|
|
|
【原创】破解Quick Screen Recorder
' i% f+ _1 S9 i" Q; ~, a3 G% x" Y【破解作者】 yijun% @1 r& n& O1 D8 P S% [* d9 c9 O* }
【作者邮箱】 [email protected]
0 t# V5 [3 e5 `$ A0 b0 f【使用工具】 OD,PEID
# R1 z, K8 z3 V2 T6 y0 U【破解平台】 WinXP
0 q1 M5 C. y& H" p; j5 w【软件名称】 Quick Screen Recorder
8 s4 d) g- ^6 o: V【下载地址】 天空
* b" H) t7 y! x8 q, U【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. % a5 s; g$ i: A* k5 A9 @6 H
【软件大小】 540K
' e5 \1 I* A6 n9 U5 J" G【加壳方式】 无
; b" e" T' m9 E* [! i【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
( J4 @9 \, c! e. @--------------------------------------------------------------------------------
; e: q" @* Z9 E f5 X( e【破解内容】; b8 E. [7 J% M: |: F0 \
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
9 T0 i; S \8 w% e. o1 l7 ~ d00404C69 55 push ebp //在此下断" Z3 F- S9 o6 U, Q! X/ q2 B
00404C6A 56 push esi
h7 \1 R9 H$ q5 ~( a00404C6B 57 push edi, \% t5 I4 w: i" C, r+ U- a! y
00404C6C 8BE9 mov ebp,ecx
, j, b/ p7 z% r( }00404C6E 6A 01 push 1
; z- i# f2 a- J- t$ C00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名/ R. f/ [8 Q- k; K( w" i
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]; s, y! E" s, {5 O0 a1 S
00404C78 8BCF mov ecx,edi
6 H) a, c& g; T8 [9 X00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码, [1 A- u! A2 o$ \( B; x9 P
00404C7F 8BCF mov ecx,edi5 t$ U( {8 t. V
00404C81 E8 A73E0200 call qsr.00428B2D
5 S( g+ I! |5 N$ f* T. L. U00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]( p* S7 B- n! q& s0 v% v/ u
00404C89 8BCE mov ecx,esi
5 R% R. N/ O x, R3 [00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX0 J" k9 L) O; B5 T$ X) c8 u9 _1 f; y+ w
00404C90 8BCE mov ecx,esi
+ ?3 |- l4 O* o$ Q) x) I+ F9 r00404C92 E8 963E0200 call qsr.00428B2D
, ?; r! H; m; v. W! r# M7 J1 }1 k v* y00404C97 8B06 mov eax,dword ptr ds:[esi]+ @ o' p) J) [
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
" P( y) b& z; V# q0 I# u9 R00404C9D 7D 26 jge short qsr.00404CC54 }$ _+ `1 F) F
00404C9F 6A 40 push 40: N, [8 ~* L9 K
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"6 G& l! j' b N1 U: J& t! Q6 p
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."" {2 E/ n& k7 g8 a
00404CAB 8BCD mov ecx,ebp' _. B: U2 T0 H9 |+ S
00404CAD E8 C3840200 call qsr.0042D175' C) a7 G$ s# `% L( L8 R7 J4 U8 }) F
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
2 x0 C% \, X% M( z9 z |' ?) b00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx( q- {# T6 m# f6 P8 p. ]6 ]# ~: Q
00404CBD 5F pop edi0 U9 \2 \$ }5 `& E# Y
00404CBE 5E pop esi5 |6 |0 d9 R0 M$ }% S# G
00404CBF 5D pop ebp
0 ]4 L ~7 i2 O$ i+ E4 l0 d00404CC0 5B pop ebx
Q* M, k. G) |, a9 \$ L/ ]00404CC1 83C4 18 add esp,18: w3 D! Y4 v0 j) J: m ^* T& }
00404CC4 C3 retn# L$ s1 M/ l; Q4 F9 j0 y7 l2 d8 h
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
( f1 \9 m! _6 I# t( N4 o( I00404CC8 84C0 test al,al
5 O9 U- v( _! w; ^2 L00404CCA 0F85 1C010000 jnz qsr.00404DEC
$ F7 Q2 `8 @$ s8 l/ F00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. h" K6 h5 V; o* C) N" |8 ^* O& q
00404CD4 E8 87E3FFFF call qsr.004030607 q" Y$ ]+ ]0 ^4 c
00404CD9 51 push ecx+ r6 @ H# T$ Z% O
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0" w; @( {2 D8 c; r" O
00404CE2 8BCC mov ecx,esp; `9 ?% |+ `4 A+ r, g* k0 @
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
+ }' }( N1 U/ m% h, A00404CE8 56 push esi
* Y" B( w; P+ E9 z00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是09 @0 [; s- w3 e8 d- o5 t# h! R
