|
|
|
【原创】破解Quick Screen Recorder; I b2 ~% U# r. K' E
【破解作者】 yijun4 f8 g; u) { I/ U
【作者邮箱】 [email protected]
3 |9 F( U$ S: e- }, c【使用工具】 OD,PEID6 l/ W. R- f% Y T: \3 Y- D9 u6 |
【破解平台】 WinXP
8 N( O% D2 V6 x【软件名称】 Quick Screen Recorder
! i# a5 j- Z! D Y/ Z【下载地址】 天空
2 c+ D; u2 e% f# |' W【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. ; G- O' o" e/ o% J6 s
【软件大小】 540K
9 c8 G$ s" l: b5 C2 Q【加壳方式】 无
3 b3 @5 A/ t& C【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
$ h& \! K) A$ ~9 ^( U--------------------------------------------------------------------------------
* D6 @/ ]+ m: Q6 s【破解内容】
0 u. M9 B0 |% t, ~1 n) D PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
" O8 P' k* ?- {# \) b0 b& ?00404C69 55 push ebp //在此下断3 Q1 f+ }1 J- L9 q+ `; ?) C$ Y: O
00404C6A 56 push esi9 W# g) b( r; f- U, a
00404C6B 57 push edi
! V$ _, q8 W) i: ^+ K00404C6C 8BE9 mov ebp,ecx
9 y7 w2 N8 Z( e' K00404C6E 6A 01 push 1
8 w3 p, w4 u5 p7 k5 c00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名9 u5 G# C8 T1 e L& |9 V
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]9 B' C' k( [, B8 H6 p" d
00404C78 8BCF mov ecx,edi
& k8 s( x! X9 t+ t1 C/ A2 O# J8 h00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
/ b6 ~: z$ ^5 D00404C7F 8BCF mov ecx,edi( k2 [* ~& ?9 M: W3 l. Y+ g
00404C81 E8 A73E0200 call qsr.00428B2D2 r' I, t4 e1 @9 ?5 k: c2 t
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
) b) t: S* V4 E) M3 x00404C89 8BCE mov ecx,esi
% t/ X& E. }: h; q" K9 K00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
. M+ J6 `8 s; e+ X B3 T( r6 y( n00404C90 8BCE mov ecx,esi e* v/ P: n# T& w8 V f
00404C92 E8 963E0200 call qsr.00428B2D+ y7 s- b3 q( S: w9 L
00404C97 8B06 mov eax,dword ptr ds:[esi]( J/ u# o! o3 l) a& a! t
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
: Z' Z- C6 U. d8 X6 n3 v' e" I% F00404C9D 7D 26 jge short qsr.00404CC5
, G4 Y) M! L8 |6 [0 U00404C9F 6A 40 push 40
) n. A2 o% Q) y: n00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
' f7 @! F( L$ H7 P00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."' f3 \, ~* p+ w* ^: z: P1 [ E2 e* R
00404CAB 8BCD mov ecx,ebp; B- v$ L# j6 J, f# {' |
00404CAD E8 C3840200 call qsr.0042D175 c% \9 g B5 ^, s9 \: Y
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]0 M6 K5 h6 {7 [4 \
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
+ g& v. `+ X; ^00404CBD 5F pop edi
8 @7 l/ f% _2 M00404CBE 5E pop esi& O; e2 H$ }- e/ r' q# }
00404CBF 5D pop ebp. E! s' g- `% v6 N
00404CC0 5B pop ebx
& A: s( U- b& {6 o00404CC1 83C4 18 add esp,18
4 ^3 o. l1 ?4 ^. X& |4 P; h00404CC4 C3 retn9 ]# e9 c' j7 p5 j, H+ p0 X
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
9 b* l7 q0 N" o1 h00404CC8 84C0 test al,al6 |. h# M- R: F A% q3 z2 M3 a, B& Q
00404CCA 0F85 1C010000 jnz qsr.00404DEC
9 G" w/ E- ]* x* g4 V. }: g# k- ?00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]: p3 P, ]8 o4 x- ?/ k0 N" A
00404CD4 E8 87E3FFFF call qsr.00403060% N& Z, S* @4 P; s I8 ?7 n
00404CD9 51 push ecx
' v5 ^) q' l( a" W- Z+ Q00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0* O. ^* a) P/ M2 X, D: m2 p
00404CE2 8BCC mov ecx,esp% g+ x, j- P% `# R1 }
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
3 ~, B# |! _: M4 s3 R00404CE8 56 push esi" D/ h# D, k" Q0 y5 P
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是06 r# R1 F1 m! \2 K4 @# t
00404CEE 51 push ecx
0 T- e7 q8 U5 A% E00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1/ _9 a7 Q. {: c8 c6 v3 e
