|
|
|
【原创】破解Quick Screen Recorder
, {2 H* l/ `2 S; E- f- x) A% l【破解作者】 yijun
$ i& ]7 z% L m! x, S5 }3 H【作者邮箱】 [email protected]
. S$ N) b) ?* r7 Q+ L$ t【使用工具】 OD,PEID6 r( x- D- f, y, {5 k& w
【破解平台】 WinXP2 X8 A# Z. C4 c2 v; g; S
【软件名称】 Quick Screen Recorder+ p8 M' y( p4 O6 P
【下载地址】 天空
2 [: w3 ?" \! w5 O【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 2 e6 v9 V8 ]) b) I2 F
【软件大小】 540K
% x- P) o( Y3 b" j5 {$ [0 U【加壳方式】 无
) O2 W+ v- C7 I【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
# c. ~ F. Q3 J" L4 s, Y# i--------------------------------------------------------------------------------/ g0 \) F6 Z9 I* Z4 A
【破解内容】3 G7 @! K w8 o% A8 l. |0 R
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
! T j' G% q$ l5 }0 s( b! }1 d i7 F7 K00404C69 55 push ebp //在此下断8 I/ v0 p7 p5 g
00404C6A 56 push esi; [. E: D; L [% T
00404C6B 57 push edi
& w% j; ~# ^: W8 D, x& h00404C6C 8BE9 mov ebp,ecx. ^5 r; i" r8 [5 q7 e
00404C6E 6A 01 push 1
: w( M/ {) X. d00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名 B4 Z- E9 D+ B8 ~
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
; m3 j2 f" Y6 s9 P00404C78 8BCF mov ecx,edi& g2 n) ]0 C0 h) H! s, A
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
. X9 \* J0 t1 r4 h, B& B$ _00404C7F 8BCF mov ecx,edi, r- j8 H- S3 T( k
00404C81 E8 A73E0200 call qsr.00428B2D9 K$ N; h" v3 `, _2 t
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
' n. Y& U4 Y' j9 }3 R00404C89 8BCE mov ecx,esi
4 R0 V$ c+ d3 t5 v3 W% I8 e8 ^00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
! ^$ d* h8 p7 O: t' C8 C. Y8 | T6 S00404C90 8BCE mov ecx,esi
/ A6 O v6 Y4 V& o6 q9 j00404C92 E8 963E0200 call qsr.00428B2D
# w9 H3 g7 y; {5 {& i" N00404C97 8B06 mov eax,dword ptr ds:[esi]
7 P$ u8 H: R3 W" S- X0 g! o00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2, G; {* N* Z3 N$ R
00404C9D 7D 26 jge short qsr.00404CC5
4 Y! y! X' K2 F' H/ y! M; g e00404C9F 6A 40 push 40, U4 E# }2 v# L# n! F
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder", i" w! ^9 o! O0 p7 T$ ]$ i
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."3 E j' V8 \7 b8 V3 v" e4 X
00404CAB 8BCD mov ecx,ebp L/ d$ p2 }& Q7 o
00404CAD E8 C3840200 call qsr.0042D175/ n8 O \: |6 I; l! ]0 B
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]% E/ W2 @: T& n `& B% _. H; G; \! ~
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
3 x; Q/ r7 M0 u" w8 V8 |00404CBD 5F pop edi
5 ~1 _( q& n( g8 b- k2 F00404CBE 5E pop esi
6 E* K/ ]( K7 s' s% [9 _6 t00404CBF 5D pop ebp
% i) j, m+ F5 O* A: ^00404CC0 5B pop ebx
: j1 N7 b N: ~7 u' `* k- I! O+ t00404CC1 83C4 18 add esp,18
: }+ T( K1 o( }2 U+ y00404CC4 C3 retn9 Y/ a' v3 f$ m% i( W. {; V
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
+ Y5 V; V: Y4 y3 n( p00404CC8 84C0 test al,al
( ]' q7 q1 `8 l) h1 e0 l/ T4 V00404CCA 0F85 1C010000 jnz qsr.00404DEC
! f! a$ Y: ~- C7 H5 z( ]; _& Y00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ |8 {* L( j" b( o* S9 G00404CD4 E8 87E3FFFF call qsr.00403060$ ^0 l+ C7 `* @ x) ?
