|
|
|
【原创】破解Quick Screen Recorder" S' S" W6 c' l1 ]& t# i8 }
【破解作者】 yijun& l; s; t$ {+ p$ K# N& u8 R/ }
【作者邮箱】 [email protected]
# e# ~% g1 P& W( y1 R/ k【使用工具】 OD,PEID U# { r7 ]8 N8 A3 g
【破解平台】 WinXP
4 c9 Z! i: s! A. `3 g/ b: J【软件名称】 Quick Screen Recorder
) a6 N4 t3 ]3 N3 s6 Z) i5 ~【下载地址】 天空- Q" T# n- c0 B! z1 r" T8 a
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. ! {* c. H3 i2 [7 O
【软件大小】 540K
1 ]) {0 D% R7 i- k【加壳方式】 无 S9 _, [& @/ Q" h" ~
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）4 m7 b6 ?# _; F) @ o4 ~
--------------------------------------------------------------------------------
# j6 I k+ c8 \( m, Z【破解内容】8 f" `6 J' O$ U; c! m' j
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
3 y( x! A, {- O7 Q00404C69 55 push ebp //在此下断) C9 k+ S, N; U$ j; X
00404C6A 56 push esi% l6 Y8 t5 [( ] s# w- b+ u2 q, B
00404C6B 57 push edi. P" T6 r5 E% d: Z1 F# t
00404C6C 8BE9 mov ebp,ecx
' L7 _) _" c$ `6 z00404C6E 6A 01 push 1& ]* z2 o9 H# z; e' {
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名$ X; V1 M" x2 W
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]! `4 x( K- Y4 o: i7 R* w& \
00404C78 8BCF mov ecx,edi
! W& p9 T4 e5 f1 ?* c$ _00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
2 E6 w1 W! E2 G' l00404C7F 8BCF mov ecx,edi
) {2 k2 A% }1 E( A1 `% ?00404C81 E8 A73E0200 call qsr.00428B2D0 q: q$ E0 b4 Q r7 g3 M+ @1 W
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]# F& Y% i4 j7 C' Q0 x
00404C89 8BCE mov ecx,esi
5 Z/ c. ` m5 m# w5 v00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX( R# \6 s) A3 [9 Q
00404C90 8BCE mov ecx,esi# }$ o, f1 \, \& Y" m
00404C92 E8 963E0200 call qsr.00428B2D
: w- D4 e0 y& U/ M' Q00404C97 8B06 mov eax,dword ptr ds:[esi]
4 S! B8 B! G G00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
# F, ~, A3 ~0 B* S ?# j00404C9D 7D 26 jge short qsr.00404CC5
9 A/ k7 o$ B2 h# q9 Z00404C9F 6A 40 push 40
) w8 C" ` E9 v) Y, o00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder") y2 x+ Y4 H. S) p% }* g
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
" Q0 Q9 V3 {* h" `/ o# O& g) E; O00404CAB 8BCD mov ecx,ebp- Q4 C6 f! n% o/ P: Z
00404CAD E8 C3840200 call qsr.0042D175
- M" K' e# m4 D00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]+ z( h6 g+ F- P$ v
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
( q/ @ {: ~) D, s& ?00404CBD 5F pop edi
$ c( O* f5 ^0 u/ i00404CBE 5E pop esi
- ~" r. p: n6 H! H& }00404CBF 5D pop ebp
- J( r; B2 ]8 b7 o% w$ [00404CC0 5B pop ebx
+ i* k; C: d; \" A9 r00404CC1 83C4 18 add esp,18( s! N" v9 x/ Z a. ?
