|
|
|
【原创】破解Quick Screen Recorder
8 J3 N" t, T& R【破解作者】 yijun* c! b8 R# E) I. m/ W
【作者邮箱】 [email protected]
! s# n5 E; `& `5 c【使用工具】 OD,PEID
( _* D6 J7 j) U; [ n8 h【破解平台】 WinXP
8 j2 U: ?$ S, v) X1 j" u( u【软件名称】 Quick Screen Recorder: g; j9 m: T" d( j
【下载地址】 天空3 b* `1 ^$ ^$ K0 u7 M
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. ) y! _, v: E1 u2 S1 J5 h
【软件大小】 540K6 V; W/ j$ u0 L, e$ Q! k% Y
【加壳方式】 无
1 B6 t& G: @# P8 C: O# X6 _【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）7 a" z' h7 z+ k- }% N/ `* F
--------------------------------------------------------------------------------
' I* ?0 ]2 y5 r% K a【破解内容】3 c% `* V1 P/ K0 ]- d% ^
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：0 P! S/ U+ a* w& [
00404C69 55 push ebp //在此下断+ X0 _+ h( K; m! f
00404C6A 56 push esi8 G6 t6 i* g% q; A
00404C6B 57 push edi L$ K/ R, \) o x
00404C6C 8BE9 mov ebp,ecx0 W; A) D$ ~8 f \1 l
00404C6E 6A 01 push 1
* l' t) Z* D, A' A2 Q- \$ f00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
+ O8 J7 z4 a4 i6 c00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]+ X; a2 Y. q7 F- O% `) Z
00404C78 8BCF mov ecx,edi
' P3 r1 P) S$ o V: }00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
3 F6 [6 t4 {: p O00404C7F 8BCF mov ecx,edi
- F$ ], x2 ~2 M8 G& U2 E00404C81 E8 A73E0200 call qsr.00428B2D
6 w2 A: m2 \* a3 W. c o( l00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64], l N, b6 O1 N& t. m6 |
00404C89 8BCE mov ecx,esi
. \/ [2 m; R8 P9 B6 \6 c00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
2 Z0 h+ U7 i" ]0 H3 L# N00404C90 8BCE mov ecx,esi0 N9 h$ [. b& c6 z) f$ ]
00404C92 E8 963E0200 call qsr.00428B2D5 l1 X2 U( S7 L
00404C97 8B06 mov eax,dword ptr ds:[esi]. q6 p# z2 u* ?" E, h/ Y+ u1 H/ a
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2& f& z8 M$ f- R2 x: F3 G
00404C9D 7D 26 jge short qsr.00404CC5" m- c* T, P; T
00404C9F 6A 40 push 40* o; a# Y; m0 W1 H8 h
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
5 y( x8 i8 _ K3 k6 r2 C00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
: u6 x) \/ t, y' l# W0 r% t00404CAB 8BCD mov ecx,ebp
! u) M' y _" l- ?/ I00404CAD E8 C3840200 call qsr.0042D175
3 c% e# h# T" U% A00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
4 g$ N' W, ?5 ?: z% _3 @00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx8 V: e. C. V L4 L/ m
00404CBD 5F pop edi
+ O% q1 t0 b% Q00404CBE 5E pop esi* i( x' `2 y8 j
00404CBF 5D pop ebp8 {( O# w7 ?, r" S1 c) U5 A# _
00404CC0 5B pop ebx
; \2 A8 o! f4 U( n00404CC1 83C4 18 add esp,18/ B4 Q5 D. r# q7 w- P3 J
00404CC4 C3 retn3 b) C- P) \7 `' t8 `5 {9 ]: A
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]8 l+ ?' ]9 q8 Y9 P) ~
00404CC8 84C0 test al,al8 ^( V t' f' }0 K2 C2 ]; R
00404CCA 0F85 1C010000 jnz qsr.00404DEC
' a8 I+ _& Z! u0 V8 \( g) F00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]) L! t/ Y# ?) h! ^% |
00404CD4 E8 87E3FFFF call qsr.00403060
. W M# X8 Z4 K, y00404CD9 51 push ecx. j8 d/ ^3 t8 x3 e
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0- j9 e/ R: V `. V) z& C' `
00404CE2 8BCC mov ecx,esp6 c2 n, D2 _& |6 _. k* L
