|
|
|
【原创】破解Quick Screen Recorder
$ _8 @8 ?! O$ e- Y【破解作者】 yijun
, I( k- B$ I/ s【作者邮箱】 [email protected]7 g2 X6 M! [ V0 U5 Q4 ^
【使用工具】 OD,PEID! L) j; L% ~& Q: I( } \6 t
【破解平台】 WinXP! [3 B4 G% R$ D; q, ?
【软件名称】 Quick Screen Recorder
; [# b5 b- w7 m# a【下载地址】 天空
6 A1 G+ B" y8 V$ T【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
# G/ g& x" v3 A- o5 X【软件大小】 540K
* {) l7 K. O9 d. N5 e+ O【加壳方式】 无- K( ~! \, C9 z4 p% N. [# ^
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）# L( F( c- z9 I. u1 ?+ h
--------------------------------------------------------------------------------/ t# U \% q/ w# q/ ^+ z; X
【破解内容】
+ O/ N) ]$ F8 n- k. R$ B y PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：* v+ `$ F3 Y6 n
00404C69 55 push ebp //在此下断6 B1 w8 ^+ m: D+ G5 j. O: U* _
00404C6A 56 push esi
' X5 Q, w, {% _/ ~" i00404C6B 57 push edi) Z/ c1 q) h. L8 D
00404C6C 8BE9 mov ebp,ecx+ j# ` y9 h e! X0 c
00404C6E 6A 01 push 1 t8 x0 \8 H6 I2 P' r
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名- L ~2 P# g3 |0 \
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
$ T# u& a) s6 p: n4 Q, a00404C78 8BCF mov ecx,edi6 D y1 Z* ]3 D/ v T& C3 J2 M- r
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
% q- P8 x" A. Z9 P4 {& j00404C7F 8BCF mov ecx,edi
7 C6 j. z' o" }. I$ S9 m0 V00404C81 E8 A73E0200 call qsr.00428B2D8 O' x2 c2 T" t# C
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]& t6 f' f; n! U8 ?) R# O& z
00404C89 8BCE mov ecx,esi
7 o5 r+ `" l6 J$ N00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX: b0 N4 v: J" l9 ~3 b6 {* ]* r
00404C90 8BCE mov ecx,esi
7 b6 l, z% I* U8 T0 R00404C92 E8 963E0200 call qsr.00428B2D
; H$ B. s. m2 S3 T) l9 ^00404C97 8B06 mov eax,dword ptr ds:[esi]
]' b! P* @8 p8 D% w$ {1 i8 X00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
/ S# _3 W: k2 ^. ?00404C9D 7D 26 jge short qsr.00404CC5! w v0 d( a3 \* s1 S
00404C9F 6A 40 push 40! G, q, H1 @( N+ ^
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"0 k* d+ F: Y' ^" t1 f- n+ N. H
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."& f( d9 K. W% m' M$ K0 J4 H
00404CAB 8BCD mov ecx,ebp' L7 d! J0 i, b' `$ M
00404CAD E8 C3840200 call qsr.0042D175
* ?0 d( i+ H% @00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
# ?) E8 B" }- z( k6 v! c( o2 p00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
% R z9 Q# \# p00404CBD 5F pop edi+ ?3 y) F" [; ?/ k
00404CBE 5E pop esi8 r9 P$ s2 R# n1 w$ \0 h1 B' j2 `
00404CBF 5D pop ebp' ?: W7 `) Y8 H" p/ W: ?( c' U
00404CC0 5B pop ebx) r( w6 _+ U) ?& H; x; }
00404CC1 83C4 18 add esp,18$ m) G+ Y# _ F# w+ w
00404CC4 C3 retn$ i* a; j o$ S$ ?8 Y" C8 Z' s" H
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]8 g* I% T1 ~. P/ ~- Z
00404CC8 84C0 test al,al* J L O2 A" \; x% ^/ {
00404CCA 0F85 1C010000 jnz qsr.00404DEC7 u: t- _, _& t7 k' X- D B
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. g# F( c7 a3 P {# ^ [
00404CD4 E8 87E3FFFF call qsr.00403060
* G) |0 n" q! T8 r' |6 Y00404CD9 51 push ecx+ z8 Z% ^; {& f: w2 E2 `) C