00404CF4 8BCC mov ecx,esp
* ^4 \" [9 ?+ y00404CF6 896424 20 mov dword ptr ss:[esp+20],esp2 P/ H( K8 p, p+ f3 N* q3 Q- X c
00404CFA 57 push edi
/ j5 d0 \/ q* |1 Q00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是03 e- B% e. t# u- r' R% M
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ t7 E/ v/ O. U6 c) n& Q
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],03 m# p$ M3 C5 k
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~/ Z+ M' {6 K) W5 u. X- B
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~5 M& W; F9 `" D3 ]5 @) D
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
' P# I! \$ v: T6 M0 q! g8 R" d00404D12 6A 40 push 40$ |: m' B. V% h2 a9 K8 Z9 I# X
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
, Q# P9 _: v7 L00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
; ?& G. W% z$ R% E00404D1E 8BCD mov ecx,ebp. m+ {" j2 L) p9 a2 c
00404D20 E8 50840200 call qsr.0042D175
& c; @) Y" d0 q" u! A+ Z8 p' z7 U00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]$ R9 s% a) U1 v& p: {
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1' M' j: y8 b* f
00404D31 E8 5AE3FFFF call qsr.00403090$ d. ]( X% h V ~* h; c8 o1 L% A" i+ x
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
) T7 Q) R0 y* u; x1 Q! H00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx. R0 A' e$ I' |% j* g& l
00404D41 5F pop edi
8 o8 N$ A) z& G$ n" M& S00404D42 5E pop esi/ z( F' p o" t" |
00404D43 5D pop ebp
6 m) O3 D& z$ G8 y$ x00404D44 5B pop ebx
( f! N9 s* r( z' a00404D45 83C4 18 add esp,18
4 R2 B2 Y; Q0 H- {00404D48 C3 retn+ ^! e+ A# ?2 h' n0 h# V9 s
*********************************************************************************************************************************************************
; S/ |0 s; g* [4 n7 I8 W跟进00404D09处CALL来到：5 J9 d4 k# N# o% C7 y5 p
004030A0 6A FF push -1 //一路F8下去~~~~
A0 Y; ^" J1 Q004030A2 68 C88F4400 push qsr.00448FC84 b0 H% ~1 _* k* Q& R1 r/ |
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]: F5 b5 s4 `+ j
004030AD 50 push eax
8 ] C9 z% P h! t$ r( X8 E6 q6 c004030AE 64:8925 0000000>mov dword ptr fs:[0],esp: X3 m/ d* S" ?8 C; H* u) O
004030B5 83EC 24 sub esp,249 l3 m- Q' e. N L/ v9 e
004030B8 53 push ebx& l/ m) |. i2 r9 e1 x6 f) N
004030B9 55 push ebp
% s; Z; t" w' @1 w8 l! @& Z8 M% z6 {004030BA 56 push esi& v: V! A" r) m# L1 c
004030BB 57 push edi4 f! y. X h8 L0 y
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
5 ]# Z0 c$ `% A! k004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
5 c- D7 Z4 \1 C8 K! u& e" ?004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1- }4 [3 i, t$ g
004030CD E8 27C40200 call qsr.0042F4F9
2 ]; y5 R& l9 `" A" f+ T004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
% T- i& V% K8 U/ g7 I( a1 s004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
7 ?. L D# s! L4 T0 |004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]! G- x9 Z2 I: h5 B, T, ~# g! |
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
+ r1 C9 Y! \, |7 v7 n$ e004030E4 E8 905A0200 call qsr.00428B797 W1 f' |/ B$ J. \" O- d! I; X
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
' L* K, H5 B4 d4 v004030ED E8 3B5A0200 call qsr.00428B2D
5 ^+ R8 o6 a; ]& N* K. t004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]/ J# f) ?2 K' c* D; C- o( ~# Z5 u& R5 p
004030F6 E8 7E5A0200 call qsr.00428B79
4 k) X5 ?. x; }* S* u# i7 ^004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
4 @8 q# d$ Q9 z7 y' F004030FF E8 295A0200 call qsr.00428B2D3 w: Q/ J! X; q) O! v
