|
|
|
【原创】破解Quick Screen Recorder* ?: k' ?: v" b2 [- v1 ^
【破解作者】 yijun
+ l9 c- ?$ y0 z【作者邮箱】 [email protected]1 N4 u5 ?; U5 p/ d- w
【使用工具】 OD,PEID
" T$ {/ W( z" |! \# {+ x# U【破解平台】 WinXP
$ q* _; R. \& k( W4 R* V! p【软件名称】 Quick Screen Recorder
4 ]! f# m j& ]1 \/ E) g0 d【下载地址】 天空" A$ x; Z) U j" }! a' y
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 8 C; Q% B& f* O4 Q0 J
【软件大小】 540K; I+ ^) b# c+ G0 ?2 c0 D! z, H1 ]/ H
【加壳方式】 无1 P* G0 y! s0 F$ B0 Y& ?
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）9 @7 u' c6 x, L6 Y- r* _
--------------------------------------------------------------------------------
9 `+ B+ n" n- V- ^- Z/ I% N【破解内容】
& n$ _6 A0 ]* i3 Q- D PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：' @( n" n3 W, b9 O
00404C69 55 push ebp //在此下断# r; O! u/ C7 e0 ~7 ]) W9 Q7 O9 H
00404C6A 56 push esi: w# x. }9 [7 Y& m* B3 t
00404C6B 57 push edi% h/ z3 l6 c! E- e* U+ r& n& a
00404C6C 8BE9 mov ebp,ecx
* M" T5 P3 u9 P1 X$ T00404C6E 6A 01 push 17 i9 `! O0 I1 X: n# O
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名% d' r/ y& ^( s, d4 B* y- I% s5 }
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]; B; ]' U: x; M3 M" u
00404C78 8BCF mov ecx,edi" h& w3 W! k- I. f+ X( u% ^
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
* h1 d. b& A8 }( [00404C7F 8BCF mov ecx,edi
2 {2 f! O+ B+ U& h5 d' {00404C81 E8 A73E0200 call qsr.00428B2D& C, \2 w# q' ?. \0 J; l4 L
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
- [/ F0 o# Q9 d0 [) \+ r00404C89 8BCE mov ecx,esi
$ E( O5 M" i+ @% B4 ? e: A00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX5 p, D6 g4 D1 k! `
00404C90 8BCE mov ecx,esi. |. J, E: J: o
00404C92 E8 963E0200 call qsr.00428B2D
q+ h# q9 L" x; Q4 A6 g( V00404C97 8B06 mov eax,dword ptr ds:[esi]2 c: X$ y& L9 t; A! ~" l
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
9 {0 r$ d" D, k% e# D$ r00404C9D 7D 26 jge short qsr.00404CC5
: I4 X: b; I0 r2 W& I! P! o d00404C9F 6A 40 push 40) |% B% U. b$ ?/ o7 |- l
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder", o) Z7 `, k+ z. ]' |" S4 \- P- P
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."4 b; W! m! a$ {7 Y. X8 p! b2 m
00404CAB 8BCD mov ecx,ebp
* X3 ]' p- X! @00404CAD E8 C3840200 call qsr.0042D1756 A: l0 v4 ?# B; C* j6 `& y. v) F
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
' {5 H* {; i! }! o4 n1 D8 n00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx7 \. r. M* y b
00404CBD 5F pop edi" H7 O+ C- p0 H. @" }2 o
00404CBE 5E pop esi: R2 a1 b: N1 S( O7 q8 u
00404CBF 5D pop ebp! J9 b9 C$ Y3 J/ q) t: V/ l
00404CC0 5B pop ebx( w* h4 x2 b+ G9 j2 G* ?$ W1 \2 s
00404CC1 83C4 18 add esp,18
5 `8 W% p' B6 y( J00404CC4 C3 retn
7 |+ u/ ] ^* ^) e* C00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
8 {# h+ }8 C- h* v* x* t- F00404CC8 84C0 test al,al
+ E8 T$ M+ [( M4 E0 ?: V$ O; n00404CCA 0F85 1C010000 jnz qsr.00404DEC
6 \# L" [( k3 J00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' U5 D2 U0 m8 Q( Y! n9 F! {& C; Q
00404CD4 E8 87E3FFFF call qsr.00403060' s2 ^+ ?) l; i' O/ x+ X
00404CD9 51 push ecx \% O d" ?6 m" H0 [# @
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0$ C6 g& [& z) e: q
00404CE2 8BCC mov ecx,esp$ D5 L9 P& q+ ]1 D- m
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp3 e9 E9 A9 ^3 n$ S3 ^, J
00404CE8 56 push esi
3 S n0 ?& P- I( e00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0& Q1 a4 G8 x$ p2 U
00404CEE 51 push ecx
' i7 x" {7 j/ M) Q) _9 S% L0 d00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],11 H9 t% o0 d* `7 C9 |' `+ n
00404CF4 8BCC mov ecx,esp0 @+ r" u/ W9 J. ^0 t* G @" p
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp% |3 b; e9 G( J- C
00404CFA 57 push edi
/ @2 j/ d% E3 Q; A8 b00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0: i/ s4 s$ y- m, L8 w( ?
