|
|
【原创】破解Quick Screen Recorder
8 J, q2 S3 j7 N0 E. x( }【破解作者】 yijun
) ]* @. ]4 f! a/ u" `0 _8 k: x【作者邮箱】 [email protected]. N3 P, }& J' o4 s
【使用工具】 OD,PEID
+ r, w! Z$ D: \- d: i; Q【破解平台】 WinXP
2 q2 {* L# } y" `0 K【软件名称】 Quick Screen Recorder
; D1 M+ ?# @! q2 L! K【下载地址】 天空
! F0 e, |2 p# D% H3 @【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. $ ? ^; p1 {+ |) \4 O% I6 M; @
【软件大小】 540K
( ^9 X9 ~" N9 {【加壳方式】 无
) R" o- ^5 h) e【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）1 c* t3 F; p* O9 g
--------------------------------------------------------------------------------8 W3 Y8 [* N; W! q( ~7 ~
【破解内容】8 Y# j9 ]* B* A* {/ U) m
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：: i- y8 H9 f% N4 n. u6 @
00404C69 55 push ebp //在此下断
; ]4 [* ]! W! Z* V5 {1 N00404C6A 56 push esi2 S+ D; m# B/ Y. u1 y
00404C6B 57 push edi
& F9 h/ c ^- g- j+ V1 w" B5 ~* M00404C6C 8BE9 mov ebp,ecx
6 I4 j) y9 T$ p00404C6E 6A 01 push 1
$ u3 u. h' }0 A% Q$ P- F00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名) R2 J; M: ?$ y
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
( X) a' j) j2 |6 q. p5 C00404C78 8BCF mov ecx,edi
1 _9 t. U4 A0 o" u00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
$ T$ |5 t, V. u2 [00404C7F 8BCF mov ecx,edi/ b/ t3 [! W2 \, r
00404C81 E8 A73E0200 call qsr.00428B2D4 i' b& R" t9 r1 G9 q
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]$ p# L8 z" z' p, \0 v
00404C89 8BCE mov ecx,esi' k7 y5 ^% M4 Q/ u" y7 ?. h+ r
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX4 p" _4 `- A# l- a
00404C90 8BCE mov ecx,esi
4 Z6 D2 L$ f1 ~- w9 x00404C92 E8 963E0200 call qsr.00428B2D. H5 J' L1 D9 g+ L
00404C97 8B06 mov eax,dword ptr ds:[esi]
, k5 q1 i4 c$ b! v1 E! O00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
8 p0 A1 W& g, n) F1 G* C1 W00404C9D 7D 26 jge short qsr.00404CC57 o3 I2 V. k; I( Y- l& r
00404C9F 6A 40 push 40
: S/ s3 O3 l8 s- e: c2 G00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
* g8 R! S$ n! W, _00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
# V7 X) p, G) k; B0 `00404CAB 8BCD mov ecx,ebp0 n. Y0 T7 R$ C, z5 U4 k
00404CAD E8 C3840200 call qsr.0042D175, Z' E, X- d. O
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
5 y/ Z& ?1 N3 V: ]+ V- _00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
8 y3 u& Y- [ i! t, L00404CBD 5F pop edi' e, W5 {4 u; X4 X9 c* C
00404CBE 5E pop esi
3 ~) N$ C! C0 ^/ X8 R00404CBF 5D pop ebp/ t" |- a+ i* G; o! U" b4 u
00404CC0 5B pop ebx
R( z$ {% n5 j' b: k00404CC1 83C4 18 add esp,18
W1 K7 ^3 y! X) E" F00404CC4 C3 retn
' V( @5 G+ f0 a+ w, v( t00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]# f1 C y6 r2 n& P: J
00404CC8 84C0 test al,al; Z/ J# T/ t+ x
00404CCA 0F85 1C010000 jnz qsr.00404DEC, E8 Q6 O0 ?/ b2 l3 L* t) u/ m9 W
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 P- ~ U! I0 A5 z! {& B, s& f00404CD4 E8 87E3FFFF call qsr.00403060
3 r! {: S; m1 E00404CD9 51 push ecx" z7 Q, q4 E: d2 b8 ]/ L; ~
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
1 {& n* f9 P9 H) `& i00404CE2 8BCC mov ecx,esp
. ^ D0 z% w8 x! G* f' E3 q* U00404CE4 896424 14 mov dword ptr ss:[esp+14],esp, Z2 K& z1 i0 E2 S2 ?" Z9 c: E
00404CE8 56 push esi5 i+ \8 ]+ g! s% x9 e' D) x' V8 _* Z
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
5 U& M5 @$ `1 H* f! {00404CEE 51 push ecx- V' [ M* L6 ]- Q$ h
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],18 ^2 \# R6 c# n
00404CF4 8BCC mov ecx,esp- q7 c c& O, O' h+ ]/ ?