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
* x4 x5 z$ |) c4 U' {: u00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
! X N# J1 c R" L0 y! Q1 b# h k0040310B 83F8 02 cmp eax,2$ u# g1 I6 @, u/ O+ D
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
' \7 p- u, S2 m# _5 G00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
* e0 q& H- V1 e9 n( p8 y: `+ \00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
% f, A/ y) l4 A0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳3 f. }( g5 E2 o& |3 k% \' a
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
; g8 A6 |: {7 s( E7 y00403126 6A 01 push 1/ O6 X# n, C+ m" m
00403128 50 push eax
' r+ R. i, j- _00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
n- Z2 }7 b/ M# A6 v1 b$ \6 A0040312D E8 C4550200 call qsr.004286F63 O) W6 X1 K* V' e! f
00403132 8B00 mov eax,dword ptr ds:[eax]
( o0 g( q3 w5 c1 W9 X00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
- m6 N+ a( G3 h! C& l# j1 H# r00403138 50 push eax
3 c7 U& D& L0 v, r! {4 d00403139 C64424 40 04 mov byte ptr ss:[esp+40],4$ P; C. _7 F! @3 E
0040313E E8 4D560200 call qsr.00428790
" p$ p9 H4 }2 f3 G00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
3 u- U8 T4 d1 [7 o00403147 8BF0 mov esi,eax8 y; f: u7 R2 }4 |. |( Y
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 d: }# ~. ?/ o1 Y" _3 K4 y& U0040314E E8 38C30200 call qsr.0042F48B
/ F6 |+ b# f0 ^" u00403153 8D46 0A lea eax,dword ptr ds:[esi+A]* ^3 z/ g( |) o+ R
00403156 B9 3E000000 mov ecx,3E
' d9 ?4 P- p5 u% ]0040315B 99 cdq
$ T4 @6 ?$ h2 Y$ @' A9 |0040315C F7F9 idiv ecx
9 |$ ]! m9 z1 H( `# S- l0040315E 6A 01 push 1) d$ v* K! U# F8 n( N2 v+ @
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]- h$ [4 B: L h! k
00403164 8BF2 mov esi,edx
* I! Y \6 K9 v- N# e x00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
5 G8 T' r0 W/ w! g0040316A 52 push edx
7 ]1 L8 U! X( p& }+ ]- g0040316B E8 0A550200 call qsr.0042867A
5 o- Q, L, {) U @, r5 `- c00403170 8B00 mov eax,dword ptr ds:[eax]+ B! T& ]* o+ ] T$ @
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
4 I" K8 P# i3 t: I5 }% q! q& y. x4 F00403176 50 push eax1 B3 c8 f O3 M% \+ v% Y
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
2 i. z9 N, g; Z! ]$ p% |0040317C E8 0F560200 call qsr.00428790+ R2 X% _: |% J
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 N& N& S- w6 L" ~* T
00403185 8BF8 mov edi,eax
; ?5 ?7 f- S! ]8 Y- ^00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],38 J& V' c. m% T! _0 _3 V
0040318C E8 FAC20200 call qsr.0042F48B
5 o' r& f: C4 Z- C0 E& ^* v00403191 8D47 0A lea eax,dword ptr ds:[edi+A]9 H( q9 j) \2 w, q1 _
00403194 B9 3E000000 mov ecx,3E
0 r7 U8 p" h; b" G( D00403199 99 cdq
# c* `8 ?/ {8 X2 o; C3 A0040319A F7F9 idiv ecx$ P2 h! y# T& b4 M: k9 o
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
. ^0 q" b6 V" M2 s2 j004031A1 894424 28 mov dword ptr ss:[esp+28],eax9 a' g7 G& N8 k) N9 J4 t+ o4 F* A! j. F
004031A5 8BCA mov ecx,edx. f, V3 a0 ^; z- o( z1 L
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
! \" k" z5 m, s! P* B004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
1 J/ T# M: R [: r004031AF 894424 18 mov dword ptr ss:[esp+18],eax' R$ l7 Z- q6 }! E
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
$ ]" w+ X3 r8 ?6 X+ x; M( I! u004031B7 894424 10 mov dword ptr ss:[esp+10],eax
# |% T7 W6 X0 _004031BB 8BC1 mov eax,ecx! }( r1 f7 B% C* C7 O. R
004031BD BF 0A000000 mov edi,0A+ k* w+ l {7 ?
