push 14! g3 L, Y. H" V
004032BB 51 push ecx# B2 p7 M7 X |. E5 C' b; l
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: E/ M1 S& Z1 i/ B
004032C0 E8 1F530200 call qsr.004285E4
: U r$ @3 G8 q5 U004032C5 50 push eax
0 H) {) r# x" Q004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ G8 X# Z+ x: r) ^4 a+ d9 [' \004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
7 d1 w, S6 x& G% F004032CF E8 F0C20200 call qsr.0042F5C4# a J& e: P, x$ B/ y+ C3 d s# K
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]4 O1 q5 _+ E0 V' x; R5 R
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
3 g& P" H v2 S; i+ z% f1 I3 C004032DC E8 AAC10200 call qsr.0042F48B/ ~7 Q0 U! O7 u6 K/ i
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI7 Z7 k! {; i: z: y# r2 G% e
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX: r0 o$ t4 u A0 S! E. u5 s
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL; V5 b" l' L, O
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL" j2 z& k& f3 T* p3 M
004032ED 8ACA mov cl,dl ; DL送CL
; O* e5 g7 [" ^; k3 \( s2 ], \; o004032EF 3AD3 cmp dl,bl ; DL和BL比较
1 U# g# ?7 }/ A- y2 |7 D004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
( M5 k, Y: n+ X1 A# z* ~7 ?/ |004032F3 84C9 test cl,cl
) P! ?* W9 H5 j9 H004032F5 74 16 je short qsr.0040330D, S. @4 s7 K3 ^
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL4 x n' O1 a4 u: n8 c1 Q' j: B3 S
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
6 @& A7 T" `, z1 ~3 O) g) c004032FD 8ACA mov cl,dl
, J( C- k3 y) I4 D( G. `* | f' S* a004032FF 3AD3 cmp dl,bl ; DL和BL比较
- Y) H- g7 p8 e; J* n00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
+ k% R- C: W+ E8 H. J00403303 83C0 02 add eax,2 ; EAX加2
* ^. N0 P0 I p) U* Y/ ], m00403306 83C6 02 add esi,2 ; ESI加25 }7 o. y8 K# G( Q4 y1 s" ?
00403309 84C9 test cl,cl
( h" g$ t/ W. V0040330B ^ 75 DC jnz short qsr.004032E9. s' [/ a3 s# k6 L/ U' p
0040330D 33C0 xor eax,eax8 t# s4 _1 M' a9 c* w
0040330F EB 05 jmp short qsr.004033163 J2 d1 n8 H$ V( }) `
00403311 1BC0 sbb eax,eax' r; B: {# a; g5 N0 l5 ^8 d. o
00403313 83D8 FF sbb eax,-1+ k) H; t$ h/ [' u+ E
00403316 85C0 test eax,eax. |& f- S+ r. Z
00403318 74 0E je short qsr.00403328
9 b8 B: e2 K( z0 q" |0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
9 `& K3 \, o* t5 K7 a, Q+ X3 G Y0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]; u' c/ i) V8 K# H3 ?0 G1 O8 x' `
00403323 E9 F0000000 jmp qsr.00403418( i* Q4 d7 A8 S2 }: N/ _; Q
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
8 u- K3 C' `1 `# l; B- I6 \0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 M1 \4 N+ u0 Q6 ?* f) ^00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
3 C9 V, j t: S( E00403333 50 push eax
7 S8 }+ p+ @. R00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
0 W- m1 s8 ?* @; c1 z k- O; D& k- v00403339 50 push eax
6 I9 A M" u( l, P+ R0 a0 Z: l8 t0 l0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX$ D. m- [1 X! t+ ^% I
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
/ u Y( u' U9 V8 F00403343 83C4 04 add esp,4
" }- B1 |) I' t: m1 {7 p/ v00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
6 B; H8 f! C( u3 ^2 D1 W00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]% R d$ D, x1 T) v2 H) P
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]' O- v" U \. o b$ f
0040334F 50 push eax0 n: ^3 ~, |, @
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX5 h* e0 a8 s3 E! ?: |
00403355 50 push eax% S2 k4 @+ N5 w/ a, e1 G R
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX# L8 d' r p, o* M9 W% s
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
6 j0 u( Z3 m( O" o! u7 |' ~0040335F 83C4 04 add esp,4
* ]6 T. Q! @$ z. ^8 ~00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
$ f, W* r1 E* x: G! {% y00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
6 U& r! m9 J$ T" W+ b9 n00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
" S% b$ I" a& P) d2 V0 F7 x0040336B 50 push eax7 P9 i/ A& ]$ d; G- A% ]( I+ r! m
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
' b: D. N# Z) f6 y00403371 50 push eax& [( x" d/ T9 `4 j+ d |5 C
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX6 n3 B. b' W u$ z
00403377 8BD8 mov ebx,eax ; EAX送EBX0 R$ y! X: @, G; f ]5 B