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp% Q' |! z4 y6 V
00404CFA 57 push edi3 t( q) s, z" ]! T/ z- Q
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
0 g8 D/ Z( q2 w9 t00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
! h: R9 g# s) g+ w" w9 H- [+ X00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
( w0 s6 Z3 [' ~' [8 y* K1 Y6 ^00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~2 S! C/ p1 |! U( r
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
+ q% v* x& o% }, d00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~0 p4 Y$ b2 l& j1 _: Y% j Q: r, W2 |
00404D12 6A 40 push 403 O% ?- }' e- _0 r& k3 S% X
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"0 C; x+ H, M6 a) Y7 f7 B2 z
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
. W9 B* g: \; R7 S! g00404D1E 8BCD mov ecx,ebp+ P% e6 H0 P5 q7 G2 X, U
00404D20 E8 50840200 call qsr.0042D175
- Q5 H, Y' e& u00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
" f/ C* z5 h2 U& }6 g00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
" t7 P( A- m1 [2 B4 W4 w00404D31 E8 5AE3FFFF call qsr.004030909 C0 z9 B4 M9 t1 @
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]+ @+ @8 D' G& N* B1 ~8 B! O* ^
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
% W* k# j {1 y7 L7 o00404D41 5F pop edi
) H% }! v; ]& r( [: C# A00404D42 5E pop esi
5 O& Z- L% S' x- N( y! u3 @00404D43 5D pop ebp
, g. \+ n& X* s2 ?; G# d, ?00404D44 5B pop ebx8 x& l: h6 `# T! f7 Y. m
00404D45 83C4 18 add esp,180 C$ e q9 z D. w9 P
00404D48 C3 retn
) N7 o! w/ X) i: m1 B*********************************************************************************************************************************************************
# ^. A: h6 X0 j: h7 D跟进00404D09处CALL来到：2 r# n; B# I( R2 X
004030A0 6A FF push -1 //一路F8下去~~~~6 U2 q! H. ?/ O
004030A2 68 C88F4400 push qsr.00448FC80 A5 R/ a0 P" r H
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
. K1 A3 ~* q- A004030AD 50 push eax" ]( L/ D5 _/ A7 x
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
, Y* F( X2 @* Z2 x' k. V* a004030B5 83EC 24 sub esp,24
+ {! m6 p( |/ j004030B8 53 push ebx# D1 G0 s ^2 o }# A, U x/ }& d
004030B9 55 push ebp
- x7 s* n4 D$ Y3 W+ g1 G1 g004030BA 56 push esi
9 E3 {" d3 N7 H) @( U; c! t. ^004030BB 57 push edi
) J4 f* z6 A' o% C004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"' ?+ K3 I8 y4 [3 v; }5 F* L7 C* q
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]4 a9 i* I' ~# C, A, E
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
! M% d* N& x; v$ Y/ _004030CD E8 27C40200 call qsr.0042F4F97 [& R' m% s0 a
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]( p# T+ l" { J' ^/ q
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax7 m. m% E5 ^% l, @
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
% ]& W8 B. U6 w8 f, h# H004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
/ X0 u6 I8 p6 Q$ ^. R/ O5 b) C004030E4 E8 905A0200 call qsr.00428B79
