|
|
|
【原创】破解Quick Screen Recorder5 Z: n& G* E" M1 B$ N9 c5 m
【破解作者】 yijun
% g8 X7 W0 q2 X9 c; s s, i# t9 n$ I【作者邮箱】 [email protected]
. ^& G+ c* @7 ` l$ z" X【使用工具】 OD,PEID
6 h2 ?# y, }1 q$ m U; t【破解平台】 WinXP9 U! ]1 H8 s- F* j! F
【软件名称】 Quick Screen Recorder Z0 `! F5 t5 V. Z
【下载地址】 天空
5 w3 k( S3 t9 ~3 u7 Z9 o【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
G; o. Z; D% o【软件大小】 540K* J3 ^2 x( F7 v; i2 l I
【加壳方式】 无. u; g! T# W5 J, I! M* T6 X. j X8 F
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）9 H2 S4 x5 Y5 g$ I- i+ Y( L" M
--------------------------------------------------------------------------------
* \& K6 L e5 V【破解内容】
8 G& e. X. Z5 [# e. ~0 I PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方： [ C* G7 K1 V2 d2 w( ^
00404C69 55 push ebp //在此下断+ N6 F5 [) g$ s1 t
00404C6A 56 push esi; o3 }8 \- p7 _' C' ?* L) i
00404C6B 57 push edi
, I1 O4 s `' m8 O00404C6C 8BE9 mov ebp,ecx! `# W# n' q5 \/ |
00404C6E 6A 01 push 1
6 s$ w, k% K8 a: ]3 w$ g* s5 v00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
- Y7 @" Y" h( T, K0 b( z00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
2 x5 G1 t: o2 K. }, p, h00404C78 8BCF mov ecx,edi) ~2 ]: W5 K- M( L- O0 W
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码5 J( N: c( C/ ^
00404C7F 8BCF mov ecx,edi: v' v/ u7 c8 f+ k$ l' R% O8 T B
00404C81 E8 A73E0200 call qsr.00428B2D
/ ^+ @& \1 Q5 Y0 I t; E/ s4 p00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
" ^: z4 u' @' \1 p/ s00404C89 8BCE mov ecx,esi
5 M7 c, h* m# l' I00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
2 R& b& X% M9 T6 E9 E# |00404C90 8BCE mov ecx,esi
- V- u) Y+ e& ` ~7 M9 w7 w00404C92 E8 963E0200 call qsr.00428B2D M: V2 R" W2 v% V: ?
00404C97 8B06 mov eax,dword ptr ds:[esi]8 D0 ~7 @* ]) H/ i8 S
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
/ I" M1 {: C' P$ U$ s: K00404C9D 7D 26 jge short qsr.00404CC5
Y% ?/ [. @1 A* y00404C9F 6A 40 push 40
5 S9 ~4 ]( [' A1 O6 {00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
4 [, v6 k8 t; ]3 F) l/ }, i; X00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
% a$ A+ g ?" e00404CAB 8BCD mov ecx,ebp
$ X+ `. V, I' U7 L+ G, T: q00404CAD E8 C3840200 call qsr.0042D175( [ J* \9 v$ f! } Y( q
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
; R8 j7 z. C' ~9 ]) g00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx4 R1 D& A5 ^: a U& v
00404CBD 5F pop edi& t! E1 j0 h& G2 [8 ?2 J, K6 R, |
00404CBE 5E pop esi
& M6 P2 N% X/ E; I* y3 e! P1 Q00404CBF 5D pop ebp8 \) |4 M( A+ z
00404CC0 5B pop ebx
. c% U) n! X, A/ @00404CC1 83C4 18 add esp,18
# `+ ?) [& O# S" w7 n& U00404CC4 C3 retn& M; i7 M) Z/ G3 \
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
' ^. h: Q' s- ~0 G00404CC8 84C0 test al,al
2 e* b8 h# M% m/ E, T" b00404CCA 0F85 1C010000 jnz qsr.00404DEC
$ \+ M* g' l. A00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ m1 a' E D4 T( W0 C' D
00404CD4 E8 87E3FFFF call qsr.00403060
6 z* Z* H0 I; E' U$ S00404CD9 51 push ecx2 Q0 Z) i% R* o* q7 M2 B
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
0 Z3 G; q3 j/ ]4 u9 W# t00404CE2 8BCC mov ecx,esp: F9 y; B+ r" W, q9 u0 T
