|
|
|
【原创】破解Quick Screen Recorder
9 R Y# d: }% b% A: V# c【破解作者】 yijun
3 g4 w4 Y( t5 e. }【作者邮箱】 [email protected]
% h& J8 u3 X7 U8 d O【使用工具】 OD,PEID( D, _( S g7 y! t4 W
【破解平台】 WinXP$ ]) x0 g6 K5 j8 k( {, i2 p. ^
【软件名称】 Quick Screen Recorder
6 J, F/ F2 v- \3 j3 y* h【下载地址】 天空5 K1 S$ Y" x, Q2 T
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 5 x( G5 @4 I( C; L" e1 k' O, a
【软件大小】 540K+ x# B. g- F9 B$ K% Z
【加壳方式】 无
, `8 b8 D) |8 K' d6 O【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
) m5 T) r" r! J9 g8 p--------------------------------------------------------------------------------7 S0 e* |0 D9 `/ ?
【破解内容】
( \" ?; N/ H! _1 ? PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
/ t. D j* D* U) Y7 @6 T00404C69 55 push ebp //在此下断
, J' F* |$ v* G6 x5 f3 r00404C6A 56 push esi& q. Q- I2 ^! S# o
00404C6B 57 push edi, w+ n0 C- G7 |3 H
00404C6C 8BE9 mov ebp,ecx
/ }+ X5 N8 j. M& f: y5 L00404C6E 6A 01 push 11 [7 G0 `" W& u4 J4 g5 F/ X
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
2 N; J4 o. K n00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]/ Z! B. d/ s5 h7 A& q+ t2 A& f
00404C78 8BCF mov ecx,edi+ a& g# I4 e' f
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
3 h4 F: b: @! _! |3 t! |( K: |00404C7F 8BCF mov ecx,edi
* g! O5 Q7 e; {00404C81 E8 A73E0200 call qsr.00428B2D2 W a, m- Z( w+ a3 d
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]" I; a- e/ Y/ o
00404C89 8BCE mov ecx,esi
3 k$ j8 N) H+ v' r2 q5 \00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
9 ]+ W8 ^& y; m4 v00404C90 8BCE mov ecx,esi3 S# B2 q+ I" m, v" s( k5 y6 |
00404C92 E8 963E0200 call qsr.00428B2D0 m5 g/ D0 E0 D7 G
00404C97 8B06 mov eax,dword ptr ds:[esi]2 a; R/ h* G/ L+ E
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
9 g! u! y1 ]! }8 g; n00404C9D 7D 26 jge short qsr.00404CC5
: Y7 [# x. _& E, o3 r# B3 H- W" e; L00404C9F 6A 40 push 40 G3 x4 f, V+ S3 E/ G$ z& o
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"3 q4 s9 u3 b: R5 Z9 I9 U
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."! ?0 x2 E, {! C f% [; y0 Q
00404CAB 8BCD mov ecx,ebp
/ h, F, z: Q: _% t5 U00404CAD E8 C3840200 call qsr.0042D175. h, X3 x+ v8 Y' c- u$ y
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]; W6 N3 p5 V6 I5 a3 z
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
7 V8 L4 I4 ]+ R" f2 f3 W00404CBD 5F pop edi; q$ c. V' J- }, t. C: I2 c5 z& R
00404CBE 5E pop esi" w" [: s2 w* f; _
00404CBF 5D pop ebp
7 Y8 m8 P9 h1 A# U3 ^ W4 G00404CC0 5B pop ebx8 Z& m( C9 ?: j8 |6 T U7 D
00404CC1 83C4 18 add esp,18
! a) A9 X$ i: t1 V) X00404CC4 C3 retn
5 |" r# e \8 H$ f0 V" J, l00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
9 a, i/ c2 P( }. g, C5 J00404CC8 84C0 test al,al' c$ Y* S9 ], ], J+ d! x
00404CCA 0F85 1C010000 jnz qsr.00404DEC# |$ t% G, m2 m' _5 H
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' x2 r- ]5 D8 b- A$ \1 }4 o! ~
00404CD4 E8 87E3FFFF call qsr.00403060: |7 L' S) G4 f
00404CD9 51 push ecx/ W5 U) a0 u J+ H, M
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
# Y" g& R: I. e5 R0 ?00404CE2 8BCC mov ecx,esp
5 K1 u* `$ `2 O00404CE4 896424 14 mov dword ptr ss:[esp+14],esp- t: R7 }6 m. [* q% u
00404CE8 56 push esi
& K5 I6 v7 f9 V, a* F, m00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0, |3 ]2 K) r) b z; U* M P5 w
00404CEE 51 push ecx# Z8 s$ _. g" H1 x9 J
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1. |+ g% w! @* C- E1 Q3 z, C3 c
00404CF4 8BCC mov ecx,esp: }3 U7 m; e$ k0 I3 G9 ^0 w