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
A* f6 v! d8 Z, l: h1 C00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],01 `- Y R& w- W0 h3 u
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
. k# z+ z |$ ]6 ^: P. k( `00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~2 z" ~& b0 H. E7 W- A3 [
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
8 M0 M" d5 x, H& q5 d& n00404D12 6A 40 push 40" F8 C3 k( O. c3 X4 G. N5 U
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
, ~& `9 M. M- S00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."6 ]2 c, I+ D0 R! K9 D: P
00404D1E 8BCD mov ecx,ebp2 Y" k) \$ L: L2 _5 F
00404D20 E8 50840200 call qsr.0042D175- _3 c/ g# d' S S* O0 b- ~
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]7 t+ x4 C$ D- n- `: s; @* H% F/ s
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
J2 ^# v% N! o0 {! M z7 @/ a, X( U00404D31 E8 5AE3FFFF call qsr.00403090
9 Q) l" P7 |& F# y+ M# {5 r00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
6 D# T2 |/ `: d* z) \9 @" d00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
2 Z, u- l: c; Q" c$ i/ D( ^* |/ ~00404D41 5F pop edi; s, t8 L" H2 q) b- P% i
00404D42 5E pop esi4 p" e- G2 O" C
00404D43 5D pop ebp1 M/ h( Y8 |, W- l$ b# k( w% I
00404D44 5B pop ebx0 C3 v/ Q; q2 m; n
00404D45 83C4 18 add esp,18
3 B6 N1 a" T0 Q2 S5 @7 T* N" o8 |00404D48 C3 retn! z7 B( X% e( k+ }) T/ y: }! I# G
*********************************************************************************************************************************************************