00404CC4 C3 retn
1 h6 J# i u* Y% x6 a6 W/ i1 r+ N! p00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
/ l) m9 |' m, K8 q8 B+ p00404CC8 84C0 test al,al
% o+ G4 r, ?. @" Z- q `00404CCA 0F85 1C010000 jnz qsr.00404DEC ~: G C. d5 R1 U
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
* T" o5 b+ g. o* E) K00404CD4 E8 87E3FFFF call qsr.00403060
/ D! r+ a" V3 |; A00404CD9 51 push ecx
3 e* c" W4 @4 Z; E2 V' O& K; b00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0" z+ P1 ^' p& z+ D7 k
00404CE2 8BCC mov ecx,esp. ~& Z4 }5 m# D, H
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
5 K0 v, H/ ~2 ~+ ~& s# d00404CE8 56 push esi4 `$ W) h v: G
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
- T5 j- p$ Q$ r% s; ^# }; q00404CEE 51 push ecx
- b& C5 ^) ]5 m; Z K4 C: T/ H4 t00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
0 u+ |1 _! [7 w/ T* F1 W! M/ v- U9 G00404CF4 8BCC mov ecx,esp
/ H5 |1 ?# R) ~00404CF6 896424 20 mov dword ptr ss:[esp+20],esp9 z$ K3 }/ S# Y x9 s
00404CFA 57 push edi. ?4 \ ^8 S5 w, \
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
3 p: ~) s! ~/ B- w* k& o00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
" \# p% \, H6 F" ~* \00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
6 }4 B7 o( F: {2 W0 |00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~% t2 o9 d! O2 L. f8 k
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
( S% n4 ~% ? U2 m3 b00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~2 S) _ ~- F$ o' u; f2 H
00404D12 6A 40 push 401 y! H: E% H6 `. h! Z
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
2 r6 ^( s5 e; l& X# ]3 G$ ?- e00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
1 [$ Z3 y; b8 T3 p00404D1E 8BCD mov ecx,ebp
4 R) B q1 W, k! u9 M) a00404D20 E8 50840200 call qsr.0042D1754 q# Q }/ N2 B- G
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
! c) @+ S# }" H; |/ D00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
0 [! g& K3 @' g00404D31 E8 5AE3FFFF call qsr.00403090
& p- d4 c0 `2 s& V W' q, ]00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
; q1 H7 Z8 ^( u n3 R00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
7 Q2 a/ e4 E7 _9 v; z00404D41 5F pop edi# E/ `8 B- q5 d5 O' B9 M4 P5 v
00404D42 5E pop esi, h! ^8 Y0 d0 J; m/ S3 U, d( t5 G
00404D43 5D pop ebp
! t k( d5 U7 `) ^" d6 o00404D44 5B pop ebx
/ x1 r; z, \" w( ^00404D45 83C4 18 add esp,189 s* h H0 A6 d: a' ]* f# F' V
00404D48 C3 retn
: p6 q4 Q3 N- H$ R; C*********************************************************************************************************************************************************
# o. C1 t. N$ D+ k7 j; t0 i$ a跟进00404D09处CALL来到：1 v2 U3 ^$ ~2 K/ F( z- B" F0 \
004030A0 6A FF push -1 //一路F8下去~~~~) H# Z" f% ~: ^0 p2 L
004030A2 68 C88F4400 push qsr.00448FC8
3 `; P' s. A8 `' C# o! u004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]% O* a d! A/ ]
004030AD 50 push eax, M7 t; p6 @& l; @$ D0 u
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp5 h4 i! f6 t- m
004030B5 83EC 24 sub esp,242 a2 D7 l2 F6 x$ W9 `" X7 Y; l
004030B8 53 push ebx
5 T$ V; ~2 A$ F! T, A/ A004030B9 55 push ebp; L [: _) M; D! y5 R
004030BA 56 push esi8 F4 O- k+ X3 z2 |) d
004030BB 57 push edi. s1 B u$ X! k2 ?
