|
|
|
【原创】破解Quick Screen Recorder4 R* P4 t8 i+ e4 n" Q
【破解作者】 yijun0 {2 [0 _5 S8 Y' s. D; d' U$ }
【作者邮箱】 [email protected]5 H4 ~' \$ c1 D2 U' B5 v
【使用工具】 OD,PEID
9 i4 C) f+ l& ~3 X K. c' M5 t【破解平台】 WinXP$ l, t) g4 b# c: T1 f
【软件名称】 Quick Screen Recorder4 ~$ I8 X# N; }% q4 J$ H. M- T
【下载地址】 天空
) }5 G% H# y0 O+ M3 A& |0 j1 a【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 4 Q* ~' |8 J1 c
【软件大小】 540K
* }( D/ P. l$ ~ C0 d( ]【加壳方式】 无% V0 X9 }8 T/ l0 e0 q
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
8 H8 |. `2 Y6 r: @7 h4 b--------------------------------------------------------------------------------& a' l4 A* m# P7 l+ s+ {# W
【破解内容】
; Q- E0 \/ z* Y/ R4 C2 S PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
. m* V0 L( ^0 y$ x7 t00404C69 55 push ebp //在此下断0 { j+ U! F$ \! [- F
00404C6A 56 push esi
5 B- ~" q: @' e& ?* c% o1 |00404C6B 57 push edi
1 E9 f& N4 }& r! x* c& z/ H/ g00404C6C 8BE9 mov ebp,ecx
3 Q9 J& ]! G1 }' S) i7 V) H: {00404C6E 6A 01 push 13 n$ k) X D0 H0 r9 v# \
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
4 Q7 v# f3 |% W' y( ]00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
& [6 {; n0 S* F. k' S3 L1 J# F00404C78 8BCF mov ecx,edi
" n& Y7 e; F1 D2 t5 i9 p0 N3 Y- `00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码. X. L% @% p( U6 a7 E6 V* ?- {
00404C7F 8BCF mov ecx,edi3 P5 r! ]; W6 r2 q% _6 r! V
00404C81 E8 A73E0200 call qsr.00428B2D
0 c3 ^: C5 @: H/ K0 E00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]6 j5 y0 V; y2 \# O- Y: H* c
00404C89 8BCE mov ecx,esi8 w3 P5 y2 v$ R
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
0 Z# e: E* a1 L9 ^0 l00404C90 8BCE mov ecx,esi: e# f! Q: d) s
00404C92 E8 963E0200 call qsr.00428B2D
7 T" @+ e2 j) _7 K00404C97 8B06 mov eax,dword ptr ds:[esi]. S; I$ `9 D4 U+ K5 D, E
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
% a5 B0 C% B, I! |! O8 g4 P00404C9D 7D 26 jge short qsr.00404CC5, {8 ?* l9 ^$ M/ R9 G0 x. o8 v
00404C9F 6A 40 push 40
. y8 w# o; y6 n3 J/ w& M00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
. ~" b/ @9 `& f00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
+ I" b" H# j. k( V00404CAB 8BCD mov ecx,ebp
7 H$ u: Y" n" v+ B+ S* [% I00404CAD E8 C3840200 call qsr.0042D1758 d" L2 P" V! S! b o+ y$ p
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
I: n3 v+ t. L) T7 ]3 q9 F/ t- z0 r00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
y+ P3 O0 q7 ` ?3 a; G- m# k7 g. s00404CBD 5F pop edi* l5 W% x' O& T/ ~+ `6 x
00404CBE 5E pop esi
7 \* S' Q' M1 v# W/ }00404CBF 5D pop ebp" _4 C9 g# ?. }* ~ Y
00404CC0 5B pop ebx
n: S0 h! E1 k( F% M3 U00404CC1 83C4 18 add esp,181 G1 f' h' U6 J U) Y9 S8 o0 o
00404CC4 C3 retn
' k. x+ o' `! U, K- i8 k" k00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
1 a! q: |' Z; e( R3 w7 [/ y00404CC8 84C0 test al,al0 C. l7 j9 e, @3 c
00404CCA 0F85 1C010000 jnz qsr.00404DEC
' ~4 S, T: U m5 g9 ]00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
; l! t# Y: ~5 E. R& D00404CD4 E8 87E3FFFF call qsr.004030606 @$ Q& B; v& A' n3 f# E
00404CD9 51 push ecx