00404CEE 51 push ecx
" s3 L& b' n P0 o9 k1 j00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
! }6 ]3 [+ ^! ` l00404CF4 8BCC mov ecx,esp
4 F2 e" G1 m( n7 _& M, A, k00404CF6 896424 20 mov dword ptr ss:[esp+20],esp( @" W) H V5 k6 t& o" }
00404CFA 57 push edi
% [6 q" {( G4 x1 D9 b' d00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
# N' R+ L. w/ v00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]7 r& f1 Z* ~! Z- {( l
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
! q9 _! ]* G% k5 b% H00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
9 ?9 L# Y0 }- A, R00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
$ M) f1 ~' w0 d9 g7 ^00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
' b }7 O2 ~5 Q9 c00404D12 6A 40 push 409 K& a; ]" c8 v4 |0 }, Q
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
5 _1 w s& n9 p c$ f' B# @5 R00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
& T" |, s/ A" ^% j! |# E00404D1E 8BCD mov ecx,ebp
5 _+ U+ u+ [9 v9 f- Y( S; t; d! x# E00404D20 E8 50840200 call qsr.0042D175
! u/ G/ A b e6 C: J9 Z6 e" w& C00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]: }+ L1 O1 g* J) y
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
% b. W. {& ?+ \6 D T/ c, G e00404D31 E8 5AE3FFFF call qsr.00403090
! B+ z3 I- q: k00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]# ]1 {- z/ [6 C( C
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
2 p! ?: G7 X8 c% }2 {' I) R; U3 O00404D41 5F pop edi" i9 ?+ q L* W1 u
00404D42 5E pop esi
$ ~1 f! y5 i/ N# p W j+ [00404D43 5D pop ebp, l; X. N" p) X! w# ~
00404D44 5B pop ebx6 `8 ^* E" i+ ]7 B6 u) E" r
00404D45 83C4 18 add esp,187 ~8 D/ z& V) p1 P
00404D48 C3 retn2 W' c* F7 h7 E+ Q* a' q
*********************************************************************************************************************************************************7 q$ U1 P ?4 {4 E3 a2 l5 P
跟进00404D09处CALL来到：5 A) j* {4 N g5 M' ]1 c: c/ D& n X
004030A0 6A FF push -1 //一路F8下去~~~~
- J: V0 u5 D* t! y3 o3 j* e004030A2 68 C88F4400 push qsr.00448FC8$ p% I9 _! M5 t) G
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
2 `) `: f5 z+ j$ R* s. H: [; W. }0 ~004030AD 50 push eax5 `( D- o- ?/ O, O
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp$ ^/ I- j5 ]9 u* w4 @+ \
004030B5 83EC 24 sub esp,24
% }3 O2 j, b6 t# |& n5 q$ f004030B8 53 push ebx
' H- Z! V( q( h004030B9 55 push ebp
' {; t* F4 J# a/ h- r2 @004030BA 56 push esi$ h9 g! O: c+ d4 M
004030BB 57 push edi
W. v) I( G4 R6 K/ r004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"2 g% |; m2 m1 l, z# A9 ~" `
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
- Y, \- e" I4 ?/ J+ R5 k1 Q# [1 S, ?& O004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
+ e. L: [+ e5 D9 [004030CD E8 27C40200 call qsr.0042F4F9' u" `4 N% e) w' y# y! ]
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]8 m+ V, V0 U9 H4 W* m1 e. h/ _) r
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
, s+ c2 I+ a8 j& W% q! K" E X* A004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
7 _; N" r% M2 U7 a0 O004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],34 C1 N9 F4 g0 G; R, `
004030E4 E8 905A0200 call qsr.00428B79" r& M# k4 V: `! W5 K* P+ F* Z
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
$ {# S6 U, J4 O- a004030ED E8 3B5A0200 call qsr.00428B2D
4 e ~! b9 i* H3 o" J004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