% ]1 g9 ~7 o2 D跟进00404D09处CALL来到：5 ]& M* ]' ?/ K; a+ z! o. @( n; [
004030A0 6A FF push -1 //一路F8下去~~~~+ y/ z. }9 Y* k, E$ D7 V( s
004030A2 68 C88F4400 push qsr.00448FC8" f1 V V, }6 G
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0], F4 g$ d# C3 F( g0 Q2 r
004030AD 50 push eax" B4 G5 d) W# s8 Z% F2 C" Z+ S
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
. h8 `8 C. @2 C" {004030B5 83EC 24 sub esp,24% M) O2 E( ^ j; Z7 I& _
004030B8 53 push ebx6 s4 D$ M! j' {3 q0 ?% K
004030B9 55 push ebp* J# D, p, J$ j' a
004030BA 56 push esi
/ ?: U" Q) P" ?* I5 J. r$ L004030BB 57 push edi
; J. Y- C0 A2 n, ?$ }004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
# b! J& X* M+ a9 B, Y) s004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]4 t" s+ \' ^ `7 @+ e. E+ ~1 ?
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1& \" `9 N; I! j/ l
004030CD E8 27C40200 call qsr.0042F4F95 n1 Z1 y7 i. t6 g6 k J; }. }( `1 ^! V
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
9 z, C9 V/ R- X/ j004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
4 I1 K! q1 _/ U- n8 T004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
5 O5 q, \8 |5 K3 }' ]# n$ [% J004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
- Y3 b) b: d) Z6 e8 T9 p004030E4 E8 905A0200 call qsr.00428B799 i h$ [$ d2 K7 @3 }; U2 `. b5 s
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
5 T, u( B' ]1 d+ P004030ED E8 3B5A0200 call qsr.00428B2D
0 I y+ D! _& c+ Z7 s" a004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
2 U8 g/ A: ]$ _5 \/ \( H004030F6 E8 7E5A0200 call qsr.00428B79& o% c/ Q E* P. Z
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! ]# b+ t6 A8 H4 ]) E6 L9 h; o% c004030FF E8 295A0200 call qsr.00428B2D
1 t6 X2 Q; v. q8 y' g) C00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]" C) u4 s: b/ x& \( _ e
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]( O6 n0 ^! B* Q2 a# U1 j: N& i9 F
0040310B 83F8 02 cmp eax,2
; g v! }0 U: l7 f0 g4 o0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳8 I# r" w. U* i" G( T
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]$ k; I- K. C1 ]# o- E
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
% r0 O9 ~" y4 i6 R; d7 t% ^/ h- Q0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
* s4 y9 v2 Y W00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
1 z* K+ q- m9 ~+ {+ y: L00403126 6A 01 push 17 x6 ^5 Y7 X) X# [, R5 a
00403128 50 push eax7 j, c4 r6 V( N' o" |
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: o- v0 s3 b: [0040312D E8 C4550200 call qsr.004286F6# f; u) x6 e3 c1 K: K
00403132 8B00 mov eax,dword ptr ds:[eax]+ u4 w. u7 R; L+ \7 c
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]( u. [% q' W" C3 ]0 G4 p$ s7 m* l
00403138 50 push eax
! q0 m* B4 i/ _- ^; Q, g00403139 C64424 40 04 mov byte ptr ss:[esp+40],46 Z" |5 E) _$ \0 w1 \, |$ r
0040313E E8 4D560200 call qsr.00428790
0 q& W' k8 ~. `- n00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]0 I- a. \* ^+ a, H) I* X/ j
00403147 8BF0 mov esi,eax: V/ m, p8 S% w9 m' I
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],30 c% u2 g: T! }; q }, ]3 D
0040314E E8 38C30200 call qsr.0042F48B3 t7 B, v I1 V( s4 }/ c
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
0 A2 u4 n2 D& U \+ t* g9 @00403156 B9 3E000000 mov ecx,3E2 I- b6 t7 ?8 N0 p
0040315B 99 cdq
: b& T; k; h* v, n( T0040315C F7F9 idiv ecx
1 E) ?' J9 O, ?/ G/ P! Z& V0040315E 6A 01 push 1
/ Q, B5 a) `1 y I1 Q* y: Y3 o6 y00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]( X/ R, i7 g- c- i, l9 J% Y
00403164 8BF2 mov esi,edx
( T1 x1 n- O7 D5 h00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]! T- z, r, S* T5 N
0040316A 52 push edx6 [( Z/ e) m& M- K2 ^
0040316B E8 0A550200 call qsr.0042867A( ^/ b! f4 {, R" ^