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
, F+ k& F# o- H, D1 ~6 y00404CE8 56 push esi+ M( H" X: |" F
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
0 Z2 p7 @1 Q" j5 n. I) {3 d% C- X00404CEE 51 push ecx, ~0 l# ?; T- {% S
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],11 F, I- s: R, _! c$ D
00404CF4 8BCC mov ecx,esp* F/ W8 ]* |4 H. N- [2 G z( U7 p# m* a
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
0 }8 H2 n( f6 `" ~4 X00404CFA 57 push edi; B6 M# M' J, H# S* T
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0( k; V" U! k' a- {1 ?2 c) c- @
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
3 O3 m* @7 H, Z ]00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0+ B b* u/ S4 |$ r4 X) h- w
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
' Q* e3 n' p. l+ f6 u/ Q. `: Q00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
* E/ a& [- S; U# }7 @1 S00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
" @' e6 h ~* r00404D12 6A 40 push 40
Y( F2 g4 U6 b b/ |00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
! T6 e8 _ t5 V Z: A9 d00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
* W: w# H# |& Q5 I. k00404D1E 8BCD mov ecx,ebp
7 i5 v1 P: {3 M6 m$ h% j00404D20 E8 50840200 call qsr.0042D175
, d, g- Z* m- N7 A00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 Z& B3 [$ \# h9 f6 C' r00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1( P' X) Z( R I9 ~5 ?
00404D31 E8 5AE3FFFF call qsr.00403090
0 \9 r" a& V8 `: O00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] j4 r. T8 g4 h9 n5 Y. U( @" Q
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx \' k# w1 A! |9 d4 c: J
00404D41 5F pop edi* t1 m# I) M9 ?; M2 i+ B# }1 n
00404D42 5E pop esi4 T' H. W5 e, ~* ?2 q) ?
00404D43 5D pop ebp) J% V- h& k# W& |% d
00404D44 5B pop ebx
) j& J/ x/ G* g00404D45 83C4 18 add esp,18
! ?' S; @ \) H: n- ~00404D48 C3 retn" w& F" }8 `* m& _
*********************************************************************************************************************************************************
( R" i+ x& F- g3 k5 T% c跟进00404D09处CALL来到：
. t7 h# ~9 H! x0 U6 e7 l/ t004030A0 6A FF push -1 //一路F8下去~~~~6 N8 x4 W( W! W, b0 O
004030A2 68 C88F4400 push qsr.00448FC8
$ G" `5 X9 E3 U5 h& R" q004030A7 64:A1 00000000 mov eax,dword ptr fs:[0], T3 r$ M2 o6 E; t4 u4 u
004030AD 50 push eax
4 ]% O0 j6 _8 \( O0 L004030AE 64:8925 0000000>mov dword ptr fs:[0],esp& F+ U; _1 |: X2 C( M5 n& Q
004030B5 83EC 24 sub esp,248 {" d9 ?) Q/ I/ R4 I
004030B8 53 push ebx
$ x& C' N- h! ^2 s004030B9 55 push ebp
1 H; S! h" b% Y+ R004030BA 56 push esi
0 ?* l# I7 _ X% A$ i004030BB 57 push edi$ O3 ^+ o, \9 M
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
0 U! g3 y: d$ r- J& A% I004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
4 W% X5 z& d% W004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
4 Q* p8 I; u2 G3 R7 Z" \6 n004030CD E8 27C40200 call qsr.0042F4F9+ R7 [( J) o: |) }5 L2 J0 n. E6 G
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]( I5 ]- E7 o7 k8 T# {4 c) H