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890". @: W$ G9 q/ T# f) T" N3 P
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
9 R7 A4 L4 `; _004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
" P7 ^- k$ q. ]- r5 i( R004030CD E8 27C40200 call qsr.0042F4F94 C1 w* Z/ `) M" e( }9 W7 T
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
% ~# n& s& j$ @2 ?4 r004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
9 v: y4 H2 t1 ~4 z4 T004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48] |4 m6 Z5 E2 b6 H0 ]3 V7 q4 H
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
" H3 z( x, D f8 s/ q( E004030E4 E8 905A0200 call qsr.00428B79
( ]5 P: j) e' ?6 u/ K( p: W' i004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% L4 r; v: d( g
004030ED E8 3B5A0200 call qsr.00428B2D, P/ v* @% V/ e9 P! }; G2 D# [9 f
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
7 F6 p. O/ ~, j% @: x004030F6 E8 7E5A0200 call qsr.00428B796 U: g- F* O1 ]+ e
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* y3 I; M" H0 T1 o* q& T004030FF E8 295A0200 call qsr.00428B2D
$ q! Z6 ^8 o6 \8 E/ R00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
3 R) L" G, F8 u- q00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
3 i9 X4 t9 m/ f2 C0040310B 83F8 02 cmp eax,2- g% |$ J6 r( f8 \/ j1 }
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳1 x4 K& ^7 K' u! ~9 A
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]. V+ o! J8 V% h2 q! u, \
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
& O% |- T8 ~; t0 q0 s8 P% v0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
. k% o4 r& r' B* Y4 e+ P00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
% Y- }% q1 V5 E5 d00403126 6A 01 push 10 J9 U# M1 k5 d9 @5 \
00403128 50 push eax! |0 V0 L) a2 V
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' i- p6 d$ ]" a* R
0040312D E8 C4550200 call qsr.004286F6% k2 j, H+ {! r! w- g
00403132 8B00 mov eax,dword ptr ds:[eax]- K& {3 t9 o' ^1 q$ \0 t
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20] x; F. S1 ?" q- D3 c: V# b
00403138 50 push eax
2 b$ G w2 {- S5 T% K00403139 C64424 40 04 mov byte ptr ss:[esp+40],42 W1 B- J: L R; c% ]8 ^7 r
0040313E E8 4D560200 call qsr.00428790
$ H( u: R2 \& _! D1 ]8 I, r9 l00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]; {, B7 k* H d( b- A7 R% D
00403147 8BF0 mov esi,eax4 u+ s; k* a4 E8 Z" ?, s
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
" } i8 z2 C' C4 O5 H0040314E E8 38C30200 call qsr.0042F48B
3 e" h4 R* s2 E o) e00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
+ u3 z7 ^' C' e: F4 D% q6 u+ O: |00403156 B9 3E000000 mov ecx,3E& f- V3 z/ T" k) p
0040315B 99 cdq
- \3 F4 t k6 V' ~8 D( G$ j0040315C F7F9 idiv ecx
0 Q* K. x8 w6 o6 V) e- v0040315E 6A 01 push 1
/ M2 z6 f! t0 {- F8 E" t. T+ R00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]1 b& R0 b6 w) M6 d; f
00403164 8BF2 mov esi,edx
. Y: V2 P4 u/ x/ Q$ Z6 P4 z8 @00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
- A9 ]) P; b# U' s. ^. M3 {0040316A 52 push edx# k v: z3 U1 H0 E+ _9 Z A
0040316B E8 0A550200 call qsr.0042867A
/ X, h: J3 f$ a5 e7 R00403170 8B00 mov eax,dword ptr ds:[eax]
) o8 V* G: g- v/ |. J00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]$ ~' d# g- f+ G8 o# N) w9 \) \
00403176 50 push eax
" q. s3 y) U* `3 K# `+ \9 `00403177 C64424 40 05 mov byte ptr ss:[esp+40],5. V8 d- _& A# z; E* _
0040317C E8 0F560200 call qsr.00428790' X0 x/ Y2 m) E: A
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* u0 w: \" |4 X; i
00403185 8BF8 mov edi,eax
+ ], L8 Y4 n3 b; y# q00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ @6 w$ v% {1 ~0040318C E8 FAC20200 call qsr.0042F48B. O$ T# q5 a9 Q/ L/ N, V; M