00403170 8B00 mov eax,dword ptr ds:[eax]
8 B- }& o4 m7 ]! G: Q; G00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* y& K7 n; X" v$ t" ]/ L
00403176 50 push eax
# W& w t1 ^$ v. ?00403177 C64424 40 05 mov byte ptr ss:[esp+40],55 M$ {* {+ B3 {* j" g( Z5 e
0040317C E8 0F560200 call qsr.00428790
" h9 m# Q( C7 S E+ @00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 T2 D( R, n$ {9 F0 x; B) j
00403185 8BF8 mov edi,eax5 I- {! z% t: e6 X& p* v( }7 E
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3' y( M ?! |0 a( E
0040318C E8 FAC20200 call qsr.0042F48B
$ V7 `8 ^8 Q, x* E9 Q7 u2 C( k00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
. X0 [0 t! \9 ^0 c5 R Z00403194 B9 3E000000 mov ecx,3E: Y5 _* ~, V1 V6 ~
00403199 99 cdq
2 K# K. L/ w1 y' D( Q$ n0040319A F7F9 idiv ecx5 A* |+ N( F; g, S5 D
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
: c& N( e( B2 l+ \004031A1 894424 28 mov dword ptr ss:[esp+28],eax
. K/ O, \ ~3 |) Y- q004031A5 8BCA mov ecx,edx
d1 O. [4 f- W7 R2 i; r' \, o004031A7 894424 24 mov dword ptr ss:[esp+24],eax( O! m1 l1 P' Z% l
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax- n: [. ]2 H5 Z9 M0 B) q2 ^
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
* l. Y% @% [, A$ w; _5 {0 v% [6 u004031B3 894424 14 mov dword ptr ss:[esp+14],eax
9 C. Z, u* G4 N8 I004031B7 894424 10 mov dword ptr ss:[esp+10],eax
* H; x7 \2 g* r3 Y% d004031BB 8BC1 mov eax,ecx
/ Z4 y: X" ~8 N: X! r+ Z3 l+ s004031BD BF 0A000000 mov edi,0A$ @, v9 {! u0 _
004031C2 99 cdq
8 c+ u" K% }6 ~" A) o! r4 e& k004031C3 F7FF idiv edi
) d& J4 ?& `* l, w1 K004031C5 8BC1 mov eax,ecx
. _8 H( ~) b9 B5 `- P004031C7 B3 0B mov bl,0B+ k$ t6 ~: }/ C3 p/ C) s
004031C9 0FAFC1 imul eax,ecx `" y5 M- X' v6 X7 Y4 M
004031CC 8BCF mov ecx,edi" i* I9 n; k7 h6 c
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl7 B, w' \) k) ?# ^4 ~
004031D2 52 push edx+ @7 `- \" h: G+ u3 k1 q2 } ^
004031D3 99 cdq% h) P; k! d- f0 Z4 S8 ^5 o* M
004031D4 F7F9 idiv ecx
" \5 Y( ]2 r6 z/ \004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
' F" t, K. b9 p9 M a: l* K004031DD 2BC6 sub eax,esi' [; i0 Q! B, U
004031DF 52 push edx
- ?# { j: ^2 P. i5 U& G004031E0 99 cdq
5 |: K [) y( f! O004031E1 F7F9 idiv ecx8 x5 h! ^8 p% _) M& ^
004031E3 8BC6 mov eax,esi
O# p0 u. k$ ]. V" W' S2 E004031E5 52 push edx
# s0 I! j6 v% i, I$ f004031E6 99 cdq
+ j) g9 x: I4 a" ]004031E7 F7F9 idiv ecx
$ T3 W7 x& f# i) d( S004031E9 52 push edx& d+ {" q7 V' ^ |2 x) o
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
, i1 }" G9 P+ r& p004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
3 x% r+ Q7 G2 g" B/ h: E0 B c, S004031F3 52 push edx
9 R4 f6 i. w9 i' A9 A- q004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
5 q3 C0 u+ W7 Q0 ^& n8 m. r2 y+ A004031F9 83C4 18 add esp,18
2 X! j! F7 u# ^+ x8 j004031FC 6A 04 push 4
( Q7 f8 z0 L8 O8 y) H9 z004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
& b% r7 {2 U4 q# @- V00403202 6A 00 push 08 Z# l2 ]: R( R2 e
00403204 50 push eax3 m2 l3 G& w2 V8 ~
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( b' d: |3 D( c# [+ z( }00403209 E8 D6530200 call qsr.004285E4
- S2 Q# c0 }7 c0 G1 x3 |) o0 \; o0040320E 50 push eax5 C. w" ^+ H7 x! q+ m
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
0 T$ [- w' e& B5 K5 w00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C6 t4 ?; W! h/ ~5 A# M7 N! }9 b. p( `
00403218 E8 A7C30200 call qsr.0042F5C4- O6 I4 t/ M9 k5 z
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]4 q U" w* o! E; p& _
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
& G0 s2 c& R, [+ h$ K# ^+ {; L1 n5 H00403225 E8 61C20200 call qsr.0042F48B
6 z5 r0 a3 r. ]" L: l% M$ D9 y0040322A 6A 04 push 4: F# n0 P) m2 R& U5 b0 O; ?