; m8 v8 z2 `8 s+ @7 K& a$ T004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]; d) C; |, v& Y! ~
004030ED E8 3B5A0200 call qsr.00428B2D; g; ?$ _( U& o& T6 f) T
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
( F9 d8 ]2 q4 g- L004030F6 E8 7E5A0200 call qsr.00428B79
" V0 z0 x% j& [# A! z004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
5 E. ^/ F F2 \2 Y4 w: S004030FF E8 295A0200 call qsr.00428B2D7 a! ~/ P. S- ~) S6 f% e
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
9 C1 d- L$ p" w00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]- ~& g9 s! G, x$ E$ Z3 z
0040310B 83F8 02 cmp eax,2
/ u3 |* O# K/ q3 |1 c8 W0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳( ^& f5 Z, F7 z' v% H- n) Z
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]2 z8 o) }- d* K/ M. ^: v: D; c: D4 z
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
( q& Q6 g: C% M7 F0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳$ W5 `( A3 ]4 S" v$ W- m
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
2 T, A& q T5 N' M4 U) Y5 k( p00403126 6A 01 push 1
! D& F3 Z+ A" i$ Y2 T: [1 H) [00403128 50 push eax. E9 h, D# X+ p) h# @% \! h
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]* i4 ]! t$ L" H/ z( O: g j0 M
0040312D E8 C4550200 call qsr.004286F6* |3 ]3 n0 Q4 d& F6 t
00403132 8B00 mov eax,dword ptr ds:[eax]
" I t- J' _% n00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- I8 Q' ]8 z" H. O& B
00403138 50 push eax% |. C8 a# ^8 S, X+ S6 i- c
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4' M1 m" b( n% T L* j; p
0040313E E8 4D560200 call qsr.004287905 n, N: Q- r. w, b' c) `& p! A4 ~
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]/ ~) o) O; v$ ^- _: t7 ?$ Q
00403147 8BF0 mov esi,eax% K/ }( n* \$ `# p
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
2 |, ^; B7 G. f$ V0040314E E8 38C30200 call qsr.0042F48B @, ?2 [2 p) L9 J/ }/ @
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]8 ?! @5 Q( F' E* q5 f
00403156 B9 3E000000 mov ecx,3E
& |7 P1 X. ]" O& B0040315B 99 cdq2 U6 T$ `$ z6 s# z/ q4 d
0040315C F7F9 idiv ecx+ N/ @1 w$ G/ T& i$ w! S
0040315E 6A 01 push 1
5 J( p# S" n9 L6 s# R- c/ A2 F; G- |00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
+ p/ Y9 Z" N: @00403164 8BF2 mov esi,edx
/ ^& z4 [8 [' T) Y00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
. a- X _2 i# H9 c0040316A 52 push edx
a6 O& z4 [& F2 m0040316B E8 0A550200 call qsr.0042867A
: M9 O( R9 c+ E2 @" b. Z00403170 8B00 mov eax,dword ptr ds:[eax]# ]6 D# O4 ?8 i" Y0 i) a, ~2 P* Y
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
/ |8 E$ Z& R7 J0 K9 \/ p6 Y! a00403176 50 push eax
1 A) Q: O) \! c0 {* _00403177 C64424 40 05 mov byte ptr ss:[esp+40],5' X8 y2 p$ [9 p( {' Q' Z
0040317C E8 0F560200 call qsr.00428790 u- ~' ]7 S* t3 G3 O
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 i5 P: m) N* Q/ {$ {( _00403185 8BF8 mov edi,eax% v6 G+ s5 S+ p# c, b6 Z" ?