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax! ?1 m8 `9 f) `6 `
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
# w& g4 q, {8 } B$ U' W1 x7 A3 C004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
: a: s" R3 m- w3 x004030E4 E8 905A0200 call qsr.00428B79* S, ~) X2 {3 N0 ~
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 f) s/ i# X- u
004030ED E8 3B5A0200 call qsr.00428B2D2 @; M% e- [4 @9 }
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]7 r" M" n* B& N# l7 J3 F
004030F6 E8 7E5A0200 call qsr.00428B79/ i" N) j p- E% ]( W
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: y }) w+ l; ]$ c' v o# @ U
004030FF E8 295A0200 call qsr.00428B2D# P$ m4 s. W& h/ _% x9 g
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
; u6 p- v' B" d1 y5 {* C8 S1 u! `$ e8 F" i00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]4 `2 |9 E% O) D; X% ~! W
0040310B 83F8 02 cmp eax,2
9 ~- p( D% V/ Y7 U3 |0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳5 c5 [4 s5 B6 {- B9 g
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
- ^) y. v7 g2 c; N+ }* U( q+ G! ~00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
) E8 }5 ]2 T2 Z" X% [- j* _0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳( a" P) n# l9 y5 o
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
0 J# U5 X2 @5 f: ?3 q+ h9 R00403126 6A 01 push 1
' A. V/ i- m6 k2 o+ ]$ M00403128 50 push eax
* q2 a- j7 Y/ L8 H" Q00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: E8 E5 |7 r4 Y( y5 X0 e
0040312D E8 C4550200 call qsr.004286F6
' t& X* i0 r& m: m% x00403132 8B00 mov eax,dword ptr ds:[eax]. w+ P3 j2 f) Q" t+ Y
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
" R5 M# A& |( A' G00403138 50 push eax
& I" q% L8 b2 m1 s& b" m00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
$ z2 j( _5 m' ~- R" @. w, V' |0040313E E8 4D560200 call qsr.00428790$ S: f b/ J8 W E
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]4 a# T! A6 ~7 K) l' n; |8 K% y+ R
00403147 8BF0 mov esi,eax
7 j8 ?+ d r3 [9 w, L1 @; d00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
; L9 e' l9 ~6 c0040314E E8 38C30200 call qsr.0042F48B5 z( \4 q8 a! ~$ C
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]3 Y ?, K3 g% {2 E9 Z3 U
00403156 B9 3E000000 mov ecx,3E
/ B2 K4 C: j3 C( a2 E; k9 x0040315B 99 cdq/ O0 g2 m+ {% h6 q" D
0040315C F7F9 idiv ecx
' F/ h6 O+ F* O: ]0040315E 6A 01 push 1
4 I0 h" N+ N; g! j' A00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
2 r0 Y) j' ]2 i4 a8 A. K5 S3 x. S# I00403164 8BF2 mov esi,edx! b$ v6 e( y5 m, I2 T0 z
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]5 N' I- `( |" q3 }0 s) H' L
0040316A 52 push edx2 h3 q& u& e1 e9 v
0040316B E8 0A550200 call qsr.0042867A
d3 t1 ^" w9 D' J! c% U00403170 8B00 mov eax,dword ptr ds:[eax]
5 r6 o8 m2 r; L00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]# P& f* g* P5 s% q* \
00403176 50 push eax, U: F1 B/ J/ }+ G d0 ~, D" J
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5& E' n: d1 R/ w+ _2 |
0040317C E8 0F560200 call qsr.004287904 m' l) |' R, o) ?