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp) [+ s/ o6 T% t$ |' P
00404CE8 56 push esi
9 f' }: B! _) G! @4 y$ |2 o. E00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是06 S) v7 z% Q& ` r' j
00404CEE 51 push ecx% j4 T1 Q) c! n, ^" D& Q' x
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1! A3 @2 |5 I3 j5 G$ q+ B# G8 E
00404CF4 8BCC mov ecx,esp3 K7 v: l, ^. }2 L5 @
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
1 v# E3 \" O5 S0 }3 p00404CFA 57 push edi
+ c) P0 u3 r. @' S; _* p' o# f00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是02 F. L. r0 A" g2 B$ O# G
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 Y) s7 d: q. v4 A3 x- i
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
) m' S4 @4 M8 B00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
7 f/ T/ k% w7 P5 `: t" y00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
0 f& W! S- N q! X% ~! |+ G00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
, b% ^9 T: o8 r8 n* q00404D12 6A 40 push 403 T$ J' |+ N$ X9 R9 ~6 k5 a
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
& u# H4 {' i' {7 f' w00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again.". k2 S! r; B' I0 Z, R, C! v3 |! o: v5 K
00404D1E 8BCD mov ecx,ebp
; c# Y! _' v4 ^1 m5 m6 \0 V00404D20 E8 50840200 call qsr.0042D175
' e/ Q4 k D& I' Q4 r00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ W- f4 `" W* T+ } G8 Q
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-17 k* o: `' W' Z; N* q7 Q3 ^
00404D31 E8 5AE3FFFF call qsr.00403090
- i2 N9 X8 s0 a0 ~/ y% ^8 [00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
, v+ T: J: z+ @- ?00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx: S* x9 |' W3 n. j3 W" y+ E
00404D41 5F pop edi/ z5 R4 @0 ^6 P* _, T* b
00404D42 5E pop esi7 ]- {, v* y: z3 P9 {# V Y
00404D43 5D pop ebp
6 E4 f% q& L% r7 Y I5 X+ B8 p& L1 ~0 e00404D44 5B pop ebx" N0 E6 m# h8 `) }- j4 x8 y
00404D45 83C4 18 add esp,18
$ |/ ^( g+ `6 _, D00404D48 C3 retn4 Z( J2 [/ Q( Y ^- R+ p# _
*********************************************************************************************************************************************************
8 D& K/ e1 Q9 \; ~跟进00404D09处CALL来到：$ v2 O. d1 \5 ^9 G+ S
004030A0 6A FF push -1 //一路F8下去~~~~
% C5 L/ _! p" V/ \004030A2 68 C88F4400 push qsr.00448FC81 ]0 b' I) e& e& H
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]& D0 V# G" ^. m% ~3 O8 z. C9 D
004030AD 50 push eax) N( \$ s) Q% L
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp X. C: n) d6 Q. {
004030B5 83EC 24 sub esp,24
6 j5 \! J3 M. c& Q; [/ b, ~* M- F( }004030B8 53 push ebx! k6 l# C/ q. X) J# e
004030B9 55 push ebp# M9 q/ H" n5 F4 C' f+ g
004030BA 56 push esi
6 i1 D: f; f8 Y0 ^; j" F$ G/ j004030BB 57 push edi7 H+ s. d$ W$ X" L S% B1 X
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
- Z7 c* `* S, O, \' W+ F& X004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]1 Y, d- L: X3 z% [
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
( F/ m# y2 x- u$ R1 x& H004030CD E8 27C40200 call qsr.0042F4F9
: [" e5 C. h3 s, Z6 v004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]. x. k+ s' U0 d7 F
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