004031C2 99 cdq' A9 E$ n: h% Q" Y: S
004031C3 F7FF idiv edi
4 b1 d/ O' `8 S004031C5 8BC1 mov eax,ecx
6 R$ t ~- b( r/ X& F004031C7 B3 0B mov bl,0B; s7 |+ u% p6 p7 k7 @3 ~
004031C9 0FAFC1 imul eax,ecx
1 C" s9 r: F. G7 i0 b9 `* K4 I004031CC 8BCF mov ecx,edi( ?! M7 }, ~0 t4 D0 P" U
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
O7 b/ U* P/ E: l7 x/ }7 w- ^- O004031D2 52 push edx
( H3 F; B% a X8 n004031D3 99 cdq- N" @3 w0 B: e2 V4 G! x N
004031D4 F7F9 idiv ecx
4 `5 O5 x# K2 U+ |5 r004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
# m0 }3 b/ J7 I3 t2 Y- e$ a L U) l004031DD 2BC6 sub eax,esi2 F) y$ X- o! A" B0 Z
004031DF 52 push edx
1 _" Z2 Z6 b7 g2 {5 T004031E0 99 cdq
' {' |+ p, @) ]* a004031E1 F7F9 idiv ecx
* R9 ?$ H! Z+ m2 o, X004031E3 8BC6 mov eax,esi
- l+ M( `0 s1 B, B004031E5 52 push edx
- N1 D# p. [, a8 x& y& t004031E6 99 cdq K% W# J7 v! b# Y2 `9 K9 N
004031E7 F7F9 idiv ecx
: y# o) P# `! M6 P$ e6 [0 A004031E9 52 push edx
( c& K) k# d( v4 ~004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
2 O/ I& U7 d0 {) a/ |5 Q& Q, ^004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"2 w, D" c) y8 ^3 L
004031F3 52 push edx
) f7 N2 ]) V/ [3 [) {9 s, J004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
( k4 _* h+ t" Y004031F9 83C4 18 add esp,187 u4 J# _$ N& z$ @9 d
004031FC 6A 04 push 4- T% b* P7 i- | I o- d: v1 b
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]. h4 S5 L, {% z6 U! r
00403202 6A 00 push 03 }& W$ }) y1 T2 p' L5 V% G
00403204 50 push eax
: A; R( D o, T. |3 U: \% U _00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50], I' j$ ?4 z" \' q h: V
00403209 E8 D6530200 call qsr.004285E4- j8 h' N# n( B3 a
0040320E 50 push eax6 Q0 o- M; s% R& m
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
% g9 y% u: z: ^( H/ ^) q; p00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C1 e. ~- H9 X9 \5 G" L
00403218 E8 A7C30200 call qsr.0042F5C4
/ |3 k" ?. K$ K3 r' \5 {0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' X `; m/ c' F. h' g$ F* u E00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
; G, p; {/ Z L3 _ y00403225 E8 61C20200 call qsr.0042F48B# ^! q- o& P. V! V. D# @! G( f4 m
0040322A 6A 04 push 4
- z z7 n* k& o# C9 b, w2 L- d0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]" A+ P# E5 B1 {. l w9 @
00403230 6A 05 push 5
0 k9 S, j7 O# L3 a9 R7 g00403232 51 push ecx2 n- y f/ F+ F8 F+ `, Y1 L
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]0 `0 c: ?, \1 W, L
00403237 E8 A8530200 call qsr.004285E4. T% E* ^, s; g6 F. G$ A* y
0040323C 50 push eax9 L6 m1 P: O6 F ?