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30] _2 B) l; \# Q p% }! M0 n
00403185 8BF8 mov edi,eax
, ]8 h, P6 N1 f& S; d v8 B' V00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3' G" L) L7 T% |, W
0040318C E8 FAC20200 call qsr.0042F48B6 \: r* L) D) F* s! x1 [( K6 ~: K
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]2 e% X3 R' }; G X' P3 b" m: r2 d& a* Z
00403194 B9 3E000000 mov ecx,3E4 J |) L8 X# I! I& ~
00403199 99 cdq
+ S0 [: |* V, ^; }+ b8 d0040319A F7F9 idiv ecx1 b! {2 |# U j7 y- W
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]& T8 R6 O' L) R- P1 Y
004031A1 894424 28 mov dword ptr ss:[esp+28],eax9 {9 e% w+ f- i+ X( z$ T" J V( k
004031A5 8BCA mov ecx,edx
! G4 M# Q$ O7 O1 y+ i7 A$ P8 C004031A7 894424 24 mov dword ptr ss:[esp+24],eax4 r+ j/ Z" d1 S& [: i% z
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
* u) _- F6 l+ G: d" c4 O5 X004031AF 894424 18 mov dword ptr ss:[esp+18],eax7 W3 Z6 K8 O/ ^* c1 ^" j* W
004031B3 894424 14 mov dword ptr ss:[esp+14],eax. n$ }! X, v0 X1 Z& P$ }
004031B7 894424 10 mov dword ptr ss:[esp+10],eax" s5 S. G6 G* K+ r- @# }
004031BB 8BC1 mov eax,ecx5 ~( h5 q4 P. ~9 z1 v
004031BD BF 0A000000 mov edi,0A
. E1 ]% |( [! R/ f& G0 e9 k004031C2 99 cdq* H5 _# J3 A1 z8 G
004031C3 F7FF idiv edi5 C2 @ u6 A+ `, h
004031C5 8BC1 mov eax,ecx
1 x6 R; H/ [5 V+ Y: U/ l004031C7 B3 0B mov bl,0B
+ b) S, \( y- N6 i# w$ E004031C9 0FAFC1 imul eax,ecx( n% n. ?$ K* P$ v
004031CC 8BCF mov ecx,edi
+ s# X+ g9 V% R/ z9 A2 A004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
1 Y- f$ \6 }, e) _, X004031D2 52 push edx
0 l3 w+ h& J n6 {4 i004031D3 99 cdq0 g; s/ w/ L1 Z: A' P- L6 w
004031D4 F7F9 idiv ecx6 r3 z5 j. d* ?2 `7 J
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
; e/ c+ q3 D" r% t+ ?/ t004031DD 2BC6 sub eax,esi
' z4 y' v9 Z' N004031DF 52 push edx$ o' f4 [5 B5 ^2 @( q
004031E0 99 cdq5 U3 c. S# @5 @! G3 L
004031E1 F7F9 idiv ecx
7 _/ x$ `3 b: l: N9 F. |004031E3 8BC6 mov eax,esi
7 t9 x) X7 y. T2 k004031E5 52 push edx
0 Z4 n' [0 e- F5 \004031E6 99 cdq+ i& E+ v" @% L; V: N
004031E7 F7F9 idiv ecx7 N/ A9 W. d( {% W
004031E9 52 push edx
. H- }. U+ z; _' B" M% E004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
* y. f: r" \2 b004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
4 R5 W* s3 w3 j9 ] P' A004031F3 52 push edx; }) F% M0 N+ E) |: n% ]1 B
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893& L5 D# _5 {: s( X" x; L
004031F9 83C4 18 add esp,18
6 e o1 y' R; x+ n7 D6 l! G004031FC 6A 04 push 4
4 P% Z& e" z8 k$ Y8 h7 C004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]/ k; R2 v3 {/ L
00403202 6A 00 push 0
0 L; ~- M; h' S& v6 }9 {00403204 50 push eax( [: c5 t* e8 P) s
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]% j2 G6 h( R$ c, @2 t3 q
00403209 E8 D6530200 call qsr.004285E4" x8 M( R! G6 R/ R( O" N
0040320E 50 push eax8 F' _* l% K9 {- J, @1 T
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28] S/ e$ U2 C1 x9 O7 m; P) L