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp" N* B* z8 R! w- D% f
00404CFA 57 push edi5 K; f! S m& m3 _4 A! a, i) H( e
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
/ }- T' T5 O9 q' x8 P00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: S0 q0 W3 U5 @) T& t& q Q1 G
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
2 b3 b4 r. U+ f" P9 u# |1 \00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
1 B* ^/ q" u9 A* n" D' w* J7 e) Z00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~6 \" c* k5 [2 m
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~' e' z/ x; ?- R* J0 X6 J
00404D12 6A 40 push 40: ~5 M# \6 ]* A4 J1 b6 \- g/ j6 v
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
+ ~4 H m$ O& R, w$ H" @/ U00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."3 c7 f1 |6 c5 N& t3 n
00404D1E 8BCD mov ecx,ebp
" @# x+ s% C$ v! h5 N# ?+ G" Z00404D20 E8 50840200 call qsr.0042D175; u0 ]; ?+ K9 Z! f; z. U
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]0 i L! W8 Q6 k c' p
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-18 S8 A* `! a# h3 y0 b) B$ l
00404D31 E8 5AE3FFFF call qsr.00403090- i5 s( H z; E0 p" M" R. T9 `8 N+ U
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
- Q! T, ~2 i; W00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx. v7 k6 x. T3 w- T1 R$ x+ T; N
00404D41 5F pop edi
$ I6 @5 F& ?6 m& t8 [00404D42 5E pop esi
; H9 ^6 _0 Q" @0 t% d* E* T+ K6 i00404D43 5D pop ebp% p, e7 Y0 r- G" |) s
00404D44 5B pop ebx
5 ]# D' g4 q1 \& U00404D45 83C4 18 add esp,18$ |4 ^: S; S( P- d4 p6 i
00404D48 C3 retn4 R+ Z( d# l# g1 p5 ^' n
*********************************************************************************************************************************************************# ^# M ?9 \' y8 I. n/ H" p" c
跟进00404D09处CALL来到：
4 Z: u0 n+ O9 W004030A0 6A FF push -1 //一路F8下去~~~~. t0 R2 m6 E) V0 M5 E7 [
004030A2 68 C88F4400 push qsr.00448FC8 g3 d- n+ U* S9 I# x0 X0 E- x1 w
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
3 k7 `/ L% s, v+ P' x7 t/ ^" v004030AD 50 push eax
. W* H! T2 n" L! ]- P \+ J004030AE 64:8925 0000000>mov dword ptr fs:[0],esp5 D; L( q' M7 C) Y) R5 h; |
004030B5 83EC 24 sub esp,24
% w' B% t. [* i' z% f004030B8 53 push ebx) w/ i3 E2 i! n
004030B9 55 push ebp/ {: ~- Y ]' t+ M0 O' Y8 H! R# d& O0 T' F
004030BA 56 push esi
; H0 u( g; ]& C4 r, L004030BB 57 push edi
( p% Y R7 z( n- w: ^8 r004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"0 X1 W4 a N" l1 Q7 V
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 v2 o+ o' M9 I: B004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
/ t: G# }+ Y6 k5 }+ \. c z, ~4 J, z004030CD E8 27C40200 call qsr.0042F4F9
; I8 x) _/ q" u. g- s1 {004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]) a& M! p& X4 L
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax+ f: L8 L$ E2 L( }& _/ G* f
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
+ _6 X2 S; F8 _6 c- m8 N! u" I004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
' l$ K. `( H# R$ F, Q004030E4 E8 905A0200 call qsr.00428B79
5 g' N$ H7 @4 D5 X; ^004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
9 x$ k( t) x2 F1 U1 V5 P004030ED E8 3B5A0200 call qsr.00428B2D' R3 W8 E% t& _8 q
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]# B9 Q& a$ D: b" ]
004030F6 E8 7E5A0200 call qsr.00428B79) g: H u& h! G
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]$ s6 \8 H. ]) O$ a( ?# n ?