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
2 z! h/ R9 h5 p3 w( ]00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D) |' @. D6 f) @5 [3 o, B6 ^! a4 N
00403246 E8 79C30200 call qsr.0042F5C4
6 d5 M, o* c8 V1 C, W. t0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 S4 R2 Q. m3 e9 \8 v$ T* _0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
4 b& ^) D. ` x J( C00403253 E8 33C20200 call qsr.0042F48B. ~7 D5 d; ~& b" i
00403258 6A 04 push 4. k) T; E: L+ W( l) l+ f
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]+ j# q2 j: \2 O5 r# f* p% Q
0040325E 57 push edi% c; [; O |. ?$ U
0040325F 52 push edx# ~& w" M3 l9 N* k @, r0 p5 i6 t
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]/ N4 a; @2 m- C/ r; Z) C- K( W" t
00403264 E8 7B530200 call qsr.004285E4
* M; J0 V9 o8 m1 X+ X7 \' s00403269 50 push eax8 V+ X' L4 U; Q q0 v2 q4 ]5 N
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]7 u& x/ p. ^ \+ o3 \- L# @& S
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
8 Q" ?5 |! m) E6 _( A00403273 E8 4CC30200 call qsr.0042F5C41 U: {6 V8 c9 f
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 h# v3 @) W* A8 O7 b1 {& O0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
6 I1 j1 y4 p! R% ]! u00403280 E8 06C20200 call qsr.0042F48B
v5 Y9 G* x8 t, V! l4 i00403285 6A 04 push 4 }. [8 S) S6 u# N5 T/ u
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]+ p* T! e6 ~4 o% p7 M
0040328B 6A 0F push 0F
d, g/ S8 W$ n g0040328D 50 push eax. x9 }+ u0 ?, K8 Y/ n
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
. z3 `' L7 w; T+ p2 m00403292 E8 4D530200 call qsr.004285E4
4 X, t( W- r0 ~# D2 N y- A8 P8 U& \6 _00403297 50 push eax
% S, e' ^* y7 y, h$ h: w' f00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]4 G b" g4 U d5 Q
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
& n- k8 [: l# F o1 n004032A1 E8 1EC30200 call qsr.0042F5C43 E3 K& E# L6 o8 E; I3 d- |
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 e6 S8 N; J9 f7 p
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
8 \( f+ d0 d& W004032AE E8 D8C10200 call qsr.0042F48B& o: e. L( m. z: H2 R0 e& u
004032B3 6A 04 push 4
7 v5 _) g9 t% i2 j6 d004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
" k% _& ?, W) Q4 D4 G) ]% n! c004032B9 6A 14 push 14
5 ?2 P& ~5 T0 }* w, s004032BB 51 push ecx
7 ? T$ M( m* _7 o1 p8 J004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# [6 y) F) [7 E+ K8 E
004032C0 E8 1F530200 call qsr.004285E4
8 q7 R2 U* F1 r, U1 ]004032C5 50 push eax# Z4 a4 [1 v; M) D9 l
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
) `( ~) p1 c/ w) M/ ^2 [5 {+ s/ `: p004032CA C64424 40 10 mov byte ptr ss:[esp+40],10- D1 n. W e W6 `0 T2 U
004032CF E8 F0C20200 call qsr.0042F5C4
& ?9 r$ n3 `2 k. N% u004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. o" f! Z1 w" M U004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl A4 N* @- l4 u0 Y( ^0 @$ B
004032DC E8 AAC10200 call qsr.0042F48B3 n% e( ~( R5 n1 j: B5 Y" W
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI: A' k! Y2 f% p7 w2 H
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
/ u+ }7 u) ^3 \8 Y8 H$ A004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL7 e# [1 }) [) d
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
! E& n' K! L- t5 B4 U: @004032ED 8ACA mov cl,dl ; DL送CL
- ]/ L6 W4 f, i0 z: E004032EF 3AD3 cmp dl,bl ; DL和BL比较- N' B! J+ @0 V9 n; E
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
( q0 B2 r! Q$ _, U$ v& b0 S004032F3 84C9 test cl,cl
+ J8 A+ |+ I; H, P. S* t$ @004032F5 74 16 je short qsr.0040330D
. g4 r% M6 o+ e004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