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C4 B! r7 l1 T! e0 h6 M
00403218 E8 A7C30200 call qsr.0042F5C4# i8 ?, a* ^3 ?
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# {: k7 U3 k% r
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl$ z. U1 l. x' j$ \& s
00403225 E8 61C20200 call qsr.0042F48B$ }. X8 |0 p6 g2 Q4 y. ^
0040322A 6A 04 push 4" |' t! D* z) E
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
4 I! n5 G+ D+ o8 R) T00403230 6A 05 push 5; X. \7 t/ X1 W1 A
00403232 51 push ecx
1 u- r- e& D% u+ b( J, o00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
6 z# G% R9 x; d/ U2 p00403237 E8 A8530200 call qsr.004285E45 r1 c& \: K2 @4 P
0040323C 50 push eax
! u( K( x( h, g' V, S0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
% @, J7 H4 d# j" y7 R( x' [2 Y00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
4 {( T& O. ^. X7 ]* I00403246 E8 79C30200 call qsr.0042F5C4
: y- Z) L2 h+ Z2 f0 }0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' ~5 T7 e z* S" l: @7 f' F0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
; F, U0 E( B6 A- K00403253 E8 33C20200 call qsr.0042F48B
6 `$ u8 f: c9 |! M3 C, m# n' v00403258 6A 04 push 4- u/ N9 e8 R: g6 C8 U
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]2 {. H5 ?% q) ?6 w9 ^
0040325E 57 push edi
7 G; y: |' v# u5 ~9 \0040325F 52 push edx% S1 E/ Z! Y+ e. J& f0 d
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: V, \8 _& o9 B00403264 E8 7B530200 call qsr.004285E4* b2 u' }6 D+ |# v2 C1 f
00403269 50 push eax
. ^- n7 \: D( ^ a- J% C+ u0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 j( f+ A, y$ C! X: x
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E" s9 i( Z3 n+ X6 @
00403273 E8 4CC30200 call qsr.0042F5C4
3 @/ b! D$ k3 J1 f3 e& A$ A00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
3 m$ R* p9 |; c0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl# t; f- A, X5 X# D8 W5 k# S
00403280 E8 06C20200 call qsr.0042F48B
! S, x1 x. W i. i00403285 6A 04 push 4: G0 E1 Y5 j7 w9 V+ o
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
6 ~/ P1 `; ?0 j0040328B 6A 0F push 0F
7 O9 y0 g! s1 m' \# {0040328D 50 push eax
: v4 Z' e. ^$ s- x0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]- g) ?4 l; x( Z Z6 J. r
00403292 E8 4D530200 call qsr.004285E4
5 ~ E& |& d! C+ X) Z) O00403297 50 push eax
9 |2 k$ c o, \" {00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
8 O) p2 P; c7 \% [) Z$ G2 u0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
2 ]+ s4 U% v" a& P( ]" Q004032A1 E8 1EC30200 call qsr.0042F5C4" R& O {" k; O1 \8 L8 V/ n8 n" p
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) K0 R+ I# T6 d! i7 W' A; _
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
1 C9 C5 U6 N0 `/ G6 k& ~004032AE E8 D8C10200 call qsr.0042F48B( e7 u1 } w8 T; B
004032B3 6A 04 push 4
! N0 Q+ w1 k) {2 s3 q" b2 V d004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]) ]* T% z4 q. ~; s; @
004032B9 6A 14 push 14/ z9 E$ C% g' l
004032BB 51 push ecx: N9 S0 J2 H% m3 \
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
/ l% M, B3 L4 l# L$ ?004032C0 E8 1F530200 call qsr.004285E4
# G8 r) L4 |1 M) }/ Z/ [# d% B3 F& m004032C5 50 push eax
4 j% X' h: r; l004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]) q1 ~( g+ J1 ^' E5 I4 Q! p6 Z
004032CA C64424 40 10 mov byte ptr ss:[esp+40],102 ]! \) ~! U" R8 q" ^# e* [
004032CF E8 F0C20200 call qsr.0042F5C4! J- Q% ~: A. s# |
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' o# p) N) q+ L N9 n004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
0 s: F8 ]- O* @004032DC E8 AAC10200 call qsr.0042F48B
3 }. I& N/ Y) Q$ E004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
% b0 Z& F0 q! Z004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX( S6 n! P8 M% e' b) ]
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL8 }7 S5 C* O, i( K! z