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]; Y' \% X1 g! o1 t+ F1 Y* C
00403230 6A 05 push 5( C+ K5 N& W: a& I- a
00403232 51 push ecx
! `7 D6 N* h: @( V00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
* b5 Z R* r) Y/ I$ T! G+ I00403237 E8 A8530200 call qsr.004285E4
. R+ P) x5 p- O, M ]: C) K0040323C 50 push eax
7 d6 k, i) d9 Q% D4 N5 j0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]5 [ b8 J, o- Q& j
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
5 R2 w- f! |% z8 r6 j/ r00403246 E8 79C30200 call qsr.0042F5C47 q" X8 {1 l+ k4 p" F3 F {9 y5 j
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' }6 l7 d" n) r/ n% H0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
( {, C1 E+ Z; r9 U00403253 E8 33C20200 call qsr.0042F48B
4 S( T Q! w) e5 s) V00403258 6A 04 push 4* W/ ?( u. P& P& k1 o1 l! k
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
% F0 P0 k2 {+ q& \5 `4 |/ i) z0040325E 57 push edi
* R! {4 z+ j4 v; \& X0040325F 52 push edx2 v) `! ]% I5 f2 u4 X
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
/ R# v W& a' V- A00403264 E8 7B530200 call qsr.004285E4' ^9 G$ o' j7 n" ?
00403269 50 push eax
2 O3 u; v' p9 U1 t; m0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]) `) G+ O" C. l
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E' J8 ?: N( @# s- D) V; }8 o
00403273 E8 4CC30200 call qsr.0042F5C4 o# ?+ `+ |" i2 i' f" T1 G
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% H+ q1 _' {$ J: K4 _" E0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
6 u2 v. J, O0 m3 O, ?. Y4 {00403280 E8 06C20200 call qsr.0042F48B. Y% {% x8 m& e" Z" \( @
00403285 6A 04 push 4
! }$ s2 E) m' e. D# k+ P& M00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]* k4 ]9 r* q0 h
0040328B 6A 0F push 0F% ]4 }( @5 b0 g1 p
0040328D 50 push eax
4 r4 w' d# J; O8 ~" y" i0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# L/ \7 F$ A5 C; [ s3 O, s
00403292 E8 4D530200 call qsr.004285E4
6 ^. J9 d7 }; l) t Y- h. H00403297 50 push eax
- x, C" [- `. F0 b00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: R0 e7 {+ U+ ]4 _' m$ E6 }0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F. ~ ]1 G; S+ y8 e$ |3 ^1 @
004032A1 E8 1EC30200 call qsr.0042F5C4
+ W) j3 q5 q. B* s4 @ e004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' N3 Z5 l* J6 _; g: Z5 \$ }004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl0 J5 k, Z; z8 N9 j
004032AE E8 D8C10200 call qsr.0042F48B' P7 q: ^* L& f5 b4 W
004032B3 6A 04 push 4( H0 m) y0 ~1 u0 C
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
/ d- o; l& N" U' r004032B9 6A 14 push 14
3 j5 H6 j t' J# c N+ e8 `# l004032BB 51 push ecx
. K% E% l0 D7 Z& k- q0 K2 i& O004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]9 y! u! f; M8 e$ |
004032C0 E8 1F530200 call qsr.004285E44 @) s/ r4 V- W' G1 E4 Q
004032C5 50 push eax
1 V* K4 m+ \: b+ G. X# e004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]* C3 y+ ?& e" ~; L* V% P$ ?3 g
004032CA C64424 40 10 mov byte ptr ss:[esp+40],101 g, Y$ }5 n- T( C5 C& k
004032CF E8 F0C20200 call qsr.0042F5C43 }; H) p; P# N9 }/ N
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 K/ w- F% E6 I [6 X9 c, S1 u
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl l' S# E) m" P' o, I9 j) N% r
004032DC E8 AAC10200 call qsr.0042F48B5 m" e' t1 b* Y+ v. D( v2 j
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI w+ J* _) q! c2 O* c