, o" c& _. } d/ S' O( Y4 w* g00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0) T2 x! n) ] U! Z
00404CE2 8BCC mov ecx,esp
8 _+ g1 F0 d- \00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
) C7 N- n' F! @$ p. a00404CE8 56 push esi7 e* } {. J+ X N, i4 _& e
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
, P4 m y4 ]% w# i00404CEE 51 push ecx
~0 u: g+ w4 y3 ]# V00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1# c2 e# k: [- F7 `
00404CF4 8BCC mov ecx,esp' Q. n5 r( j* E6 ?* n
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp2 F4 L7 [ @4 e `$ |$ s3 E
00404CFA 57 push edi+ n; U7 a, b5 o* ^& q8 @: }
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
, _+ p. W" e% F% m00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: i6 U% X5 v1 R5 G9 s
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],07 n8 l+ v/ u* N5 `! J. t/ \
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~, Q5 r; D# H6 C9 T4 z, w' i
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
5 x8 a8 ?3 e% [$ V. O; @00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~' g, r3 o, {, y) H: I& Z
00404D12 6A 40 push 40
' P0 s' g/ |3 L1 V. }" `1 q00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"3 s: r) I& ?& G
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
0 A/ q$ |( a* a J' G/ [00404D1E 8BCD mov ecx,ebp
2 A! L4 M) p `6 s4 o/ N00404D20 E8 50840200 call qsr.0042D175: K7 K9 y! G \8 e" c) F
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
8 i7 p+ t' ]9 u' i @& r$ J00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-11 n, x3 I. h9 i7 h
00404D31 E8 5AE3FFFF call qsr.00403090
8 G- Y+ B# s7 _( R) H+ A7 b00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
8 X/ n" _" p2 w# @) e00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx# |2 J* B4 f# _* W' D' I
00404D41 5F pop edi
( k' l9 x: L1 \ h00404D42 5E pop esi4 Z1 n4 e+ I+ J( ^+ w* _0 p& c
00404D43 5D pop ebp
3 t! Y+ ~" a4 i' ~4 i00404D44 5B pop ebx
" e" R3 g& H I0 V3 E1 c" b, z00404D45 83C4 18 add esp,181 k1 x6 p( D% }( ]- d5 F
00404D48 C3 retn. h7 ?* x# W3 C) P: P" B
*********************************************************************************************************************************************************
1 W1 G2 a5 W1 k/ _5 [$ ^跟进00404D09处CALL来到：% C1 o; q2 ~# H- Q" |$ A% |
004030A0 6A FF push -1 //一路F8下去~~~~- A8 a- z- e3 [
004030A2 68 C88F4400 push qsr.00448FC8- W3 q/ B' _4 C1 }& R
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
, F# D' c2 X1 j/ L& J* F1 P; l004030AD 50 push eax
9 V' {) h) x; S4 {004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
; n* i: b! v' F: g0 P; A004030B5 83EC 24 sub esp,24
; I% N6 l; s6 L4 h' Q; q2 s004030B8 53 push ebx
2 ~. ^* V8 `' P5 D; B$ F: ^2 W004030B9 55 push ebp
: A$ J8 H% W* N1 @: m" z& y2 O004030BA 56 push esi, G0 ^9 B5 r( \7 j+ i5 G8 }9 V
004030BB 57 push edi
# K5 E; w) h% J! g% {7 a3 y/ {004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"/ [8 a+ y2 J3 }6 B
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]0 ]! k; o' y! {" K( f8 {: h+ z+ ?
