|
|
|
【原创】破解Quick Screen Recorder; C1 o% D# x1 h! H/ c! e: ^. S; D
【破解作者】 yijun
( i0 U) w0 ~* A2 _* |【作者邮箱】 [email protected]. P& h4 R; J! y9 o
【使用工具】 OD,PEID1 ^# Q5 ?( K1 l9 n% G% ~3 [& P. A
【破解平台】 WinXP( e) `, U5 o. L
【软件名称】 Quick Screen Recorder+ j: s0 q5 M$ v1 I3 G6 O
【下载地址】 天空
D0 W7 n/ T" i' n5 \【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
7 D3 m7 o" Z* F# j【软件大小】 540K
. Z7 p" u/ h. L; {: u: ], v【加壳方式】 无" E; r# i n/ Q) B
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
3 N3 G, H% M) u% g--------------------------------------------------------------------------------
5 R3 ]& B: z0 C; E6 P【破解内容】
' }4 @2 g0 S+ b2 A. G5 \6 [9 U3 q PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：0 i! c% g# {6 Y5 I/ n f
00404C69 55 push ebp //在此下断, ^5 l/ t- c- b4 t, D# q7 _
00404C6A 56 push esi
7 h6 V' D! A" l. H00404C6B 57 push edi6 R% E" o* K; m
00404C6C 8BE9 mov ebp,ecx
) _9 x# y w3 |% U6 t1 V00404C6E 6A 01 push 1
4 P9 E! b9 C" _0 i7 C00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
0 F1 L( ]: e9 t6 e e) o00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]0 @) y$ Y. n& o4 c
00404C78 8BCF mov ecx,edi2 d3 y: Q) ^+ X3 n$ C
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码8 i8 w( M) h* E8 S
00404C7F 8BCF mov ecx,edi; H% f/ h) f8 y$ B/ ~
00404C81 E8 A73E0200 call qsr.00428B2D
y/ Y. |; q+ Q0 c3 l00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
' P# _: K" G! ?7 q& `( `5 r9 E00404C89 8BCE mov ecx,esi) ?% a3 R1 w/ R* L7 A
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX' i. n! U! p5 B( U) I
00404C90 8BCE mov ecx,esi
+ |: d; z4 M, k00404C92 E8 963E0200 call qsr.00428B2D
. s/ x# w# N4 u00404C97 8B06 mov eax,dword ptr ds:[esi]
- n/ b0 I9 h0 V00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2- Q; j$ I0 O4 t3 l( H
00404C9D 7D 26 jge short qsr.00404CC5% h8 H. L, b. b+ G' r
00404C9F 6A 40 push 40 l: _. ?! T" y9 W5 R9 U' w0 x4 S
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder") H- E q3 X* Q6 g
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
2 R, F' B; `* N m00404CAB 8BCD mov ecx,ebp+ F! @( g t8 @+ r% S4 ?) ]
00404CAD E8 C3840200 call qsr.0042D1756 `' L1 S9 r' A4 \+ n( D
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]1 J: O1 C: f/ E# L5 @
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx# `" D7 g6 d+ I+ ~8 B- Q3 x: T% s
00404CBD 5F pop edi
; Z( J! D4 E% G, f00404CBE 5E pop esi8 l% R# l/ w" G4 }
00404CBF 5D pop ebp( E0 y8 \2 F" z6 O' Q; i
00404CC0 5B pop ebx
, N. o: a- ]) z& g7 M- v00404CC1 83C4 18 add esp,18
" l/ [! o( T# G/ Y0 i% j00404CC4 C3 retn
1 O! n1 O5 V" O00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
& d3 K/ s1 g/ s0 s, ?- Q( f0 G00404CC8 84C0 test al,al
: k. W9 ^9 c7 R& ~( k+ e00404CCA 0F85 1C010000 jnz qsr.00404DEC' W5 r+ h* [& h+ h
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
$ {8 ?6 g( t( `6 j+ H00404CD4 E8 87E3FFFF call qsr.004030606 d0 _7 t0 D- Y0 N4 W4 N
00404CD9 51 push ecx# ]! z7 n+ k+ I1 u! ?3 E: f6 J
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0: Y) ?! V6 ]- v. ]
00404CE2 8BCC mov ecx,esp k4 X& E; k$ l5 p9 q# W1 Y+ D D
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp. ]5 o$ Q1 G& u" ~
00404CE8 56 push esi7 e8 {! h/ o L
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
- V; B$ B* I/ |* N9 d- ], U00404CEE 51 push ecx
! W6 _4 V2 o% I00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
9 | ^) l) V/ o# H00404CF4 8BCC mov ecx,esp+ h) U7 c6 o2 V! e
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
2 i v2 J5 E: t% t9 T4 ?00404CFA 57 push edi
& O- D! [5 n6 ?; V( y1 H# |- S00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是01 t# b; r. P6 j8 e% n/ E
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 R5 y7 f" K) ^