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
/ N2 ?( H% y$ ?7 w! N6 G" C D' P00403194 B9 3E000000 mov ecx,3E! E1 r8 G% ` k n1 U+ T3 h
00403199 99 cdq: K$ N- r- ^ M$ Q
0040319A F7F9 idiv ecx1 c5 i5 m- M; ^4 U
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]6 r+ b7 S# c. Y7 t3 `% ]
004031A1 894424 28 mov dword ptr ss:[esp+28],eax( W/ W' r) j) L9 ], H9 \; U- S0 {+ z
004031A5 8BCA mov ecx,edx
: f# O2 ^$ b- A5 _* T004031A7 894424 24 mov dword ptr ss:[esp+24],eax
& g3 X$ | [) x! @( D) M( T0 p004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
0 f$ _# O& Y' ^004031AF 894424 18 mov dword ptr ss:[esp+18],eax# w y- ?: o/ \; a6 a
004031B3 894424 14 mov dword ptr ss:[esp+14],eax( Y1 K8 t9 s6 b( A4 K5 s
004031B7 894424 10 mov dword ptr ss:[esp+10],eax1 Y$ c$ S& E5 x8 r8 M" t
004031BB 8BC1 mov eax,ecx6 r" m3 J9 W. g# q$ W2 j. M
004031BD BF 0A000000 mov edi,0A* S2 ^4 O! [- a1 N. x" R$ a
004031C2 99 cdq
% w e3 \3 w5 p$ W3 ?, g9 j- R# x004031C3 F7FF idiv edi
2 d# \, ~. S B8 O6 Q" A004031C5 8BC1 mov eax,ecx2 n, E; v* p* |5 S: w
004031C7 B3 0B mov bl,0B
. _) J* R( U S004031C9 0FAFC1 imul eax,ecx$ ^* k- g. _0 g1 H- T7 [8 T
004031CC 8BCF mov ecx,edi
( q# E, t. T5 a/ u004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
4 x B9 W w, t( S$ L004031D2 52 push edx8 W }' e# v* z
004031D3 99 cdq6 v$ {/ z8 A. w0 @: c
004031D4 F7F9 idiv ecx
7 o% w2 [4 `, c6 E3 p004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
5 X7 r( ]' f5 [& C& p, {004031DD 2BC6 sub eax,esi. _9 o& W# h, M0 ~) A$ w
004031DF 52 push edx
6 j5 F8 k+ F, K+ z, K$ P& E004031E0 99 cdq
( p% e& k8 H- q& ]004031E1 F7F9 idiv ecx6 o% r1 J) ]- L' V
004031E3 8BC6 mov eax,esi. @" P: {- c/ r' L* s/ ]2 m- c& M
004031E5 52 push edx5 x- S' E5 |4 u' K, B& T: `
004031E6 99 cdq3 ~' s: y' q! l' B9 \. P [
004031E7 F7F9 idiv ecx
/ G9 n! Y" k& a004031E9 52 push edx
. z' e" O$ ?' W2 u004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]) |- h! a: a, L+ }
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
) G5 _6 R0 A: o004031F3 52 push edx
+ L8 P2 z% o1 U7 U004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893 k+ d4 [5 r# N3 `% s
004031F9 83C4 18 add esp,188 {8 N3 t/ ]: `1 ] s4 }
004031FC 6A 04 push 4) y4 x4 x& a7 H: g
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
* I7 b( o; s! v00403202 6A 00 push 0. T" P8 P: K0 W4 |/ A, G
00403204 50 push eax
5 q9 J+ J% k2 j8 i! H00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( n- J* k# H% Z* c00403209 E8 D6530200 call qsr.004285E4* o; p9 a: K5 ]* s
0040320E 50 push eax
8 Z# W4 Z5 e4 G; f0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]3 e q! W% N- C& B! e3 F4 x
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
+ [' Y5 s% G9 L1 k00403218 E8 A7C30200 call qsr.0042F5C46 B. H( r j3 \* T0 S) x
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" b O& Y5 M/ \5 Z; X
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
8 m# H9 N: X% r9 ?! Y00403225 E8 61C20200 call qsr.0042F48B
# S- X6 a: n; P3 M0040322A 6A 04 push 4
7 w- ~0 p) Y: t- }2 F1 e0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]% k, [' C% ^8 B: V' [& F! |( R$ N
00403230 6A 05 push 56 ~2 i6 k. A; G" M+ m& |. S
00403232 51 push ecx
* H& @" Z. a+ h9 X. s2 P" E00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; |5 O) g( |) M/ \ }9 E5 r5 I7 c00403237 E8 A8530200 call qsr.004285E4, o: z- P1 f9 U& d& W g% t% O
0040323C 50 push eax
9 v3 a Q2 w1 ?0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 I5 O- e+ B/ z, Z
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D" ?! P2 |6 K% X
00403246 E8 79C30200 call qsr.0042F5C4