00404CD9 51 push ecx
- L% e& c2 B5 s1 ]00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
( A3 D, |. g" R6 ]% d+ P0 B00404CE2 8BCC mov ecx,esp
! @/ q! W( O+ j# t( m) A00404CE4 896424 14 mov dword ptr ss:[esp+14],esp7 D; k' W( c% R3 d% j b9 I
00404CE8 56 push esi
" `& C% r2 b0 x( v00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0$ ^# r5 \/ q! }1 `, `- d& y
00404CEE 51 push ecx6 P- Z _3 ~: {) S/ B, V
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
2 O8 m4 W2 g, p# O- B E7 s- p00404CF4 8BCC mov ecx,esp. `- |, ?0 {$ C$ Z, y. Q: J
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp& k: O( F D+ j0 f E/ g: l! X
00404CFA 57 push edi
% N# p0 J7 T, p; e8 _- I00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
7 G) A/ B, D+ [3 L6 | i+ ^0 r00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 u6 X$ O5 i8 v0 i+ `8 J+ M5 i! |
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0" G" p5 z/ I% {" E/ P3 U# u
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~: w5 R9 `( }3 w3 s. B
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~ z" E, R: U ~
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
! s7 T6 T6 r4 y( f00404D12 6A 40 push 403 o6 `8 J: X1 U Z& O
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
9 K& ~, K: d; S& b: T" k. y00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
% e, _; I0 ]% q A, i3 c# f- B00404D1E 8BCD mov ecx,ebp
* @ F {' ^% `6 |; F# w" Y00404D20 E8 50840200 call qsr.0042D175
0 M% t! U) z4 b1 ?2 b! B00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' Q& W% H( v+ y4 S2 s9 @00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
. s3 L( x9 z: `) p, ], j; d00404D31 E8 5AE3FFFF call qsr.00403090
( n! P+ N% o2 ~$ x00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]7 F# Q7 j; O& ?. J
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx2 s# k& N4 }/ P8 \2 I N* g8 x+ _
00404D41 5F pop edi
# E- ~, }4 d& I' ^" K$ X00404D42 5E pop esi
! i0 B% v4 z9 |4 W" ?# R" p00404D43 5D pop ebp
3 f( P5 z( m; |. u' Z00404D44 5B pop ebx: y3 A, z* G0 i: u. z9 P
00404D45 83C4 18 add esp,18
1 c) [. x: m' @* g* x! G4 _) ~- A00404D48 C3 retn2 }" i" a& Z2 X" Q' r3 F
*********************************************************************************************************************************************************
/ R! K% ?6 h6 i& Q; \跟进00404D09处CALL来到：1 Z/ {5 y/ @, q
004030A0 6A FF push -1 //一路F8下去~~~~
' i, V, d. n& P8 S, P& m004030A2 68 C88F4400 push qsr.00448FC8
+ i8 `/ E5 J0 y8 V2 S6 [) m& c004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
# Z2 f; }1 a0 Q% C7 S7 r" f004030AD 50 push eax
" w8 d5 ^: ^2 \004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
, n4 w& `' V2 [. Q7 p* r+ H004030B5 83EC 24 sub esp,24
9 z/ C& p; J, E004030B8 53 push ebx, u: ]) C" a6 I7 E1 Z( H4 X
004030B9 55 push ebp# W' y/ p$ u! |2 K
004030BA 56 push esi
% @4 h! w3 \2 `004030BB 57 push edi
( T0 M" J% @( }004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
' u3 V9 ?) p0 w& T5 g004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
$ Y% @) p( n8 e004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
5 g% {0 U+ S2 Q9 A- m004030CD E8 27C40200 call qsr.0042F4F9& Q7 R2 H, e( y5 L3 r
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
' _3 J `& V7 H4 G% R004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
, I) b7 F" W5 R$ @$ O004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
: p x/ P& x8 h6 s8 \( ?4 t, m; X9 v004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],35 z6 c! ` p+ g- Y
004030E4 E8 905A0200 call qsr.00428B793 m- G! N6 X# G0 K( L