( C- b9 Q+ P x6 P. ~004030F6 E8 7E5A0200 call qsr.00428B79
- ?( _+ e- t) X; N004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]' v9 `1 g7 G- P0 D9 {
004030FF E8 295A0200 call qsr.00428B2D
& R- H& Z ]3 j1 a00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]0 s) E8 h' E* c" C) A1 [. V3 h
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]2 S5 m. `% e' p8 \ O
0040310B 83F8 02 cmp eax,2
1 M; O0 g1 c3 z# ~0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
' O) a( L& T( C8 a A00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
/ d' Z6 _& H* T3 ~, C6 q5 I; t00403118 837A F8 18 cmp dword ptr ds:[edx-8],181 N! `# [1 i/ e d
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
8 t. ^" q: I4 l9 B! O5 H/ \5 `3 t00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]# O* J! Q8 T y( D
00403126 6A 01 push 18 E/ D/ f" K3 J. q! L$ }- y
00403128 50 push eax
$ I" W: ^3 p! x: j+ I" ?& k00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]. Q9 z( K; H1 [, c1 y& _
0040312D E8 C4550200 call qsr.004286F66 u5 C. q) b5 [
00403132 8B00 mov eax,dword ptr ds:[eax]* {* }* t- }0 M. M L6 d$ t
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 D3 T! w, m1 n, f8 j
00403138 50 push eax6 u* Z) C$ w5 ]0 t) i8 Z) L
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
# m4 H3 h' h* Y" d9 f0040313E E8 4D560200 call qsr.00428790
6 Y) K* U6 g8 I+ V1 ?, e" e r# K; p4 ]00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
! Q9 C/ n$ l5 j& T; |+ }00403147 8BF0 mov esi,eax& o' Z, W5 b7 \/ _
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ A+ C( q' j' z, \0 ~1 l+ d: G/ t0040314E E8 38C30200 call qsr.0042F48B( t5 O: J M( R. ?
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]! z3 }+ d6 r8 m! N! V( e, z# ]- J
00403156 B9 3E000000 mov ecx,3E
- N1 [7 D, B$ ~+ a" j0040315B 99 cdq
" @) T0 b$ J! ~1 a/ f. J b% S) b0040315C F7F9 idiv ecx. S# w% t2 ?( c! O3 I
0040315E 6A 01 push 1
" j* z6 i6 ~2 L1 x2 ^# s8 {00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]# s9 Y9 g4 t- j8 a. K% ~: j
00403164 8BF2 mov esi,edx6 m! X k% S% m2 {
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
+ g5 j, U5 e) {, \1 L0 i0040316A 52 push edx
5 K% V J' t/ r' H8 a4 Q4 T7 p, c, R E0040316B E8 0A550200 call qsr.0042867A
4 x# j' c) x8 i$ H4 G( w00403170 8B00 mov eax,dword ptr ds:[eax]
3 [: S4 \3 i- H% W& U9 `* H00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" ]2 y% k& j1 |
00403176 50 push eax$ A2 O* a* P4 @: i9 p
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
" G5 N. x0 m; |' B0040317C E8 0F560200 call qsr.004287908 ~8 T# d/ e$ z0 _, Q c
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 [' }( w' {, i2 s00403185 8BF8 mov edi,eax
C8 Y7 b4 `8 ~" t- r$ J: L" |00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
: H) @# T/ k, }0040318C E8 FAC20200 call qsr.0042F48B
1 V3 |3 }0 Q7 q) @- Z a00403191 8D47 0A lea eax,dword ptr ds:[edi+A]! W) [" w; A- a
00403194 B9 3E000000 mov ecx,3E
3 ~7 t2 D3 q2 J: ~- m4 d1 p00403199 99 cdq$ |& s9 u: z/ f8 R0 x6 @
0040319A F7F9 idiv ecx% U* J: j4 q" ~! E
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]& R* }# A3 V! ?/ e3 Q
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
1 \0 N- s( i) E; g/ |- O004031A5 8BCA mov ecx,edx
& @$ ?" z! B/ Q) K5 T$ l( g) |004031A7 894424 24 mov dword ptr ss:[esp+24],eax+ r. }. h% R* _. ]! i
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