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],03 T$ j; P1 C& T- j
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
7 _ ]2 |% Z c6 w# S3 g5 g00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
' X# w8 o7 J0 X. q) U8 s9 d/ Q4 \; @ [00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~, n* D8 U* h. y+ _9 l1 X9 J
00404D12 6A 40 push 40; L1 _0 T: U0 y: O9 D, W
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
# }: F: {# W7 Q" }1 e00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
% b* I, G: ^& [* U00404D1E 8BCD mov ecx,ebp
1 ~' @4 e# L" D9 M$ d00404D20 E8 50840200 call qsr.0042D175$ }2 r# e' n% C5 g% a e
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
- g; g: A6 b) s00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-17 |6 Y" l& ?4 S! g2 M; p0 D
00404D31 E8 5AE3FFFF call qsr.00403090
2 S2 E+ c1 D/ R00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] C4 C9 s1 B M; a. {, w
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
! E2 }* \8 ~! m4 k8 R4 ]+ ^00404D41 5F pop edi
8 r$ M+ {% n% p3 C- V( K# o* r; t00404D42 5E pop esi$ q1 {) [6 X3 R9 C
00404D43 5D pop ebp6 r, _4 ~$ N; ~* \9 z
00404D44 5B pop ebx
$ r9 |5 A, f0 `* t& v6 h* k4 d1 A00404D45 83C4 18 add esp,181 [0 `4 r; Q2 [, X9 c
00404D48 C3 retn
* O0 F& M$ ~1 Z9 a( j*********************************************************************************************************************************************************
5 k6 M" o9 Z1 D2 o" p* ~跟进00404D09处CALL来到：
3 x2 l% ~$ I3 h; u+ |* l! e004030A0 6A FF push -1 //一路F8下去~~~~* h0 B/ F8 k0 e2 h0 E- U
004030A2 68 C88F4400 push qsr.00448FC8
, B6 Q: G: e! h) o" ~& B004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
, p2 X! U: L( x: o: y1 f5 m004030AD 50 push eax O& X; U1 t4 n
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp4 G4 r) v! R0 L I
004030B5 83EC 24 sub esp,24
" c! ?, g4 }- e9 r" i4 T004030B8 53 push ebx: C8 ^4 _7 X# d* q0 Q
004030B9 55 push ebp
7 c, ?+ b" ~+ |$ P- m* u; v$ o( |6 _( h! g004030BA 56 push esi
# ?3 O U; z9 d; K. s! J5 M) |" f1 l004030BB 57 push edi
6 f9 r4 q h7 J: n9 V- |: W004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
3 k; P* r' n) ?1 V/ c0 G004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]$ d+ j6 @2 ~4 P1 ]" W, I
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1" a6 L; P, p6 w
004030CD E8 27C40200 call qsr.0042F4F9
/ ?0 _/ l/ @. o0 W* k( F2 y004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]) k% U* w4 G# O* P1 d
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax* o1 \3 _- b9 Z; C+ m" @/ z2 H
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& p$ q0 ?3 {% L! W8 {
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ L* Z% ?: H* `; P004030E4 E8 905A0200 call qsr.00428B79
4 ?0 k5 d& s8 a3 ^8 u8 }004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48], H3 S" ?6 I8 f9 U6 Z
004030ED E8 3B5A0200 call qsr.00428B2D
- P3 T7 i, o G" l: G004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]6 T8 N% W9 u7 J
004030F6 E8 7E5A0200 call qsr.00428B79+ r( X$ K* G4 {4 ?! @( k
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
, x' f9 U$ ]/ q% {4 t1 V% ^004030FF E8 295A0200 call qsr.00428B2D7 c" w5 b" H3 W2 G7 @' u
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
: A0 v, Y4 u- k M00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]) @6 c4 s5 e0 R
0040310B 83F8 02 cmp eax,2: Z7 F8 _# S! a+ a5 B
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
& l- u+ R4 y! `5 [ X00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]. y6 J* t1 B4 M5 d7 `& X1 H
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
/ i8 p# Y8 n' j0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳" H1 D2 N3 J% S6 ^" |6 m5 ?