004030FF E8 295A0200 call qsr.00428B2D1 n, E, L6 ^% k3 n% `
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
+ | w% H3 X* J" _0 v! q, z00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]2 n1 x; `& d2 T$ A+ _0 y! A5 i8 g: A
0040310B 83F8 02 cmp eax,2! O, `) i: h) E6 X/ P& U& ^5 t
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳8 u6 R3 [, z; P/ r% }
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]4 @* R0 p1 |; a% x6 E4 w
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18, H) F; o! x7 A) ?' M; K; m
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
5 N( q! R/ Y- m7 G6 x, h" v00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
8 P5 i. }- ~5 S) X7 w# Q$ W00403126 6A 01 push 1
# U. Z5 k3 I! d, _& L00403128 50 push eax
9 Z" \5 h! U$ u/ |' m0 |9 s00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
5 n0 Z7 W, t3 w; g6 k6 ~7 B2 \0040312D E8 C4550200 call qsr.004286F6
+ b+ H$ m! B: D4 g2 ?9 ^00403132 8B00 mov eax,dword ptr ds:[eax]- h9 I0 D* G% R% p$ {7 ~% n/ ?
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
, e) f1 Q* e" Q00403138 50 push eax
3 r4 ]0 J' S- a# Y9 M00403139 C64424 40 04 mov byte ptr ss:[esp+40],4, r: \$ |$ h* S' M' [7 D
0040313E E8 4D560200 call qsr.00428790
6 l/ R" J" @& s i) q00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& w0 X. `7 S6 A: T I' x8 y00403147 8BF0 mov esi,eax
; E2 T0 @4 W" T: a00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 `; D9 Y0 s8 }" N% A0040314E E8 38C30200 call qsr.0042F48B! `- y0 c4 j' u8 Z7 J
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
- C# }& J9 s/ \3 |% q2 V00403156 B9 3E000000 mov ecx,3E
! n7 d: x! z* I9 F# s0040315B 99 cdq0 V" N$ b/ X, r- H- E
0040315C F7F9 idiv ecx
) \- B. w0 |% i& h7 O: K. c7 h" @0040315E 6A 01 push 1* p9 Y/ \# x" A( D' A
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
( Y* I7 @ X+ q; C* F6 P9 G00403164 8BF2 mov esi,edx
+ R; X& D: e* j: Y$ y, ?3 o0 W6 K! s00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]) K: ^, g. C/ W$ `
0040316A 52 push edx
& j! G. A7 A' l6 ]2 u0 t1 i# W C0040316B E8 0A550200 call qsr.0042867A
. K; u% z+ {; u# p00403170 8B00 mov eax,dword ptr ds:[eax]
* B( z( M7 \+ u00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]' ?0 P9 ~7 C2 y- n' h; O: m. \
00403176 50 push eax
5 ^) I) R7 c$ i2 j00403177 C64424 40 05 mov byte ptr ss:[esp+40],51 _* P& b! H0 W8 v0 Y. a
0040317C E8 0F560200 call qsr.00428790, v8 x" Q9 T% p4 A4 Z
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' x$ o/ [ T/ d+ h00403185 8BF8 mov edi,eax9 b' A) ~* \1 J; Z" P4 Y q6 A
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],32 K) e' @1 ]* H2 v
0040318C E8 FAC20200 call qsr.0042F48B
2 g5 F3 G2 f% i9 u+ p+ D x" X00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
: L2 z* F( t8 l; U& v8 e2 M00403194 B9 3E000000 mov ecx,3E' h! a; Q; B% l, f
00403199 99 cdq7 f& L6 Y2 F: A6 M0 o
0040319A F7F9 idiv ecx
4 p2 E2 A. R1 d8 C% [ X0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
" x8 X( R5 I9 O' x. h( z004031A1 894424 28 mov dword ptr ss:[esp+28],eax
4 n" \0 E1 B7 c, K* s004031A5 8BCA mov ecx,edx/ p& V& m$ D& |7 V+ W
004031A7 894424 24 mov dword ptr ss:[esp+24],eax4 B; G0 V% ]* D+ o( h& R! U9 k3 Y: b
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax7 R o, c7 [/ ^7 p$ S$ {! v, _
