|
|
|
【原创】破解Quick Screen Recorder9 j) X) ~* h" ^& q; t. {1 R
【破解作者】 yijun* K: L& q+ n$ ?9 C8 g
【作者邮箱】 [email protected]
9 j8 `* S* e2 j+ w' L3 a【使用工具】 OD,PEID' B$ v6 a& X9 D* y3 B8 f* O |
【破解平台】 WinXP
+ H% S7 N; D" e3 F3 T/ b【软件名称】 Quick Screen Recorder6 o2 K W! i) r5 L& D
【下载地址】 天空 ~1 _- T( X7 |. n2 Y0 W1 {. ]
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. - d, Q6 y1 Y% [/ @# e K: n
【软件大小】 540K
/ {; h* M4 N& F" A9 [- G9 [5 }1 d【加壳方式】 无
+ Q; _* e& n% i; ?7 A* S5 P, K【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）5 G2 u+ p$ m* p$ d6 Q
--------------------------------------------------------------------------------3 F- o. l2 N; \# s
【破解内容】
# v' ?% f2 G% |9 ]4 F" I' V1 n" ] PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：1 w7 c5 ?( L2 {7 m
00404C69 55 push ebp //在此下断
$ C4 h) C6 [& ]6 k00404C6A 56 push esi+ w! ^5 u4 ^+ E* Y
00404C6B 57 push edi4 N' K/ F" k2 o- v$ o& ~
00404C6C 8BE9 mov ebp,ecx% I* T" ^% {& J$ v5 n
00404C6E 6A 01 push 1
' ~* T' Y9 c6 M! s0 [1 z00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名 p+ k+ U* K1 {# `1 n5 n4 e; O4 D
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
+ m/ a1 L6 o- R' f8 T7 ?: o3 k00404C78 8BCF mov ecx,edi
" u4 l' h& q/ [' Z8 f" W- B/ q00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
. v. q3 W. T7 h" p+ N; t" y00404C7F 8BCF mov ecx,edi
7 c* f) \, Y' D% |4 s: o00404C81 E8 A73E0200 call qsr.00428B2D
6 `7 x* X6 E* h2 k5 |. N00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]8 y' a9 F2 U" }
00404C89 8BCE mov ecx,esi
1 k. m& j8 G1 r, x00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX1 t: ~9 q* u: }$ a) O
00404C90 8BCE mov ecx,esi* w. ^) ?1 P2 a N5 L* X* w6 f) R
00404C92 E8 963E0200 call qsr.00428B2D5 N: }8 O# X, J
00404C97 8B06 mov eax,dword ptr ds:[esi]
* h% e7 d& w4 t' _' b+ D) r$ @! K00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2; ?! O+ c7 N1 Q5 M1 Z
00404C9D 7D 26 jge short qsr.00404CC5
7 I9 \% l5 T3 I! H) \6 J: {00404C9F 6A 40 push 409 F5 O3 q# |. j2 u# C2 y' {! n: U' O" c
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder", X2 G; O% J3 I# B7 Y
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."$ P! M, H5 @. g& {9 [
00404CAB 8BCD mov ecx,ebp) h: t6 T, ~; P" L1 }* f+ l8 s
00404CAD E8 C3840200 call qsr.0042D175
( {3 k' y( n9 k/ @& N6 z L+ J00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
+ S& R( D0 u! E" V8 y/ D00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
/ s1 F0 [# n( g- O1 [00404CBD 5F pop edi
, ~: l3 o" t4 L# B; y2 _. S: t8 U- ~00404CBE 5E pop esi4 J; c3 W2 d' D8 b( [
00404CBF 5D pop ebp
/ d" F$ c" |2 |- U0 O00404CC0 5B pop ebx6 V1 q) R/ P- j. c3 P# \
00404CC1 83C4 18 add esp,18
7 }+ N, O$ q& u00404CC4 C3 retn- C( T, R) v( w- T
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]8 V9 @- ]- I' C, }5 j: U
00404CC8 84C0 test al,al
- c, r$ x4 P8 A- x00404CCA 0F85 1C010000 jnz qsr.00404DEC( T9 {7 J0 x' g
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 D# l6 Q% }1 b+ x00404CD4 E8 87E3FFFF call qsr.00403060
/ q1 L7 Z/ j9 Z, I' W/ M& N00404CD9 51 push ecx$ N" P( R {7 N' j; P
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
, K4 w! q- r" |4 L" C( j00404CE2 8BCC mov ecx,esp" v* p/ G. i5 |2 r, c' l5 V, e2 L
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
: w- M* Y' j7 `/ X& Y, l00404CE8 56 push esi6 ]. I `+ m8 n9 n' ]
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0- k/ a4 y( M( t0 y7 ^