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1& ]! N. ^6 s* L1 X# K/ Q
004030CD E8 27C40200 call qsr.0042F4F96 w# q+ C' H( v% S& a$ E
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
& a& V& \- u. w, b004030D7 894424 2C mov dword ptr ss:[esp+2C],eax; x& B8 K0 O1 ~, K( b6 }
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]. P, P+ ~0 N# \% |% Y
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3 @) J: \; s' h# E$ b# k
004030E4 E8 905A0200 call qsr.00428B79# r+ b. L4 c4 U" e+ c0 R: Z V
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" }2 |% h1 G, J# Z
004030ED E8 3B5A0200 call qsr.00428B2D5 s! u" T2 O3 b* z+ t1 O8 q) R" H, r' G
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# ~, w; g5 u, @$ ~+ r' {004030F6 E8 7E5A0200 call qsr.00428B79* ^3 i* ~0 `! ] G {
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
7 O3 `. K- S7 Y9 u) E004030FF E8 295A0200 call qsr.00428B2D
3 ~6 f# B$ t! e00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]9 v+ E6 i# x& k9 T) @
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
/ _/ `4 T8 N0 S* t: k5 [5 {! \* H0040310B 83F8 02 cmp eax,2
, J7 C+ v* |- V0 ~0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳0 i' s& u0 I4 \7 c+ s3 @' R8 D
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
# h8 c7 b/ A* e1 T% O. Z3 X00403118 837A F8 18 cmp dword ptr ds:[edx-8],180 H& Z9 d! h. q$ I% @& w5 F3 n
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳- Y4 g7 q3 j5 |* |0 _) \
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]( L' j( V8 W4 M9 j# [
00403126 6A 01 push 1
% p( _1 E, L2 u! p I( D00403128 50 push eax
Q8 p7 \ j) r# K00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
0 b/ u2 q0 r# s0040312D E8 C4550200 call qsr.004286F6
/ d2 J8 v# u A5 i' r2 {7 J00403132 8B00 mov eax,dword ptr ds:[eax]% W& d$ I, [1 r: x* p
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
' J% L# l2 y, a8 E00403138 50 push eax1 o6 w% H. z0 L' Y3 V
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
# m: ]9 _% L( N$ ]9 T0040313E E8 4D560200 call qsr.00428790
% c1 m+ [1 u- {0 B) @00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]: H" f% [% p3 Q
00403147 8BF0 mov esi,eax
$ J% t$ y s; s% w" b: U00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3( }, T# F4 u& y) g+ i u6 g- x
0040314E E8 38C30200 call qsr.0042F48B& u% k) H" B1 c
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]9 [8 I4 n3 p! G* ~9 C0 i
00403156 B9 3E000000 mov ecx,3E9 M: C2 H# T* ~5 @! ], t
0040315B 99 cdq
; {/ o! ^ k! W, H7 N" F' v0040315C F7F9 idiv ecx
; l# h. R* X$ Q$ Y0040315E 6A 01 push 1
$ b/ }7 i4 _2 z# Q! g& k& Y00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
9 |# \4 q/ ~) E3 P00403164 8BF2 mov esi,edx, i8 ^# @- Y. e6 |, Q6 R
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]4 M4 d. h6 ?, A5 W% F+ T
0040316A 52 push edx' E5 c$ \: T4 M# |2 ~: V
0040316B E8 0A550200 call qsr.0042867A0 X z2 a+ F# E- K
00403170 8B00 mov eax,dword ptr ds:[eax]
- X4 j% t+ j8 C( I# o: Z; [5 o* ~/ t00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 U4 ]% E6 F! }3 w* n
00403176 50 push eax6 r% f2 v% L& e$ l8 g' v9 Y
00403177 C64424 40 05 mov byte ptr ss:[esp+40],59 _+ f; G: T' r. J/ W
0040317C E8 0F560200 call qsr.00428790
& s6 F+ q% y" G* c8 \00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* G4 q' X6 }# `
00403185 8BF8 mov edi,eax
3 c0 ~ b$ G+ H/ l" h00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3, z) \9 n: ?7 \9 K3 e
0040318C E8 FAC20200 call qsr.0042F48B
) i q: [0 V; f& i: t% s00403191 8D47 0A lea eax,dword ptr ds:[edi+A]' m: h! ], P: x- a
00403194 B9 3E000000 mov ecx,3E6 j6 `; K" U! F4 U# ?1 ]! p
00403199 99 cdq1 z# x1 g: Z; i: n" u: v
0040319A F7F9 idiv ecx/ ^' f$ g$ V) r n/ \2 ]
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]% ^! ]( B" ^4 m2 ^
004031A1 894424 28 mov dword ptr ss:[esp+28],eax+ ?, \. @2 v0 m- o+ m o: N
004031A5 8BCA mov ecx,edx
H/ ^& d$ G1 }3 U8 ~; {/ ^004031A7 894424 24 mov dword ptr ss:[esp+24],eax! i g X* Q4 k) ^. V3 P& q/ [
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax' Q. Z; |1 `8 N2 i0 i7 w/ g
004031AF 894424 18 mov dword ptr ss:[esp+18],eax! Y# a! {, C, d5 O+ N6 i4 V
004031B3 894424 14 mov dword ptr ss:[esp+14],eax6 h% V( d' F* d; n2 `1 T$ a, I. D
004031B7 894424 10 mov dword ptr ss:[esp+10],eax( ^ G6 `( a3 `& r$ p; m- s6 X' K
004031BB 8BC1 mov eax,ecx% S3 N: P- Y2 ^; ~8 V, ?