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]- }$ z. D- e5 r3 g1 G& B$ x4 ?$ [+ k
004030ED E8 3B5A0200 call qsr.00428B2D
8 g0 x& j) ^$ Q1 K( F2 n004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
/ K; R0 e6 {( G4 D' U3 t% d: q004030F6 E8 7E5A0200 call qsr.00428B799 D7 [8 q. |% a/ h* f" d( [; a$ i
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
8 G( i; R) \& @+ r- g. w3 P# F004030FF E8 295A0200 call qsr.00428B2D
3 Z- C9 ~3 T) P+ b00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
& ]; F' v- O, L* r* u; t4 o) w00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
( a6 {- y+ w( S: G! w0040310B 83F8 02 cmp eax,27 L, F8 x( [/ J5 g) U+ F& w; [
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
7 |* T. T2 D! s+ v- j00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
) ] D+ g; n5 T/ k: g00403118 837A F8 18 cmp dword ptr ds:[edx-8],185 ^, V! b4 r' i9 T0 q
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
8 M A' e. u N" z0 T2 U00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
0 V, Z: y O2 r00403126 6A 01 push 1
* s! ~. t8 J4 i$ {3 |" S+ P00403128 50 push eax
7 x9 ?- ?2 L4 h9 V1 N: }/ j+ G00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- Z& c7 l \# k$ d' Z; T% p% [0040312D E8 C4550200 call qsr.004286F65 C1 L8 y% N1 o( `/ h. ^
00403132 8B00 mov eax,dword ptr ds:[eax]- [$ e6 y3 G) u+ P( n7 O- @ N
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]1 H# u8 d4 v* Z/ M
00403138 50 push eax
9 k1 ]! L! w N7 j& f00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
* t1 F. ?# t% ^. x0040313E E8 4D560200 call qsr.00428790* i3 V, q" s4 Y9 Y+ p0 V9 Y
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 F+ z# s$ g3 H: W& d
00403147 8BF0 mov esi,eax
" h- M- s' s. T2 D7 b* {00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],39 M2 r- [& k3 P3 i
0040314E E8 38C30200 call qsr.0042F48B
5 j. G' \" O! e+ R6 T" P1 A- R h00403153 8D46 0A lea eax,dword ptr ds:[esi+A]! H8 t! a0 n2 f- ?, c1 Z) p7 W; e
00403156 B9 3E000000 mov ecx,3E
. ~/ t, o+ O& }4 [0040315B 99 cdq* v. v9 D m' i: B' {
0040315C F7F9 idiv ecx
* X3 l; R0 c* {7 l- L0040315E 6A 01 push 1
1 e/ |! Q" n9 y6 B00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]/ Y {# a- v* j5 l: O8 a) U; n5 @
00403164 8BF2 mov esi,edx5 L# h+ n9 \( o, T
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
9 @& K7 P* r; X5 X; T* _0040316A 52 push edx1 V! B" D+ r# ~5 W
0040316B E8 0A550200 call qsr.0042867A8 X ?( H" K9 c( F5 X
00403170 8B00 mov eax,dword ptr ds:[eax]2 E; q1 ?& O: }; P
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" Y E2 P* B ^1 H$ }* `
00403176 50 push eax: J% L# X. }; T0 O1 B# T4 s
00403177 C64424 40 05 mov byte ptr ss:[esp+40],52 H1 P. L6 z$ }
0040317C E8 0F560200 call qsr.00428790
, G, H. [/ L! Z7 Q00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# A6 e0 \, n" a; M" J8 o
00403185 8BF8 mov edi,eax
. J6 w7 L* X5 y! h00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
' O4 ~8 S0 h% ~0040318C E8 FAC20200 call qsr.0042F48B* s% s* H4 I* ~" w
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]( u: D0 G( D6 E' `" { N. C
00403194 B9 3E000000 mov ecx,3E
& A) P8 O1 _# C: i( K+ E5 {+ c00403199 99 cdq( ]' i5 ~4 x/ T9 P1 N5 L' B
0040319A F7F9 idiv ecx# \, L# x1 t( Q& a1 a
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]1 p6 x8 P- r! y4 T
004031A1 894424 28 mov dword ptr ss:[esp+28],eax7 W/ q! E$ }4 f, S
004031A5 8BCA mov ecx,edx5 S3 W. j0 n1 k4 Q% s
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
8 h& M6 Y4 I9 T5 H ^+ B2 `- L004031AB 894424 1C mov dword ptr ss:[esp+1C],eax! h. r) B) j: T