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
/ t+ e3 w. M% ^/ F5 F( k004031B3 894424 14 mov dword ptr ss:[esp+14],eax4 W) Q" b- ~4 R9 V; x" a
004031B7 894424 10 mov dword ptr ss:[esp+10],eax, [, R" n% e. |+ N* l
004031BB 8BC1 mov eax,ecx# ~( n+ \1 j2 \. {4 |; d: G% x6 i
004031BD BF 0A000000 mov edi,0A' n$ {9 R+ i2 ]" v3 V
004031C2 99 cdq
" n; C3 {7 n5 a$ E8 C7 @, y004031C3 F7FF idiv edi& I: }- _/ x7 g% ^0 [
004031C5 8BC1 mov eax,ecx; u* R# D& P" |( I
004031C7 B3 0B mov bl,0B
. [$ `% ?3 W% a7 E) n9 U004031C9 0FAFC1 imul eax,ecx3 G5 }, `' j& O4 E( D# f
004031CC 8BCF mov ecx,edi5 V# w" z4 Y; X+ T4 f0 Z
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl) s& ~* u, F$ p0 [, `) t, Y* h j
004031D2 52 push edx# S1 m4 h( B# I, j6 P
004031D3 99 cdq. o1 ~; Y- s2 O6 N, h! i9 e( r
004031D4 F7F9 idiv ecx
8 Y& J7 J! b7 e1 t' P4 z) F004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]0 P! d& S/ d5 u
004031DD 2BC6 sub eax,esi0 L) r1 ]. x3 u! p$ G! z @
004031DF 52 push edx( C- o1 i5 X1 }; Y& a& n
004031E0 99 cdq+ m' b- X9 g/ d7 k& k: V" O! l
004031E1 F7F9 idiv ecx0 p$ r/ C8 d& C- H
004031E3 8BC6 mov eax,esi
( G# p' w2 u s2 T004031E5 52 push edx' H, ]( z: i5 U* M3 x
004031E6 99 cdq
1 }9 S1 F- Y' |004031E7 F7F9 idiv ecx% v4 W4 W9 O U) x# k' I" _
004031E9 52 push edx
; X3 b! L3 {0 V8 s( f$ a$ J( p004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
% J7 m1 R- @' z004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
B: P+ {, W% u5 Y. ~004031F3 52 push edx: `* I8 `4 b* H
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893: ]8 ?3 M9 e3 c9 p& C. F; R
004031F9 83C4 18 add esp,18 I* K* y$ q* Y0 ^- W( C
004031FC 6A 04 push 4+ }/ X. o6 k8 D- q
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]2 i3 Q( O- l. H2 K( j) H
00403202 6A 00 push 0% G! B9 A/ x9 A$ @% a+ S& ?1 ^3 C
00403204 50 push eax4 |7 S9 F6 O% n
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
8 k- S* d3 [" U) a2 q6 F00403209 E8 D6530200 call qsr.004285E4
6 _7 Y/ {0 P* F$ l0 c0040320E 50 push eax4 S% q5 A2 i- m, j+ X! J5 S
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]* @; R2 c) R: f
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C: I1 \7 B( u4 s6 m
00403218 E8 A7C30200 call qsr.0042F5C4# ?: D, n( g+ }( J1 a
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 M+ J$ Q" Y* {4 [: R- l9 |00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
9 a9 Z ~. c9 S, v2 _ v4 [00403225 E8 61C20200 call qsr.0042F48B
% Z" r# n5 g: a0040322A 6A 04 push 4
2 R+ z, x2 z/ S# r" g0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]+ U$ n. S. U1 z$ t, `
00403230 6A 05 push 5+ q" l Y" C1 |3 _1 j2 o, Q
00403232 51 push ecx8 V' @$ Z R2 L- i) w- l: R
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
/ x/ x2 a8 K- k: w2 ]00403237 E8 A8530200 call qsr.004285E4* Y! w7 J8 S8 w+ G8 D$ x" u1 O
0040323C 50 push eax
t; [: C" }# X/ g. R0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) P+ G5 \ g4 G$ K& v' u
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
7 D* N" V/ X# `' l$ b$ S; k00403246 E8 79C30200 call qsr.0042F5C4
! {$ N. @& t# ?, q, X+ g0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 | X1 u1 Y( E0 x9 Y* Q J
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
, ]0 S) M9 w$ |% {4 m! k00403253 E8 33C20200 call qsr.0042F48B/ ?2 s) k6 D [# A7 [1 C; l