6 Z+ J. Z7 q) R' r2 q5 ~, x004031AF 894424 18 mov dword ptr ss:[esp+18],eax; h0 S3 Q7 z3 i; b- U& u
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
! m n1 k4 w/ B/ {004031B7 894424 10 mov dword ptr ss:[esp+10],eax; z1 m4 F3 [: `/ a$ v) K
004031BB 8BC1 mov eax,ecx
6 _) J& s0 g; x7 {0 ]# n( [004031BD BF 0A000000 mov edi,0A
. o6 f! x& v1 Z7 q) X. D0 Y. Z004031C2 99 cdq
" d" C( D! K8 n7 u! v( }004031C3 F7FF idiv edi; u% n$ V( T' E$ q2 q$ H3 e
004031C5 8BC1 mov eax,ecx
@4 `' R+ H$ v9 J6 v% i4 l004031C7 B3 0B mov bl,0B
; v2 c" m; W: P% P+ ~004031C9 0FAFC1 imul eax,ecx
$ z, r3 L: _: g0 ?) b' C; b004031CC 8BCF mov ecx,edi$ M+ [: d! c1 [! q. S7 a4 Z
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl( Q8 \ L) V6 e/ X
004031D2 52 push edx
3 |# b. k9 P' [& c2 b004031D3 99 cdq/ R- V- v& M- b2 p5 Y; O% N$ F
004031D4 F7F9 idiv ecx+ w) \) d0 c/ ~
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
0 s! K! r \! c6 _) I& D* N004031DD 2BC6 sub eax,esi* ~; ~) ?: ~7 a6 I) }- k; w+ |" o) H
004031DF 52 push edx' ?, e$ \: `4 G# h# W
004031E0 99 cdq; ^* N7 e2 g8 M$ U/ }
004031E1 F7F9 idiv ecx
+ R: O) V) y+ {( ~- P( m004031E3 8BC6 mov eax,esi
0 F/ @( q. e0 }) f9 s" L. t004031E5 52 push edx
& Y% c: ` i) _- D1 _; i004031E6 99 cdq
3 H8 g. ]0 d1 B* h' B: R' z7 Y. _# [004031E7 F7F9 idiv ecx- }' K5 N- Y0 E3 h# z3 m; E
004031E9 52 push edx" l. |2 M, s7 S1 m. `, f" \
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]4 B" }4 F& T3 \( y
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"- U1 j0 h, Q: @) o% b/ K9 S: @
004031F3 52 push edx
& Y9 T# ?& z: d( {6 i; U! g$ }& b004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893/ H8 M ^* S* q! ?% U3 p- o4 I
004031F9 83C4 18 add esp,18
$ M, G5 \) f- p+ t004031FC 6A 04 push 4$ k- y0 [4 w6 Y8 @9 v) l
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]) ?: Z) u# F" o" t3 t9 X
00403202 6A 00 push 0
" R" ^- H, z) K$ r9 W00403204 50 push eax2 g3 l" n" V4 A, k5 O
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
. y2 N9 }. V; _/ f } V$ {00403209 E8 D6530200 call qsr.004285E41 q P" H: f$ y) J4 X7 |( n
0040320E 50 push eax0 b" p/ I2 ~" ~$ y- H% Y. i: O
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
4 ?6 d: P+ H# m5 |00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
9 E9 P" s8 W h) B00403218 E8 A7C30200 call qsr.0042F5C4; z+ t8 C3 o+ b* W8 v5 s' d
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 _7 O6 x6 e4 ~7 j+ A
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
5 c0 |% g5 ` K/ U' n! z00403225 E8 61C20200 call qsr.0042F48B
3 |5 P7 l! R' h! `( F0 S$ p) `0040322A 6A 04 push 4, C! C! j( I, k! F: D2 N. o
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]+ `$ y5 O' H0 B0 N5 e
00403230 6A 05 push 5
) m$ t U$ e7 w: v1 A00403232 51 push ecx3 }' G I7 _0 q7 _8 w0 G
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]$ p+ f0 m* F- p5 T# ~2 f* s. Z" N2 x
00403237 E8 A8530200 call qsr.004285E4
9 H$ j6 G1 ]' l' \, }. ]8 t4 w: q0 g/ v0040323C 50 push eax
, R U9 k! n1 b- w7 ~+ m. |. z0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 O. i) G A' J: a, b* K
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D. B9 a7 h* D* u" e
00403246 E8 79C30200 call qsr.0042F5C4$ d2 `* \& l/ `
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]& }/ ?7 P- E, g! A- U8 k
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl' o4 W* c: R& v1 P( a8 X" ]5 M
00403253 E8 33C20200 call qsr.0042F48B) X. u. x. B7 Z0 x+ `