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
9 t2 ~3 }7 @1 z% M, i004031B3 894424 14 mov dword ptr ss:[esp+14],eax
9 [: x/ l& T; j- G4 ?; Y+ L7 O' D004031B7 894424 10 mov dword ptr ss:[esp+10],eax
" w2 U: Y- C% D D004031BB 8BC1 mov eax,ecx
, p" y; H& X' y U& o1 M) N, L004031BD BF 0A000000 mov edi,0A
8 W; @+ L2 m# _' {004031C2 99 cdq
( q6 l3 e- M$ y S004031C3 F7FF idiv edi! Z. H- l" I7 G$ b+ x( q
004031C5 8BC1 mov eax,ecx
+ _1 \& ?) p4 Z% r* X# x; i9 `0 U004031C7 B3 0B mov bl,0B
; t. K. l6 ?/ H004031C9 0FAFC1 imul eax,ecx: O1 B; W" w( |) ^/ v- S
004031CC 8BCF mov ecx,edi$ t( ~5 ?- _- k$ d
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
) Z2 P5 }( s) T! ?" {# \+ i004031D2 52 push edx
! T% K8 j& [0 [. W% w* a. q3 t2 s004031D3 99 cdq
. J$ q8 _& Z9 @' r" E+ l/ O004031D4 F7F9 idiv ecx6 ~! K y# l( ~5 }) o
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
c: n- L+ E, \/ N- H9 j+ }9 u004031DD 2BC6 sub eax,esi
' W; H* D! J# V! t2 ~6 F/ H5 K004031DF 52 push edx
( o- w# N6 L6 I6 q004031E0 99 cdq
* I( x& I9 d+ c1 l004031E1 F7F9 idiv ecx
( d8 d; P# S& i" v004031E3 8BC6 mov eax,esi: S1 i E2 Q8 i8 E# T0 d) }
004031E5 52 push edx/ T5 R+ i2 r! e
004031E6 99 cdq
7 x9 ?% E% x6 V: o. P: G, }2 J" X004031E7 F7F9 idiv ecx$ |' b' F" ?6 E
004031E9 52 push edx" l2 h+ j4 }$ s
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
2 M- j3 _8 X1 d# b! O004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d": ^ [; {+ \! C# H
004031F3 52 push edx% ~5 r- H T& j8 h* l- [* z
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
6 z6 x. \& p. `5 ~2 b% |+ a004031F9 83C4 18 add esp,18
1 \8 g3 H C9 {& Y0 Z4 t004031FC 6A 04 push 4. R& ] {0 c4 X
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]- u# V% U% O0 p! n
00403202 6A 00 push 0
0 L% W. J% V+ A: i+ R" @00403204 50 push eax ]* O( o+ |" j& D/ X( D
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]! ~* e8 y( V' T
00403209 E8 D6530200 call qsr.004285E4. ~, M3 R% h( s9 @' ]
0040320E 50 push eax6 Y/ f; J3 a+ ^; [9 p
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]# ~: `8 [0 Q3 @! k# q$ D1 ]. U
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C/ ]# E9 T; }, H# U! h1 z I
00403218 E8 A7C30200 call qsr.0042F5C4
# z: `6 D+ Y" C( d0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 O/ O: i/ E' I* D+ y00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
5 O4 a3 `+ R6 f/ l6 F- O4 I [( r00403225 E8 61C20200 call qsr.0042F48B- n6 o% r. }+ a+ M( b! z2 {
0040322A 6A 04 push 4- M8 \" f4 C9 d- Y) T, b$ p/ N, n$ @
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]; `, [ D. e( M% P) u8 o @
00403230 6A 05 push 5
$ f6 @' L7 i3 X3 G/ [9 {( K, O00403232 51 push ecx3 D- T2 }% P' O( }1 n- R
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
$ x+ s* a! t! k7 a# U- e00403237 E8 A8530200 call qsr.004285E4
% f2 Q: r1 \9 S9 O0040323C 50 push eax. w f+ L/ c- a9 f4 v; O% R& `: D
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
' x3 }/ P7 {: H7 W( }00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D% o8 p/ E5 A9 {) _- g
00403246 E8 79C30200 call qsr.0042F5C4
0 K5 [$ ?! }& x& `0 m$ B3 k! X0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 a: G5 W% Y: V5 [0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl0 u$ d9 K b l- A# S
00403253 E8 33C20200 call qsr.0042F48B6 ~$ u9 }3 `. N5 O$ @) k, e
00403258 6A 04 push 4# |- I: u& t) R1 A
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]) g1 U$ v# J" e3 o9 h& s
0040325E 57 push edi
' {+ j; Z, [* ?; k' t5 M0040325F 52 push edx