00404CEE 51 push ecx
# N- N0 o$ `4 g t4 o00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
$ l3 D/ j. z8 M3 E+ j: r7 m2 o, s7 [00404CF4 8BCC mov ecx,esp
! c$ i, c* H, J/ U; j00404CF6 896424 20 mov dword ptr ss:[esp+20],esp2 Q( n" d7 I, a4 H
00404CFA 57 push edi
# A4 x6 Y V) v7 ]' V5 ^2 R ?00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是03 g( y) E6 m, D4 H1 [' C; b9 L
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]4 x0 x$ B) S! y9 a; t7 v9 R
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
. b, ^# _. D! B' K$ w" G00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
! r9 I1 Y. c( J9 m, S$ h00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
5 b( I2 f( K" ?: w& f- j0 \; @00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
8 T6 Y: v- z z; S- ^; Z5 F& @2 A00404D12 6A 40 push 40( b& d4 t1 U. u, v! \7 f, W
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder", s r; l" I( N2 x f3 \, j
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."5 k3 z! @$ o2 ^# \+ t1 w$ h; y
00404D1E 8BCD mov ecx,ebp2 _$ a( j% F- [6 ]; O; S
00404D20 E8 50840200 call qsr.0042D175
1 K5 {6 h% u$ q! P00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 n# `6 M5 o7 \00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-15 o: f$ T6 d1 }8 c. C
00404D31 E8 5AE3FFFF call qsr.00403090/ [8 B7 b6 X, ]0 a
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
. @$ f# S7 V1 a% T00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
+ X$ q1 y( V# ~% L00404D41 5F pop edi9 j, q5 z, [! N: A1 i
00404D42 5E pop esi
3 I# j5 a- A6 a# [' W% Y00404D43 5D pop ebp) O2 u& g! q$ O. s# \+ l: b
00404D44 5B pop ebx. l& N5 V" o9 D8 {# n0 B# i! c: ^, h
00404D45 83C4 18 add esp,18& V d! X; [7 {/ Z
00404D48 C3 retn
" H/ [: [2 ^! e; ]' I; U. }*********************************************************************************************************************************************************
8 T% Z7 G' R4 z Y, V8 r! `5 U跟进00404D09处CALL来到：4 s5 `& [( k) D
004030A0 6A FF push -1 //一路F8下去~~~~
7 f) B( W4 L1 M9 `+ ]- K004030A2 68 C88F4400 push qsr.00448FC8
9 O. f( A) F$ z4 w4 k004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]& G/ I3 O6 P) \ {7 t/ m7 b; \2 |
004030AD 50 push eax
# R+ \( Z/ n9 `) t4 x004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
% ^ c; k& o0 Z2 l8 b004030B5 83EC 24 sub esp,24' L/ U& Y; I; Q( ~, W0 y( H+ k# p# R
004030B8 53 push ebx
: \ g/ C; w8 ?. G% i004030B9 55 push ebp# b8 h6 P* h7 ~7 a0 a" N) f
004030BA 56 push esi" Z) l5 M" [. j/ a5 _! r- S+ x
004030BB 57 push edi
" O8 f) p5 J+ d' [004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
, f5 I1 R! L+ y1 z1 N004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
% q6 U7 r* X( ]( }004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
! z7 L: d) N9 g) @6 d9 @7 p004030CD E8 27C40200 call qsr.0042F4F9+ K9 H0 p( M' X3 i7 V Y
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
3 i) [% H# r% {" G0 N. M% ^004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
% }+ ]" f4 E6 a4 s/ i: G1 C: @004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# {/ v% u* f& o4 w004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 S4 M9 R5 \' H) A* f& V& S; v7 x004030E4 E8 905A0200 call qsr.00428B79
5 p7 Q# L6 Y$ O2 A# `004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]: j& C* \1 y/ ?, h6 m: L4 E/ ?