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0/ b' @1 R- I1 u0 m6 e5 Z3 S
00404CE2 8BCC mov ecx,esp- _1 l( w6 z0 H* }9 R! C' u9 I. @
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp; T* g* n0 k) l0 c# g
00404CE8 56 push esi! r6 ^0 ?3 V, _- g
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
* A' ^/ \" j7 u. L00404CEE 51 push ecx& d2 [3 d* U5 u; P' `% r
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
0 B7 h/ C; F, y! u00404CF4 8BCC mov ecx,esp5 e+ M; S, N1 ^
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
s- X: p# ^4 Y( n' L6 F00404CFA 57 push edi8 G5 W% {- n. T
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0% b! \% A' f4 O8 c
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]% V, j7 T& r8 z
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
. B0 U8 o# w0 \9 x0 y, `' C+ y' q00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~# ~2 l3 ^5 S+ W% w
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~/ Y. l! x( G A4 b5 P2 H( {
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~& ]9 j0 u y \( q' i! b5 t
00404D12 6A 40 push 40- }8 c8 O- R5 y! g) _
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
. e& U2 ` |5 _. X00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again.". a+ ^, K$ {+ m6 Y4 P; M
00404D1E 8BCD mov ecx,ebp+ e0 D" |% x+ y! F$ W4 D9 s q
00404D20 E8 50840200 call qsr.0042D1751 V- J9 z4 O4 s8 y1 L, l
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]2 M [( [- s& z9 L- Y, p
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
" y! R% X. x: X p6 I00404D31 E8 5AE3FFFF call qsr.00403090
) V. t M/ h7 z \& h3 k, e00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
5 N) Y' V: J; @+ q7 B) U4 C3 z00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
) j; l% ~5 {- P- k/ Z. A00404D41 5F pop edi
8 y' }% k: ^, C, K4 s3 z00404D42 5E pop esi
7 I# t( P$ a0 {' e, i00404D43 5D pop ebp
8 [7 |3 P: N- j/ m! K5 D! ~00404D44 5B pop ebx
* w Q: B5 l! |0 p00404D45 83C4 18 add esp,18
! {4 @' F6 z6 o6 Z0 Q ?1 [1 Q00404D48 C3 retn
# ]3 R0 b9 F3 M$ a$ P2 |*********************************************************************************************************************************************************
3 Q0 i& E7 q. q$ t7 s跟进00404D09处CALL来到：
0 g% A/ {" B$ F& N9 R004030A0 6A FF push -1 //一路F8下去~~~~
: H+ b8 m; i3 n, B5 n1 l004030A2 68 C88F4400 push qsr.00448FC8" }9 W$ Y; m, ~. `* q
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
+ | S) \3 I. u* t# m8 H004030AD 50 push eax" h. m, c4 Q. [3 n
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp9 I! E$ c( U7 W, ?1 ^1 {4 b
004030B5 83EC 24 sub esp,24
" n; d+ e1 \- m( Z! } l% F004030B8 53 push ebx
( J6 m W; y9 T" E004030B9 55 push ebp
; s; B: [" J" c/ ` j3 L/ Z+ N1 q004030BA 56 push esi. O- K% A0 e) A( Z k
004030BB 57 push edi
% z. w2 L; E8 ~" |004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
6 f# p3 H" |+ }" P; T004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]% K5 G3 T- T+ v- X5 c( {) J3 R L; ?