00403258 6A 04 push 4
: k) O- z! G2 y- ?, p, W9 g6 O0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]; a! ^4 a: @9 _" ~% I, K7 P% q& j$ o
0040325E 57 push edi
; ~# z1 N4 y+ j, N2 l0 y) O0040325F 52 push edx
0 g% [0 \+ z" g* O0 E$ ]- ^00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]! J9 ] X1 O1 q' ]
00403264 E8 7B530200 call qsr.004285E4
3 o+ b! e0 [/ t5 |/ q00403269 50 push eax8 f. s) ~$ n1 C; h# Z
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
2 l0 d8 |/ s: K4 Z0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
K- Q: U1 T( _' A. _( \00403273 E8 4CC30200 call qsr.0042F5C4 E" l1 |! Z; i2 q
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]0 f/ I {9 B; [) K
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl# ]* H2 d0 T8 x: p- `& ^
00403280 E8 06C20200 call qsr.0042F48B
* ^1 Z$ M3 K- C/ k8 W00403285 6A 04 push 4, F4 N+ G9 I' D! _, |# a' m
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
8 i/ N" c; f$ g$ S, q. I0040328B 6A 0F push 0F
7 X- ~7 G3 u+ Y0 F7 a0 I1 J0040328D 50 push eax
/ v+ T: O" A! N! T0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: v+ A ^) B- [& }6 M+ H
00403292 E8 4D530200 call qsr.004285E41 E$ x% U1 X- O/ J
00403297 50 push eax& X2 g% i. [2 f% W! ~. d& ^
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]1 p f. p2 P4 [; s
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F7 A6 `' M& `, S: ~
004032A1 E8 1EC30200 call qsr.0042F5C4
8 b, J0 Y+ @# @/ j0 e# C8 \004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]1 q& s7 g* a! O; H4 N0 I1 `0 z5 j
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
0 c1 ~2 L* ] K& f' K004032AE E8 D8C10200 call qsr.0042F48B
" Y, j- r6 b, B! ?004032B3 6A 04 push 4& S, F2 H1 n- x
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]/ E. A+ G7 n; x: ?# {5 c- b
004032B9 6A 14 push 14
$ h1 B6 `1 o# Y7 X004032BB 51 push ecx
5 g2 b3 G& h$ O1 M; e5 w! p004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 O: w" \) I2 H {2 m004032C0 E8 1F530200 call qsr.004285E4
6 W4 o- X0 a! J* k, U# ?004032C5 50 push eax
8 z9 T' v+ a& v; B9 |% n+ V004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]2 r1 u% H4 G6 b5 M( J# C" a/ {7 b- _
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
1 y# S. z' [& e0 }) t' }1 ]& Z004032CF E8 F0C20200 call qsr.0042F5C4* m$ E6 E! s T2 J$ {- t* L3 |
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, Y7 \) G. W, H: W b# C1 _004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl, J1 V ^5 H2 ~3 d F! N1 [
004032DC E8 AAC10200 call qsr.0042F48B
: ]9 G6 k$ r0 f- x2 L8 P004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
! t6 F: f# G a, x. ^+ l004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
' h2 W3 R/ k c* _6 L004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL4 B) n- p, K" L8 K2 |7 O9 R9 P
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL8 z3 r3 I! m5 t& n/ a( \! Y. K
004032ED 8ACA mov cl,dl ; DL送CL& C- q; P$ D+ S! u
004032EF 3AD3 cmp dl,bl ; DL和BL比较5 G0 w# M& A$ l# S- R" }
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
3 S# H) D8 Q; G* X2 c) Z004032F3 84C9 test cl,cl
: c, `1 g. W+ E* z8 ?* m004032F5 74 16 je short qsr.0040330D
" ?! Y9 h8 b0 X6 \; T H004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
/ `2 x: d& H! `3 y004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL* B% H7 i, p4 c: {" S