; E4 |; z$ z9 H8 ]2 o2 x6 K004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
8 ]6 T# X& k$ N' p004032FD 8ACA mov cl,dl3 p' b0 p8 I7 o/ u1 C
004032FF 3AD3 cmp dl,bl ; DL和BL比较9 k3 \+ K/ O) \
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）0 |; Z. F% l" j4 P! z8 ^
00403303 83C0 02 add eax,2 ; EAX加24 S0 m0 `! O }2 h6 i. J! z8 I, C
00403306 83C6 02 add esi,2 ; ESI加2
8 t* u8 N' x% J# b* m00403309 84C9 test cl,cl
! y! E2 w+ ^$ J1 A' {7 i0040330B ^ 75 DC jnz short qsr.004032E96 n1 N4 X% {" T% S+ [
0040330D 33C0 xor eax,eax" `" q9 F# W! A7 m
0040330F EB 05 jmp short qsr.00403316; j% F1 |# J& ~4 S5 D
00403311 1BC0 sbb eax,eax
/ P: |# R& A% p00403313 83D8 FF sbb eax,-1
& g S) m T( t! u00403316 85C0 test eax,eax, l* P& v' N6 l7 Z+ w" e
00403318 74 0E je short qsr.00403328
* a1 j% ?: Q! x7 l0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A8 s7 a) H8 |) f; m
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
B9 C8 ]# W# t2 w9 [$ Y9 @: H* |4 k00403323 E9 F0000000 jmp qsr.00403418/ G4 T, V% W7 }
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
" U7 `3 R6 L( |- i! T' V$ E# U0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]( _: Y( a4 w: |# i' V5 f0 K6 g" ^, }
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]; L, w8 V. U( {* |9 j* g1 d
00403333 50 push eax
1 {$ T' E# d4 z1 Q1 c+ X00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
4 [7 D2 v+ C V- v$ ?4 K$ o( U& S00403339 50 push eax( U0 }7 I) v/ h& V! B9 Q
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX- L1 R- p& D) n
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
$ M$ o* ^( m9 l9 Y- V+ M2 b00403343 83C4 04 add esp,4
+ z. T+ ~7 p, e) N* D00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI5 g% S* T f( B7 r& \5 ?# d
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
3 B- J2 v; l) [; @: b/ |0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
! ?' o3 K: A% O0040334F 50 push eax
6 D( {3 j; W/ o3 W8 O" E00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
/ `# P. z& I9 W' K" {00403355 50 push eax
* b V" L, B- e. t00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX# R5 [0 b* @) |7 Y% K% G
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
7 p8 T0 c6 _: r0 h4 ?( [0040335F 83C4 04 add esp,4
# y7 Z: x; t" P( `1 q: l00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
8 w& q+ {8 O/ z+ }00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 g3 A" c+ G9 k8 Q* C& m' i5 z. ?00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]1 b6 U3 s }4 K2 c$ W# T2 R
0040336B 50 push eax
0 K! L" q2 F* Q4 ^' B+ i0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
, h9 W4 g6 g3 ?, |7 L00403371 50 push eax3 i# Y' m$ {" @, Q% D- I
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
6 I7 I2 P5 [ J' X! t& X' z00403377 8BD8 mov ebx,eax ; EAX送EBX
0 l* D# q8 h' N+ y00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
3 S6 {, Z+ q* k( a- t0040337D 83C4 04 add esp,4
5 \% t a8 B8 h8 X; T, D00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]1 N( W T+ P- B# n
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
1 }. s8 e2 I+ V00403387 50 push eax
, z- h1 }. T' n& A. {9 f* c00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
2 p; \5 N w. b1 |/ e8 g0040338D 50 push eax
3 p5 N3 p3 t# J# k2 i; ]0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
- e. q( J, _4 J m* k" _00403393 83C4 04 add esp,4
4 m2 K) B: z9 L2 j4 o00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 S7 o1 \8 T& [0 ?0040339A 8BE8 mov ebp,eax ; EAX送EBP
% u9 |% |* `; Y" f0040339C 6A FF push -1
% m8 ?7 T. y7 R9 R, k0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