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
' h7 S8 ?3 G( `1 @004030CD E8 27C40200 call qsr.0042F4F9' X' `' T1 F- J, _5 k5 Q b
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]2 ]0 ~8 O8 ]8 K m
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
0 y; @6 J. m; A6 f" n; i1 p5 j004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
+ C% R' i, j! w( l/ ~* ^004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
: y# M3 L1 l5 P6 \5 t004030E4 E8 905A0200 call qsr.00428B79& T# Y% M5 z+ }& j/ U* l
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 C3 [- y1 ?$ j" a* A: t7 p4 z; d
004030ED E8 3B5A0200 call qsr.00428B2D
, D4 r" ~/ @6 Q! j" m004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]8 _# |' M2 x1 V4 ?9 U, `' a) ?& l
004030F6 E8 7E5A0200 call qsr.00428B79' R6 t+ y( m! F$ [! ^
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]/ V! @# D( H9 i' p9 `0 B
004030FF E8 295A0200 call qsr.00428B2D" y9 b9 Q% P* t8 R( B% t W* A4 J
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
' f2 e3 G' J* a- z5 p% u00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]$ X2 {( b1 N/ W) }$ s6 K6 p
0040310B 83F8 02 cmp eax,2
1 V) F, g! @8 \% y. x. e% @0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
, ]4 G8 U3 L$ `4 L- i) F& k% `00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]8 ?& r+ q v* N! q) a( K- y' o
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18! w/ r$ t; ]0 y0 f/ L; N
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
" t, L# r8 c. }) h2 H4 A3 m00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]4 Y0 j& s7 d' P% {! A- Q
00403126 6A 01 push 1: @) W' l- O+ ~5 ?; n
00403128 50 push eax- T$ n/ w( y' b& l/ d
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50], X' D! d6 ?, W; F2 s% ^
0040312D E8 C4550200 call qsr.004286F6
% M& d; h5 t0 W; ]9 B00403132 8B00 mov eax,dword ptr ds:[eax]- r& Y! F8 h9 o( w0 S/ d
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20] C+ c5 n" s! q9 ?5 I6 \
00403138 50 push eax) o1 o! @% T# f" n0 f
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4' a2 g3 O* s0 K+ b
0040313E E8 4D560200 call qsr.00428790
' E0 u. x) Z8 [0 d" w8 X2 \; A1 V# b00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
; p6 j( d/ k! y; y/ i00403147 8BF0 mov esi,eax8 ]8 ]! z& K3 `/ ~# z
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3; k0 x' ]3 N/ f
0040314E E8 38C30200 call qsr.0042F48B
( \* [5 M9 B% d1 x6 P00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
9 w5 x$ j4 Y3 Z- f$ t3 c00403156 B9 3E000000 mov ecx,3E7 E7 o. b" l0 ?" P; B6 h" s
0040315B 99 cdq
9 g; A8 c1 k. Z7 V) i. C0040315C F7F9 idiv ecx2 }$ k" L* n2 y" E) r
0040315E 6A 01 push 1
% \$ B0 V+ x0 j" C00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
: s' i! s( L& s0 v: H+ s) d00403164 8BF2 mov esi,edx+ n2 M; l" I8 F$ k
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]) R h) @1 w0 n2 D- w
0040316A 52 push edx
) ]. Y0 k$ W3 S' @$ ]0 ?0040316B E8 0A550200 call qsr.0042867A
( ?9 u: \+ {4 t5 X) E00403170 8B00 mov eax,dword ptr ds:[eax]/ P2 @) H. ]0 y* g3 w( c4 b/ }
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ k% P- n) _# ~. ?' c; I& m
00403176 50 push eax
) z; [- X$ F( h5 q8 r00403177 C64424 40 05 mov byte ptr ss:[esp+40],5& p* D( Y. r6 U% }& W! Y: V
0040317C E8 0F560200 call qsr.00428790* B8 H# ?% \1 d# {3 M
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
( O- N" ~$ ^- L4 s' E4 T! w00403185 8BF8 mov edi,eax
+ T# l0 w6 T0 I8 c% R" B3 E00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
! Y# o) ?& F' N1 B/ A8 o0040318C E8 FAC20200 call qsr.0042F48B
( f! D3 ^& \4 v1 t00403191 8D47 0A lea eax,dword ptr ds:[edi+A]0 e3 |$ H- c* Z/ G4 ` p8 d# J