004030ED E8 3B5A0200 call qsr.00428B2D6 e _: j" O- q$ s
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
5 Z/ ]% w) v _004030F6 E8 7E5A0200 call qsr.00428B79
9 m# @( w" _8 Z5 B004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]6 S1 c! X7 i' L3 I7 }5 |+ ^6 B
004030FF E8 295A0200 call qsr.00428B2D
' { p; y5 c) ]* N00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]$ ^. _+ p9 }" b5 M9 R
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]$ q D8 P+ e5 k! ^" B# m
0040310B 83F8 02 cmp eax,2, Z6 h9 M. r1 Z! e$ h7 J
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳3 O/ g0 L8 q2 `! z' r. \5 v% O
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]: R0 Z6 C2 ]) {' C7 E4 d9 P
00403118 837A F8 18 cmp dword ptr ds:[edx-8],188 @' N3 |" }, U/ a# S5 ?, a! f
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳- `# f! K- C5 R& Y7 |# k+ f
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]( w7 C1 j# Z% J' I( J& c9 u8 h
00403126 6A 01 push 1
/ A+ X; k7 f! ~00403128 50 push eax
2 _ g* ?; E5 ^00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' ~# N/ g5 V- K. \/ j& V
0040312D E8 C4550200 call qsr.004286F6" [* Z& j5 E9 a x+ w. Z: d
00403132 8B00 mov eax,dword ptr ds:[eax]
( T8 a* `1 C$ C& T( p, a9 O, z00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]: F( c2 y7 ]) F# e6 s P
00403138 50 push eax
7 f% H+ g, i" s+ m# g00403139 C64424 40 04 mov byte ptr ss:[esp+40],4$ A4 S/ | b9 y, N# b% ^
0040313E E8 4D560200 call qsr.00428790
6 ^2 q* F4 s: G( m0 Z g$ f/ K00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* X. o$ F7 p/ ]( U5 D, o- S
00403147 8BF0 mov esi,eax/ s6 m9 M) G' Q
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
3 M; g4 n: x5 E; d2 M0040314E E8 38C30200 call qsr.0042F48B P* l# m" d' N1 ]7 ?& I
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
7 |! a8 ?$ J u, O00403156 B9 3E000000 mov ecx,3E- w, \( n, D6 q2 Z
0040315B 99 cdq
& m* S2 b! R( j" T; w+ x& j! H& j0040315C F7F9 idiv ecx) }# R; E! C; H4 W* h6 L' r
0040315E 6A 01 push 16 \- Z) ?/ @( l! {
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]- F5 ]/ s+ @8 n8 ?+ U3 h* b0 ^
00403164 8BF2 mov esi,edx& W2 L: y/ Y$ v' U( U
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34], t9 F0 B5 _$ E) |- Z
0040316A 52 push edx
- H5 a3 v( s- O7 O" c) w8 P$ {2 d0040316B E8 0A550200 call qsr.0042867A
8 w: e0 K- m @. V9 b00403170 8B00 mov eax,dword ptr ds:[eax]
e0 {! b6 e0 @1 X4 N& S00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 \: `' b, A4 }2 U! ?0 n1 b, }
00403176 50 push eax
* Y, U( S* {5 Y00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
" f9 |1 G# T5 c* l8 }; F3 W. f0040317C E8 0F560200 call qsr.00428790
6 _& o- m( y; F2 O1 Z1 I8 F00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- d5 X6 P* r. w# M; l
00403185 8BF8 mov edi,eax) u0 {3 F: O H
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],35 d& j) ^: C) Y) L2 ]" S6 W
0040318C E8 FAC20200 call qsr.0042F48B+ H) B- @% t; _- d+ B; T
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
- W: c1 I$ D* B) _$ T00403194 B9 3E000000 mov ecx,3E
& `$ Z4 H- ]% K00403199 99 cdq& f. c/ N# c( N3 S: e" `4 U
0040319A F7F9 idiv ecx' w4 A3 `. R1 A* O8 x4 U# |
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
7 [$ X0 v \% B# E004031A1 894424 28 mov dword ptr ss:[esp+28],eax' Q% W7 O8 d% ?+ A9 o5 k9 C
004031A5 8BCA mov ecx,edx
6 s2 O9 z& S9 J! h. M/ Q004031A7 894424 24 mov dword ptr ss:[esp+24],eax9 p/ f0 v0 s2 l _1 S4 a( |
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