004032FD 8ACA mov cl,dl6 ]$ p- o) | @9 V; \
004032FF 3AD3 cmp dl,bl ; DL和BL比较
* Z9 }* r8 ^. K0 j7 t2 P) _00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
% O7 ?. v6 @; v% C0 S# J00403303 83C0 02 add eax,2 ; EAX加2
1 Q: z9 }4 ^+ T* \6 c1 O00403306 83C6 02 add esi,2 ; ESI加2
4 v+ V; h' O( a# m0 W' M, B+ a; A8 i00403309 84C9 test cl,cl
) q. {2 o- U$ A: p' X: j: P0040330B ^ 75 DC jnz short qsr.004032E9, m+ Q( L) k) M# r8 X6 A
0040330D 33C0 xor eax,eax
6 v( W' S4 a6 q0040330F EB 05 jmp short qsr.00403316
3 K" H* F0 n- G/ E' [; n: x00403311 1BC0 sbb eax,eax
, L2 H/ ?, z6 H; g5 b00403313 83D8 FF sbb eax,-1* Y+ {0 I6 B) T' {4 f; }9 p
00403316 85C0 test eax,eax. L5 U1 C& t* i2 Z4 Z
00403318 74 0E je short qsr.00403328
9 A: M, s: ~2 K0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
* [) [% B' ]4 y# b @* @0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]7 L, L$ J# `1 t# P+ n& U, }& Q
00403323 E9 F0000000 jmp qsr.00403418% `' @* g; t; N0 z7 {
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX3 G) n6 _, G( {
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]; S3 a7 C3 c. N5 l! }* x, D
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
6 D4 d4 Y2 c: l/ a4 m. ~00403333 50 push eax4 v' b2 I; |9 h: B
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX% b6 d" e6 |5 _: b( k
00403339 50 push eax+ h! O J8 O0 U# A
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
3 m/ P4 ^( }. x f0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX2 {5 m( o! C1 e' q$ Q& G9 [! X
00403343 83C4 04 add esp,4
; l; r) g5 @7 R3 }: Q3 b$ {* s4 w00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI/ [5 Q U2 ^* Q+ T0 a( W& A
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]; [# c, |, u' _3 u0 f* c# q
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
' `* Y1 P! K9 {: @0040334F 50 push eax
1 T9 G7 r2 g& o00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
5 U; V+ n3 ]2 S% A; [# W# V8 D00403355 50 push eax
/ Q( N# I2 V( x& `/ ^, T00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX) i/ |2 P, Q+ n2 m5 J
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX4 T5 A7 b9 P) O. N2 o( P: T& o
0040335F 83C4 04 add esp,4: ?+ ~3 W' N( J- c& H& }( U
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
( o- U6 [! l3 z' K) [6 R! V00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& W; x4 T/ n! i+ c4 u2 O) G5 a; |
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
( }; l: K9 G' h0040336B 50 push eax3 a! C& A2 N6 C! V3 Q0 y9 \
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
) i5 q7 K. O- `: K n00403371 50 push eax
- M9 M' c7 H( p8 A. S00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX; Y1 Y. ^0 f' s) z9 \
00403377 8BD8 mov ebx,eax ; EAX送EBX
P* S, g& N+ ]9 y6 E# @% f) q00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX/ [# x! D( @. N; o
0040337D 83C4 04 add esp,4& t- g3 P9 ~1 p/ Z0 B; g4 g
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
) ?# H: H8 u4 R/ ` w' t5 j00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
/ [5 n* P6 O. {00403387 50 push eax2 a1 O# Y0 b: I
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX; G3 }9 a$ T9 C2 y5 z5 U
0040338D 50 push eax0 x; V& k5 S `6 l9 z& r: ~
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX8 ?$ O0 p* b" ?