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX: I# W/ L) ?/ \6 v, p
0040337D 83C4 04 add esp,4
w1 b; s) E+ L4 Y+ H4 T00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
( F! m w0 N0 Q V( B00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]& y( v* R+ }6 _4 M4 x4 A% U
00403387 50 push eax
4 C# I. v2 g6 @8 ]* W3 E( L00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX; d' z2 ~8 S0 ~ C) v* u$ j8 q
0040338D 50 push eax
9 T. Q8 r+ X6 M; f6 c0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX/ C1 r; m0 N6 x9 `3 O& V7 F! t
00403393 83C4 04 add esp,4
( V/ Z2 l- F+ A$ S00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]4 g' O% b5 z: `& a6 H; z9 U& ]
0040339A 8BE8 mov ebp,eax ; EAX送EBP( Q; V; `" g4 E+ T# n
0040339C 6A FF push -1
. I1 ~, _+ P& p" B5 V0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX: M }, `6 H5 |0 v& R
004033A3 6A FF push -14 D4 r8 A. {( K/ C
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX9 e4 z- @3 X1 R/ [6 K6 I; d
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
# m& N6 z" k" C0 e& s b004033AE 6A FF push -1 d* x# z) O- q3 M, T* p* f3 ?
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX+ K0 W7 E9 f; g+ }3 t3 ^6 m8 {
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
W, [6 K- t+ A* [004033B9 6A FF push -1
. C3 G% p2 h) I9 Y004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
! Q% P0 D' Q5 T0 G! p/ m! `" I8 U! G004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
9 p9 g- q: |# E# l2 U3 [: j004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
1 U3 O- u. D1 n P004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX- P1 W, H2 g0 s5 |) l: e- D& T
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX, n2 [, h9 v5 }. m& j
004033D7 D1E0 shl eax,1 ; EAX左移1位
2 ]1 d- t- `8 t4 a5 z8 d004033D9 99 cdq ; EAX扩展
# ?% [+ I u0 q( D/ l) t8 w004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
: O+ I# X: D7 w5 i( k! E: t004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较. r% f _; ]/ Y
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
/ i* Y* ?( \& t1 i5 N004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
# f0 r& ~- x# ~* k4 b5 T! Q, V004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
S4 p2 f0 \' y, J6 J* N& ^004033E9 EB 2D jmp short qsr.00403418
; }; Q8 O6 ^- M3 o/ W004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX! L0 ^( K g' A1 ~0 U. s. s; t
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2# W& g- p7 o' _) G. c. O$ x$ N, N
004033F7 99 cdq ; EBX扩展
# N7 F' W; I* J8 Z# ~004033F8 33C2 xor eax,edx ; EAX和EDX取异或
- l' W# L" W1 U. ~8 t' H l004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX! p6 \0 }: Y5 G4 f6 u3 b# n/ M
004033FF 2BC2 sub eax,edx ; EAX减去EDX
' c4 @+ v. X4 \3 s- G9 b00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]/ I( k$ J3 t1 e* K1 G: g$ B/ m
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
! q9 M; f$ a' @$ w0 w A00403409 99 cdq% O" ]1 W3 C) ^
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
1 p& Y3 e4 t, `4 v4 F- N+ ^0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX) D' T! E6 y3 T: V
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
+ Y$ \$ c; [- A# o, b/ `1 B. V00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）6 t0 ~7 Z5 Q, M+ B
00403418 E8 6EC00200 call qsr.0042F48B ; . h/ [7 X- b% ^2 N' c
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
* z) b- j, G9 n& N- |+ b00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9* i" s$ B3 i/ f ?& X+ Y7 _
00403426 E8 60C00200 call qsr.0042F48B, M/ Q% C; ~9 c- L. R! H
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
2 V" I+ e X/ J: E W" ?8 v0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
' W* q, W% k p1 m5 i$ x3 w00403434 E8 52C00200 call qsr.0042F48B
v! G, d o2 A8 c C- T* K6 p00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# e% K0 w3 |* ?! r, C
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
9 \4 p% ^4 w5 y$ g6 E00403442 E8 44C00200 call qsr.0042F48B
; k" B9 T* u/ r00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]1 ^4 x. z5 E; Q/ X6 x) X, Q
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
2 }3 x, u. c% C6 F+ _7 ]% |00403450 E8 36C00200 call qsr.0042F48B
6 b" h8 v3 {0 T* }* p% I# p00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