5 }) y5 l+ R& Z9 j004033A3 6A FF push -1
# F! C H1 q; n004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX+ a3 Z. n; Z* F, P: w" l" {5 n, w
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX- j D, Z4 U1 Y7 K F3 o
004033AE 6A FF push -1& z+ c. E* z r4 r* M- ]4 W8 ?; n: C
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX: ~/ r* ]* r$ K4 o
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
" C% y' w" N9 i) I' P W9 }004033B9 6A FF push -13 X" H, ]% ~' p, x" m$ `
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX2 R p. V( X4 d( U5 P2 V
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX) r8 p. J( ^" |3 K
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
. m1 _+ q$ c2 E& ~4 d004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX& ~# K9 ?* s( F& s
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
1 C) A K, F. u: I. D ]004033D7 D1E0 shl eax,1 ; EAX左移1位
$ _( \/ d9 ]/ J0 A7 d# @004033D9 99 cdq ; EAX扩展
" X, ~- J0 e- z( f) r/ g004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
& d. T5 z4 g6 k* N% M7 H/ Y p004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
' X4 E' q$ i; X B1 f* J004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
( i. l# W9 m2 ^( `004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A; u) B2 x, y8 Y: v# Q& [* E0 o( v
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]2 f3 n5 {# T8 ^
004033E9 EB 2D jmp short qsr.00403418- [; V/ A& w0 ~. s3 q7 U6 J) R+ m
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX: D7 H3 d2 I1 z9 b8 B
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2) K7 J6 M2 d9 q4 Q
004033F7 99 cdq ; EBX扩展
6 T. N& R& ^( i004033F8 33C2 xor eax,edx ; EAX和EDX取异或8 h# f5 J2 ~$ G) k+ m2 |' M% g
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
! t. j! Y; k5 }% w004033FF 2BC2 sub eax,edx ; EAX减去EDX m0 ]; g9 I# Z' l u
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
$ j$ C/ b. C: L00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
$ a: e; T& K, Z9 N' \* q% v00403409 99 cdq5 w2 [2 q: H- B3 y
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中 p8 b, A" y/ Y0 z* w
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX4 \/ m# T Y( e; |/ I: Q4 x$ b
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
* D% {& f q3 o) i, Y; H7 e! Q) w00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
) p, B4 ^, K1 Q! V00403418 E8 6EC00200 call qsr.0042F48B ; # z3 Z4 R9 l; P( I$ _/ l [
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# I3 A/ N0 l; _- U) _00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
5 H" H: P5 B* k$ C/ S5 i00403426 E8 60C00200 call qsr.0042F48B
4 P" {* n+ S# b0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
( v, x* R+ |4 {& h0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
: H! ~* F3 w {; s2 \- n+ y4 j00403434 E8 52C00200 call qsr.0042F48B
" K) {1 T3 ]% O0 w00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* f; b& l# D( C7 Z9 U( B
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7& J; R/ Q$ I; x" E: i
00403442 E8 44C00200 call qsr.0042F48B- E, ^ j C8 _- G" |8 c2 j
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
- X! `0 K% Z6 Q! A& ?0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],64 c( @- I0 ^9 H' I/ W u% X: N
00403450 E8 36C00200 call qsr.0042F48B
% I" E# O" S; y7 d$ J00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
1 m" x, A5 V7 \! @) M00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
! w( A r; u: t0040345E E8 28C00200 call qsr.0042F48B
+ i% j) N! ]1 J* m3 v00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
7 {% v6 }! l3 \# Z8 k3 d+ p00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2 L: N K1 ?: ~+ \* G ?