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
0 Z0 L3 R/ z: t, L- A9 l( u# Q8 }0040318C E8 FAC20200 call qsr.0042F48B
2 A4 Q1 `6 l3 Z4 A00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
Y% e2 b- N; o. B' i00403194 B9 3E000000 mov ecx,3E
( P: L0 Y' A! L00403199 99 cdq" F+ E3 I- j: C6 F
0040319A F7F9 idiv ecx
4 A5 S! L7 M+ L4 M" i9 B* X0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]% X3 b8 f6 v8 `) a* Z5 h
004031A1 894424 28 mov dword ptr ss:[esp+28],eax! f Z5 D' @5 `. _9 Y7 G
004031A5 8BCA mov ecx,edx
, ~( V/ ]8 Z5 x. H004031A7 894424 24 mov dword ptr ss:[esp+24],eax
* d$ q( b/ Y* v. X4 u' D: ~9 {004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
* G! J1 r( z. ^: ?% ~7 ]+ b9 v004031AF 894424 18 mov dword ptr ss:[esp+18],eax
( K# O. S) h/ O y. M Q004031B3 894424 14 mov dword ptr ss:[esp+14],eax
( \4 k' i# g# i5 l; O4 `+ U004031B7 894424 10 mov dword ptr ss:[esp+10],eax. M4 h: K1 u; E1 L7 K
004031BB 8BC1 mov eax,ecx0 X# A. y1 ~3 P) i4 `
004031BD BF 0A000000 mov edi,0A
3 j; K8 Y5 y4 J2 }5 X004031C2 99 cdq% _+ ~% |* K& i: ~( {) u& O* _$ F
004031C3 F7FF idiv edi
3 s0 {' Q' |+ Z/ u5 r004031C5 8BC1 mov eax,ecx/ L# o- p$ u: F' K
004031C7 B3 0B mov bl,0B
1 {, |- u7 X: C9 G1 S" s% Y! Q+ J004031C9 0FAFC1 imul eax,ecx
& p8 I4 s7 P7 B1 T8 p004031CC 8BCF mov ecx,edi
5 l; D' Y( C: C004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
1 Q" w0 y% `$ M; X, v0 T! Z004031D2 52 push edx- M, E9 z0 J, S7 ?, a
004031D3 99 cdq4 j! u+ v j2 P/ m7 Q2 c" D& ]
004031D4 F7F9 idiv ecx
) C; D. P& ]. D' \ [: _004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]& v' ]' j: k$ w. L: Q
004031DD 2BC6 sub eax,esi, i, R8 O- q7 _
004031DF 52 push edx( y6 H* _2 C K" E# c8 d
004031E0 99 cdq7 a2 w6 B# i+ i# \
004031E1 F7F9 idiv ecx0 Y6 F4 c/ `+ H: F
004031E3 8BC6 mov eax,esi% {6 s; @7 g; a. g+ j( V
004031E5 52 push edx% D! b+ c" ^* |& z$ B$ E: i
004031E6 99 cdq5 B6 G2 P4 N2 _, ~# _. Z; o; V# c
004031E7 F7F9 idiv ecx
0 }+ b, i) p! N1 o$ Q( s004031E9 52 push edx
& R( s# o* U5 [( l' i004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
: S# V( O+ p3 Q4 p l( K004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
$ M7 W4 J* w7 B5 ]. l004031F3 52 push edx
8 h7 l' u! W0 G q004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893( o8 i) M5 Y/ v1 l$ ^9 r
004031F9 83C4 18 add esp,18
6 ^2 M) f) t+ v- A5 E/ a004031FC 6A 04 push 46 e+ ~: ^1 B. ?: S
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
% @- N1 p+ T# Q) P$ z; ]0 b5 j00403202 6A 00 push 0: t9 a! I# N; I5 I& s: _
00403204 50 push eax
) m4 y" X( D3 Z/ z7 N: L: Y00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
4 T* Y: W( }8 I6 \; d7 B T00403209 E8 D6530200 call qsr.004285E4
# U6 W) p/ Q9 j" w$ p+ W7 s0040320E 50 push eax- J: Y( V5 ~: Y
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
* l4 E4 o! U+ E: U00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
2 F9 \5 E) Q. h# i8 d1 ~1 ]( x00403218 E8 A7C30200 call qsr.0042F5C49 s) Q. T8 T, A) I$ ~
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 x$ L! I# u+ Q3 f: T
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
) o' z$ I! E! V! I8 ~/ L; V00403225 E8 61C20200 call qsr.0042F48B
# i& r1 R0 k1 m& k) B0040322A 6A 04 push 45 g7 a- D8 T9 ?4 O
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
2 f \4 Z$ `" m( ]00403230 6A 05 push 5
5 r0 H: B; c" v L& X8 ~# A; r00403232 51 push ecx
. F$ k# q9 o7 \6 x1 s1 k& }00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
/ m' |/ ^! C9 K7 j00403237 E8 A8530200 call qsr.004285E4
& y5 ~ I- b! |0040323C 50 push eax
/ @2 z0 U* x( @0 o% o0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
, o0 B+ T: @. ^' P) V- g% w+ Q00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D& C$ k: O% }+ V$ w8 Q8 I