5 Z* Y5 k/ {* w" `. W7 o3 [00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( b! ^' P, N: m00403264 E8 7B530200 call qsr.004285E4( n/ N$ E9 d* f6 N5 d% z; Z% P
00403269 50 push eax1 D) @/ ]1 O# m. H8 ~
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 _4 L4 R( \0 L3 m. g: D' W A5 v1 a
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E- \4 q9 w) g/ i% Y3 M1 l
00403273 E8 4CC30200 call qsr.0042F5C4) q; X9 u0 l$ L
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
( H/ p9 S6 s4 S+ @0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
; S( l! B/ n8 ~ I* i1 B00403280 E8 06C20200 call qsr.0042F48B) f+ i& o$ `# `" _. E& Y+ ]/ H( i
00403285 6A 04 push 4: a Q' h9 R0 h( D" B$ O
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]. |$ B c& J4 f6 C. c# C1 Y
0040328B 6A 0F push 0F
y. S) r+ w0 Z8 ]7 J5 ?0040328D 50 push eax) f ?. l$ j. |
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
6 a/ Y$ ]; {# b; n1 ?1 T' M00403292 E8 4D530200 call qsr.004285E4
* a) Y5 ~1 O7 C$ j( f9 u& c0 R ?00403297 50 push eax3 m' d' R; J; O4 I3 a, w9 J; x: X
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]' ~ b' P, m$ E, {1 j
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
$ G6 r4 A; K$ D0 @5 ?; y8 W4 M004032A1 E8 1EC30200 call qsr.0042F5C4
0 f" ]$ Q7 G( F K& t5 `004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30] Y6 M8 u- Y6 a1 `
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl/ v/ p+ T+ ~$ [8 X& i: a% l
004032AE E8 D8C10200 call qsr.0042F48B" d6 }/ S+ i7 u, [. }& ?
004032B3 6A 04 push 4
, S" t/ o( F) U004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
% |% S+ \. s7 i; Y$ a+ d004032B9 6A 14 push 14
+ P2 i0 m1 I7 M% H) [' A7 x5 N: u004032BB 51 push ecx1 j) p0 M3 |. E! Z, |- y* F! M: M4 \
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 b3 n# g' ]$ i* {" C004032C0 E8 1F530200 call qsr.004285E42 g7 k& n! D8 |8 U' W
004032C5 50 push eax8 A6 y/ q; B1 i1 \& g2 j
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# p9 u& I1 o: ^2 T8 G( p- [7 h; K004032CA C64424 40 10 mov byte ptr ss:[esp+40],10! [3 t/ k/ `8 i/ ^6 |$ E
004032CF E8 F0C20200 call qsr.0042F5C41 ?3 H4 e! A/ i. d( A. h, J3 r; O
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
: L5 n5 d/ S( N* ~+ k004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
' M/ L) D. b- ^* |0 n004032DC E8 AAC10200 call qsr.0042F48B. ~4 U+ Q$ ~4 g& b' `
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI# j( t! l/ g& z
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX) @$ m! J6 }& q
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL% n9 R- |# l* Z m2 y
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
0 {: U8 M: }% s1 l004032ED 8ACA mov cl,dl ; DL送CL
# C: Q' U ]2 @* M004032EF 3AD3 cmp dl,bl ; DL和BL比较
# A0 c, x; _& i* D9 S- Q2 U0 t004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳） y( ]4 Q* S! C6 R' G/ h
004032F3 84C9 test cl,cl
0 q" E$ k9 a1 D004032F5 74 16 je short qsr.0040330D
" w$ ^2 `# _! W004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
/ N3 P! c: }( c- ]* P004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL4 o" r8 ~5 [6 X* k" V+ x
004032FD 8ACA mov cl,dl; n8 B# ?& n! h# ~* Y
004032FF 3AD3 cmp dl,bl ; DL和BL比较, P/ | E* d9 d; N, \
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
, x* k& W$ x+ y, U( Q3 u/ S00403303 83C0 02 add eax,2 ; EAX加2- Z* Q2 x; w6 R6 W4 J8 L
00403306 83C6 02 add esi,2 ; ESI加2
* r2 P& k# q6 v* C% x' L& t) v6 U00403309 84C9 test cl,cl* d! R0 x: a. i+ {1 v3 w3 f8 G! L
0040330B ^ 75 DC jnz short qsr.004032E9
- n: T1 S7 h- _+ D+ B+ t+ [$ L0040330D 33C0 xor eax,eax
0 v V7 }4 x* [. a: @/ }4 Z0040330F EB 05 jmp short qsr.00403316$ A. X- |) o! u' u d! x