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL/ y+ B6 @8 [9 N) a `
004032ED 8ACA mov cl,dl ; DL送CL' w5 _2 Z6 T- @5 {1 q5 q
004032EF 3AD3 cmp dl,bl ; DL和BL比较
5 R( O0 Z5 i, U$ n% B% X. o, V004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
& N6 B8 J! ]2 }' ]0 ]) H1 A8 t004032F3 84C9 test cl,cl9 P3 A+ o2 f- _0 M/ X
004032F5 74 16 je short qsr.0040330D! `. \, r; q [1 z8 X d
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL+ |$ D; h6 ^# M1 ?, E$ H/ ^5 z
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL: I+ i7 H& v- g) R$ t9 s
004032FD 8ACA mov cl,dl: m) }$ L- |) I9 b6 J/ q* l
004032FF 3AD3 cmp dl,bl ; DL和BL比较, S; ?0 s9 G+ g7 o$ Z$ V# X( G
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）( R% d, ~" i& t& G9 m% Z0 K
00403303 83C0 02 add eax,2 ; EAX加2
) `& B2 a% k' T( L' U00403306 83C6 02 add esi,2 ; ESI加27 C& Z4 Z& o- C1 u, C. f8 Z- s
00403309 84C9 test cl,cl
/ T2 H$ ?; I( |2 I$ C# q {0 k0040330B ^ 75 DC jnz short qsr.004032E9
' T( H2 |! Z t j) [- j0040330D 33C0 xor eax,eax* s& g4 ]% d4 x: @9 V
0040330F EB 05 jmp short qsr.00403316
7 {/ e4 `8 N- ~9 G5 p5 D3 w00403311 1BC0 sbb eax,eax1 u7 v o0 i6 K# j8 R+ k
00403313 83D8 FF sbb eax,-1% l7 R. P3 e+ T8 f; k! G; T& V
00403316 85C0 test eax,eax, Y5 y; R0 ` U( H0 {% _
00403318 74 0E je short qsr.00403328
: m: r. z0 r4 C2 K0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
' Y" W( c5 [- n7 v/ a3 a- _0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]3 u. i1 S4 Y# Q% A# m$ M7 q! e
00403323 E9 F0000000 jmp qsr.00403418
: c. j' c# q% N3 S00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX1 w, s% u/ a8 ]# I. H8 x% H
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
' m. {$ Q7 K( G0 a( h+ ` y: p00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]" N& |( V1 y! E/ s. ?- s
00403333 50 push eax
, h% u; s3 U0 E00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
8 s2 L- C. }( i! ?00403339 50 push eax; e# X- {* ^$ H5 S: I1 J
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
. A5 C, A& S2 S# Q" M0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX7 S, m' H# x3 H% z4 f* N6 b$ X# w
00403343 83C4 04 add esp,4
7 ~2 p4 M& R8 k) Z( B00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI5 q3 @% L. Y, F3 u; P+ U
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
: { u) L: R: ]2 e' o0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]. B8 Y" j( [: | D
0040334F 50 push eax S. M# j! T) A
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX4 S2 F; B6 w. Y
00403355 50 push eax
8 E( \9 O. Z0 B/ I; F, K5 k00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX0 U7 U6 M% F5 t( l' ]
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
" w0 }+ ~% O& ]5 J0040335F 83C4 04 add esp,4
- @; {4 n, M8 w# U7 X1 {00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
; a) `! x; Q5 ~00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 W# [. A8 ]6 W$ ^& i
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]; G N) D4 o( j
0040336B 50 push eax6 R" B% `. g5 P) p
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX! o3 Q+ D6 _5 `
00403371 50 push eax3 V+ f( D4 Y1 y& W* r0 D
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX4 h) W- b$ ^4 [ i }# K! V+ j
00403377 8BD8 mov ebx,eax ; EAX送EBX
. J0 X- y6 ]4 H2 A6 j# }00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
& j6 z! B2 D, r6 K: _9 A0040337D 83C4 04 add esp,4
5 j" t3 v; R1 P- |6 V$ w# G- ?00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
& r; A4 M, L3 j2 D/ R00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
2 Z; v3 N: m8 z- T) T- }3 h3 {% G. |00403387 50 push eax
9 V: A a6 f+ h4 O00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX2 C2 K T3 N8 D. w$ {
0040338D 50 push eax/ t4 _* H) W+ o* z" ]0 f
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
! v0 Y5 E( p; U00403393 83C4 04 add esp,41 N$ q% ]1 v* O: d9 u: G0 }