" M5 S% u# N* [004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 i& ~& r% ~- C: S
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
" y& ~& y( K! S7 s" g8 r004030E4 E8 905A0200 call qsr.00428B79; A8 A4 U- I9 Q q5 a( R; t8 \
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]4 U* t2 i" h5 G* _
004030ED E8 3B5A0200 call qsr.00428B2D
, G X/ T2 W$ q5 G004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
/ w( {8 H9 u! S/ k+ H) l8 ~004030F6 E8 7E5A0200 call qsr.00428B79
* b! E) Q& u3 w. O004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! f" K; `! q d004030FF E8 295A0200 call qsr.00428B2D0 {/ I, @9 } q/ x G0 k/ e
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
7 I# o4 L& e' O% S: A) `* z00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]2 U! F& W- Z. y& w4 K$ z
0040310B 83F8 02 cmp eax,2& Z& N: H/ ]2 v [+ f
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳& p0 F) ^3 x0 P {' S
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]8 y6 J7 F: g _1 I. i. N" ]' N
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18" h+ |* ~5 Y# s' j' w! Z
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳( R! V! M. A U" l: Q0 j
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]7 _. x/ y0 X1 h5 B1 B5 f, ]& w
00403126 6A 01 push 1
* e( i9 K. R% U00403128 50 push eax- ~. k1 Z2 s/ P/ I- v8 ~0 }
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]0 y9 U: d% F4 W9 B, _. x( V M
0040312D E8 C4550200 call qsr.004286F6
* ?" e3 F# a; I" C( W6 @00403132 8B00 mov eax,dword ptr ds:[eax]
4 J" J# \2 P; Q: _* g! w00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
0 l3 k! D# _5 ?00403138 50 push eax0 @0 Q$ K5 U6 S+ ?; x
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
& A. ?1 B+ D1 h" H% R6 a0040313E E8 4D560200 call qsr.00428790% [3 N- [" h3 z; x: M6 Q. f
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) g/ r% g8 f; | X& ?
00403147 8BF0 mov esi,eax
0 }1 x- ?6 V9 t) G& q" _00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3' N0 O4 J ~. J6 P* l, g" F- `. A* ^7 u
0040314E E8 38C30200 call qsr.0042F48B( Q- ?% x$ J- N0 f
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
% e% t" k6 W/ L2 o, M00403156 B9 3E000000 mov ecx,3E
2 d! Y% ^1 Y* n8 s/ M( c0040315B 99 cdq6 N/ i& A% x4 \/ x' N3 s
0040315C F7F9 idiv ecx, Y0 R" P( }+ a4 ~
0040315E 6A 01 push 15 s9 ]/ E5 G% k- U5 r. v/ Y
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
: ?- H) Z/ F. q# Y) w00403164 8BF2 mov esi,edx: a( ?* f1 ]0 X8 _0 E5 m6 Y
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]" F5 `0 ]6 b c( l2 ]
0040316A 52 push edx
2 V2 D- s# p7 G. c* J0040316B E8 0A550200 call qsr.0042867A0 o8 ] Z' @; ?8 V% U# a
00403170 8B00 mov eax,dword ptr ds:[eax]
! Q9 w: B+ A8 o6 S2 b3 v8 _00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
* W9 s+ K! C& d8 I. `# ~- e00403176 50 push eax
d% C/ j! i! @00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
+ r+ V! V- N% |- A0040317C E8 0F560200 call qsr.004287909 m( A0 N) P) K, {( k0 m
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
3 ^8 y" T5 v. l. R! d00403185 8BF8 mov edi,eax