00403311 1BC0 sbb eax,eax
* r" G; V. t/ H, P; D00403313 83D8 FF sbb eax,-1
1 F* n# L3 i5 |% X! J: {" A' _00403316 85C0 test eax,eax
. l2 b" Y9 H) Y$ P+ H! E- d00403318 74 0E je short qsr.004033289 p# |; Z( V2 J4 @) F4 o" l- k
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
/ l+ t3 d7 E+ v0 Q/ y; W0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]- V' j& k9 j t/ Z
00403323 E9 F0000000 jmp qsr.00403418. r$ G ]. u% ?
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX, a0 p* F A/ k1 M" V
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 w9 L" A- @, E9 b e7 h2 t
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]: V J* c2 Q; ^7 C8 X
00403333 50 push eax5 g' g- ]1 b8 {5 m$ |8 n3 c
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX" ^' T \9 Z, ]- }/ J: K3 g
00403339 50 push eax
, o: z) V' {2 S) \" A0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
) C/ O0 _# q) K- [0 q# X: w0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
) x6 @9 u! ^; p' E9 w00403343 83C4 04 add esp,4/ E- ?. l) G8 E0 |
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
2 |+ k7 ^6 U+ b( N& t4 H7 ?00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
" W+ f! T( z' ~/ d. o0 L0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]1 V& v% L$ B- R* r& n( w- F5 r/ H" R
0040334F 50 push eax
C, P0 g5 I* J$ i# @6 Z7 \: W$ x+ S$ \00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
. j& W; g2 o" X! y/ t00403355 50 push eax4 \, h% W" `' E$ z
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX) }/ j) L" [- o% b
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
0 ]5 B% {. Z+ A5 a) V/ V0040335F 83C4 04 add esp,4
2 _( O( }; }2 m2 i0 N# g00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
7 G) H8 a2 N' Q z) R00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ D1 a. S* h# p: ^2 @
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]8 `" l5 w2 H% T" ?2 B8 G# `: c
0040336B 50 push eax( {' E3 B- m. Q* U1 e
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
9 K% }1 h/ n/ L+ I8 P- B) t00403371 50 push eax ]6 X7 U4 {: N0 B% q# P. z5 U" C! c
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
* s; P6 q; f& J9 z' o& H" t00403377 8BD8 mov ebx,eax ; EAX送EBX6 O* e: P) F9 N) ~
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
# ?5 x" i1 v( w4 ^' k* F0040337D 83C4 04 add esp,4
0 L2 A+ E1 s0 c7 e7 b00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ _! C$ o7 b3 X( Q00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]- G6 p, {# S* G! x% `! g
00403387 50 push eax- L: |/ |- t! s) S4 w4 k) u
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
" L% j4 d/ J# o% S% \( F0040338D 50 push eax, i2 J% c% c) G+ u) }9 E
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX3 S G& D8 Y1 w+ Y# f: S4 d) J0 @
00403393 83C4 04 add esp,49 E! t0 J5 c' z
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ A9 |. l8 |( C" [- d/ a6 @0040339A 8BE8 mov ebp,eax ; EAX送EBP4 q2 R% P8 @& M1 u' j! q- m! ~! t" {
0040339C 6A FF push -1) Y8 c( y2 X: r r8 _
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX3 ?- [$ D5 S5 X
004033A3 6A FF push -1* R4 b7 k) ~5 v' Z, l1 G% W$ X
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
% C7 `: o9 t" N8 Y004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX1 K* } R2 ]8 B8 f: m: ~& |: M
004033AE 6A FF push -15 J! }7 ]& c( U D1 q
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
* Q0 M. }: T+ F l9 K6 ~004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
$ l$ y4 ?4 r- t' ~004033B9 6A FF push -1