00403246 E8 79C30200 call qsr.0042F5C4
* C& H8 Y$ u6 J( e# A, D0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]% Y& O7 }$ b) a; L4 @
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
, d7 b2 @! J# j6 s7 x" A1 x! f0 V4 t00403253 E8 33C20200 call qsr.0042F48B( e o, j# J p8 R" h: s
00403258 6A 04 push 4, b/ |" D7 U* C
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]: s7 R' g, \$ [. `* h9 A" i
0040325E 57 push edi
- b! K( T# `" `, i0040325F 52 push edx4 E4 M$ Z% V( r6 o
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" K8 T4 O6 `* U: R7 V9 w; B00403264 E8 7B530200 call qsr.004285E40 r1 d. K' P- ~5 Q! T
00403269 50 push eax
/ P% Y `0 V, O5 J/ G4 j0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) S( Q5 q& r6 p9 |' s- e0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E+ U( k% T. v7 z: e- J5 A/ f
00403273 E8 4CC30200 call qsr.0042F5C4, _3 Z0 U# F$ z* I3 G7 E) u
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
7 B7 {! M7 m2 V3 e* l) g1 B2 n6 T/ _0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
) N( H3 w8 `0 Y0 y0 k00403280 E8 06C20200 call qsr.0042F48B8 |- i5 o+ \! w. [) s9 r- o( z
00403285 6A 04 push 4: O6 k- n4 S+ t/ [ b3 s
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
5 h/ P. K; Q% D" O0040328B 6A 0F push 0F
0 C# G4 A2 r4 k' V# |/ M0040328D 50 push eax
! {5 X9 j; [; g- C& J( V7 Y0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]- w, z9 l2 Q5 X+ A3 ?5 a' @( I
00403292 E8 4D530200 call qsr.004285E4
! @. u5 K3 m5 P8 _; W00403297 50 push eax
; z0 F2 ?& S/ r5 C7 P F00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
' Y& ~2 N( h0 B1 c8 I6 a0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
3 R Z- x. j& s, v0 p' O' b# |: x( a004032A1 E8 1EC30200 call qsr.0042F5C4# S- `& {! X* U4 D
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]9 S& z( [# i: E
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl) A7 R7 E" A; \2 f. t
004032AE E8 D8C10200 call qsr.0042F48B
) Y Z5 D9 `$ z. ?$ E004032B3 6A 04 push 49 O) V7 a% l; C, A
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]- Y; Q1 Q' R, |% L3 a$ I
004032B9 6A 14 push 14, V) v, ~3 |) }$ E2 ]
004032BB 51 push ecx
S# q2 k" O# V, G& m004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 I0 y+ K$ C+ I/ K% ^2 Y( M2 w004032C0 E8 1F530200 call qsr.004285E46 E9 n* |! U4 J8 n* u% h7 G" r0 K
004032C5 50 push eax
X( u4 h8 P" K6 S5 j' F$ d* ]004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]8 R: g6 |2 \2 E: ^. H
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
+ C! h% C, q; A004032CF E8 F0C20200 call qsr.0042F5C4
6 D0 v+ G0 o& v) d* d004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
$ i d7 q( }( Y' X/ o004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
1 q" Q0 X0 _, W7 j D' V) s004032DC E8 AAC10200 call qsr.0042F48B
8 d5 {& u5 f, [, z6 E; t1 o7 ?0 K004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI& q# K8 N8 n) p0 N
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
9 b+ _% u8 Y. ^& p004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
& `! S. U. Z# G# H004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL. A" N! |: m$ P' n& Z4 t
004032ED 8ACA mov cl,dl ; DL送CL" N* V c# a1 R6 p% R
004032EF 3AD3 cmp dl,bl ; DL和BL比较
/ r7 c( N: B& w0 j8 n" a T) W004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
6 Z* x/ W' X7 s; v' Y004032F3 84C9 test cl,cl
) I6 z% Y( @ U* q* t& y2 o% W6 }004032F5 74 16 je short qsr.0040330D
Z4 x0 ^7 Y- p3 D2 _004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
# u+ C- [) S2 G% D2 u004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL. I, \" ~- [6 a* n9 F
004032FD 8ACA mov cl,dl1 N% O& l' g, |7 ]5 h$ |