004031BD BF 0A000000 mov edi,0A
4 t5 U( m6 o* G004031C2 99 cdq3 A5 H; w6 P, V. j5 q$ p
004031C3 F7FF idiv edi
j0 J& K: p$ g& u# c004031C5 8BC1 mov eax,ecx
3 b( i4 H! m& f! }; T2 N004031C7 B3 0B mov bl,0B
5 X- o$ Y; M: H, }1 w: @; g004031C9 0FAFC1 imul eax,ecx; Y/ s+ H" v8 O# [6 G; U6 z; g
004031CC 8BCF mov ecx,edi
3 P% o9 k. ^& F* ^+ b1 X' L004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
" P p$ j1 o+ s! B004031D2 52 push edx6 K9 J7 D+ O4 y# ^! R" k3 g2 r
004031D3 99 cdq, J0 T+ g# B: q+ y- j
004031D4 F7F9 idiv ecx& }. U2 c5 j7 i
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]7 b' {$ B% y% J* L
004031DD 2BC6 sub eax,esi7 x, L p6 ~+ s I( |. I7 v+ P
004031DF 52 push edx+ ?0 ]+ [$ D; o. [, w* P
004031E0 99 cdq
q* Q# o/ e- H+ l# a. T% c004031E1 F7F9 idiv ecx
0 q$ _. w) {! C- g004031E3 8BC6 mov eax,esi8 k, W' _3 m& X5 o4 {2 _& d- e. L
004031E5 52 push edx7 {+ B0 K9 w+ q# K) ^& O t
004031E6 99 cdq
9 _4 r' P3 H7 U8 J& X! D004031E7 F7F9 idiv ecx
3 P* Z( H0 }! V, W* R" @2 j6 t004031E9 52 push edx
7 p3 j. z3 h- {: v+ }- v4 p" x8 a+ ]004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]3 S/ y5 r( G1 }/ F7 t
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"/ B# r% T [( x, N
004031F3 52 push edx
- ~9 F9 ?, @) Q! e0 S5 d004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
* I I8 h9 r$ k- n/ Z5 V004031F9 83C4 18 add esp,18- w4 M) i+ k4 V" u/ N
004031FC 6A 04 push 4
# x+ j- t8 A* Q" Z7 U004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]9 ]8 Q6 j6 ^) a, V V: r/ _
00403202 6A 00 push 0
4 w* b2 u5 H1 B00403204 50 push eax. m' }0 b7 d3 c4 |
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
& B) P3 N& Q |1 C* Z00403209 E8 D6530200 call qsr.004285E42 A) z' Z. x2 Q8 K7 R' h
0040320E 50 push eax
5 S/ u2 y3 G6 K& H; N) m# I0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]. p* ^' d6 b% H
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
& ]! ~; q( g( p; V5 G00403218 E8 A7C30200 call qsr.0042F5C42 J) \$ t- `3 Q0 R2 z4 @, {& E
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]1 C4 k4 V% O% N3 {) r& Y
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl! }( W/ {% }: P( ]& l
00403225 E8 61C20200 call qsr.0042F48B
$ W# @8 ^8 h# b V0040322A 6A 04 push 4
# i1 R2 d, G+ _3 Q, v: j: @0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]. n- P! S9 Y0 B; l+ L) N
00403230 6A 05 push 5: P0 @- r9 V3 |
00403232 51 push ecx
6 n/ E! H7 f5 ~00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 C5 ~" b1 e1 Z$ g5 v1 H00403237 E8 A8530200 call qsr.004285E4
8 B+ h5 T H+ o# [0040323C 50 push eax, y V* ]" L7 h5 D! h* ]% j" r
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
, R# S7 N1 D! h8 k9 K M4 h) f00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
' _) ?. h Y9 ^8 H2 u9 s00403246 E8 79C30200 call qsr.0042F5C4
7 q% _8 p# t% \, n: _0 s6 u) k0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ n' r7 z, y! l5 v2 n; z4 ~( k% ~/ |6 _0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl" E: K) Z5 Y6 Y0 G% ?$ }9 z. r
00403253 E8 33C20200 call qsr.0042F48B
4 |2 Z! w# J- W- u* n# Z% J* ^4 N( P00403258 6A 04 push 4
$ h2 J+ [' N6 S- \# b0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
7 \- ^: y [1 X4 |' ?( n: b0040325E 57 push edi
^0 J( b+ I% v0040325F 52 push edx
2 Y0 N) Y; s1 C' P00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( b6 }7 O/ w4 _
00403264 E8 7B530200 call qsr.004285E4) j4 U( A2 J/ D4 U* x9 M: D
00403269 50 push eax% q0 v& r) r+ i