00403258 6A 04 push 47 |# h! @) L& {. \
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
- n/ t; A- `& j4 p6 w0 G0040325E 57 push edi$ z3 {) @8 ]5 L0 \+ `
0040325F 52 push edx& U# `& \5 A, u% A8 N( H
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 U0 d6 y6 r7 `' [4 @( G00403264 E8 7B530200 call qsr.004285E4
/ g# ]% n) U) V4 h. t00403269 50 push eax
4 b1 _5 I, A2 g' s! C" c0 H, [7 q1 |0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
* g* A9 |+ f' m5 w# A6 `0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E2 K! H/ f$ c2 m6 w8 H' _ u
00403273 E8 4CC30200 call qsr.0042F5C4
" i: P6 o1 x- E: }7 I3 `6 k00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# C9 s- C6 y9 i8 f' t) Y T
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
* P8 |' t( ]9 n) F) S. [& J00403280 E8 06C20200 call qsr.0042F48B; T& O+ Q% k$ a+ x1 o' t7 n/ K
00403285 6A 04 push 4
: |# _% O* J; F& ~00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
4 ?% ^: X. E; x6 T: C. w0040328B 6A 0F push 0F: u6 ?1 X% }2 h) e3 s. L
0040328D 50 push eax" s1 H0 V. Q) P$ F0 K
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]$ h% n) S D1 H# Y
00403292 E8 4D530200 call qsr.004285E4. ~& m. X/ ^ s5 i
00403297 50 push eax
* R7 E- M( F/ u00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]! S I, e3 n `
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F" q% ~3 v3 H: |
004032A1 E8 1EC30200 call qsr.0042F5C4
0 k: G' b0 _( F0 J" w! d& @004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
" {) [; E) ^; V5 ^6 @0 S" q004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl3 V) Q, a1 |- w, P; ~
004032AE E8 D8C10200 call qsr.0042F48B
) T; I3 {4 e/ K, s0 G% ^. s0 `004032B3 6A 04 push 4: _- G+ Z% ?: [6 u5 F3 w
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
3 ~. | ]" H+ X# Y004032B9 6A 14 push 14
J7 F% g/ U6 T2 s$ W004032BB 51 push ecx* d2 }) D6 r5 L' k; N6 s2 x3 L$ o
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: z T; M1 c# ^% a6 R0 F6 F004032C0 E8 1F530200 call qsr.004285E4
+ O* L" q6 l; H# U K% a004032C5 50 push eax
4 F) Z+ Y# |7 ~6 g8 Q004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14], x7 `, \9 g3 A$ Y
004032CA C64424 40 10 mov byte ptr ss:[esp+40],104 x0 ?; ^/ w) \
004032CF E8 F0C20200 call qsr.0042F5C44 Z, N0 H$ i% c- t! V* b
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 h# }5 F5 b' {% ?5 a [004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
- n$ ~1 R! o7 ^5 U# I004032DC E8 AAC10200 call qsr.0042F48B! z5 ]5 |# Y4 A! z& a a; ~9 e7 U: N
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI2 \& B( z4 T+ W! g8 x9 p7 G
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
( q* l$ E+ ~3 b& Z& L004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL2 [% X- i/ g @% G/ h- O5 N5 r! @2 E5 E' \+ B
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL# F7 E7 t' l3 L' ?* F6 M
004032ED 8ACA mov cl,dl ; DL送CL
0 W1 b* F' [2 v004032EF 3AD3 cmp dl,bl ; DL和BL比较
% z0 s8 `2 @; n004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
' v& e# r% g8 x4 I0 D7 n004032F3 84C9 test cl,cl
/ s+ c$ m E% O# V004032F5 74 16 je short qsr.0040330D
4 c5 Q8 d m0 P0 b' [004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
7 X5 S; D+ T$ ]+ a0 v: I, n6 E& P004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL! h+ X# d$ U" r# t% Y# a X
004032FD 8ACA mov cl,dl
3 ^( M7 o% b0 b% s004032FF 3AD3 cmp dl,bl ; DL和BL比较7 e/ K$ v, Q8 l8 C. \/ n3 Q+ d) ?