' S( J% I; Y* b& i$ T8 B' V; o. r2 J004031AF 894424 18 mov dword ptr ss:[esp+18],eax- g( T! ]0 m% T
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
6 m5 J4 _+ { Q5 s3 j0 s004031B7 894424 10 mov dword ptr ss:[esp+10],eax. D3 E' V& H7 K7 K9 F
004031BB 8BC1 mov eax,ecx5 f% \0 m: d3 |, n/ T: z
004031BD BF 0A000000 mov edi,0A
9 T- c# o6 k+ H% [004031C2 99 cdq
8 I- P, ]* I- Z6 ^. ~004031C3 F7FF idiv edi; M+ R- R- B5 L) b: ^, a k& M
004031C5 8BC1 mov eax,ecx
8 U8 Z7 _$ h7 X, R004031C7 B3 0B mov bl,0B
( e7 A* Z3 [$ } T8 W004031C9 0FAFC1 imul eax,ecx1 X( N; ~- A. S9 I6 x8 L7 c/ P
004031CC 8BCF mov ecx,edi
/ i) b! m* p; S0 r& _004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
$ _+ E$ O7 w$ m004031D2 52 push edx/ q6 [, F7 p, S9 L+ [. p* ~
004031D3 99 cdq
* j R6 j- i* \6 }+ I$ T0 L004031D4 F7F9 idiv ecx
, y* D' A3 r/ t8 K3 j5 S004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
6 b( N3 d9 h0 E004031DD 2BC6 sub eax,esi. D4 R1 x5 V, P p5 U
004031DF 52 push edx# I; Y. _! l# m- T2 z w
004031E0 99 cdq, m+ @, x- L# R. B G. E2 B
004031E1 F7F9 idiv ecx: ?; i- _$ j* V+ G- w0 k
004031E3 8BC6 mov eax,esi
1 n" o9 }. }% g$ Z004031E5 52 push edx
' L+ w% f( x# D1 u6 {004031E6 99 cdq X7 e' S& O3 v. l
004031E7 F7F9 idiv ecx, a( @" s# b8 D# M3 E
004031E9 52 push edx
+ v# {! x+ }8 M004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]7 F% n- h4 m/ I7 [8 D; I$ Q' R
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
' I# }0 ~8 x0 W% x1 x9 n8 O004031F3 52 push edx
2 G- U3 `9 e- r% L! a0 a004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48939 I8 g# N7 M3 Y
004031F9 83C4 18 add esp,18% u; U' d5 M5 X. ]+ ^. W1 Z
004031FC 6A 04 push 49 r0 ^1 d) I$ G# g9 t! C" F
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
& p- I+ X' r) |) T9 G00403202 6A 00 push 0/ a6 C' @9 ~. f( b! ^% e6 j; a
00403204 50 push eax0 ?# i: \9 b+ ~' r0 R9 U1 R( R7 G' \
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ G! f6 n; c" B- s00403209 E8 D6530200 call qsr.004285E4- S' {! V5 h+ `7 S; C8 ]
0040320E 50 push eax
. s: p; p, l1 T8 C* Q ?, Q8 e7 L, C0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
/ ?# U& `: o, y3 ^1 w00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
% H% u* C# ~- {6 i" d7 Y5 b1 H00403218 E8 A7C30200 call qsr.0042F5C46 M3 S( A) {+ R! r, V1 S" }! h
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]6 P; M% s1 J; ]: e7 a8 s" [8 C$ v& r
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
1 y& O8 o. \6 |: g4 j3 Y: O# J00403225 E8 61C20200 call qsr.0042F48B
, W+ ^ x7 e3 q. g! d, Y0040322A 6A 04 push 4) r- [: i9 Z3 j) s* K% Z) ?' g
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
+ b* a% k" |8 H8 M6 P* R+ C00403230 6A 05 push 5% h3 d& x Z9 n( e" a0 H: z# i, H
00403232 51 push ecx
+ o& [5 M: g# R& y+ m3 a$ |% g00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]6 N+ E6 c( L- A' J9 M5 I. @. t
00403237 E8 A8530200 call qsr.004285E4+ d; q& I C: P; Q* a, R
0040323C 50 push eax" h% h' B+ P o- F1 B( J
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 U; Y2 N! t4 W1 l00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D/ |. L, ] P! V) ^$ Q
00403246 E8 79C30200 call qsr.0042F5C4
2 g9 N; V' a. t0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
4 h2 T6 j% o% T6 S6 J0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
7 ]" N- q9 |$ x6 }00403253 E8 33C20200 call qsr.0042F48B+ e7 x5 Q; c1 b4 {
00403258 6A 04 push 4
4 [5 h0 o. E \2 X: ]0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