4 Z. i& H3 `! ~# u6 \0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30], M( v, a# ]; z' b4 d. w
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl+ [* a. @* X g, Z
00403253 E8 33C20200 call qsr.0042F48B
1 J. k3 h4 m; F00403258 6A 04 push 4
( V& R; A9 j1 x1 [# H0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]$ I" g+ T- E6 P, t9 M
0040325E 57 push edi6 C, M8 O6 B* p
0040325F 52 push edx, ~. @$ g5 ?" x$ a0 `9 O
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
, ]* t4 h/ \! o7 h# {4 ^+ `6 d" @00403264 E8 7B530200 call qsr.004285E44 z4 f; X, J1 p9 D+ f3 f+ A4 v
00403269 50 push eax
, {7 v$ O6 w+ J# O0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 ?/ F* M$ h7 b9 M" c7 t0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
' [) f# K5 r/ Z' O8 @% E00403273 E8 4CC30200 call qsr.0042F5C4
! h6 r. l6 y8 Z# }00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 }; |, B/ ?- H5 `5 y0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
% o, Q- [5 G* C4 O00403280 E8 06C20200 call qsr.0042F48B% z* `* h2 P/ r
00403285 6A 04 push 4
) C. _1 b0 t' }$ B& S00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]- `0 P* p( G0 q) Y4 x
0040328B 6A 0F push 0F
/ @0 r. j9 `* ^, S- Y+ s: y4 n x( H0040328D 50 push eax% M2 n. C! D0 W1 M4 L. ]
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
, t; s5 X* ~ Q00403292 E8 4D530200 call qsr.004285E4
, l7 f* G# Z; u4 |00403297 50 push eax
0 h8 o7 s8 i3 C( i! v, c00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]; w4 I; b9 Z. x2 s! g P4 m4 @
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F! L$ |/ A5 ], b
004032A1 E8 1EC30200 call qsr.0042F5C4
# \ I# U* E" n0 o/ X2 Y004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# p8 N3 u3 L& N8 d9 @/ A2 P6 D
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
& t/ X2 j5 ?+ ^# W& Q2 g! C4 ?004032AE E8 D8C10200 call qsr.0042F48B
; F" _2 H* ]0 f% M& d2 ^7 u$ \004032B3 6A 04 push 4
, ^/ @% w& v# Y# n) r6 ?$ x! J004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
7 p. r0 C' U! X5 s004032B9 6A 14 push 14& z% W$ R5 z$ \( c
004032BB 51 push ecx
: O; K% Q4 T% {! ~004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( g. d6 E5 L3 k& I4 j. R6 k& t/ U004032C0 E8 1F530200 call qsr.004285E4
; z+ G5 g9 l! l4 t" X1 @6 X004032C5 50 push eax e6 i6 Y3 T* b" N1 Q
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# M, v# H; f9 G& c5 ?3 M: @004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
* o) f' R/ s9 A0 ~8 J& u! ^; i004032CF E8 F0C20200 call qsr.0042F5C42 x0 \1 `' E+ J _# V
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
$ h0 m6 d( Q S* Z004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
; ]. V' `8 ]6 ~6 a3 H5 ?0 }004032DC E8 AAC10200 call qsr.0042F48B! b) t+ \) x/ N1 L
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
9 C5 J1 D* _" w, H004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX! r/ v8 N# g' `1 p0 O' ~# @
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL9 m8 c# `$ r3 l8 P# e" h# w
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
: b y- n: l+ D4 T0 @2 W. {. U& C& a004032ED 8ACA mov cl,dl ; DL送CL, a& V# Y7 a* f/ m! A, p
004032EF 3AD3 cmp dl,bl ; DL和BL比较
$ c; M. ]+ d. \1 ]' x: j* e: s004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
; `; y2 @& h7 J004032F3 84C9 test cl,cl/ W! m8 h' j& l/ Y6 ?# ^( R
004032F5 74 16 je short qsr.0040330D/ b* x& A2 D) x0 y. c0 o
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
5 R) c' H1 @2 s( G004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
6 g$ Q* G9 p: w, `004032FD 8ACA mov cl,dl
5 |. o6 Y9 ?& r8 Z+ O( }) B& U) Z004032FF 3AD3 cmp dl,bl ; DL和BL比较