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）/ \; F: g3 Q% T
00403303 83C0 02 add eax,2 ; EAX加2
# ^" p, _* t- e/ f1 [00403306 83C6 02 add esi,2 ; ESI加2( ?+ Q& @0 o+ y$ l# E' R/ n
00403309 84C9 test cl,cl
2 i5 U7 }. X3 e: @- h/ R0 _6 N0040330B ^ 75 DC jnz short qsr.004032E9
5 d% h" y$ v, {0040330D 33C0 xor eax,eax
' f8 r9 ~1 z. R9 p/ M' D0040330F EB 05 jmp short qsr.00403316
% g; i& X* g h/ i00403311 1BC0 sbb eax,eax' N& R$ {3 ~; B/ b1 R
00403313 83D8 FF sbb eax,-1
5 O5 T! a6 y, m( G00403316 85C0 test eax,eax
. ~8 a" j5 [" t3 J; ? n5 [" c/ z00403318 74 0E je short qsr.00403328
( U) ^/ y, {$ `1 V" b* o0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A t( x3 B X+ h" Q9 ~0 e5 w
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
) i! l1 \! i" K. Y/ Y00403323 E9 F0000000 jmp qsr.00403418. a ~9 U* S/ p* B4 ^
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
- a. M8 D; F) q4 F6 T1 f: N0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 a% _4 [8 @1 U* @; Q# }
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]3 {3 l' Z) r' ?( }( x
00403333 50 push eax
8 Q7 F: W2 J: q00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX& z% x3 z# J5 l# b# K1 S
00403339 50 push eax$ H+ b# @4 b6 e; m2 l
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX2 _6 s) l8 l8 c# h3 W7 O
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
% s7 S0 }% o& g9 S3 x- z$ s( [00403343 83C4 04 add esp,4
! p& T) I- N8 W2 s! q7 c00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI5 G/ I/ z' e# {0 d1 V
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]! ^# E0 Q% `; S8 f
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]' z s) \! L$ A+ M1 a4 E' ^0 p2 m; ~
0040334F 50 push eax
- Q# f; C2 [1 R) Z% U& H! P2 n3 f00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX" u* T- ]( T* {: ?8 t( G" f
00403355 50 push eax
# q/ c2 L: v0 W+ `00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX7 N% P7 l0 e6 k
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX) R) v7 r) P+ C# L
0040335F 83C4 04 add esp,4
8 s$ s/ u1 j4 J; R# s: r' H00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI8 q b3 T0 ]7 ?( u- c2 y
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 J- G3 Q0 g4 |& C) i, }/ }
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
' ?6 y6 w }0 z/ }% v/ N" C# S6 I0040336B 50 push eax6 T; }. U9 M2 W
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
3 x* m/ b! H: f! W: N; B, Z% w$ N00403371 50 push eax9 X% F9 ]& p# ~4 n3 G
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX% D8 Y( V' O: o% z2 c9 c
00403377 8BD8 mov ebx,eax ; EAX送EBX7 _3 A# G! h1 k/ b n/ V9 O
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
\4 I) U; D2 h! @( ~* a' g0040337D 83C4 04 add esp,4
+ Q' Z! |! F( G3 }' ~8 O6 I$ P00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
7 w1 z0 `7 s4 P' l) K) O4 u00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
4 l6 [( g$ |- i" ~+ c. i00403387 50 push eax
7 ?8 j; A$ X3 P8 s# {' C z. o% j00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX/ I: l! ` Q0 f/ z. a
0040338D 50 push eax: z. M% b v/ `% o
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX4 a" p3 u# @3 c( O1 I; _
00403393 83C4 04 add esp,4
0 E+ E k9 ~7 A6 ~( q2 l00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
0 @' f% Q- z5 y0040339A 8BE8 mov ebp,eax ; EAX送EBP4 b9 [& k) e+ {% Q/ F. k
0040339C 6A FF push -1
1 P. `: u9 L" o7 G' K0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
" {, | S4 ^# ?3 B$ {004033A3 6A FF push -1
0 U8 g" {5 r+ i7 E" N/ k+ @" C' N3 e. P004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX' c( @0 I7 j$ Z+ ]9 z1 ~ ]
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
9 x, T8 U! n( | k4 M0 z004033AE 6A FF push -1