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX0 q4 J3 O$ X' U$ {$ O& }
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
/ `! F0 `& l* ~004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
: j0 K! a' g, U7 F+ |& G004032ED 8ACA mov cl,dl ; DL送CL
) V' B( }- l' _/ A4 |% h! t004032EF 3AD3 cmp dl,bl ; DL和BL比较
+ N3 X* w- ~8 Y0 c004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）2 n; }* x# F9 i; A( P3 x
004032F3 84C9 test cl,cl& u4 w0 W$ N: r% l7 K
004032F5 74 16 je short qsr.0040330D
0 ]- N5 k$ @: G0 e) @004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
8 D0 ?7 K' j5 G1 x0 ~( P* N3 U004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
- H9 W% _' Z8 k' {) h- k004032FD 8ACA mov cl,dl9 c3 B( J# X i$ `
004032FF 3AD3 cmp dl,bl ; DL和BL比较2 P% T( v6 ^. @ y+ _4 @, I
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）; {2 ]# m% ?. k1 O1 X2 u$ @
00403303 83C0 02 add eax,2 ; EAX加2
3 t) i/ X5 U! `0 z00403306 83C6 02 add esi,2 ; ESI加2& g( h* \3 P! m7 U9 w1 ~3 j
00403309 84C9 test cl,cl; u Y; D, T- _ m
0040330B ^ 75 DC jnz short qsr.004032E9' _7 I' g6 f7 V3 ~4 p( Y& w' B3 v+ v
0040330D 33C0 xor eax,eax3 i9 f. Q* `$ I3 s' {8 N/ p
0040330F EB 05 jmp short qsr.00403316
# r7 N% N: ~- i- u, A$ m) C5 n* C00403311 1BC0 sbb eax,eax
" C; H! _% s3 D2 v, l& ]00403313 83D8 FF sbb eax,-10 \9 @4 A0 M; m) G: h
00403316 85C0 test eax,eax7 W" s8 V5 D6 D9 K
00403318 74 0E je short qsr.00403328
5 z {/ }( c c; H6 m" F0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A. F+ O6 g+ M2 N4 P/ `
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]9 _ J9 S4 P: ]5 W6 _, t/ \
00403323 E9 F0000000 jmp qsr.004034180 a, y5 H: `# w4 l0 N; C* y# B' l
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX; M2 ?- C& [1 F
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ z3 o4 L: M* W00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]4 [( M& V: {8 G, Q, k
00403333 50 push eax
2 y! a3 P; h/ E! I00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
1 i& s' N9 j8 ~00403339 50 push eax/ F0 S1 W6 [1 o& s
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
3 D( ^" ]4 `2 }6 U' f8 t" v- O0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX) L' o) L6 p* Q, g0 J+ E
00403343 83C4 04 add esp,4. A, @2 A) G. f) d! S: E; c2 C
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
6 F/ W/ o* T5 L+ v9 i+ H" J3 G00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
' o# ]6 O+ @) ]+ S0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 H& R5 S$ P- Q5 W, l \$ o0040334F 50 push eax
$ v! L+ m/ z- M! }/ q$ J00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
8 [! R# \9 h5 W; ~$ J5 O00403355 50 push eax9 K3 _( P% ^. k1 f
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
8 Z4 l; m! H3 z$ e$ ?/ d o6 }0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX2 \2 {" L, x' k# x# S6 ?
0040335F 83C4 04 add esp,43 P" E) g! x: u) J4 G+ R' L4 i
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
, M- X S. V! j/ L00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]- u% `, y' C% V2 I% |: v0 M. q
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]/ ]6 y1 t4 s& m7 S) d& `3 W0 h
0040336B 50 push eax0 G- {. W* B# u1 Z, V0 N
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX* [0 T6 o' W* p# q! g, E
00403371 50 push eax9 ]( S y. g8 A+ V6 H
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX* D: J+ W# a0 [" i) U0 u5 ?