004032FF 3AD3 cmp dl,bl ; DL和BL比较
) B7 u3 j" J% ^* W/ u( |8 T00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）) x9 s% a$ S* |7 I, D- I- g1 J7 D
00403303 83C0 02 add eax,2 ; EAX加2# i1 l- T# }8 R1 v& k8 A- c+ D- W3 r7 O
00403306 83C6 02 add esi,2 ; ESI加2
$ y5 d+ N5 @% H: i2 ? i& U00403309 84C9 test cl,cl
6 f# r# K* Z0 K9 P! x+ N6 u0040330B ^ 75 DC jnz short qsr.004032E9- u0 x/ C9 C5 N2 a3 v1 g
0040330D 33C0 xor eax,eax
5 Z- { p+ e/ Q, s# Y: H3 j/ u0040330F EB 05 jmp short qsr.00403316% d7 T3 i' `0 K+ z( Y6 H+ R5 T T
00403311 1BC0 sbb eax,eax$ u7 s: D/ s3 o. y* J1 l! r
00403313 83D8 FF sbb eax,-1/ K P3 } E) R, P
00403316 85C0 test eax,eax2 h9 g- P8 C& z. O3 u
00403318 74 0E je short qsr.00403328
$ @, n4 T8 P0 u2 x3 G$ D3 m# B0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
T7 u$ `! [/ G" f& m# S0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10] k& k; t, E) ~7 i1 f6 ?' ]
00403323 E9 F0000000 jmp qsr.004034182 K p) p2 O: X p& X! k% R4 ~
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX5 [ F: U9 V/ {9 c1 g
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* K7 u1 j" T" X5 H9 \8 }6 N
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]! ]" W1 v* Q( L6 K7 ~2 r
00403333 50 push eax* F8 D3 S% C$ g5 T5 I
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX+ J0 K4 ]3 i$ i+ R( e- c% Y& Z
00403339 50 push eax$ Q5 t: P. _5 Y X7 k
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
; R3 D+ y8 S; }) r0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
' S0 Q- X1 M* Y0 q* c" V00403343 83C4 04 add esp,4- J0 m' L9 N; `2 U* ^) G: _$ y
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
. i c, B0 f$ L$ A! p) |, b( @00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]4 R+ s# W" o* ]2 x0 a
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 E( K% a# E" j+ e$ Y% ]0040334F 50 push eax
' H& Q" i% ^; v. j6 Y00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
: U- d; a. ? m' O00403355 50 push eax
8 o1 y" |# }4 E- `7 x1 N7 A( V0 N00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
* ?& ]- S7 f# Z9 U0 J0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
) t* i* f. n( I, d, \0040335F 83C4 04 add esp,4; Y' r& ]( y3 Y+ V) O$ z
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
0 n4 K& L; \& J6 t' x00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ ~( P3 l, ~ ]; P' ^ n
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]* l% s4 F2 C. y
0040336B 50 push eax
- j8 s# C- S8 ^1 S( ~0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
' a* b V* p: i0 e00403371 50 push eax
/ ?/ e0 K( D. ~/ R00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX" h- p( X+ U1 L; o9 Z3 r
00403377 8BD8 mov ebx,eax ; EAX送EBX4 G+ k, w2 j2 _7 k$ B. i
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX$ n: t$ ]7 z- j
0040337D 83C4 04 add esp,4
- ^" H* j4 S( b$ j; P( A* I& L8 s00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
0 \! s; V3 f* m00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]* N& D3 j4 E) m& W# h
00403387 50 push eax
- _( j& A, G8 [1 b2 q3 j) i$ C% w00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
3 b) J$ K) j8 b# J9 Q0040338D 50 push eax
2 n8 X( A- q/ x2 q: r+ H. n6 w" Z0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX8 u' X' p/ b* y6 U
00403393 83C4 04 add esp,4
' G* V4 I' W. V) l00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]$ U# k7 `8 y4 J1 `
0040339A 8BE8 mov ebp,eax ; EAX送EBP
% L j W Z% K% j7 n' | t0040339C 6A FF push -1
" i- {, P3 }8 j( e. d0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX+ [. K6 Z. E5 G* C
004033A3 6A FF push -1- P: c I6 u- B7 G5 I5 R6 k
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