( H& ?# h3 _8 F4 A8 n0040325E 57 push edi0 D" v0 q9 [- ?# W' F, Z
0040325F 52 push edx! b+ E u" t5 N. L. H( ~
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50] ?2 c0 \; O) _: J
00403264 E8 7B530200 call qsr.004285E4
' n; J/ v# P- X3 W00403269 50 push eax
* C) C. O9 V# P! N4 r9 J4 T0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]. Z' T2 m3 n( ~0 c0 j* @* D
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E+ F }1 x/ a2 s& t; U3 W! T
00403273 E8 4CC30200 call qsr.0042F5C49 U7 z9 d8 ~! p0 k- x: ?3 z
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 L+ @& P2 f8 d P( Z9 I" F" Y
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
: h3 I% J+ ]3 S% l00403280 E8 06C20200 call qsr.0042F48B
* E4 c% d, U2 y1 d5 X9 g. `00403285 6A 04 push 4
' V6 J7 V0 Q4 u% e0 f0 X4 ]/ G, D00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
/ G) n" H; x M& p9 ^0 X' E$ u0040328B 6A 0F push 0F2 a9 c$ v: Y2 X7 U; T
0040328D 50 push eax A- X7 @1 X$ M( S% b% j: H( I
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- }8 r; v: B1 y v2 p00403292 E8 4D530200 call qsr.004285E46 P+ Y. E; M8 z1 Q1 _
00403297 50 push eax7 [4 ?; J5 `# u+ K+ }
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
% v3 o, M8 h. v, I8 Y d$ B u0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
$ c" L( J3 J/ I4 v' P3 C. X" B: U/ u004032A1 E8 1EC30200 call qsr.0042F5C4
* U; q' R8 G; `( I$ j004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, n1 I8 o6 x) S$ K) H) l, t# X b7 z004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl" \/ ], H+ h; _0 V+ G
004032AE E8 D8C10200 call qsr.0042F48B6 ~ e' B: K0 \' h* {" S
004032B3 6A 04 push 4' E7 o+ m, e2 x/ K* E
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
3 \1 H# [* f- [004032B9 6A 14 push 146 Q: b& N O* k0 A. p8 A1 R9 E
004032BB 51 push ecx
4 S! [ [4 X# `& Y9 [! _# u004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]7 \# C* s9 p7 |: F8 z( R6 G
004032C0 E8 1F530200 call qsr.004285E4& t5 @+ g( w) b
004032C5 50 push eax/ m* S* i, D8 b O& T7 i9 w- {
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. [; ]$ _& {6 P4 z) y( b004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
0 W/ T# V" z+ t! [+ E+ |' l004032CF E8 F0C20200 call qsr.0042F5C4+ `& |8 e$ [6 p& [
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" G1 S, m6 G; `: r
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
6 n1 v! ^- K4 J. \004032DC E8 AAC10200 call qsr.0042F48B1 x) _1 _6 [+ o9 R
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
2 J' i, T0 R/ \004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
5 m/ {3 e1 N7 P+ d' Y+ c5 ^004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
1 |$ H7 g. Q9 x$ o7 S004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
# V; V( t- t5 s( v/ o; |. M3 J004032ED 8ACA mov cl,dl ; DL送CL- d/ U6 O+ x4 \$ @
004032EF 3AD3 cmp dl,bl ; DL和BL比较 y( Z* W+ m! | d$ k" L0 j0 `4 O
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）0 t" o4 A' G# _/ @
004032F3 84C9 test cl,cl( Q" U* E9 ~9 A* }3 @
004032F5 74 16 je short qsr.0040330D5 u/ X, ^9 P3 G5 `6 u3 |& ?6 g5 g
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL3 t1 l0 e. M9 m& s
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL' K; c1 p4 T0 a, q* P
004032FD 8ACA mov cl,dl* {7 D! I* A& T
004032FF 3AD3 cmp dl,bl ; DL和BL比较! r( n# S9 e( k9 \
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
% d* V, w! r, P& U% t! W3 H9 x+ Y00403303 83C0 02 add eax,2 ; EAX加2