00403393 83C4 04 add esp,4
/ \7 {3 T4 D+ r' P* S- N3 H00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], o) W2 Q& y+ C" S/ k8 R4 v
0040339A 8BE8 mov ebp,eax ; EAX送EBP& d) `" g z5 b6 T% V x. K
0040339C 6A FF push -1
' J" s' n+ p t j4 x+ y* f( Q0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
9 O$ R9 g* \: Z3 N$ ?4 V" Q004033A3 6A FF push -1
; F8 z1 |1 Q( [$ z% y6 e# Y004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
! }3 i1 A% D- }( ^+ T: R: P004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
2 S( x# y8 b8 I& g# v$ A/ v* l004033AE 6A FF push -12 v2 E7 i) R( I' t4 H3 B6 U
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX- D$ N x, B3 c" N
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX0 l& b3 v V& y7 D8 K( {1 B( q
004033B9 6A FF push -1
# w8 _! m* s- _" e3 t0 V2 z7 U004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX0 Q$ ?, W3 c# Y) n, p1 c
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
" J/ ?3 e- @& ^6 L' w004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX4 z+ E2 Q9 C8 i# s! D4 U+ O6 X
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX* `6 { }' t! ?
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
% S) w) M3 \0 Y004033D7 D1E0 shl eax,1 ; EAX左移1位
; A9 Q! ^9 y1 Z: ~5 t6 i3 h004033D9 99 cdq ; EAX扩展" D. _5 }5 Y& T9 @# G4 g" |+ C! t9 M; [
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
6 J) ^7 h9 w7 J2 ?( ?004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
1 d3 l3 Z: E( B. O, w: g004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
7 q9 A, u0 I! }5 n004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
2 |. [* W9 R. Z004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]$ a2 j, q' E8 W' E5 ~1 ]/ [+ _
004033E9 EB 2D jmp short qsr.00403418
7 d( ]7 U- ]5 M; I+ M) p0 b004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
% @0 B+ j7 g/ D5 o004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
8 T* N' c* [# Y0 v5 E/ [/ L004033F7 99 cdq ; EBX扩展$ b% n: @9 t5 U; m5 ^) {& }
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
7 A$ M% _/ D& E) [3 n004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
# W; g4 M, F1 y7 Q U) k& E4 P004033FF 2BC2 sub eax,edx ; EAX减去EDX
6 ?, b( H) H& k9 e00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C] Y, L% i, ]% o' E5 d* d7 _
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX* k) I) _" X( i& m+ |/ O& w6 m. X
00403409 99 cdq; ~, F. Q% I9 q) F2 X+ {7 p
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中" S- _. _5 }4 ^6 k
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX a: Z- j$ a+ n, K% f
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较) R% o [* J4 V2 I0 q
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
( r0 f( N" Q8 S# t X; r00403418 E8 6EC00200 call qsr.0042F48B ; 4 u& b+ p% {0 B b: `
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
, |1 Z0 z) F. Y* y2 Z0 O00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9: `3 I, d' u+ N5 C2 ]
00403426 E8 60C00200 call qsr.0042F48B
0 H: {( W$ C( G5 L0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
# I7 O$ ~, }# j, r0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
+ Q" ~( z: I, d3 O6 @. d00403434 E8 52C00200 call qsr.0042F48B
, G* o+ |1 A6 Z/ V00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] \" t8 A6 b+ e; m9 N3 e5 i
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
- \* f% O, _( `) j00403442 E8 44C00200 call qsr.0042F48B
! Z) \4 }/ T0 Y+ k00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]$ _8 z+ B2 g7 K+ n M, \
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6: s$ s% x l& }% u& S# d
00403450 E8 36C00200 call qsr.0042F48B
1 d: t! p6 s1 f# O: J% k) X00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