7 q! c- [& y/ Z00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3 B1 F: d5 Q4 v6 h1 y" b! \
0040345E E8 28C00200 call qsr.0042F48B7 e/ L4 N, B @( Y5 F
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
: {8 ]6 E( m5 d7 x00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
4 D# O9 a5 g' P0040346C E8 1AC00200 call qsr.0042F48B) I5 i( ?" N# O# z) \. N
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]; B6 W& b b: E, ~4 b
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
7 k1 ~6 @4 U2 M' j& f+ H4 |0040347A E8 0CC00200 call qsr.0042F48B
) _! v; V, ^+ y( z8 z0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
1 q. z4 t- [/ I8 h8 p( W7 p00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],08 r/ [0 B8 n" T% \0 B
00403488 E8 FEBF0200 call qsr.0042F48B# i3 T w% I1 \
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
) I: B9 \3 ?3 J# ] q00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1% O8 ]& R. O4 M" o1 M3 i- a+ W" j; d
00403499 E8 EDBF0200 call qsr.0042F48B
3 d* a; [! Q) ?$ o, B; l0 S, y0040349E 32C0 xor al,al ; AL清0. z; ^& d- w% w" v5 h# r: P
004034A0 E9 88000000 jmp qsr.0040352D7 |7 V k" Y& }; Z' y
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~! n7 I( f- P, a* q i4 o/ c
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
) n! a- e( I( d9 C004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
8 ]3 M2 Q/ x+ T9 P& I004034B3 E8 D3BF0200 call qsr.0042F48B
7 P7 E; r: S5 _% ?; q- L! u6 r6 ^004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
# P# w h k. L5 ?% Y8 @+ M7 D- ~004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
, o7 B' ~2 |9 a& |1 r004034C1 E8 C5BF0200 call qsr.0042F48B. n' P! E7 h: O# _( C4 h R6 W5 t
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
- h! I) r7 N5 {, V4 j004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7: ^* }1 F! |# Y" @4 t6 O! H3 z
004034CF E8 B7BF0200 call qsr.0042F48B# V. a7 w: f9 B4 y
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
4 J0 I' S- n: c6 E004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6' _4 i0 r! T0 M) y% M. _ |, F
004034DD E8 A9BF0200 call qsr.0042F48B
- E, G$ ^1 o/ o2 E6 [004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]$ k1 X$ K* F( ]/ n- t. U/ X& B
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
, F+ s& I( _" F" }, @8 A# h( V004034EB E8 9BBF0200 call qsr.0042F48B( i. z. \6 w" Q4 a) ]$ b3 @
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
7 g+ @) ?% n$ v4 M, @( _004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
! N. J3 |. a3 U; Q x004034F9 E8 8DBF0200 call qsr.0042F48B0 B5 a+ ?3 k6 ^+ X
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20] b; W0 f( \4 o5 l/ @# t7 y
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
; O/ |) Q" ?9 t$ l00403507 E8 7FBF0200 call qsr.0042F48B; X2 h2 r$ x8 J+ \% U3 W9 R
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# e! v g6 f4 b2 U00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],07 G T N# ?/ f* s: L4 u% T
00403515 E8 71BF0200 call qsr.0042F48B
/ ~7 h& u) H0 a/ A: [1 B0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]) E- _, U' u7 i q3 W
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1: A/ J# l3 l' T1 w+ C/ U
00403526 E8 60BF0200 call qsr.0042F48B2 b) e) w2 _ ~" x. Z& u
0040352B B0 01 mov al,1: @& n; X" {% V2 {% u$ }& H( H4 d
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
" k+ a) c8 ?" m5 y& ~% ~5 a* Y! n$ A' M00403531 5F pop edi
% L' E- ~4 y! I; |00403532 5E pop esi8 q! v6 C3 E7 ?8 a) L
00403533 5D pop ebp" f+ @5 Z4 c, g/ j4 O' `$ R3 d
00403534 5B pop ebx2 }+ k9 b& n6 s+ h& `
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
n- I/ q8 M7 t6 c* Q/ Z8 c0040353C 83C4 30 add esp,305 @- K7 y5 ^1 `( _) O
0040353F C2 0800 retn 82 B$ R$ \, Y0 C& a" o" ~
--------------------------------------------------------------------------------
- O- |) T: ]0 R【破解总结】
; W% @4 m$ x) q2 a5 f% W" ?" ~+ Y( X 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^: m- B* C# H! g/ o& D% w8 I) v
用户名：yijun, | H9 P& O3 M3 f$ Q! x8 a: u
注册码：4893*7777*3726*7777*0529; \+ ^, @( K' v8 h* b" s1 I
--------------------------------------------------------------------------------
: Z7 P4 x# a% X) S, ?- L【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