4 s! M% \0 G; T3 n00403306 83C6 02 add esi,2 ; ESI加2/ U, O, U, W, O, K7 w
00403309 84C9 test cl,cl
# V0 J) Q1 r4 H7 {3 [0040330B ^ 75 DC jnz short qsr.004032E9* Q" p# G1 z: X% y% n5 I( U* }: R
0040330D 33C0 xor eax,eax1 D$ O. e6 Z: w- n4 o/ F8 d& G" r
0040330F EB 05 jmp short qsr.00403316
1 L: m O6 K# Z4 G: }! [00403311 1BC0 sbb eax,eax
7 e0 ^0 q+ u8 _9 p00403313 83D8 FF sbb eax,-14 X) m% [0 f5 j6 G
00403316 85C0 test eax,eax
* v0 z0 Y9 b& |/ A/ J" n8 w00403318 74 0E je short qsr.00403328
l$ u+ H" [% L0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A1 ~: z' }! w: f; N8 S7 _
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
1 z, M% w/ {- H& V00403323 E9 F0000000 jmp qsr.00403418
: H i8 e; C7 }" n4 H7 D4 n2 A0 h00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX. t( U6 d- a% [5 S3 {
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 U- p$ t- l I( D j. {* ]: S) D% ?
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
7 e* o2 C2 e' w9 L* C& {00403333 50 push eax
' u6 u, k, h T0 b. l00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
0 M3 w$ k5 d( i: ~- S00403339 50 push eax
& L8 x }( M5 ~& ], e0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
, _* y; _4 H5 o6 r0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
' G I4 ?/ s4 i; L) i2 m' s5 x00403343 83C4 04 add esp,4
/ w% R9 m8 A. K00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI" k, b0 z& U8 ^" r
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]6 d* _3 y6 W7 ~ m( X) v
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
6 t" I' C0 }* l: G/ q7 h0040334F 50 push eax
& ]; E& a3 r0 D+ B# R/ n$ d w# ~00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
' [& q G7 _, g* z, X00403355 50 push eax( I" ?9 O# i0 y2 U1 K
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
- r4 x5 F3 u4 _/ l0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
, D7 x7 q: N2 q4 H0040335F 83C4 04 add esp,4% t# N" d" u( Q* M
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
! r5 L8 r( z+ E- O% K00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
! @7 c; L$ n* h! @) @) k. ]' V1 Q00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]3 U: ^5 R0 I4 d% U* b' ?: O
0040336B 50 push eax
/ K+ R7 I4 d+ Q& }8 A0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
9 b6 C+ a: k% F; C {00403371 50 push eax1 x7 h8 F g/ R1 `- l4 [) w
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
A0 E2 `) u `$ R$ J# h+ N% k9 c00403377 8BD8 mov ebx,eax ; EAX送EBX
# R. X* ?3 D" {00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX3 {- V0 P& Q6 S8 Q. e
0040337D 83C4 04 add esp,46 v, K/ \5 r5 u6 }
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]0 e9 E1 g4 m0 m" m
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]9 j" f; q4 a, I( |7 C. D
00403387 50 push eax
5 b; u1 G+ H$ Y+ v; A# F$ V: y! I00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX. ]! T' p2 P1 X7 ~/ |5 s7 U: V
0040338D 50 push eax; Z$ y7 ` b7 \8 w& }
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX7 p9 Z- a3 \7 F4 L: F
00403393 83C4 04 add esp,4+ l) c, S7 c1 X+ C2 ~5 U5 h$ z9 v
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 _# A- T F+ T1 d6 R6 y% L
0040339A 8BE8 mov ebp,eax ; EAX送EBP
9 P' Q/ N1 Y \, U4 e9 L: g0040339C 6A FF push -1# s! a$ t0 {# O9 j3 a6 J
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX! Y% V: Q, L$ Q( C6 h( ^8 e
004033A3 6A FF push -12 W% b) M& k. F* \4 `/ o! q
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