5 m. l+ H3 M) f" ^# j) p# n; Q00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],37 E A# \8 [, p+ @4 C# d( {: q
0040318C E8 FAC20200 call qsr.0042F48B
6 e# g2 H! |7 z- \" T x2 U- G00403191 8D47 0A lea eax,dword ptr ds:[edi+A]* i9 j: T: }2 \2 p; S( @+ d* O
00403194 B9 3E000000 mov ecx,3E
7 x- T7 L* ?0 n" ^3 O- c- V1 \3 s00403199 99 cdq
. D% ]& [) e: {8 B0040319A F7F9 idiv ecx
( ^; [+ W7 G. i0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
& Z. h& W7 E: @8 Q2 i! S3 g004031A1 894424 28 mov dword ptr ss:[esp+28],eax
+ x" P7 C0 u# b004031A5 8BCA mov ecx,edx
+ h6 h: z4 j7 \004031A7 894424 24 mov dword ptr ss:[esp+24],eax1 q5 p" \1 m2 Q3 F h
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax! D7 \/ P- F# v9 X6 o& v
004031AF 894424 18 mov dword ptr ss:[esp+18],eax! \) Z( i9 i! F9 c
004031B3 894424 14 mov dword ptr ss:[esp+14],eax% D' g+ i9 y4 r/ p7 W2 n% ~ u
004031B7 894424 10 mov dword ptr ss:[esp+10],eax4 a* e& S% X4 K3 D8 Q
004031BB 8BC1 mov eax,ecx3 d* h! Y c2 k1 y1 [6 r) e+ C
004031BD BF 0A000000 mov edi,0A# R# f/ k, T( o/ m/ U* k
004031C2 99 cdq
i6 h" S5 s7 z004031C3 F7FF idiv edi- u5 _% b: M9 G1 N2 h
004031C5 8BC1 mov eax,ecx
' O8 g4 e- o& b2 T004031C7 B3 0B mov bl,0B- l- `1 Q5 ?4 I1 M) s
004031C9 0FAFC1 imul eax,ecx4 U* v- f3 k" _8 }$ _6 u5 W
004031CC 8BCF mov ecx,edi
9 V; K3 o$ A% p' W: s004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl# `9 u% y+ u4 d$ \ A
004031D2 52 push edx% v, U9 C) p2 \- E+ n
004031D3 99 cdq
# y+ y" Y& D8 m: U$ N; O) T: E2 F+ Y004031D4 F7F9 idiv ecx
- D# l2 w, F" f) H004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
& F }' N8 B, |' h7 s7 m6 V004031DD 2BC6 sub eax,esi
1 V" v. o; R7 t! S004031DF 52 push edx) X+ h& z8 r# W4 Y& X
004031E0 99 cdq$ ^) e' c! L/ a3 s& B; H
004031E1 F7F9 idiv ecx
/ I9 a: p9 `; f004031E3 8BC6 mov eax,esi# q" f; X+ C( i' u( H
004031E5 52 push edx) ?% w3 D4 k5 d. Z* t0 Q
004031E6 99 cdq D0 H! w2 c/ E8 M, |, W) m
004031E7 F7F9 idiv ecx v1 n) f" }! J7 s* ^2 m0 N. [
004031E9 52 push edx9 l! C! i5 d% Y- F6 p
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
" L4 c2 P% M. [004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
% O: p$ \/ h; Y) L1 f( Y004031F3 52 push edx8 l& n* S4 ~! o8 S+ u" _5 `
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893% k4 I! Z: l ?3 o6 z0 M! r+ R
004031F9 83C4 18 add esp,18
. [& p- c% h" ~0 R7 g/ o' a& H004031FC 6A 04 push 49 R* s/ Y3 S# j# X+ h
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
; G3 Z; `% U3 |3 C0 j) Y/ x8 d, T00403202 6A 00 push 0* t5 x9 O D( V' Z% F- J
00403204 50 push eax
4 v( V2 y8 A( q* q; ?00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
$ d* J9 `0 t, P00403209 E8 D6530200 call qsr.004285E4
6 X- U5 D2 v$ Q0040320E 50 push eax
9 r; a# ]! B/ B6 q5 x3 I0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]# }7 w& U' \; b0 s
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
- |& ?8 ^$ P' q- [6 ]4 W00403218 E8 A7C30200 call qsr.0042F5C4
( \3 i. a1 h8 H/ e0 B' J0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 U, E, N7 T; t4 Y6 E00403221 885C24 3C mov byte ptr ss:[esp+3C],bl4 k H1 }( w; s) v7 s! j* j1 [7 x
00403225 E8 61C20200 call qsr.0042F48B