& |0 V3 F1 I. R0 I00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
# R' n. |8 |. A+ h0 N00403303 83C0 02 add eax,2 ; EAX加2
5 g, S1 h( v5 t" T$ |2 r) D# y00403306 83C6 02 add esi,2 ; ESI加2
) R9 R0 ^3 R& ? F- {$ | Y00403309 84C9 test cl,cl$ V0 U7 e' b+ i
0040330B ^ 75 DC jnz short qsr.004032E92 r% g, [0 b) F7 B
0040330D 33C0 xor eax,eax
1 h: j7 K3 A& `2 b0040330F EB 05 jmp short qsr.00403316& M' y6 Y) z) a
00403311 1BC0 sbb eax,eax
: v0 M2 v4 }" R! T00403313 83D8 FF sbb eax,-1 J* S- N& ]& K, E: R
00403316 85C0 test eax,eax* f6 D0 v+ d7 l: [" K( e: V( Y4 }
00403318 74 0E je short qsr.00403328* w) A( O$ X, H- C' n3 l
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A: F7 j8 ?, }; f4 T/ h
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
: N6 F9 P2 c" H/ ]# t00403323 E9 F0000000 jmp qsr.004034187 y, _# z& a* {* t
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX5 X3 |3 ?& S! m9 l' `7 j8 U
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 l5 e+ k! w( s' w
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]' Y" P4 g* u! S
00403333 50 push eax
* [* E8 `7 ~1 ~00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
2 S1 i& Z4 `. R) T; E( g- `00403339 50 push eax
$ C# ^3 g: }, t0 |: K0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX2 ~% Q7 A. I, { O" b' ^3 H
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX! ]! i; E& a2 ^0 J, _
00403343 83C4 04 add esp,40 W5 `& D; b$ u& N
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
- c' [4 D1 z. q9 {! K8 v00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]/ V( g; x: d: b+ e+ R
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]1 Q+ e5 a5 M+ ~# v! N- h- `
0040334F 50 push eax
1 V6 Y; P" U8 i2 R8 G00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX' o a# `, C' m' J' e, {
00403355 50 push eax
" y" L2 O/ p+ S8 z1 E00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX! M# w9 F, c3 F* }
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
$ V' s: t0 g9 a6 w+ ]. W8 Y) h0040335F 83C4 04 add esp,4
% l( `9 G- a5 n+ p8 H7 {; p00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI/ ^% z* a: r/ T' L- I8 X
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 z" Z+ K9 S1 c0 u
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
8 S; M$ g) E: y0040336B 50 push eax
. y' ?; {- G6 [. J, T+ g0 ?0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX$ V' T/ J9 P `" E
00403371 50 push eax2 L6 N3 [& ~) z
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX' o' M1 X+ ^1 f% j5 F) M
00403377 8BD8 mov ebx,eax ; EAX送EBX, F/ b# J2 R0 w" z3 q
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX8 a" U4 N9 M. `8 v( H$ Y- f, `
0040337D 83C4 04 add esp,4$ h8 F" l( l: h3 z
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]3 z+ X$ }% m1 }0 q9 J
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]% ` h5 Q8 s5 K6 `9 `+ z
00403387 50 push eax# S- ^; q/ {3 `
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX! K9 I$ Q9 D2 N: k* a
0040338D 50 push eax
4 U& ?) w% L2 r/ e- V; ~0 B" {0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX; m2 K5 d4 K5 k( f. P3 R
00403393 83C4 04 add esp,4
4 D6 F t5 E y/ y& \! j) C00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( f, _1 { K" ]& r2 W6 X" l0040339A 8BE8 mov ebp,eax ; EAX送EBP$ T) r. ^+ y, g. F9 |4 z
0040339C 6A FF push -10 ] G( |2 H2 ]9 @: T5 f6 _
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
( q" G1 O" {4 [" _* u% ^% E! _" B004033A3 6A FF push -15 z8 e1 ]: b3 u9 p5 `# X3 K5 b
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX3 L. ]9 }& c7 c9 t1 c* [& v
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
4 _/ n& D$ r/ e" r004033AE 6A FF push -1