4 s% L A% s+ ^6 X) A004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
. _3 K& K. ^! j9 D3 _004033AE 6A FF push -1
6 B; H6 H) t. G1 d$ A004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
/ p( v* X0 m( ?: w2 Z004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
; _* m0 g" f! O1 K' E; ?. e( Y004033B9 6A FF push -17 F1 E" c- z v
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
* e- s. w3 J* R4 \$ [0 B: S004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
- W) o; R3 Z$ ^( Y2 I5 L004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX" L# @* E1 z- Y; `" `
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
( }* [; o: x& d) l* u, [/ G004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
2 Q3 @( \4 G: v5 c0 L( z: X004033D7 D1E0 shl eax,1 ; EAX左移1位% q9 r# B: F6 E- Z
004033D9 99 cdq ; EAX扩展* B8 u9 ~+ d# z- M
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
/ h5 ]+ D9 l! Z* ?2 X7 D& n# i9 [004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
- W3 z6 B* W2 O# K004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
: q R, t/ Q; D7 f) ~. ^004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A. Y4 W+ d" T. k; ~, L6 a6 S
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ w1 Z1 o: ]& ^( f/ o004033E9 EB 2D jmp short qsr.00403418
; i1 \8 V. y9 y: z004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
4 V4 H0 z7 p; N1 ^004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
. s( ] K4 B, [004033F7 99 cdq ; EBX扩展
0 C% b$ F) k" e, I# E+ B K' X004033F8 33C2 xor eax,edx ; EAX和EDX取异或
% n3 ]; g& b* Q; E/ o9 M4 w004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX& E' L/ O+ K3 u* Y
004033FF 2BC2 sub eax,edx ; EAX减去EDX$ k3 s9 G) q" V1 J' }' w) d
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
+ o) B b+ m8 i1 x5 j' e00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
+ K/ x4 R9 ?( s/ p00403409 99 cdq
% p0 c4 I4 u1 k0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中$ @, i6 {& ~: ~# @
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
7 a, u; x j) U2 a7 A00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较( t) ^# b3 X( a y2 T
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）* F6 e( {0 C" }8 ` y6 E
00403418 E8 6EC00200 call qsr.0042F48B ; * B" _/ N/ d e) Y
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# P8 o% }1 Q8 _; g00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
6 y- ]( @1 b3 F2 a F00403426 E8 60C00200 call qsr.0042F48B% I$ @3 r6 H1 q. A1 C4 J( ]
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
$ n$ E- H& h3 t- q+ N0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8! V. z f2 g( X! i' |& O
00403434 E8 52C00200 call qsr.0042F48B
( D1 C( [) N& e! _! D00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], w# h$ ?, l+ s; z: ?) _
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
/ R: [8 q$ p& e00403442 E8 44C00200 call qsr.0042F48B
7 x# T+ `" m: E$ j' V H# E00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]# n& k: \6 \ M1 X
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
: ?6 F: q% \( i' \00403450 E8 36C00200 call qsr.0042F48B+ O) c! o8 U8 c8 t
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]$ B! l5 J. I+ l( B9 @) o
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3. M2 t& Q& ~2 l6 @, c1 F; H
0040345E E8 28C00200 call qsr.0042F48B$ R+ H6 ]+ L4 O# ] w, e/ a
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]; T! m: C+ l( Q) z4 |' G& B
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],25 H( ~& s1 z8 N1 q$ Y. y4 ?