00403377 8BD8 mov ebx,eax ; EAX送EBX
) ~% n. I: g: I$ s: t00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
- E6 V: t* ~' A! {2 A6 o0040337D 83C4 04 add esp,4. g @8 p/ A$ k/ w
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
4 g ?) K; j8 @. U/ P1 I8 `00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
; @& x9 {( o3 o( h7 L2 q- j, L00403387 50 push eax
1 i" t9 _% ] t; G00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX- s0 T, A) \. A
0040338D 50 push eax) ^ U N1 Y8 @$ Q' }
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX9 Y$ ]7 F& |9 S& z' Q! u
00403393 83C4 04 add esp,4
2 d# W4 i0 Z* b9 A7 P+ \00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]5 `! l4 K9 x6 t! w6 L
0040339A 8BE8 mov ebp,eax ; EAX送EBP
6 i$ A0 E% G- b5 Y. e0040339C 6A FF push -1" a" s( A2 N0 |
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
. r( E, N2 e, |" x d- n9 ~004033A3 6A FF push -13 ?3 F' n% y: T" ~" c2 S3 Q/ o) y
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX A& p) M$ b# d6 N M) H
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX+ g' N+ I0 Y5 W) s. @' `. c' L* E7 F
004033AE 6A FF push -1/ O( D, S& d3 i2 d
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
- b# {" N+ ~; T3 U( K004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX& `. u3 G) N% t( I+ i
004033B9 6A FF push -1
0 T* |- v' W3 @8 d6 t) ^7 z004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
* ?) b2 c7 e- c004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
, f6 ]% ?+ \/ y9 t! k004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
! Y, y P: B' L* X* \' `9 N004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
8 P/ I& |* b Y5 T3 _004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
( Q$ `& K: T# `% R: Y. ?004033D7 D1E0 shl eax,1 ; EAX左移1位8 O7 x/ Z( h4 Z% p1 _
004033D9 99 cdq ; EAX扩展/ Z1 P9 [; C4 I5 |
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中! D. f: Z# r) o6 t' {7 Q2 |1 x
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较9 Y% n: f V8 b+ b+ u/ k, _( `
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）( y% C3 x5 k; I0 O9 T! D1 [9 ` \0 o
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
! _/ U _; P8 W. g, C" R! ]004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]# Z8 C e- c4 ?
004033E9 EB 2D jmp short qsr.00403418
8 r5 w; d N. X N, e, [( w004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
/ Y( f M7 B& b4 Q! \004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E23 y6 g5 Q% D+ Q9 l9 X+ {
004033F7 99 cdq ; EBX扩展* l! o" h( l' E" `5 \+ G
004033F8 33C2 xor eax,edx ; EAX和EDX取异或' B9 ^/ E- Y" T
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
. P1 d' F8 W9 ~8 S! N: ~004033FF 2BC2 sub eax,edx ; EAX减去EDX
* @) ~. f+ \. S0 K00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
6 l7 V0 f* x7 e; U% m4 q00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX" e) r, z% `2 g9 w) `% E" r
00403409 99 cdq
& I% E' ^' U- b9 Q8 u0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
( }. u. W. y& m& J2 r4 U6 z: I0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX% L8 T; A% I# ~# H" \; M5 z
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较5 a1 c- f1 g% Z) c. M, J
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
) E4 P$ E, @* _5 s8 {& F00403418 E8 6EC00200 call qsr.0042F48B ; : h) }9 O% y: @+ M7 B
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. X w# ?& ~8 l! s3 [00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9- `2 o$ u6 x+ i1 t8 _+ g- Q: _" a7 M ]
00403426 E8 60C00200 call qsr.0042F48B2 b8 ~" j7 v4 r1 s# C9 R
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]. v" `9 h9 R S
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8( Q0 P# ]3 y0 B
00403434 E8 52C00200 call qsr.0042F48B
* ]7 x; v% b5 Z$ T# a00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
9 D# t/ d; z$ N3 X( O% G& i, {- l% x0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
$ H5 O- _2 P, E" [+ \9 |) i00403442 E8 44C00200 call qsr.0042F48B4 r0 _8 [! y) O
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
# A3 g. `/ p1 n& ]; [3 Z0 m0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
6 P" z$ P; Y1 x- Z( ^! x' [4 ?. Q00403450 E8 36C00200 call qsr.0042F48B7 i9 i) q; a' c! C# h+ b