6 B+ e5 ~' y3 l00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3' R5 y( _' d4 O f3 |2 ?
0040345E E8 28C00200 call qsr.0042F48B; H% |' C8 F7 S% J
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]4 X2 A' ?+ t+ X/ ^
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],25 w+ n- i7 y& q6 K4 \7 m
0040346C E8 1AC00200 call qsr.0042F48B$ R. C3 L) d S" B) y5 w
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20], p3 i9 E* T4 b. E) Q, [( k. I& {
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1. n& u% A: @# ?1 G6 ]2 h
0040347A E8 0CC00200 call qsr.0042F48B
: ~8 Z4 y* D7 ~7 j6 L) N* X0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]" G1 k+ z+ s# y/ e. o% C# v8 G
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0: i; I! j- m. ?: j& r7 J
00403488 E8 FEBF0200 call qsr.0042F48B ?/ x( `# q2 L
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]1 f# M9 \ `3 [: ]- W
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1; V9 l- c& n7 E
00403499 E8 EDBF0200 call qsr.0042F48B2 l# B/ m- l) d0 x
0040349E 32C0 xor al,al ; AL清0- k0 t" P& a, ?; |: c& C9 T7 a1 S
004034A0 E9 88000000 jmp qsr.0040352D
. d1 _! j4 `0 c8 q% j. ?+ [; N+ @004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~) {% z3 F7 I3 C# p4 W
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]7 j0 J4 P5 w1 ~0 R( h/ r c5 K: T
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9& K9 X- `$ Q' S9 w9 y$ L; J
004034B3 E8 D3BF0200 call qsr.0042F48B( D" e7 F3 r: S( F3 P7 R
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
8 C! u( e+ S" _& Z7 E+ }. K004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8# C% J) H4 Z4 L' y
004034C1 E8 C5BF0200 call qsr.0042F48B/ t6 k0 k& c& W" ?9 m
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) w" _9 X/ R$ r004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7, K* r3 @& G; |( O1 e
004034CF E8 B7BF0200 call qsr.0042F48B3 E- k# L+ D) c" K" S& S* A
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]1 z# b# }: j" D; D
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6+ T8 a4 d9 k( p; s
004034DD E8 A9BF0200 call qsr.0042F48B- o& n k+ x0 B: Q
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]! v1 X( Z: {# F1 e, `
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
, c0 B. A! Y( w: n; {004034EB E8 9BBF0200 call qsr.0042F48B
) {! V( C1 u2 @* i* b004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]7 w# k! C! R* o$ l @8 v4 Q6 ]' @
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
! \' @, M" f$ c) {, C, t004034F9 E8 8DBF0200 call qsr.0042F48B
3 j. c$ W9 K, }; i" f004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 G2 W3 G, s7 |) E+ b1 [0 t$ o, o; H
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],19 `# h; D( C! [. h5 Y! f- O
00403507 E8 7FBF0200 call qsr.0042F48B
: q. u# q4 j8 f y4 K1 F5 {0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
) _% t/ X3 t* V% G& C8 |" v00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0- @% j/ R; X5 S X8 F
00403515 E8 71BF0200 call qsr.0042F48B
3 |1 q, y# O$ T4 D: i# e1 Y0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]/ S7 `( S/ U4 h: U* J
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
( E: o( k! z/ ?% O$ k. I8 T00403526 E8 60BF0200 call qsr.0042F48B# F& A( b& i+ D
0040352B B0 01 mov al,1; z5 w- u/ z3 _4 Z- j
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
' e# Q9 \+ D8 Z00403531 5F pop edi- L; T9 S/ V% I0 T* d1 P+ r% h
00403532 5E pop esi8 r$ w+ T6 h& d. m* X3 \, R8 r
00403533 5D pop ebp
8 ?/ k& a+ U: j) V; @9 A8 j00403534 5B pop ebx- u3 l/ g: o, d& ]4 |' V4 C/ _% p
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
) v% t* m) m6 k* _7 R0040353C 83C4 30 add esp,30. M) O; S% |! \; _# A" t
0040353F C2 0800 retn 8
% j6 z* h# W: i& N9 B3 ~ ]--------------------------------------------------------------------------------# L: L+ u( ?" E: J8 @$ D' Z
【破解总结】) N- x1 ?( b- W# R0 u h
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^2 _4 o9 O& T; L4 u0 l
用户名：yijun: j* }) I; M! Q. H( Z1 \
注册码：4893*7777*3726*7777*0529
% o+ p- I: [9 P$ z% {) R3 s3 j1 X: z--------------------------------------------------------------------------------) S. A: \! f$ P1 g2 Z+ H
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