+ h7 o _0 a& H4 R/ |- ^004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX9 }/ U/ S) X4 [: C- D7 c7 B0 M
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
( n9 z/ g5 S- Y) ]' M004033B9 6A FF push -1/ I6 ~; p3 Q) `" R8 @+ K& f. i: z
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX3 J% o ?6 ]$ I8 c# [1 R$ P
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX2 s+ C# U* l% {/ r h
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
; ~" r* q/ q2 U7 L004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
+ g: O( H! g% |# D) m9 u1 R004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
7 u/ H4 ?7 ?! k& G( @004033D7 D1E0 shl eax,1 ; EAX左移1位
( ?" w5 L/ \) ]1 B5 h, W, ^* _7 A004033D9 99 cdq ; EAX扩展4 E7 @1 I5 K( n2 H5 ?0 f( ]
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
! O# l" J! A) ^! u7 r004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
4 W g& c7 T+ W" C' C5 ` y1 R004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）9 a/ u2 I; a" J
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A: f( h3 E1 n' }) x
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
- Y& ]7 A' g. |$ @! l004033E9 EB 2D jmp short qsr.00403418. _ T! H1 |* t5 G- A
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX' R6 i& k H$ n7 u4 m4 ?* P
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
4 P4 m4 K5 H% E, J5 C' ~# S004033F7 99 cdq ; EBX扩展8 _+ m$ y7 Z4 x/ C
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
& ] F4 ]+ @$ @) h, j004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
7 a7 ?. W6 K; [8 W. a004033FF 2BC2 sub eax,edx ; EAX减去EDX
. C1 z- S' x8 R- [8 \- r+ u00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
5 `/ v ?( U5 i00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
: @* d8 [5 _' I$ @00403409 99 cdq% b+ G+ s4 ]6 t) Y5 ]
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
" Z6 @5 x# E, \2 D0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX; t x$ u; o* a9 h2 |3 J
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
/ x: G. t8 q Z( I! C# Z5 y8 x00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
. ~6 V% |% J r, `00403418 E8 6EC00200 call qsr.0042F48B ;
! O5 [: ]: k( D+ ], \1 t( w9 K0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( t; t$ X0 L! m( q) _/ w+ d9 H
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9& | H" |! y8 }! e) j
00403426 E8 60C00200 call qsr.0042F48B
) z. V0 i7 ]9 {/ A B2 ~0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
* r. p9 Q! S6 t8 |' B! [7 i! [0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
- G! ?. v! {/ x00403434 E8 52C00200 call qsr.0042F48B9 k2 h8 ?9 e. H
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 T$ ?+ [8 `# J0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7/ J+ R# ~. t7 P+ M$ ~# }( m; w
00403442 E8 44C00200 call qsr.0042F48B
: C, R* S$ ^3 i% O' K7 c, P2 o! N00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
$ q+ P5 u5 P( L( Y+ e0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6% P/ @8 e! w3 d) u4 s( L
00403450 E8 36C00200 call qsr.0042F48B
3 W& M: H7 q- n00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
9 Z5 f% i; S* B6 g2 N00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3; e. M; E. Y1 Y8 Z" u" V, I l
0040345E E8 28C00200 call qsr.0042F48B
; t( s! S% ]) a: H" J1 u+ t00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
?! H) w# j- v00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],20 |( ?1 S8 S- Y, Q8 s
0040346C E8 1AC00200 call qsr.0042F48B
: n3 Y% Z8 i$ a5 O00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
! b; D& f3 H$ d0 @0 }* f00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1; u# [$ f' g- X# U! |