00403194 B9 3E000000 mov ecx,3E
Z% p; ~1 }+ q: B) G7 Q00403199 99 cdq ?/ J- |" d0 q
0040319A F7F9 idiv ecx( O( E$ u' K! a1 C! a; |! y# U
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]' Z0 k9 r8 P: O; q/ s% `
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
8 l' G! I3 f D1 D! F004031A5 8BCA mov ecx,edx
1 V x1 U. h! ~& J9 p3 n" T004031A7 894424 24 mov dword ptr ss:[esp+24],eax9 W K# m! \% K8 k# _- o5 U
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
7 ], F( |$ w. ?, X. }) P004031AF 894424 18 mov dword ptr ss:[esp+18],eax/ {3 }( M( x) F1 }, z9 g3 b. N1 b% Z
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
# Q" N) w {; K, W- J& X! t. @9 X$ k004031B7 894424 10 mov dword ptr ss:[esp+10],eax( w) c. u E; v) R
004031BB 8BC1 mov eax,ecx7 w0 l8 L3 M' L0 v2 S" ^; k
004031BD BF 0A000000 mov edi,0A
2 F( @' o7 u/ B# ~004031C2 99 cdq: O* d" t5 t; M3 T
004031C3 F7FF idiv edi4 h' f0 Q8 X% T2 W) i H
004031C5 8BC1 mov eax,ecx8 Z- P W8 J* [
004031C7 B3 0B mov bl,0B
+ N3 J. _9 Y0 |7 \2 G' l9 _4 h' r004031C9 0FAFC1 imul eax,ecx4 _; a. ]9 |2 ]/ }1 o* |' c( k
004031CC 8BCF mov ecx,edi
. O: }7 B; | h004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
: t8 s$ g; {0 @# U6 S0 \004031D2 52 push edx. } t( @ P8 P& @: M
004031D3 99 cdq1 Z# ^/ Q$ g: {: Z, }& L* Q
004031D4 F7F9 idiv ecx7 \) m* n* ?; g% X5 p
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
+ M2 y1 W$ [7 ~) C% P8 ^3 G6 d004031DD 2BC6 sub eax,esi9 ]: N( D! e; G
004031DF 52 push edx4 m4 F; l6 S! B# N
004031E0 99 cdq4 L: r( d' W$ N( z9 y! I( a
004031E1 F7F9 idiv ecx
* u/ ]3 b5 `8 N3 t0 _" d2 R5 ^/ X004031E3 8BC6 mov eax,esi* t, _3 ~8 d* y8 `
004031E5 52 push edx
. H# b6 e, }$ o2 S, }" M# U004031E6 99 cdq6 a: O! C. N3 H0 F1 ^
004031E7 F7F9 idiv ecx
' f2 _+ q4 J% F* T, l, g7 d004031E9 52 push edx% K! Z) U; s9 P, M' B& m/ B, V& \, `. p
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
% q7 v$ u1 Z; {* w004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
/ L# i' q1 t e3 p+ K) U& H$ ^/ l. q% f004031F3 52 push edx
% g7 k! P& D$ o: F004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893' l& [3 K2 K8 `" i5 O9 v
004031F9 83C4 18 add esp,18. ?0 s% _& d! v8 b- X
004031FC 6A 04 push 4
$ z3 @( ]/ x0 @- q1 E004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]) p2 f- b6 |. C0 s8 F% D
00403202 6A 00 push 0
7 F0 \% F2 @% p00403204 50 push eax
- f" ~% R2 l. P00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 y% G3 u' y3 F$ m O1 n
00403209 E8 D6530200 call qsr.004285E4
% @2 f6 h) b% E/ P7 L0040320E 50 push eax& X- G+ c8 e& f1 C) s
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]) B) q+ j- Z6 z
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
# ~2 F/ P* f f5 }; l; N( V6 O2 U' |00403218 E8 A7C30200 call qsr.0042F5C4
0 w8 B- x! o+ s! j: F7 _0 \0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- T2 ^( _, W, [ h) J; u
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl: g2 u; o" }/ p( h% s8 b5 R
00403225 E8 61C20200 call qsr.0042F48B+ C" V4 u) @* t1 u
0040322A 6A 04 push 4) T8 f3 t1 p; A0 L; s8 [
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
- Z; A% x, D' P' _00403230 6A 05 push 5
- p& a% }. s0 F00403232 51 push ecx
5 h6 c1 a; P5 y" [2 M& P00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
7 I7 W. y# b# `) b5 E; S1 e, A00403237 E8 A8530200 call qsr.004285E4
% c; c$ c7 b1 |; K0040323C 50 push eax5 g: Y" M! g% @
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
. |" |/ P5 O# { H$ o* o00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
: R/ X A" E1 y2 z00403246 E8 79C30200 call qsr.0042F5C4) m7 x4 p1 h- }( p' l3 e4 j
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