0 x/ [6 Q. L O/ M/ D/ i* m# @004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
3 Y: J8 R, H+ t004033AE 6A FF push -1
' `, }* u3 v! B$ L( F! |004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
! T- T7 ]% [; Y$ ?7 g3 L; _) G004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX( k8 w1 ^4 y+ ~- A% H% y
004033B9 6A FF push -1
& t5 W* _$ m$ ^. ]004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX: ?: z( X5 \: ^, a6 g7 ~
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
2 k' V' ^4 ~( H3 T+ f6 b( L: r004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX6 A* I3 ^' W, x! A, |4 S
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX! @9 C1 J4 V5 L0 X% w* d5 _7 ~
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX1 s3 b/ f/ S: { C8 |3 E6 q
004033D7 D1E0 shl eax,1 ; EAX左移1位
3 G4 P4 T$ z& i* g7 a( n) N; U004033D9 99 cdq ; EAX扩展
8 h; y% Z2 N+ w1 N; R* A* j6 r004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
* \- X" ~& j1 }2 _# v, y004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较5 W; T3 l9 D0 b3 i/ |7 L; g
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）3 K$ U6 z5 P4 O1 T
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
4 d$ [; {! B- i1 n004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
U2 y8 J ?# X0 n9 X0 R004033E9 EB 2D jmp short qsr.00403418
9 \) z& V2 y$ L7 R1 `004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
+ e( L) m2 s& c4 S! v004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
6 Q; L& }( F: J7 Z7 A004033F7 99 cdq ; EBX扩展1 U1 e; J& u" e
004033F8 33C2 xor eax,edx ; EAX和EDX取异或! r' k& Q3 R* h5 ]+ @ D' f
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX K/ O8 z, a" Q! r( [# n f6 e
004033FF 2BC2 sub eax,edx ; EAX减去EDX5 B2 {' s' @4 u6 ~- A
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]" ?0 O1 ^: y& K1 ], @1 {. v
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX6 Z1 U0 Q" N: i$ Z3 J, M' M4 t+ h/ w
00403409 99 cdq
# }% a" {1 e$ Q8 x3 s1 c6 T" m0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
$ O. s, n5 D& W1 ^1 s$ `2 X0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX' M; J Q4 t! t# g
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较; ]: N3 F1 g7 o* x8 w
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）* A2 D: j$ }4 X; K0 y
00403418 E8 6EC00200 call qsr.0042F48B ;
0 X# M* j1 z# @9 i- r( f" o" g0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( L( U4 I& l: o. _; n+ Z
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],99 `8 l a' X j* o( J7 O" x
00403426 E8 60C00200 call qsr.0042F48B
9 h; Y. u' Q4 w2 X: f) \0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
! k+ [) j! F% N3 {4 _0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
. F$ F. t2 f4 F+ q9 H7 e00403434 E8 52C00200 call qsr.0042F48B: F; }* `0 P! O: Q' N( I# p$ G
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]% X+ u* e2 ?* _1 h
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
' G- w% p# S2 f) X [! U00403442 E8 44C00200 call qsr.0042F48B
* c0 h0 ~0 F4 n+ Q00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
" p( \ n+ u8 U, V$ W5 b5 I4 J/ t0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6. M. d% S6 @& `/ H9 S! K g, A
00403450 E8 36C00200 call qsr.0042F48B
% ]1 ^8 |! P7 m- N& b8 i$ f00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]) U$ ?5 Z/ f R% p- ~
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
! m+ H) o: t; G0040345E E8 28C00200 call qsr.0042F48B
" z2 l+ O' m2 E. \00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
- e7 t( C- |) a% @: ?, r1 k8 e) t00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
0 U* }8 l a1 c% ^8 {0040346C E8 1AC00200 call qsr.0042F48B. y6 o1 g- f4 l6 S
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