4 B2 p( i! {% Q, `/ M2 F/ z- F0040322A 6A 04 push 4
1 u- ~# i, `/ d* ]) H5 c0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
: F+ K5 ^% K; Y0 B/ h00403230 6A 05 push 5
6 E8 V) n9 F! B. R7 a: ?8 x00403232 51 push ecx( X/ J5 v. v' i; A+ K/ v( p1 F
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]% e" {. y0 E" e2 o5 P+ Y: ~
00403237 E8 A8530200 call qsr.004285E4
( u# n- C( a7 Y. W# |; j0040323C 50 push eax
9 Z( A& T+ A3 P. Y' F0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]% K- B3 f9 B2 J5 v
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D2 [8 E0 n x; r' Z1 t* E1 a
00403246 E8 79C30200 call qsr.0042F5C4
* v3 Z6 g5 [& F* l6 z" E0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& x+ b5 E) ]: }0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
9 Z9 _) M' P- }- c/ [( y. r) h00403253 E8 33C20200 call qsr.0042F48B+ Y- e8 D+ F2 }* p
00403258 6A 04 push 4# W# h) z4 c: ~% k/ L
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]) O* w6 }. Y4 t* d2 S
0040325E 57 push edi
p. m& K! z2 c0040325F 52 push edx: {8 }' g7 _; {- ?/ _
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 d/ c# o( q0 u( U% b* f3 D2 Q00403264 E8 7B530200 call qsr.004285E48 f, ~2 A1 d8 G( x# N; r- M1 \
00403269 50 push eax% _* S0 E4 |0 t2 X% {/ V" l6 V- p
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* J/ {0 t3 K3 m: R3 v( J
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
s' U7 q# A# o5 d& }. P8 Y00403273 E8 4CC30200 call qsr.0042F5C48 ~+ U2 M, N6 s0 q, L; n
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ C2 C& `# M: [* ~6 U
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
4 Z3 j0 u* }" d00403280 E8 06C20200 call qsr.0042F48B
7 x ]5 d; i' A4 s" x1 [/ p h00403285 6A 04 push 4
6 l0 K$ X6 m7 ~00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]7 ^$ V k$ x, g8 A4 L- W6 d
0040328B 6A 0F push 0F L1 `; a( H* L1 a$ S
0040328D 50 push eax, J1 j8 R* b0 b; J3 K
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
. ~+ V9 [% _+ Z& v3 G. w1 ]" J00403292 E8 4D530200 call qsr.004285E47 l: D3 b; h- k f. T" `
00403297 50 push eax
1 {# d% P4 ]5 I/ @2 p( U( D8 C: W00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
- r# N3 F+ {0 ~% M0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
, o! v: x5 [, H8 G1 L004032A1 E8 1EC30200 call qsr.0042F5C46 w2 [3 D. Y; C; A# F% E1 {
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( b7 q/ {9 R! l+ e4 z2 @1 F
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
8 G; P0 g8 k: h& V4 X" I004032AE E8 D8C10200 call qsr.0042F48B% G$ ~8 a! U4 X
004032B3 6A 04 push 4, M5 A4 m1 @) p7 `9 S
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]4 B V4 ?3 q2 E
004032B9 6A 14 push 14- h. R q4 Y7 m1 V8 D" n( K$ i
004032BB 51 push ecx
- c+ d0 I% _7 W, G; W) A- a5 e004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]3 w+ ^- B( Z+ S6 u; J, l
004032C0 E8 1F530200 call qsr.004285E4. q! [9 Z& _9 c8 g( |$ ^. Q
004032C5 50 push eax
4 R. b% d; d# Z, T5 m004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]0 e) |, K9 ?0 K+ Z2 m! c7 ^
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10$ V; H6 _( d$ O
004032CF E8 F0C20200 call qsr.0042F5C4* |1 F2 e2 B' t, @' z/ Q, `3 v