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* K7 h8 @9 W, V3 P0 y
0040339A 8BE8 mov ebp,eax ; EAX送EBP
/ i7 W: `7 f, N0040339C 6A FF push -1+ I7 W$ c, r: m9 `- c
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
7 Z& w" J: D( b! t0 l004033A3 6A FF push -1* y7 y3 S9 K# j, I8 q8 a
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX6 t- r: w2 C6 F
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
- z2 W8 m) y' O" `- p" h004033AE 6A FF push -1* E0 Q1 b: B- h9 X) D
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX N o" r8 l8 j- x9 n4 D8 d
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX0 O; C2 ~9 h6 N
004033B9 6A FF push -11 @! W8 _) r% J- v. m8 Q( J) b
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
$ G- A. X# I- `+ ~' C& L, k004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
6 E; ?6 y9 c& {0 j. _1 E. O004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
5 t( y) h# B5 \1 o$ Q6 g004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX2 f6 k+ s* o4 E
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
& e& x* V+ C" I9 P- a# y# M004033D7 D1E0 shl eax,1 ; EAX左移1位
6 d9 K+ ?8 Y, ^+ h" U) q004033D9 99 cdq ; EAX扩展+ m) \- H" s( [, w5 u- p
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中 P- }, T: f& {0 n6 Q9 ` l" o
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
3 Y- Z' f9 z4 N o# J004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
3 O4 o8 Z* c. n, F004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
/ T2 G+ R6 p: r# b004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
U; f6 i) v- d ?9 D( k# A0 X( @004033E9 EB 2D jmp short qsr.00403418/ w1 ]) R/ d/ ~8 v
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
, ^- _2 h# h$ a) A6 m004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E28 i B9 n( @# {# d$ c% ]
004033F7 99 cdq ; EBX扩展
4 n* E! ~8 n3 Y4 f! W004033F8 33C2 xor eax,edx ; EAX和EDX取异或
- F/ D8 \9 W6 R+ u3 J004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX! z3 x- R2 k1 }* l6 d% C' n$ |3 l% a5 P
004033FF 2BC2 sub eax,edx ; EAX减去EDX& W% C+ T' v+ {
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
6 H$ M) [0 d( {00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
4 Q( a# q1 @$ O/ K( q0 Z2 o0 \00403409 99 cdq7 \; S2 f; f" ~
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
2 m; ~# V# g' ^/ K3 x7 P& f/ i, z0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
! Y& {, [' L- W8 C00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
9 l- B- L0 l2 {* p- B00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）2 o9 Y& A2 w4 S0 S( B
00403418 E8 6EC00200 call qsr.0042F48B ; - F- A! @; \( h- ~
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 z5 a! k4 f3 G/ j9 }00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9/ g( V$ u9 R; D O3 p6 a7 \
00403426 E8 60C00200 call qsr.0042F48B
4 a2 V1 ^# ^% A0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
. [6 ]* H4 D O Q0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8/ P' z! @* F0 v1 l# ?5 l6 M( \
00403434 E8 52C00200 call qsr.0042F48B
" v- G: {3 I* ~4 B* ^0 z$ O* t) S. G00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
0 X# L: ?0 o9 e+ J# k$ l0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
0 a: g) I! J* K2 x! F' _8 d" a00403442 E8 44C00200 call qsr.0042F48B, }2 _& i( O9 s/ x: l( f
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]; q/ B' s3 |; O7 g6 c5 O; J
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6 D' Q0 ?. V8 T9 |
00403450 E8 36C00200 call qsr.0042F48B* \9 Q1 k: N2 X/ W
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
& d. Y+ t4 w. P2 w! a00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
! \+ v+ n/ ]! B, C$ E4 l) u0040345E E8 28C00200 call qsr.0042F48B% T y6 y9 Y5 g
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
4 {( M# N) S# A( L$ M' y6 i# Z9 J8 l00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