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]) ]1 d4 u3 Q3 k$ U
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
9 x' m) w5 g% Z" q00403273 E8 4CC30200 call qsr.0042F5C4 T% c8 }1 Q" H! ]7 z' n
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 J" ^) f8 [; J: s0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl) C/ `: R3 {1 _* P3 f' p
00403280 E8 06C20200 call qsr.0042F48B
1 o3 A# ]' o. i2 |! M9 T00403285 6A 04 push 49 M2 T: |9 x$ |4 E6 w5 K/ T5 X
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]/ g' f* P' l) Q( }
0040328B 6A 0F push 0F' T6 c M1 v6 y m, w3 N* z& g
0040328D 50 push eax
- a$ }1 T/ l: E5 \+ P! d4 E0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]8 C" D0 g: G _- @) U! q
00403292 E8 4D530200 call qsr.004285E4
: w8 _# Z1 c: n+ u$ w00403297 50 push eax" O: i1 @% ~$ f9 h1 q2 @3 d
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
" P/ R! x# k3 U' a% A. y0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
1 z% D& {4 }( @004032A1 E8 1EC30200 call qsr.0042F5C4" G4 W: @- b. O# F1 j
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ l, |% m5 H/ L; Q# _! Z. u) P
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
t3 U, `4 k) k% Z( Q7 c( Q004032AE E8 D8C10200 call qsr.0042F48B
/ C/ I! a$ f: v7 z8 |004032B3 6A 04 push 4
4 e& w' r3 N8 V- x004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
0 v$ `; p5 I6 f$ {9 [004032B9 6A 14 push 14! m+ d3 H" T% Y* {2 T
004032BB 51 push ecx
. P- K3 i5 |0 J; s6 E! d# V0 e9 t004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
$ M* L. a: q. p7 @5 a3 h004032C0 E8 1F530200 call qsr.004285E4
' `7 |- n, n) _* w) r6 m* }' M3 o004032C5 50 push eax4 N1 F7 u/ i, V& T; J8 [# s
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. f. v8 q" T: o) i
004032CA C64424 40 10 mov byte ptr ss:[esp+40],104 A0 R) J; d6 v A: \
004032CF E8 F0C20200 call qsr.0042F5C4
( B9 S5 _; A+ y1 K004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 a2 n+ {, o0 ]- v# {! l004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl' ~- s' _( B0 k) K0 s
004032DC E8 AAC10200 call qsr.0042F48B5 j* ^8 d* e: v6 o1 L
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI# M1 H/ u) r: b# \
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
3 E* z1 ?& V/ P9 S4 o' k004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL) h; ?2 ` h2 \! T' X
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
) h- G8 ~! ^1 L6 o& B004032ED 8ACA mov cl,dl ; DL送CL5 ~6 z! y0 O- S! i. o* C- _
004032EF 3AD3 cmp dl,bl ; DL和BL比较
7 G+ J, I# e7 K: c3 h9 |% G004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）1 Z' W t. V4 z
004032F3 84C9 test cl,cl
% A( ?7 k o; \! w. V- J004032F5 74 16 je short qsr.0040330D) e/ E- t$ [# z# T- z9 V
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL' D/ D+ c8 z) a& ?" X: l
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL, f; g9 ~1 J2 i& I( c& Q5 f
004032FD 8ACA mov cl,dl5 K# I# x/ _+ V
004032FF 3AD3 cmp dl,bl ; DL和BL比较% c2 b a) ]7 _ V* G9 Z; w( o4 ?: E: X
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
3 t2 w# c' F0 f& n _' Z) G00403303 83C0 02 add eax,2 ; EAX加2- Q, W$ j: }9 g6 q) G: K
00403306 83C6 02 add esi,2 ; ESI加2% k. p( P3 y) ^
00403309 84C9 test cl,cl
8 H6 k' {/ |- ?5 Y0040330B ^ 75 DC jnz short qsr.004032E97 y9 Q! @" w. B+ q0 z- i7 b
0040330D 33C0 xor eax,eax1 r( [8 N' A. \( U7 T) V
0040330F EB 05 jmp short qsr.00403316
) f W5 h; q% L+ h N2 R: d00403311 1BC0 sbb eax,eax
9 v3 U6 X# Z# r4 F5 P& i' s) U# g00403313 83D8 FF sbb eax,-1- c! I; S5 g- S" {