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* S# X4 z, l2 U004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl5 R. R3 ]6 J3 e2 r- h
004032DC E8 AAC10200 call qsr.0042F48B# }6 _6 W; g; y" [
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI6 C. m7 K6 a4 e4 V- }
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
$ |& `. ~# ^& i9 ^+ _0 w004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
% D' J" g7 Z& M004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
7 d/ }. r* J* X2 E8 t' v004032ED 8ACA mov cl,dl ; DL送CL
# L2 I8 ^- F4 M$ o004032EF 3AD3 cmp dl,bl ; DL和BL比较) k. W7 k4 N/ k% V0 M
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）3 Q7 ]' X& R% I3 @
004032F3 84C9 test cl,cl# u- `( F3 C' w' n( C; w; Q; a
004032F5 74 16 je short qsr.0040330D2 y! j' M" _5 C; x
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
/ s) A, b8 s/ Y- t004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL, M, U% l b' P/ L
004032FD 8ACA mov cl,dl
) S e1 q" E- c2 H/ m004032FF 3AD3 cmp dl,bl ; DL和BL比较5 n8 c. Z4 Y" O! a, G, d
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
3 G2 H' f; e) R' {6 U3 `% A00403303 83C0 02 add eax,2 ; EAX加2) n' j! U+ X0 ?1 X
00403306 83C6 02 add esi,2 ; ESI加29 w& A4 y9 k1 A+ E$ d$ R
00403309 84C9 test cl,cl0 g+ l- N8 J8 ^: H( x" D: w
0040330B ^ 75 DC jnz short qsr.004032E9" S3 Q: w/ Z; a: V+ d) F0 i
0040330D 33C0 xor eax,eax
: b8 R4 Y) ]( N0040330F EB 05 jmp short qsr.00403316, C `: n: z/ u7 B" ^9 t8 a
00403311 1BC0 sbb eax,eax% S& |, F6 o; y# p* S
00403313 83D8 FF sbb eax,-1
i- I% L" T g2 V: [$ M00403316 85C0 test eax,eax/ p# R8 L7 J1 X: T0 U
00403318 74 0E je short qsr.00403328
, k" ^2 j, _/ v0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A) X+ Z2 s: q/ f ~/ g! ~
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]) p1 ~2 w! Q9 _$ i7 X" o6 P
00403323 E9 F0000000 jmp qsr.00403418$ W# `" {6 D; y0 x. F& K
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
( q8 Q- j! k/ k5 v7 E8 j% `0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 l6 b O5 O; \0 o! q
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
7 {. w2 b+ C' e00403333 50 push eax" N' q- ?) [8 {( V) I
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
+ T" @- w2 N4 P. I00403339 50 push eax
- x/ o" P; {& r6 `" L0 \0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
: H0 t, _! C+ Y Y. G6 e0 ?0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
6 |; }$ S# e! P& a6 Z/ @00403343 83C4 04 add esp,4$ G5 e5 Z3 C$ c; @
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI. A8 ^0 e6 d" M/ n2 ^
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]* w. K1 @& _- x k/ y
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
6 |. d$ L$ ~/ y7 \/ _0040334F 50 push eax* n9 j/ }( s% h5 K& h s+ M4 Y) }
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX% N, ?( j+ ^7 ]: ~4 G/ l1 y( D4 y
00403355 50 push eax' [+ T5 N8 {/ b5 {7 {$ g/ P @! f
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX0 S$ v: p# F: w5 m# X; T
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
2 x1 Y& U$ d5 g0040335F 83C4 04 add esp,46 ^0 F- J& ?$ L# m% U9 V \7 m6 ?