1 w9 M2 D$ O/ H6 d6 q- ~% [: S0040346C E8 1AC00200 call qsr.0042F48B. U6 l6 E; q! Y
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]# G0 N; N, v" n% w% Q
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
) R' |5 X* p8 X" e1 [; j3 A8 O) J0040347A E8 0CC00200 call qsr.0042F48B. ?: d' f& p5 f, ?' J6 T2 a# G! u$ T
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44] ^. t. c; Z ~1 ^
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
9 _8 G# C& y+ e( T00403488 E8 FEBF0200 call qsr.0042F48B$ m, Q. l7 B- t* B
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( O& A# \+ m8 b# h2 D3 L* h& f+ T00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1" [* n. v7 ]8 ?6 i) L7 S) a3 Z
00403499 E8 EDBF0200 call qsr.0042F48B
, Z7 f* f8 R4 Y0040349E 32C0 xor al,al ; AL清0
) X# b, @! ^- A* Q( A7 ?004034A0 E9 88000000 jmp qsr.0040352D
% ?* a3 y1 ?4 u3 ^5 k0 q7 g! G8 }004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
# M0 T% P( V( j004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( |1 r: P+ V0 D9 v# N q
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],98 S. d5 v- S7 d7 }' l- v- [, D1 G) K
004034B3 E8 D3BF0200 call qsr.0042F48B
/ [# U7 ]: u' Y3 K3 N004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 a0 ^3 I, _' ?1 ?3 J004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
. @+ S# A* r W5 \004034C1 E8 C5BF0200 call qsr.0042F48B, Q( o3 `8 K% E( H2 q4 n
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ S) Z2 o v0 {" n% G6 l; O004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
: D& @5 B' e0 |2 G" w; h5 h) ?7 w004034CF E8 B7BF0200 call qsr.0042F48B
; i1 T: t8 p2 n2 J% z7 j004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]" A7 n5 F- v5 |% }+ P
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6# d# ^7 n) e- f) v8 q6 e3 I
004034DD E8 A9BF0200 call qsr.0042F48B- l% ^3 z; k. j( v
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]% {- T$ ~- V8 l/ c+ n
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
. h# a5 ~5 ?7 P# `! _; Z: \004034EB E8 9BBF0200 call qsr.0042F48B2 V' K% _- a0 A+ q7 \! L; ]
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]: U( Y' A+ b* _$ Y% Q; h( P
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],25 [0 Q% n0 X; {* E k( o
004034F9 E8 8DBF0200 call qsr.0042F48B
5 f; X0 J* X5 S& V) s004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
- \: I0 n/ p+ X/ F+ e( C# N3 Y# l00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1- A& J- S) U9 S( s0 g
00403507 E8 7FBF0200 call qsr.0042F48B
$ ^6 d( u' S( v3 S0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]9 \) p4 p% H, H7 B7 S$ X u' [& T2 H
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0& G7 b5 |3 X& [7 D
00403515 E8 71BF0200 call qsr.0042F48B& J( c, }, `* P8 |# `5 u
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]5 F- n5 P+ a) H
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
/ l' y& V1 P/ i00403526 E8 60BF0200 call qsr.0042F48B
2 H% V8 |1 b4 X0040352B B0 01 mov al,1
3 H" N! v0 v6 d1 Z& H0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34], C7 C+ f# {5 A! l
00403531 5F pop edi
0 @# F8 Z2 r0 I( k$ o00403532 5E pop esi3 r4 ^% g# ]& P0 I
00403533 5D pop ebp
7 Q$ v1 ^5 o# L/ W+ t2 a& _00403534 5B pop ebx5 J( Q& i* L5 o
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx7 H: z) P5 ]7 c& B
0040353C 83C4 30 add esp,304 x' l9 J6 S3 G5 ~8 W
0040353F C2 0800 retn 8$ t/ O6 p3 {; D5 i# N, A0 N2 J1 Q: r
--------------------------------------------------------------------------------- p" u" p6 D+ o9 p
【破解总结】' f% e2 U5 i5 l
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
, t. T, p1 Z( L用户名：yijun8 V- }! `; U2 P
注册码：4893*7777*3726*7777*0529' I$ a: R: b( i* n1 N
--------------------------------------------------------------------------------
( l. h& c' |" g( Q6 g( F e【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