00403316 85C0 test eax,eax- G( U4 _* Q' H# ^# {
00403318 74 0E je short qsr.004033285 G* _: C" D: z' t) ]) O
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
' k) `7 s( X: |. D% [0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
! {0 n2 D/ y, F" Q; ^2 h00403323 E9 F0000000 jmp qsr.00403418
# B) F8 T3 |3 y; _: `00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX, @% _) _% Z5 t6 i. ~ k. G" u
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* z* L8 X( g8 N5 S% j4 q, U# J+ R
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]. ~0 w% _0 v5 o0 g
00403333 50 push eax
* \: u$ a7 e9 k. e0 q00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX& x( ~+ @) A# @2 a- A& R+ Z
00403339 50 push eax! u3 p+ P' u2 \4 r/ V0 C/ T
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
1 I, V5 [4 d; I7 P, S0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX% A& A; i$ U$ C* ?6 i) q1 v0 K
00403343 83C4 04 add esp,4
4 ~% @4 f& J( C00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
$ U/ f1 l# o$ `* f8 D& V2 R8 H00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
2 _- ^& d% B& U: t0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 D8 L# u/ s0 ?. v0040334F 50 push eax6 @9 f. [* g9 ?' U1 C% R
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX9 R+ Z* [! b' h4 K. V
00403355 50 push eax
: A/ t9 f1 ]* x6 m00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
, A5 ?% N( |# h9 |! \1 d0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
* ?2 C/ Q5 E% J* n0040335F 83C4 04 add esp,4: x* l& E, w0 n- y- f) Q
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI# U8 o- q# i- s2 Y
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ n1 G- P* @' ]
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
% @3 \. z5 d5 D1 s+ w9 {/ r7 D/ I- X* f0040336B 50 push eax
1 P$ Y% G/ D/ D% s( \% C; }0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
$ }0 z& U( \6 _$ O: a: T( r00403371 50 push eax- I4 C2 P/ `1 p$ ^- A
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
+ H: P4 Q1 ~. E' z: r) a O. U00403377 8BD8 mov ebx,eax ; EAX送EBX# ~) V9 X7 j7 h2 m' v& T4 @9 j
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
7 d1 ?& U. R/ M" i7 Y1 M( o7 u- a7 H" S0040337D 83C4 04 add esp,4 ~, ^/ j5 z3 l4 X& ]" M) z
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]$ R" |2 Q6 Q& C4 {* ^
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
0 {3 G; v5 {' l* Q- k0 Z00403387 50 push eax3 y: A2 z# P7 q5 W8 A
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
3 r& q! S4 q* U# E3 {0040338D 50 push eax$ x0 a2 o+ a3 |3 t4 u9 U
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
' }- u: A3 E) |; m00403393 83C4 04 add esp,4: Z y/ B* z' F/ Q. G+ t& J
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( s6 d- A8 Z0 |* C% r S- Q; G0040339A 8BE8 mov ebp,eax ; EAX送EBP
4 R3 ~# R/ n6 w0040339C 6A FF push -1
# N6 e9 M' g2 I* i6 c0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX# D. w0 @; L R8 s6 i" x1 Q
004033A3 6A FF push -1
- J) L& e) \( S, u4 e004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
+ y4 r7 Z, A( D$ {004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
- c! g( d6 v8 Z* I8 S3 t/ |004033AE 6A FF push -1
' z' E) N) ]9 }8 `: O9 I {004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
8 L7 @' |* T# i m w004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
1 S$ k$ l, Q8 ]" z/ p' \004033B9 6A FF push -1; h2 S1 C6 J! n0 u" X W+ m
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX. v, j; S( |( D