s3 \" W' \0 N& F# c- a5 `0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl1 P7 ?! ^. W* c! f7 R5 R0 D
00403253 E8 33C20200 call qsr.0042F48B& @1 d4 L, G, t9 P: b3 o
00403258 6A 04 push 4- P' }- J5 H g! ~+ v% o
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]: o o6 ]2 w/ A3 e* K; K
0040325E 57 push edi- S+ [/ M$ c& c# L% y9 ]5 g, l
0040325F 52 push edx1 t) M% D! T# l4 V
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
. p3 y: G7 d' K t6 ^' D j# {7 X00403264 E8 7B530200 call qsr.004285E4' x: t/ U/ N% i! E) U/ n* n8 l
00403269 50 push eax
7 ~! z6 d) T2 o3 ?1 k& K5 Q. j0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ h, y' o1 d8 E2 J# N. ^0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E G5 K! i" B& |) y; F& X
00403273 E8 4CC30200 call qsr.0042F5C48 C. q, S4 u6 P
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30] A T s* L0 I& Z1 N
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
% V5 W$ ]4 Q2 U00403280 E8 06C20200 call qsr.0042F48B
. W- T; v |# q! r% H0 V00403285 6A 04 push 4
: G; S. H+ [! x1 _- A00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]5 g7 d; j1 ^$ T+ V& g# m% l. H4 ~
0040328B 6A 0F push 0F
; Z7 g1 Y1 U/ _# i9 S' y: Z0040328D 50 push eax
4 H1 I a" E- b7 ~4 `% K7 n0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]8 B( @6 G" h, Y$ I) ^7 u6 c: B
00403292 E8 4D530200 call qsr.004285E4# {) M; i( \+ J! Q/ @! Q3 ~' @
00403297 50 push eax
/ y' v# L) \: _ w* A# Z$ Q00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
2 I; h# |& E Q6 k" g& E0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
6 u, d+ n, ]: e7 i004032A1 E8 1EC30200 call qsr.0042F5C4
1 B$ J) W3 }" o# ?0 h' ^; X5 K) A+ K004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- S5 c7 r6 w& U& ?
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
+ l/ F# p2 {- G e' |3 X5 M# Y4 ]004032AE E8 D8C10200 call qsr.0042F48B Q% r p0 q3 g0 q* {/ N/ p
004032B3 6A 04 push 4
+ _3 N. r# v, ?004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
' ~. P: K" I1 N, M1 y* K* ~- B% B+ ?# _004032B9 6A 14 push 14+ A7 X! q6 s& H
004032BB 51 push ecx/ F& F2 d! x* P. v7 k8 X
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
$ N" S+ |: \2 R1 i& I$ t( Y4 j4 k2 W004032C0 E8 1F530200 call qsr.004285E4
0 r3 a/ v7 u' y6 _; s2 @8 X4 o004032C5 50 push eax
, ]# n2 j2 @' u5 B h004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. k2 H% Y0 l; d1 {# D2 C
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10% r$ |$ _( w8 m) U+ N! O
004032CF E8 F0C20200 call qsr.0042F5C4 {8 ?0 R! W/ E, I: ^) h1 j
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
( A+ n' n& `; x; E( J004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl9 J) L: f7 J# `* S/ E8 p2 D( H. r' }
004032DC E8 AAC10200 call qsr.0042F48B
; f9 {4 G# P1 L3 D2 ^' E( i004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI3 L" n4 p3 s2 r1 n' q. g" H1 o+ e
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX, M9 Q: |) N w4 p2 Y
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
$ Q" l0 ^" o8 z9 c' w/ k0 m004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL9 l4 h- E9 O2 g! y8 T
004032ED 8ACA mov cl,dl ; DL送CL
8 T& ?/ m+ s5 B7 ]004032EF 3AD3 cmp dl,bl ; DL和BL比较
1 N3 n! N* i1 L; J2 E, i( r0 l004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
, W7 | b+ a0 X7 c' K+ v2 z$ H1 E004032F3 84C9 test cl,cl+ B; F4 E2 B9 F4 P+ V6 }5 f
004032F5 74 16 je short qsr.0040330D7 W0 U! o6 M d5 y
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
" S4 x) F$ o9 e" c t004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL7 g$ P1 Y) m/ q8 V/ B( b% g
004032FD 8ACA mov cl,dl
1 H% y5 V8 q! M s) L/ ]: t4 C004032FF 3AD3 cmp dl,bl ; DL和BL比较$ z) h" I( Y) A6 ~7 B