# t3 K, u @0 V$ `" W00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1* r1 ?6 G9 m* ^1 @3 _
0040347A E8 0CC00200 call qsr.0042F48B, e+ E) g" O& q2 O1 W# s
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
1 }9 r( p: q' U& o: \# g" S& M2 H2 L00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0& q" l) T6 E& e- i; x2 t# ~! K
00403488 E8 FEBF0200 call qsr.0042F48B
: g9 i5 E6 E- z( N2 A4 ?6 W0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
- M* {8 V0 ?1 E* S0 u9 M, Y. d% ]00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
) D3 t+ i- J6 X0 e* q$ z1 X00403499 E8 EDBF0200 call qsr.0042F48B
2 T7 p! e( q% r% C. W( o0040349E 32C0 xor al,al ; AL清01 [- r) {% J t# L
004034A0 E9 88000000 jmp qsr.0040352D
' w* R2 I; Y- X$ D004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~. @1 b* ]7 M0 w+ _4 J, x
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]5 Z7 Q; l* N. B8 ?( m, d5 Y
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9 q7 @; M: V$ i1 q
004034B3 E8 D3BF0200 call qsr.0042F48B' j- o3 [. e9 w$ z+ F: I3 @
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18], H3 w; R+ V% @$ [2 G9 ?7 T
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],87 U2 u S: e- G
004034C1 E8 C5BF0200 call qsr.0042F48B
: `; q+ Q# R+ ^5 E0 z0 x/ G/ J! _004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]7 p9 k& @) I9 T2 W; W7 {
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7# W3 y f+ z; U/ @/ ?5 Z" b
004034CF E8 B7BF0200 call qsr.0042F48B; e5 Y% B" w$ p
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
; a* h! U& O( V; J- y004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],62 Q$ Y# P# L1 t% h8 U8 h
004034DD E8 A9BF0200 call qsr.0042F48B0 ~' R& }8 u s4 H
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
. W5 c* `/ F! z, O004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ n) ^4 C7 j( B6 r# g; o& p004034EB E8 9BBF0200 call qsr.0042F48B8 L0 A( z" M+ W4 g( ` k
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
/ R5 z, f* ~$ I9 W9 r004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2: ~4 _6 ]& \6 `, E/ N
004034F9 E8 8DBF0200 call qsr.0042F48B
' I" R) v+ l8 f- P) @004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
9 R- q7 V- Q9 G5 [/ X00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],12 X2 M6 D: r5 d
00403507 E8 7FBF0200 call qsr.0042F48B4 z6 [1 c: L+ e3 u9 w; f4 Y
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]8 w' H% C4 L2 e# D4 @) Y) W
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
2 x: Q% ~, F8 \00403515 E8 71BF0200 call qsr.0042F48B: t" }6 v# W$ E F+ Q
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]/ _5 R0 E6 y. Q |2 o. }
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1* t6 y' ^. H8 Q. k8 I
00403526 E8 60BF0200 call qsr.0042F48B
) k+ j' i3 @. [# U# C0040352B B0 01 mov al,1- N2 U/ m6 y5 i
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
' W8 n n/ F0 X/ V# ^00403531 5F pop edi
; [/ D; k! G$ T5 U4 y9 t00403532 5E pop esi
# x, c3 s8 U; T- B. d x& K5 j00403533 5D pop ebp
! W8 {% u" ^+ U/ k+ r! k7 x00403534 5B pop ebx7 k/ ]2 F8 N. x8 @6 M
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
$ F0 P- x3 m- V; q4 O I0040353C 83C4 30 add esp,30% K# f* }- r; {) d
0040353F C2 0800 retn 8
, s( Y; d/ ?& ^* u# d) W--------------------------------------------------------------------------------
+ C: G$ r7 }( }: D( {【破解总结】4 _' U+ v( x. b& d# W' d& ?" k, {
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^; z/ G3 a5 f; f" R( d
用户名：yijun
+ {% p& t- L$ `- J注册码：4893*7777*3726*7777*0529
: a" Q2 J0 t$ b' S2 w--------------------------------------------------------------------------------) f. H* _* M# A9 x+ h
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