0040347A E8 0CC00200 call qsr.0042F48B8 L; K- }; s, [) X) b9 A
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
; M/ }! e+ O# K( W00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],05 C6 @! a" Z7 |4 u, \( W
00403488 E8 FEBF0200 call qsr.0042F48B( Q) p' L, f# H2 k
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]5 R. r9 o! s& P: b* K: E
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
; K2 Q) x$ A; `00403499 E8 EDBF0200 call qsr.0042F48B* g; Y! Y: `' Y2 G# W w
0040349E 32C0 xor al,al ; AL清0+ c/ k$ |9 u {+ A
004034A0 E9 88000000 jmp qsr.0040352D
+ W9 Q1 p8 g1 H6 y4 {9 ]- B: s004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~$ P7 J, f- V$ @1 v7 ~3 P
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 }$ Q& u* m- s0 A- V& o6 i
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9& h J+ R2 z. p+ ]5 q
004034B3 E8 D3BF0200 call qsr.0042F48B
* \* \0 T- q, H004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: S! f4 s4 I" s5 A; S' S: W g004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8* c) O0 v3 T' n
004034C1 E8 C5BF0200 call qsr.0042F48B
2 |" i1 o3 R: ~: h4 d2 ?3 M' ^" C004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ i! |! d, ?, P
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
1 M+ X! Y3 d @. W1 t* ?# k& D004034CF E8 B7BF0200 call qsr.0042F48B
! J$ }2 y$ o3 q! @3 i" o004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]* r/ V5 C I2 d0 s
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
% R/ P& c1 _ @+ w. }2 a! i004034DD E8 A9BF0200 call qsr.0042F48B
V; P8 f6 U4 S) o" v% b004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
5 |6 Z8 v) q/ p5 r5 h( U004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3( ]- h/ B# G1 ]
004034EB E8 9BBF0200 call qsr.0042F48B
9 \# r. U7 V2 P004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C] J: H, _- \! F1 x2 P* b1 p- {
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2: |" A3 L# T0 ~* R* x) g
004034F9 E8 8DBF0200 call qsr.0042F48B
, g9 Z- k0 `! t' ]/ n5 E" O004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 H* H; U. J/ ~: k6 p! T: k3 ]8 M
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
) r: ?6 M; \1 x N& M' N00403507 E8 7FBF0200 call qsr.0042F48B
# t' t% o' C1 i6 v- V0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]/ Y- F7 a& u9 e3 t
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
# O S& {2 B- r; ^) ?/ n00403515 E8 71BF0200 call qsr.0042F48B; d1 M% ~( V5 ~: \1 @/ L% X
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
& W' ^3 m; Q" s& E) V0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
9 o: h( h" B7 n* u6 G" T00403526 E8 60BF0200 call qsr.0042F48B4 e" [0 Y: n6 d' c! T) A! M- C: C
0040352B B0 01 mov al,1
, z1 t1 Z0 K: R) y, b1 M1 ~5 p F6 f- j0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
4 E3 t+ z! c \0 ]00403531 5F pop edi
- d$ h, W1 a3 e0 }; f4 p00403532 5E pop esi
7 }" f1 Z$ W& _, x00403533 5D pop ebp3 T, h' o1 V7 H# V7 E) ~
00403534 5B pop ebx
: p0 t/ f$ o! L9 G2 M- e00403535 64:890D 0000000>mov dword ptr fs:[0],ecx# L" y! M- L2 q+ E
0040353C 83C4 30 add esp,30! X( g6 Q7 Z1 R+ [
0040353F C2 0800 retn 8; c4 d; X& B/ W- r
--------------------------------------------------------------------------------
& }2 g3 @1 H: a: k$ \8 n4 D【破解总结】7 P' K4 z! T! G9 m- o4 t6 S' S, Z
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^3 m- b+ a! i/ y
用户名：yijun, O2 [# A2 n6 C7 `
注册码：4893*7777*3726*7777*0529
. P" `8 h' n, A( U% P( J" Z+ h' u, q--------------------------------------------------------------------------------2 L; l( g/ j, W* e V+ D" Q
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