7 V- ^ ~ A/ q3 i6 A8 J004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
: _8 S! s( y0 ^9 d004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX2 k1 C% c6 x. W
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
2 g( Y% {7 a, E' O8 _004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX7 ?) c- W2 y! C" U! m9 J2 D
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX# \9 H/ i0 A1 P6 ?& r+ z
004033D7 D1E0 shl eax,1 ; EAX左移1位
4 V$ ~5 g& w, Z; u6 J9 W/ k+ v8 U004033D9 99 cdq ; EAX扩展3 P: K; D! `' _: \ P* i% @
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
% |. Z1 R* g+ k5 X7 @3 l3 W4 [004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较; F( _7 x, v# \, F* O
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）+ Y- l6 {. @& Q4 p$ z
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
C7 `% c: G) u9 S0 E004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
9 k% U, N, i' t" I! R. ~. `004033E9 EB 2D jmp short qsr.00403418
0 v* M8 X0 q. p% r W004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX) w3 n4 w8 b8 O H9 e" s' m) y
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E20 o, l5 `( l, Y2 H6 N# }
004033F7 99 cdq ; EBX扩展
: M5 ^) ~: n, J6 n5 V0 Y7 E& u004033F8 33C2 xor eax,edx ; EAX和EDX取异或
& E1 W/ V, a1 {5 ]3 U004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX& b. T' F/ X# T2 d g4 a4 F
004033FF 2BC2 sub eax,edx ; EAX减去EDX; r) B8 s' p2 w& t' Q! T
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
+ U* s( W: O! ?3 Z1 O# ]8 d. y00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX% Z8 j8 R4 k, ^# H9 L8 z; T. M; c. I
00403409 99 cdq
- x; E) V$ I% [& _& B b0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中8 y" N9 h. Y$ U6 C% W+ M- U0 ^; `
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX/ S4 K1 E( T) U7 T# {
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较* H5 v/ A' P0 Y! O, {' m
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
& D, s" Q" R( r& B R" j% O7 v0 `00403418 E8 6EC00200 call qsr.0042F48B ; & Y& r" V1 G# O+ {# s" X3 f, M3 L
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. _" B+ j* [$ R8 J7 _0 o$ L7 X00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
( {% G, ~2 Y2 Y00403426 E8 60C00200 call qsr.0042F48B
4 Q7 |1 ]4 T8 p+ D/ o0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
+ P$ V1 S: I- W( p0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],86 a3 H/ ?" F; q7 m. _1 Y
00403434 E8 52C00200 call qsr.0042F48B
! {8 ~( o; [3 ` q00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 s8 }! i0 M' s: J- I9 k& E0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7/ L' t8 B: H! L
00403442 E8 44C00200 call qsr.0042F48B
- R/ |5 m9 N' }9 V) e- ~00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
T% U, W$ O) R. E k0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],65 P$ ?! I! P/ L3 f, Y) c. Y
00403450 E8 36C00200 call qsr.0042F48B
5 E2 t5 } `' |: d00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]! D/ j- W' P, ^1 O5 K7 t: m% ]
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
# X* S6 T& `" b9 |' D0040345E E8 28C00200 call qsr.0042F48B
, ]7 K# M9 A- {9 F9 M1 }00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]" X9 D& ?" C! J/ Q9 F( B" J
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
# ^4 n2 }* z2 D0040346C E8 1AC00200 call qsr.0042F48B" x# s. t# } q" O
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]1 h, |# A" Q/ j' L: x0 D& j( }, a$ M
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
# w% |/ w `4 G0040347A E8 0CC00200 call qsr.0042F48B# z# @6 C( R4 J/ R) O Q$ h
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