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
: n7 |% U" ^" \" A; z00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
) Q# {! E `, D! F00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]9 b. G/ N" b; J# c0 v5 U* d3 }1 s
0040336B 50 push eax
, L/ B6 {: E2 \1 M1 ^, c0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
" P* m. |1 R: ?) ]0 p( w! U00403371 50 push eax4 R" V; t* y6 _; R
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
% a0 {4 t6 t- M# d0 s% D- {00403377 8BD8 mov ebx,eax ; EAX送EBX9 E, B# y6 Q6 x* p( E9 u* A
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX; C; E) n# z' X \! E5 z4 W* N
0040337D 83C4 04 add esp,4
) [: d- m8 I6 Y% K4 Y; \00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
p% L( l' U+ Y1 Z2 {6 _00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]! `+ c) |3 d c6 c& \
00403387 50 push eax' ^% n( ]1 G9 y7 Z/ J* U
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
& F3 W: N9 ^3 [1 S p0040338D 50 push eax
& Z8 j# S$ c1 A, v4 {8 c0 ]0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
3 V0 Q- Q) o1 {3 }* T6 x00403393 83C4 04 add esp,4" b* L: |$ @7 n$ J9 z# N) k; K" l
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
4 p3 b$ p3 `8 I0040339A 8BE8 mov ebp,eax ; EAX送EBP4 ], K3 j% Z5 _6 y- G
0040339C 6A FF push -1
6 e, J8 P& N. i9 a5 W0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX& j ^2 q( b) s& {% R
004033A3 6A FF push -1
8 G4 N/ ^1 T9 F. z( R7 P4 f. c004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
% x, ?* ^6 q2 [! n5 o' V! L004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
. t1 E. d, I @+ h o* z004033AE 6A FF push -1; q! S d6 E d4 ^! w6 ~
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
1 L8 X n/ K7 A004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
/ z' ?1 m w9 i4 @2 f004033B9 6A FF push -1
/ p3 w* g( I8 Z6 W7 i: R004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX6 i' |0 v- j6 J& ^; Z! ]; S5 M
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX* l! q+ A# A& r
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX' G0 {1 Y t6 W/ v
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX9 m/ B" Y7 n# ]
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX0 j+ Y% [ h$ b3 L6 C7 x5 h
004033D7 D1E0 shl eax,1 ; EAX左移1位
! g8 ?3 g- Q1 n: e" p W004033D9 99 cdq ; EAX扩展
, w9 `$ n' q+ D004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
( V* a" D8 {, j* l! d! ~004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较, b4 t' M; z# |/ e
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
c/ l- c- _( y! N3 p9 |004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
, u- r; ?, v) ]8 H004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
* `1 X/ D5 w6 r6 w2 D004033E9 EB 2D jmp short qsr.00403418 T; o0 R l- x$ W5 D, E
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX/ E$ j1 ~5 f6 L. S
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
& |" M$ {# p8 K+ Z004033F7 99 cdq ; EBX扩展
3 k. U# D2 C: k004033F8 33C2 xor eax,edx ; EAX和EDX取异或
' j8 i: r1 y4 b) N* ~. ^! _004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX( d, \1 i6 L0 t1 V/ n' h- u X
004033FF 2BC2 sub eax,edx ; EAX减去EDX6 N6 J( P3 r+ A. ~1 v G# o B$ P" t
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]; z* v& E- \" A9 s
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX9 m- {* Q/ ~8 B0 r. c; I3 q! A
00403409 99 cdq. A' G! m* H, D5 z5 U, M/ |$ A8 s- H
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
. |6 X% B$ {+ U0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX6 d; l" d H1 N3 w1 ^
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较5 K0 k; U* G5 G5 w
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）% R9 Q5 u2 b# g0 o6 U3 i
00403418 E8 6EC00200 call qsr.0042F48B ; p& h" c: z) _" R1 C+ J
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]6 f+ O1 s* n8 k' o8 g
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],94 }( ]5 V2 }. \- v* J; ^5 R- T
00403426 E8 60C00200 call qsr.0042F48B
9 I- c( M% S) T( g. z% J$ n; R" D0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 u$ T \1 A) ]' W5 c0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8, i. _( X( }+ B* ?5 R% P
00403434 E8 52C00200 call qsr.0042F48B( `: f, ?0 t6 s2 \* D8 a
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 h1 D" L# O( x6 |) r0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
- Y& M @. R, g- b( T$ t7 j" h9 ]& e00403442 E8 44C00200 call qsr.0042F48B