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
B5 Q& R+ Z& A" A+ l) k0 p5 G4 ^00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3 [% ~5 `7 t) @# y8 i8 a4 ~6 b
0040345E E8 28C00200 call qsr.0042F48B
4 _$ t L& E1 v" c P2 {! r$ W4 B2 {00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]; g O2 R9 v- |) f& @
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2( a$ q5 T4 K* g2 J
0040346C E8 1AC00200 call qsr.0042F48B
! O# m$ h* P4 S* ~+ O; p O+ A00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]5 v" q) e$ o( F J
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1 T! b2 a2 `: ?7 L) G: [
0040347A E8 0CC00200 call qsr.0042F48B
- D/ N+ g7 U [0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]4 W/ O- J1 x: x( k, |% F
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0+ H6 P% M+ e. x) E
00403488 E8 FEBF0200 call qsr.0042F48B9 A* z9 A U/ v* s
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# F7 o0 N$ s0 N% @5 N5 z00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
/ I0 c1 l; b" B3 ], t00403499 E8 EDBF0200 call qsr.0042F48B
6 e3 Q7 r# y' d/ O; l% T0040349E 32C0 xor al,al ; AL清0" w( E' o: `) n8 q5 e( f
004034A0 E9 88000000 jmp qsr.0040352D
1 n- L3 c8 s! e5 T. X" d- Q. J( r: S004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
: }9 o8 B0 R! V004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
4 P5 k; G9 M# u3 B' b- m" g+ N004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],90 ]/ C: \+ F: ^( _$ L
004034B3 E8 D3BF0200 call qsr.0042F48B
: B$ B8 U# s1 `004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
?, t- _6 A) R004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
* ?( B& J+ E! i7 B6 X# P004034C1 E8 C5BF0200 call qsr.0042F48B4 a& e& N8 s/ _( m* X' }
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( @" f: ~- Z9 B% f004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7( ~, y }1 j+ i4 j. u& X
004034CF E8 B7BF0200 call qsr.0042F48B
4 V7 n) h2 I- e8 J3 d004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24] {! m! z9 O0 ^/ E4 h/ t0 W; w
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6 s" l, V, t" `
004034DD E8 A9BF0200 call qsr.0042F48B
) r9 N/ Z" z0 d# h- ?004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
$ p) X; P9 f# I/ G8 _' A Z3 r( v004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3) J' Q# ` t" M1 o) T, T k
004034EB E8 9BBF0200 call qsr.0042F48B, Q2 ~) L1 N f8 D1 w( P) _/ ^
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C] Q: p, A9 {2 v& m
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
9 Q& n: F0 D0 Z2 S9 h004034F9 E8 8DBF0200 call qsr.0042F48B, G8 U. B P, d) X( ^9 u! q
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
1 |# ]; }, f7 ~& J! r* a2 N0 u00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1. W. X. H7 \- x# {$ k+ h* ~+ P8 Q
00403507 E8 7FBF0200 call qsr.0042F48B# W$ {8 F3 z2 J; \
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]" c% N! {& h) B- c$ B! f. _; P
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0; _# C! ?- Z! O" P$ ]0 q
00403515 E8 71BF0200 call qsr.0042F48B- O0 G4 f H. v
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
- o/ n2 I- `, h# Z7 J* ?& R' ^0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
6 `* e+ ^, g6 ^6 X2 C6 b00403526 E8 60BF0200 call qsr.0042F48B" H* G" E: F+ T/ j, l3 }$ Y; O
0040352B B0 01 mov al,1( O) c! t# X& K' ~- b$ B
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
; d0 a2 e: L7 A5 l5 S* g00403531 5F pop edi* `$ f+ P' A- Y3 V) C, `9 B
00403532 5E pop esi
% R+ M1 {' M' k* u" u& e+ K00403533 5D pop ebp1 ^& [6 ^4 B, ]3 P5 k
00403534 5B pop ebx4 J6 [( B2 S3 T! D' A. T
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx5 s1 x& t2 y( j
0040353C 83C4 30 add esp,30
8 j2 j5 K }/ x: W k' l0040353F C2 0800 retn 8
, A. B7 |0 J- B Q' U) G5 N' _* D--------------------------------------------------------------------------------
; ~! t4 I, u+ q7 A. R' x【破解总结】
' S% M9 e/ v3 o. Z# C* o4 Y 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^. t0 Q! {5 |. J3 J% {8 t
用户名：yijun
2 C1 O9 w# w. w) H- N# O注册码：4893*7777*3726*7777*0529
2 ~% P( A/ {& s8 q) c--------------------------------------------------------------------------------
% T$ `* R9 ] k6 s& @+ ?; L【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