, J* q& ~9 d! {4 P4 N3 ~3 U00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
! ^5 Q- T- J3 e7 h5 b+ E- |00403488 E8 FEBF0200 call qsr.0042F48B# R' q2 O2 \9 J+ `4 C
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& p2 u8 g) E* U8 g% J
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
8 c' ~) ?- ^; u8 w2 t: @00403499 E8 EDBF0200 call qsr.0042F48B: x* M+ t# l4 s3 W& A: v
0040349E 32C0 xor al,al ; AL清0# s) l; }; Q% j: P p" C; c
004034A0 E9 88000000 jmp qsr.0040352D
3 l* Q% M* K7 n- t004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~2 r+ J; y% h; T( Q
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ |- { v: v( H9 N+ \004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
2 l& x- a3 @ Q' L9 m/ |3 ~% `6 I004034B3 E8 D3BF0200 call qsr.0042F48B
, v! O+ D. j- n! K- s004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
) O" S0 D. m0 j; s3 f5 f! l# X# r004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
6 i1 o6 O6 D9 T* Z" H, D) C004034C1 E8 C5BF0200 call qsr.0042F48B
1 b$ c$ N* a& ?6 O+ L4 H0 T* x7 g8 n004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
7 W. f* n0 c! p# x+ \7 j7 @, G004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
% A( e; D0 ]1 d. }004034CF E8 B7BF0200 call qsr.0042F48B
! ~7 B# k: y* k' {004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]5 @) V0 B# A8 K+ \+ o3 l- v
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],63 T. I: B& u0 j0 P2 X0 ?
004034DD E8 A9BF0200 call qsr.0042F48B
T6 `. I, l2 @# w: H0 y3 x% x L5 J004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]: B" }' S9 Q6 Z9 d
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3+ a; Z/ ^' f' K0 K
004034EB E8 9BBF0200 call qsr.0042F48B
; [' F, D( Q' H1 u2 z+ m004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
* |/ d& H- [5 k1 ?+ J004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],22 t+ ^' l( l' {# V2 }6 \2 t Q
004034F9 E8 8DBF0200 call qsr.0042F48B% J5 [) B2 P8 u
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
6 _- I, ?4 F& W* z00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
F/ G' a- P, A9 j% K8 ^% J00403507 E8 7FBF0200 call qsr.0042F48B- R) O+ J! Z; |3 P# L9 x+ J" q, Q' a4 w
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]6 y' y# ?& r& z G, G$ K5 S
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
1 s: G5 Y' t5 j4 k00403515 E8 71BF0200 call qsr.0042F48B
- q$ k: k9 b G" W B0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 D0 J$ F# B2 M6 r! `
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
5 y+ I$ X4 n! y" c. d, f. x00403526 E8 60BF0200 call qsr.0042F48B
# B9 j* v2 A5 n3 y0040352B B0 01 mov al,1& I. x6 u& t2 ~" y' s. m+ K) G
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
% ^' ~+ _8 S( }8 o2 t: w2 o7 {00403531 5F pop edi
1 u, Q R f2 V; G% i00403532 5E pop esi' z$ d" g5 g4 l- g+ A) N) ~4 k
00403533 5D pop ebp
/ d" x9 m" m. m00403534 5B pop ebx$ t4 r! |8 }. s ~
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
T2 @% B0 V, R) o: N1 G0040353C 83C4 30 add esp,30
# d, p* L% q" h% ]' \' S) ^0040353F C2 0800 retn 8
/ o+ T7 F" N4 }+ o7 C--------------------------------------------------------------------------------
! P3 U& X7 [& i6 W. ~% ^【破解总结】, C' ~; ]- @, p- X$ I5 h
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^8 G' x0 Y( i9 ?3 A. R
用户名：yijun
5 a H; L* D: S2 J+ `& q' ^! Q注册码：4893*7777*3726*7777*0529
+ t- ~8 ^% B6 a, Z* z* q9 c--------------------------------------------------------------------------------
6 Y. _' w$ @4 t/ V9 I( O【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