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX y% c1 ]8 p x# z
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX8 a) J q4 s3 f8 u5 l
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
' z2 Y/ j; z! ~ z+ y9 @# w004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX) s2 |# y( K% n- }: [& g& c
004033D7 D1E0 shl eax,1 ; EAX左移1位
: {6 @( F+ @; l2 s004033D9 99 cdq ; EAX扩展
& I# F% P* ]5 D; z0 ~; z004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中* g8 ^$ D: r0 v
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较! L; o; K' J( k+ @
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）6 l! v3 W" q7 r
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
& `7 ]/ N( C! X) W2 p* a004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]' x+ ~: j5 P, e2 k; B. E
004033E9 EB 2D jmp short qsr.00403418% V+ @% C6 J/ G( F& z
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
! U- b+ q, n8 K4 T- U004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
7 ^$ ~1 l- ?6 n4 d004033F7 99 cdq ; EBX扩展5 _: k' k* _( @/ D/ h! x+ t
004033F8 33C2 xor eax,edx ; EAX和EDX取异或7 B; ^. t; A5 \
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX$ m, C1 ~3 H5 k9 L# ]$ V5 o
004033FF 2BC2 sub eax,edx ; EAX减去EDX
, S3 D* a! e( @0 R+ A00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
9 i D; Q3 q' C! |: P00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX0 w" Q6 h5 U) V
00403409 99 cdq/ D- K" P8 p3 W' `& ?) n
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
4 [% K3 L w I; q, |8 f0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX: B- q8 t# t7 \. S& D6 \- f
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较7 B7 a) V' I5 h! d; }
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）# c+ q# ?) U. |" B
00403418 E8 6EC00200 call qsr.0042F48B ;
) Z( y# }0 ^/ S# G/ {3 Q- {0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
$ i" k" d5 D- @00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9: j# [' D+ l8 T/ I3 W% e
00403426 E8 60C00200 call qsr.0042F48B9 q; I6 H4 N3 z/ t
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]5 r0 V. s9 {; R& f
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],85 s* i( c/ y. H0 Z3 a3 O! L
00403434 E8 52C00200 call qsr.0042F48B% o# ^: `5 E) y* m/ x
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# c( x/ r( f9 t3 `; T4 S7 _
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7 c# ~3 ]# x; S+ c; K
00403442 E8 44C00200 call qsr.0042F48B. v% M) \/ b" O$ T) ^8 O9 Z
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
7 \" w4 ^1 S0 s% c. U# t0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6/ a6 F0 d2 K0 O2 l- C8 Y- {& I
00403450 E8 36C00200 call qsr.0042F48B
# k8 \5 [& o' l# V+ g00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]" b" u: {5 H3 Y6 `" ^9 h7 b
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],35 I/ U+ @2 r2 r& M' {& z
0040345E E8 28C00200 call qsr.0042F48B( k. u3 c2 x4 L& N1 ^
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]8 w. d( s: W& u' G$ [$ }2 g. F
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2# A; F! b3 Q7 ~4 |8 {+ @# K
0040346C E8 1AC00200 call qsr.0042F48B, P* ~* ^& C! @6 L3 v8 q
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) {6 r! a& p' G$ d
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1& K- Z2 r. q* W9 l
0040347A E8 0CC00200 call qsr.0042F48B
5 x! p* ?$ Y' w5 F3 {0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]; _8 `, m' f; t A2 n( z+ l- T# Q' ~