$ W4 t* |% @( B3 Z, A5 H, b00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
: m( I7 p+ O3 H7 I: X$ u: d0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6) M1 K! [. D/ d' [ a3 `
00403450 E8 36C00200 call qsr.0042F48B
# t: `2 K1 k% x! n+ H00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
0 n1 a2 }' M) n8 Q9 j00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],31 D R6 r" m/ l8 E. c
0040345E E8 28C00200 call qsr.0042F48B2 b) a! n! C5 v2 P+ n, j% F
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
: @$ o' b9 C0 A4 [, E. v00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],26 k( n9 w- U5 }+ l7 l
0040346C E8 1AC00200 call qsr.0042F48B, M3 b- ^6 k9 A* D+ o9 D
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
0 [; n0 k1 D/ O( Y, n6 H/ y00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1- d* u' F9 [& M% g4 A
0040347A E8 0CC00200 call qsr.0042F48B) N m) j5 w; S. [
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]2 T- Z5 K* [, J4 D( D" N
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
0 P! I* N/ o0 o0 t; C7 c3 O5 Z6 I00403488 E8 FEBF0200 call qsr.0042F48B! |. N) q9 d; L u
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
5 E/ p" j2 K. L: q, T00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-17 H; m8 f+ m' @) k- O$ r
00403499 E8 EDBF0200 call qsr.0042F48B5 s" [: l* U* t
0040349E 32C0 xor al,al ; AL清0' Q* u, D4 f6 s1 s1 D( r
004034A0 E9 88000000 jmp qsr.0040352D. U) H! {* T- ^. b0 ?+ K8 B
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
" \% @$ J+ a3 N8 h- U004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 i! V6 q: m# N- J$ |- B B' i4 ^* A
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],92 }7 v, O# F* q3 s) Q
004034B3 E8 D3BF0200 call qsr.0042F48B
m+ X2 m/ `3 z5 b, V' U004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
/ A& L! Z0 u; {004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8- Y1 k0 h. L* Q1 r) N$ g( s; V
004034C1 E8 C5BF0200 call qsr.0042F48B
7 e+ x- x+ l0 i! M2 i/ n5 t004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
. A- f# k4 }' A' K) L004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7+ P' b* T$ l3 z! r; E% [8 m
004034CF E8 B7BF0200 call qsr.0042F48B9 y4 r$ V- F8 @+ B- U3 f
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]: ?) n% `- o, M9 T' F( r& \( w
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
# q0 W7 i: F8 Z- o& u! O V' u6 b004034DD E8 A9BF0200 call qsr.0042F48B" T! F$ i& T- L6 H' H
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
' A' E- k! X& N7 S004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3* G0 T" ^5 ^$ f6 j: V$ V2 G
004034EB E8 9BBF0200 call qsr.0042F48B
2 Y, \& u1 ? L0 |004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
# k3 ^$ [4 ]1 M. R& C1 `004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
3 O. c& ^9 v8 C7 N004034F9 E8 8DBF0200 call qsr.0042F48B% t% m ~; b0 l
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20] _* k2 M$ L8 k6 m- X
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
. z% t, l7 Y& O' r9 Q; j00403507 E8 7FBF0200 call qsr.0042F48B
9 `/ [4 L7 k: L0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]! w4 E( M7 l, s& O6 v: K. c' k
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
( v/ M2 W3 ]5 n( g. [( m5 R$ P00403515 E8 71BF0200 call qsr.0042F48B% g4 H5 Z* b0 \; ]! t) ]5 e
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
5 h7 _5 \& l( O+ b: K8 c0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
) Z" E0 e0 E1 b00403526 E8 60BF0200 call qsr.0042F48B4 y2 B$ m. Q3 |
0040352B B0 01 mov al,1. N/ L3 C, W" p8 t6 z- X
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]; `! ^3 Q L; |+ a |! O i$ x
00403531 5F pop edi! M( @4 \& [6 s. |: \6 s+ E
00403532 5E pop esi
) ^) ~& ?$ W3 l8 O, s! |) e2 t00403533 5D pop ebp
7 c) @3 D1 O0 R$ H& r E00403534 5B pop ebx" N& Q: f k0 E# [' e4 t: O) n
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
% l6 i8 B! T3 Y0 @0040353C 83C4 30 add esp,30
" a1 H1 n% _" @9 C, E1 Y0040353F C2 0800 retn 89 N- n1 J+ P7 n! b: X- P; D( a" G) m& w
--------------------------------------------------------------------------------* X9 \% P( l# p7 @0 s
【破解总结】3 f- O' h& Y; T3 C# l: m
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^, R, ^/ Q2 t j
用户名：yijun
1 X3 H5 ?3 |1 V& I$ y注册码：4893*7777*3726*7777*05296 r% O- r9 r) `
--------------------------------------------------------------------------------
- l- G- k8 j. Z' {6 o5 T6 x4 }* E9 c【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