0040346C E8 1AC00200 call qsr.0042F48B1 J& w! d' f% P6 [$ p# g
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ b4 B3 T B8 ^- k$ J5 o# I9 ]( ^
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1) M; Q$ Q& H2 W5 l( M3 w4 r! N
0040347A E8 0CC00200 call qsr.0042F48B
) q _5 E& I8 q: S) D0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
1 A' P' w1 _% x/ u00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0/ |* L- y7 d& u% V; A# S
00403488 E8 FEBF0200 call qsr.0042F48B
' }! M, B% g4 }5 W0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]0 Y0 p7 {3 M9 c1 |
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-14 M8 o3 s4 L* s) Z O7 V, C0 O
00403499 E8 EDBF0200 call qsr.0042F48B
6 h( i4 {4 D0 \+ R( S0040349E 32C0 xor al,al ; AL清00 |: s. p% `( i: A1 I. C) a4 |
004034A0 E9 88000000 jmp qsr.0040352D
# p% w6 N% F) Y004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~& _+ z. F! L% [6 e! d
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
- A2 r; I' H% y004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9( I8 c8 _/ g" n$ H4 K
004034B3 E8 D3BF0200 call qsr.0042F48B- k$ a3 R9 N) d1 H7 N2 ]
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
4 H3 r; P. c( _004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],87 }2 r5 g3 a; \' ^6 [! v( N- v& Z
004034C1 E8 C5BF0200 call qsr.0042F48B; P# j* ]. G! T+ x2 ]
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: W- y5 G8 d P3 u+ y
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],77 v7 A& q( A. I4 I( q
004034CF E8 B7BF0200 call qsr.0042F48B1 c5 U3 b+ b8 i2 g9 q
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]: k7 B. l" a5 P- d( F
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
! h& `* b' w5 t i) }! }1 f004034DD E8 A9BF0200 call qsr.0042F48B
+ d$ w' [* H1 I# `004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]$ K6 e; p" I# E) N% @
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3+ t8 x. I+ K) g$ q4 U
004034EB E8 9BBF0200 call qsr.0042F48B
4 d" h6 b' Y- F5 y1 V4 ~; d004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
2 m8 z; }. U+ n" u K004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
) s/ u$ e7 ^$ k. F004034F9 E8 8DBF0200 call qsr.0042F48B
4 M# Y. V W* d: o004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 h- `( w! O. C1 U' R! E
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1, K6 g# C, M4 T- e3 S# f' j8 O
00403507 E8 7FBF0200 call qsr.0042F48B( ]1 n& Q' G+ n& a+ T
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
4 F: [4 z/ _/ l# d) R00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0' B$ O4 `5 v& x2 P/ Z* W4 f
00403515 E8 71BF0200 call qsr.0042F48B
6 o+ \) C3 [( v0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& a9 O" k* ?0 N/ E. E6 g0 n* p: L
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1: u3 R4 {. F; s% O) ^
00403526 E8 60BF0200 call qsr.0042F48B
( {* I% P9 I: @/ N* p3 N0040352B B0 01 mov al,13 c6 w0 G g3 \
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]2 ^7 u9 E1 p1 H7 m0 ~
00403531 5F pop edi
: p+ ^' e* p( N00403532 5E pop esi
) N$ ?( x- {+ x# {4 d00403533 5D pop ebp7 T4 V6 D1 U0 ]$ j3 |1 U- }
00403534 5B pop ebx9 ?5 x$ j) J( V+ {
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
/ ?. u* x8 S0 a) z) y S S$ A0040353C 83C4 30 add esp,309 ~. D8 l, W$ l" \
0040353F C2 0800 retn 8% I3 [3 @1 a& N6 p
--------------------------------------------------------------------------------% ?4 _3 E1 k G! Q' K+ c
【破解总结】' n0 o+ t1 v7 }( B$ e! T: b
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
- w! P! s8 ]% u用户名：yijun
2 J5 I& D. p, E8 y5 v9 t注册码：4893*7777*3726*7777*05294 S* ~9 j; G# i* J. m9 S- G
--------------------------------------------------------------------------------
) `& k! Y$ r |8 l; U" M【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