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
2 B2 ^: p: M3 |0 A00403488 E8 FEBF0200 call qsr.0042F48B
. ?. \7 j+ O6 @" f0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
: C( j% Z& n9 {8 ^+ {$ W00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-11 D' s7 P* D- w4 _& @) X. g. S- L) H
00403499 E8 EDBF0200 call qsr.0042F48B& B" _0 @# U! L4 [" j' Z
0040349E 32C0 xor al,al ; AL清0
4 B( C6 p8 f T8 _004034A0 E9 88000000 jmp qsr.0040352D) S2 J, G" B7 X6 Q" R
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
) Z/ s( m. T4 m8 d0 F004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
( @, s* b! g& Y004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9. t$ F: B# a: O3 ^. u9 a/ E
004034B3 E8 D3BF0200 call qsr.0042F48B
. Q, f, E. n" `8 q# a004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
& |6 y; J! v3 T7 G4 v" [% O004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
# `8 {3 h' k* w* Q004034C1 E8 C5BF0200 call qsr.0042F48B
7 E7 r7 G" U, b) I" p0 ^6 C004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( S9 N- k' X: H& U2 x004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],74 k+ ~8 o( Z! j7 S$ u+ o2 o
004034CF E8 B7BF0200 call qsr.0042F48B
/ T' s# I6 H0 M004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]$ H. {7 {6 _* W* h2 n, M& J9 n
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6( w+ \ E3 v$ y2 ^* N7 y# ]
004034DD E8 A9BF0200 call qsr.0042F48B3 v$ w/ ^- K/ G2 X" |, P
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
- ?+ x. H2 }, Q& `% }4 H8 s004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3- a& Y. W6 Z3 r( b2 a7 w
004034EB E8 9BBF0200 call qsr.0042F48B
; V% X0 O7 b! Z( h004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]* ?' G w5 K8 f( G
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2* H2 \/ u& F8 ^/ Q9 q
004034F9 E8 8DBF0200 call qsr.0042F48B) o- _$ d7 @2 y1 f# ^
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* s+ c2 Q* p' u5 f
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
" N, U' m& @* R00403507 E8 7FBF0200 call qsr.0042F48B
8 }+ d3 i3 P6 ]# ~! t0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
+ L5 @0 l% d w1 S ~00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
$ s! }) G* n% r4 {7 p5 X00403515 E8 71BF0200 call qsr.0042F48B7 y% m0 G+ y. ^7 ]' X T5 n
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
" O6 o) j g4 N0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1$ c# R/ L7 Z' o$ m' [5 \
00403526 E8 60BF0200 call qsr.0042F48B% d" E V7 w7 [1 |) {
0040352B B0 01 mov al,1
, M& S2 q7 H, X) n; a- p* I0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
: D, s; e1 u, @2 O$ f00403531 5F pop edi
6 V4 \7 n, Y$ p8 L! y# z) h( R00403532 5E pop esi
% o8 j% Y. i1 {( g/ b; |00403533 5D pop ebp8 V, [- G0 }( p4 t8 P$ N0 ?
00403534 5B pop ebx7 _: E* d8 i- h% Q
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
+ m! U7 z3 L. \" C: Y0040353C 83C4 30 add esp,30
_9 q6 f) Q C$ p0040353F C2 0800 retn 8( H0 i% o, Z) h. _' o- s4 A5 ~
--------------------------------------------------------------------------------' i6 E4 g6 j$ m4 C3 s+ n1 z2 C
【破解总结】
! K1 l* Y m6 r) h/ F7 } 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^. y6 C" I% R& S- B2 F% ^; i- T
用户名：yijun
1 d- p) Q" v# f7 z$ T注册码：4893*7777*3726*7777*0529
) q6 I! S" ^. y2 x) N) P0 C--------------------------------------------------------------------------------
4 ]* d2 i$ g) j! \9 F1 l5 S【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