0040346C E8 1AC00200 call qsr.0042F48B
3 ?8 g* C+ t5 ^! j, U' f1 R, Y* |! {00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
g. D3 H$ h9 l) z% {00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],16 u8 A1 \1 l Z4 q9 [" j: J6 U' ]
0040347A E8 0CC00200 call qsr.0042F48B
2 A5 t3 a; H% [( o5 ?/ K# f T0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
% J3 y7 v5 ?( E* m# K1 ~$ a" f9 x: k2 n00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0% l' U/ Z2 ]- \
00403488 E8 FEBF0200 call qsr.0042F48B, ]+ ?) {: A2 N4 P7 o0 J) l
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& N0 a# G0 j/ H2 b. R* `
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1$ o* n* ~5 w. ^; ?
00403499 E8 EDBF0200 call qsr.0042F48B" K1 ~1 Z! R! O- C+ \9 p' \
0040349E 32C0 xor al,al ; AL清0 s7 J: s2 `+ a
004034A0 E9 88000000 jmp qsr.0040352D* @/ B9 ?2 _' D: X
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
: l7 ^$ D' ?$ K- R# ^! \+ B4 N% O004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14] I \3 I3 K0 |
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
' r1 c) b. G# p7 W004034B3 E8 D3BF0200 call qsr.0042F48B* P0 e3 e3 P; A) y3 {0 A9 p, k
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
* f( Q+ L, u! V! t* X' w" P# A- A004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],85 d/ R7 C) p3 Y. h( a7 Z
004034C1 E8 C5BF0200 call qsr.0042F48B# `# C" [! j4 n
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
9 Y+ y. _4 o0 ~' j% Q004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7" M' T7 O2 T6 D* h7 U+ D; u
004034CF E8 B7BF0200 call qsr.0042F48B- o6 K- f. q, q. J
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
( `$ C; n6 J1 k# ?004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
/ c9 f6 K! G( G* K004034DD E8 A9BF0200 call qsr.0042F48B
5 X; o( c$ f7 v9 l0 b004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
( `0 n8 M- G8 Q0 j6 Q" J& J* x004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],37 Q/ x9 ~: b {' E
004034EB E8 9BBF0200 call qsr.0042F48B
$ I8 s$ ^; V3 D! J/ w) v004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]) J) ^. i7 `3 T' P
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
+ u+ y0 U0 u3 b! u8 @$ P }004034F9 E8 8DBF0200 call qsr.0042F48B8 b$ {% B: ^; d( t9 ~+ y* z
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 ~1 ^7 X$ s( m4 P* } c0 C/ t
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1. b, @/ X, z4 q
00403507 E8 7FBF0200 call qsr.0042F48B5 H5 o3 y; d% S0 s: |3 \
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]3 @6 T/ U; r# g8 q
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0, W. b0 z/ n/ x7 |9 w
00403515 E8 71BF0200 call qsr.0042F48B
5 |9 s* k2 L, v' S& C6 _0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
4 R' K* Q( v' }7 H* s8 f1 g+ _0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1' H% @5 L: ]" W
00403526 E8 60BF0200 call qsr.0042F48B
' f' a7 R, Z# F& E/ Q0040352B B0 01 mov al,1! R8 Y7 D/ \' F
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]9 v/ N' _1 Q! I2 ~; A
00403531 5F pop edi; d; J! ]: l" y- q9 z( m
00403532 5E pop esi9 W& Z4 K1 K' h% b2 s
00403533 5D pop ebp6 T" R# d, @) M' o8 L
00403534 5B pop ebx
. Y! y& y5 p) M9 d00403535 64:890D 0000000>mov dword ptr fs:[0],ecx4 {/ m1 x( z9 r& n: d
0040353C 83C4 30 add esp,30/ W; D2 l1 c3 n
0040353F C2 0800 retn 8 P$ P! c% }; E
--------------------------------------------------------------------------------
# l: l+ {$ i- R/ k1 }: {【破解总结】; n s" U; d) ?' \# J
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^) [! a- Y9 i. \# Q; J
用户名：yijun
, R! c2 W- B8 I$ L; c3 R注册码：4893*7777*3726*7777*0529. p# M; n o, T
--------------------------------------------------------------------------------
6 {8 Y- [, x# W* j4 K【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