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）: U* ^, z4 |0 Z+ A
00403303 83C0 02 add eax,2 ; EAX加2
" b ?3 {" m- |5 h4 \" u00403306 83C6 02 add esi,2 ; ESI加2: r8 d4 h; S# \* B5 b
00403309 84C9 test cl,cl
& B# J( U6 S0 ]$ z0040330B ^ 75 DC jnz short qsr.004032E9
* P0 I% }9 q0 b5 i @" H( o& y0040330D 33C0 xor eax,eax, _% I! K D* | U+ h; _3 c
0040330F EB 05 jmp short qsr.00403316 J3 P9 M% b8 q& b! A! m, L
00403311 1BC0 sbb eax,eax0 ~0 B; b1 P3 L% c4 b* t
00403313 83D8 FF sbb eax,-1# a) h6 O. W. d' O) g5 I+ O
00403316 85C0 test eax,eax- d4 f: R) A4 y, \' e0 O- E
00403318 74 0E je short qsr.004033280 t* u- @4 k9 y0 R' b: i
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A2 @8 ~: P' U% f0 V8 z
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
0 P6 i9 s! x+ O! l5 ~. T( W; d5 N00403323 E9 F0000000 jmp qsr.004034187 Y# s4 O) {/ T1 D5 q9 S1 J S
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX! i9 E; k7 j9 b9 O3 O, ~
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) Z6 U4 E1 Q6 ?+ X4 @00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]. D; V; B; `" ]
00403333 50 push eax' M |- }/ `; Y
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
$ |1 L6 |$ N1 a9 o9 [& E( e00403339 50 push eax
9 B% k' @+ I2 O7 q; j; F0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
% G8 A# k: P8 [* g- n0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX% C4 o' t& K) i/ ~$ E* P: e! U
00403343 83C4 04 add esp,4% a; x1 D3 S, p8 J
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI$ S* c& A. q, N8 i; U2 B) K
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
! Y$ X7 S) b+ {7 L& D0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
5 S" `3 @. L, I* ], F- R4 ]7 `0040334F 50 push eax
$ n- D0 T4 O/ }! S7 {" n00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX) Q" R# K8 c; F k, l/ h7 l% e6 \; B2 V
00403355 50 push eax
r# g/ C4 |3 d9 [00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
3 J. k, W$ L! `0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX7 X' p% Q' C9 ]# c
0040335F 83C4 04 add esp,48 o- d- x0 |) y
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
; d4 a2 Q! o) W00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# h5 {7 C7 ^8 ~1 J& e6 B00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]. o/ e$ i% o4 p7 m" S: B R8 Q
0040336B 50 push eax2 o! d) e- o5 y/ B7 m
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX+ n3 m3 w0 @. g2 @7 p* a
00403371 50 push eax
% Q3 P0 o) ]" I$ g00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
( _/ i# _* N+ N6 ~7 ~00403377 8BD8 mov ebx,eax ; EAX送EBX
) U5 w5 g1 s% ]5 L00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX. Q5 G- f5 `% ?* H2 c9 _
0040337D 83C4 04 add esp,41 o. G1 [' Y- O# y3 a
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]7 R# Y: o2 {. n8 n) q) D! U. A2 p2 o
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]; c) ^# s) w8 z% e( s
00403387 50 push eax: o3 o' t: F4 J9 ^' ^
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
) L, Y+ R0 Y3 w) A0040338D 50 push eax
9 M2 G' H. k {6 v; p2 G0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
7 j+ a3 W* a1 [$ P% W# v4 F' m00403393 83C4 04 add esp,4
: G! E1 W" z7 N. J6 s; P00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ _, W0 r' U/ y# G/ u" K
0040339A 8BE8 mov ebp,eax ; EAX送EBP
1 ?! A7 W. T$ t' ?% C0 p' f0040339C 6A FF push -1
! x! g/ S$ W" t# a2 g0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX+ w1 }! u& q: U4 j0 k( ~
004033A3 6A FF push -1( A/ M* }0 b% s# z/ u0 {1 P6 v
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX1 v4 S+ T: I: Y4 f- R+ Z" V4 L
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX# J! u5 w+ ]5 B2 v7 a