$ r: ^3 n6 A- K9 n004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
! \6 \% U! m( \3 y) r4 p004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
5 B, L# a. s. n* e8 d$ H004033B9 6A FF push -1% K3 n% g$ t! j) k
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX& i* ]- `+ H$ o4 w c5 J
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX: Z% ^* F) |* k: V% w4 y
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX+ n3 t. d0 _( Y$ I# H& F
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
9 s z+ `! o/ I2 H% c0 [) n004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
( ^! o9 | z' W1 a p' T0 L004033D7 D1E0 shl eax,1 ; EAX左移1位
+ Y. ^. L; t6 i004033D9 99 cdq ; EAX扩展9 R4 L; L9 K0 a* v' Y
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
* B" b5 i; I' H" b004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较, z; ] r8 \/ ]# u' h
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）, ?) e* p# m$ G
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
4 M) i0 }* \# L004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10], M4 a) X7 l6 V& m- l, d0 _, L7 ]8 \
004033E9 EB 2D jmp short qsr.004034182 v1 B- I9 k/ l ^8 x0 }
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX2 h( P) h f: u; a
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2+ q/ W# t2 Y) o. k5 s$ ]$ c
004033F7 99 cdq ; EBX扩展
; T/ f) X5 d' |2 W2 G" ^4 z; \004033F8 33C2 xor eax,edx ; EAX和EDX取异或
; P \3 [) E; S" x6 B004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
; R% ~, W7 a# X# z0 |3 K" c6 v004033FF 2BC2 sub eax,edx ; EAX减去EDX2 B5 A# r8 A% q2 K: G( E# ]( X) h, R
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C] V b$ G( e c# [, @3 T
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX) T2 ?/ ~4 {) ?% W+ q9 L( P8 m
00403409 99 cdq: |! W! d, U, g+ V+ c
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
+ n8 `+ A, U9 I& E% x; a; z6 e0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX, L# G, A! h( W8 G2 d. |1 |
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较 X- Q3 q" ?% e: H+ y* }! B& r+ \" D
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）3 L# a' }$ P0 V/ `5 e1 J" \
00403418 E8 6EC00200 call qsr.0042F48B ;
$ ^% y8 V0 H1 D6 h$ E0 e: `/ Z/ y0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
2 s: W- V" ?. Z# {$ }6 K00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
4 j% d0 }3 h4 N- n6 W' `+ C8 U5 q00403426 E8 60C00200 call qsr.0042F48B1 H# E N! K- m: W# n
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]: B4 X8 s9 A+ O9 F" y+ L
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],84 @# E; t& Y! r' j# m" J$ _! i# C
00403434 E8 52C00200 call qsr.0042F48B: v7 d& {& }6 M7 D5 v) t$ F
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]% ?# T+ U h, x, j* A
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],73 c# U3 G6 h. Y7 R k! C
00403442 E8 44C00200 call qsr.0042F48B
' e( |) C7 c1 s) O2 e00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]0 l7 {& q& Q) q
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6* ] P& t2 O7 `6 L
00403450 E8 36C00200 call qsr.0042F48B
/ L2 W* r3 m8 N) `3 T( A# r5 ]3 ^7 K00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
: ?/ s6 C+ }4 S00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3, t. @- M0 E; y6 c
0040345E E8 28C00200 call qsr.0042F48B
9 V6 f3 ?* `$ F' a4 h- L00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
& J; L( _; P! G8 }; [* h) g% d00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
$ e! T; C3 G: z0040346C E8 1AC00200 call qsr.0042F48B. c& t, L) }6 g; i+ ]: _
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
9 V4 b- ]# E, {; N4 v$ m' Z00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