004033AE 6A FF push -11 Y# K" }, U" H8 S1 l+ R8 v, z
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
9 ~' P" y& |9 j. X3 S2 p004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
9 Q8 ?3 A' H8 q004033B9 6A FF push -12 g. z \/ r: V' b% R: v
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX* t8 V- k7 i) W# u; F& Z+ H
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
- R/ O: B5 e8 y9 G* C9 m1 h004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
e9 i. l' s% N' n, ]004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
/ ~# G3 Q% z/ O8 B4 M- t8 r# m004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
9 d4 J: [7 t' L: v( q+ A+ ~004033D7 D1E0 shl eax,1 ; EAX左移1位: X6 r; x9 P( B/ d- x% U
004033D9 99 cdq ; EAX扩展, G# H7 o# ?) D! B9 n6 c8 `/ e
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中" l+ ], o! R! H+ W4 i5 V
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较( [6 v0 F# j9 K
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
! S3 p( S5 p- l+ M, j; o! E004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A9 ^ R/ l( f" l+ m
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
7 }/ ?/ ~5 A$ L9 A& z& X004033E9 EB 2D jmp short qsr.00403418
2 W1 F* X2 Y6 T0 _$ B1 `* [+ Q004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX' L* W& ~! O, y0 H" X1 @! a$ ]
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2) M+ E Z* V3 [: u B
004033F7 99 cdq ; EBX扩展
+ d5 N" L& k8 P: h) c; z* Z! {004033F8 33C2 xor eax,edx ; EAX和EDX取异或" ?7 Z- f& A% w1 y: c1 ^. S
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
$ g2 k! ~5 Y* Y( P! F004033FF 2BC2 sub eax,edx ; EAX减去EDX4 f' ]% Z; U/ \0 r+ ~1 a1 ] ?
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]- U$ Y1 ^% z0 e, _4 t2 C5 Q$ o
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
" h! [& A0 L8 K( }00403409 99 cdq
( [: O$ |& Q# r/ |$ C0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
4 j! w2 |5 g4 K7 d( {; p# ^0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX8 {8 }* _3 k8 a+ D
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较1 v1 p$ K. Z: s- F7 B
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
% I* t" l! [7 M00403418 E8 6EC00200 call qsr.0042F48B ; ) s) q2 u+ z2 o, r- b$ t8 _2 ^$ C2 r
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 u& \; c) g- h00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],99 T+ P/ L: ^9 ?" O% r. q
00403426 E8 60C00200 call qsr.0042F48B F" ?! L5 @, q1 L
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
8 K6 D' K1 H1 d- V# T4 U0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
6 g% S k# z8 k" l1 X00403434 E8 52C00200 call qsr.0042F48B
. S; `) x- p3 L" @" W0 j2 M00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
, \! @& X& K) n: K- G, V" N0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7( s6 _. W% N) q! {/ ]! U- |8 u
00403442 E8 44C00200 call qsr.0042F48B# ]4 M5 m/ \6 g. d8 q* r/ B0 S7 _- W
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]( N5 \) s$ }: G! ]0 c) `
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
1 R$ C6 y& [4 v' k* m00403450 E8 36C00200 call qsr.0042F48B. V: h3 }6 s8 f
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
+ L* t6 W# F8 _! y* A# [00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
2 R$ V& D' D$ c0040345E E8 28C00200 call qsr.0042F48B& y& |1 n' ]4 Y; ?2 I) U, o
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]. ^, R6 q* K- \+ D+ i# K
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
% V' q: f( |. r. ?0040346C E8 1AC00200 call qsr.0042F48B
: ^0 u" {. d6 |* P/ w% X00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
1 z, F) d/ v" B. P00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1) C4 G. \! U2 u7 M2 H& t* ?