: p: d7 ^% `" F- p! D: Y5 H0040347A E8 0CC00200 call qsr.0042F48B
5 X( ? c1 f! D. g* S0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]7 N; c0 U2 h {, J }
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
- j- U# J' d( V$ F& g7 l2 P2 Q# |/ ~ ]00403488 E8 FEBF0200 call qsr.0042F48B
( P ]* N' s, ]0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48] ?* ?3 l, r1 y
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-17 g9 I. {- Y+ `; g$ }) j6 b% J
00403499 E8 EDBF0200 call qsr.0042F48B
0 V. D/ U* \$ Q8 n9 m5 _0040349E 32C0 xor al,al ; AL清0
$ G( n$ h* Y; Z8 O6 _8 T3 Q004034A0 E9 88000000 jmp qsr.0040352D
$ ~# Y; v- I7 s1 _2 X0 k: m1 w004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
( I7 B; `$ z8 U. N( F6 d. O004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14] l W+ u- j! I% p7 Q* l
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
; ]& ~! Z" q6 g8 l. }4 r004034B3 E8 D3BF0200 call qsr.0042F48B( l9 i* b# K. m- w" l0 ^
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]5 u: O: T1 E- N; m' J$ t
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8% m, b! e8 o: G# ?- F! c& b
004034C1 E8 C5BF0200 call qsr.0042F48B
/ p) g# ^+ e6 r8 p! R" Z1 r( ~004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 l- q( H7 P+ s2 J, h# H$ ]004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
$ h1 l2 i, U+ O. R004034CF E8 B7BF0200 call qsr.0042F48B& s- P# v8 J% e1 P5 S: F
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]" W! |+ _8 T& ]& q
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],67 R* N. J; e8 r+ ]( {& \% R8 e
004034DD E8 A9BF0200 call qsr.0042F48B
' k: H: \ l7 r) c# [* a004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]& v6 M g; A, Q
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],33 i( C* B$ X) l( N+ m% I
004034EB E8 9BBF0200 call qsr.0042F48B
' b+ i) d2 X2 x( S7 ?004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
0 A8 ?- g( r* L3 x$ [/ C3 F1 i004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],26 n. K" ` ?. A" x
004034F9 E8 8DBF0200 call qsr.0042F48B
; m$ T( k: ^- L$ ]004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]( z/ V' [5 ^# ]+ i n
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
6 L, P% B3 t! q; P2 ?/ a0 ~) O00403507 E8 7FBF0200 call qsr.0042F48B
8 {; S! h" k/ t! h% b' s/ [0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]6 ~7 T9 ]& N" D/ _* {
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
5 c' [$ L, P* V' }! c" i! I00403515 E8 71BF0200 call qsr.0042F48B
! L8 w( Z8 W) x/ ~( I: `/ o3 j0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]6 e8 w& V N" A* @
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
( A' [2 Y6 v; K2 u00403526 E8 60BF0200 call qsr.0042F48B( a; O0 R6 j$ C" o- T, h
0040352B B0 01 mov al,1( U4 `' ^( q1 w u1 N: q' K& J
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
& v% L5 Q0 M, K7 a+ ^00403531 5F pop edi3 i$ M; N. g0 N; G. ~
00403532 5E pop esi1 j8 \3 T) w7 m; P4 H$ P
00403533 5D pop ebp
/ ]0 b1 o# R; P) V00403534 5B pop ebx
: k5 t* t e8 j9 b8 }& }# }7 I* z00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
" U& N0 @1 E) h1 V2 H0040353C 83C4 30 add esp,30
' `7 H3 q; s# X+ r4 c d3 g0040353F C2 0800 retn 8
. }% d1 P, K# Q" C6 Y: @- p0 K" e$ j--------------------------------------------------------------------------------
6 x& w. @$ o/ ^9 n7 j, j【破解总结】& o% m0 [' e: y. o3 |" X1 I
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
( `6 @6 \: p+ r" Q, A7 g6 P用户名：yijun
3 E2 R9 h. H; ~2 B8 ]注册码：4893*7777*3726*7777*05294 p- q( g: a; S0 o" n# n9 ~* ]8 _9 _
--------------------------------------------------------------------------------
/ X6 n1 N& K( W5 m% {【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