0040347A E8 0CC00200 call qsr.0042F48B, P2 m8 N" _5 x9 ?" ]- z
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
8 S- ~5 C& g% o+ k* f# ^00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0* I* I: u- l1 p+ a1 S' |
00403488 E8 FEBF0200 call qsr.0042F48B
) E: K# b- f) f [( G, D0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ Y d5 D1 x" k9 x8 c1 p, F# s! h/ {
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-13 X8 x1 Z! L- |
00403499 E8 EDBF0200 call qsr.0042F48B
5 f1 a8 G2 w4 A" P0040349E 32C0 xor al,al ; AL清0+ S8 f/ |8 g' V8 x6 y; E, b" r
004034A0 E9 88000000 jmp qsr.0040352D
" }" S n' m! v# [0 l) ` I004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~1 s# J0 y1 i2 ^4 k
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
, v8 B2 `% e# Q1 z$ b004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
+ ^7 Z6 w3 b+ m2 |) Y4 x3 |: y3 q% }004034B3 E8 D3BF0200 call qsr.0042F48B& w( L) @8 [& e& t: q
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]2 q5 K' |5 D+ ?) {: s' h
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
/ L8 T1 Y3 U3 `* O7 `5 Z004034C1 E8 C5BF0200 call qsr.0042F48B
4 G; ]' l2 l- P, @) Z2 ^004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
! i, \6 u# [# k004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7% G7 r' W4 y3 h- ]% w- |7 N
004034CF E8 B7BF0200 call qsr.0042F48B
6 x$ a8 \) g8 H, z2 {4 D: O3 j2 Y- Q3 p7 ]004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
' ~/ z M- l2 a+ C' Y0 }004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],65 e4 Z! a- u/ B
004034DD E8 A9BF0200 call qsr.0042F48B: j- E/ R' Z( ?- S
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
6 o9 x3 N4 ?6 y5 G4 c3 d004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 X/ Z+ T# h7 d* g004034EB E8 9BBF0200 call qsr.0042F48B
" m4 ?+ \* |3 T+ A) T+ e7 M0 G004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
6 O; w2 z4 u3 H0 ]& Z004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
. o" J( b4 c& Z- r2 [004034F9 E8 8DBF0200 call qsr.0042F48B. A- c2 S1 o3 i7 G
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]2 J1 k8 x, ]6 y6 H, ]2 s$ i
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
5 d7 m2 ~0 J. q+ \/ ~. S1 Z" q00403507 E8 7FBF0200 call qsr.0042F48B% w9 V: w0 @! Z% }
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* E( \! q8 `% y2 F7 B7 u00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0 G9 f9 p9 f3 g9 n M1 @: B1 Y
00403515 E8 71BF0200 call qsr.0042F48B0 M+ ]! T" x# I$ y; n. A) @
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
% W5 v4 q! ?4 M; ]0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
( W1 E$ n. s7 E7 E1 k00403526 E8 60BF0200 call qsr.0042F48B
7 s; P; {! K0 K0 |& P% ]0040352B B0 01 mov al,1
0 z) F! @% p+ G' E+ |0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]3 h0 T W8 c2 C& }; _1 F
00403531 5F pop edi
2 z M3 ~- D1 S: c ~3 ~1 @+ }00403532 5E pop esi q; o$ b8 L. M+ @
00403533 5D pop ebp$ [9 J1 [! q2 v( ]- P, Z, N
00403534 5B pop ebx+ F, C" p' ~" w0 _0 C
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
3 \/ y' D- H& z$ w' Q t0040353C 83C4 30 add esp,30
) P, g! l6 x. f* C" Q5 {0040353F C2 0800 retn 8
( F2 Y2 C" s) P, L4 V( z8 {" e/ v--------------------------------------------------------------------------------
$ n& y( G- N% [5 K) p! i! |【破解总结】
" [0 k( d/ `5 J3 h! e1 V 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
3 I7 O& {' \# ]0 v* s$ t用户名：yijun2 {5 ~; @, D' Z3 |
注册码：4893*7777*3726*7777*0529
6 ^* M0 u2 |; w" G+ ?+ A--------------------------------------------------------------------------------
^- F+ D' p( {+ O G【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