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
$ h N5 n% o, O. \. c! l; e8 j; o00403126 6A 01 push 19 C# a% b- M. _
00403128 50 push eax
6 ?: T2 O- x3 ?$ P, r3 |00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]) M. l: X. y) y- Z
0040312D E8 C4550200 call qsr.004286F6
# _" l9 @2 a8 L00403132 8B00 mov eax,dword ptr ds:[eax]& l. J, q$ C7 Z
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) [/ I2 ?/ o) Y# {2 C$ v
00403138 50 push eax
. g+ l3 L" j0 ~, L00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
% N$ q( Q( K5 i" _0040313E E8 4D560200 call qsr.00428790
2 O# L5 R& V# j; {- C00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) p3 `8 r$ y$ r
00403147 8BF0 mov esi,eax
8 x- k) o6 v8 R3 a% `00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
% F+ O- F$ \- b* A" N0040314E E8 38C30200 call qsr.0042F48B
3 S8 Y. P; z. A% ~ e# i00403153 8D46 0A lea eax,dword ptr ds:[esi+A], C0 S4 v: ]- Y6 l' T9 K( U% l
00403156 B9 3E000000 mov ecx,3E
) j: Z7 W% {2 X0040315B 99 cdq
T8 X2 L) y8 h0040315C F7F9 idiv ecx/ V) w5 c6 _ V9 C$ P: ?4 T$ h8 m5 I
0040315E 6A 01 push 1
2 ~! x& A' t; e/ s& ?7 z) l. t2 ^00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
; G9 t1 ]* u) V' `. L00403164 8BF2 mov esi,edx/ @" `4 ~3 v) T
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
2 s4 v7 ]7 J& ^( O1 z2 _8 z0040316A 52 push edx! `0 w' w0 Q J$ t" k4 ?' Q
0040316B E8 0A550200 call qsr.0042867A0 N, X1 P1 N$ U K) J
00403170 8B00 mov eax,dword ptr ds:[eax]. Y( U/ ^$ k1 m8 Q" V+ Q0 q
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ {. K" @( p9 G$ j2 i
00403176 50 push eax$ T% f# w3 C- Q, J# g
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
' j! ?, w' m7 R: |0040317C E8 0F560200 call qsr.00428790
( t! B' s2 J A6 z0 j; p00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
# d5 a& G+ J* D) r. r00403185 8BF8 mov edi,eax5 @+ {( H B) q! j N; F! M: b( g
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],39 O3 t/ B5 @0 O# P
0040318C E8 FAC20200 call qsr.0042F48B0 x5 O9 D) U3 a2 G" Q* s& ] W; j
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]0 T8 s0 X/ o# {8 V" ]
00403194 B9 3E000000 mov ecx,3E
2 m U3 B+ R- a% A00403199 99 cdq* Y* P9 v0 f# y9 N5 l; H
0040319A F7F9 idiv ecx, W2 Y l' t6 _& O* }
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438], h& A8 U) ~+ y3 _
004031A1 894424 28 mov dword ptr ss:[esp+28],eax# K7 W l5 q2 Y) V. s" D1 O4 i A
004031A5 8BCA mov ecx,edx/ T% q h2 |# V8 \& e; L0 p8 }- k
004031A7 894424 24 mov dword ptr ss:[esp+24],eax5 N4 k( ]# i9 f; ~ J* Y
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
' z1 n' ~# N+ \, V0 M# @: E004031AF 894424 18 mov dword ptr ss:[esp+18],eax
: `* I- q0 B; {8 I9 X! A% c004031B3 894424 14 mov dword ptr ss:[esp+14],eax3 ~5 D5 K- H/ z) o/ L4 G4 L
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
; C/ J4 W+ }2 k0 Z/ s; {004031BB 8BC1 mov eax,ecx2 S5 g8 T9 d6 J) P; F; N
004031BD BF 0A000000 mov edi,0A
M" \. U( M: }7 v5 Y. w" B: c004031C2 99 cdq6 [# f( _$ u p8 y- R; j
004031C3 F7FF idiv edi
1 r& u7 S; y4 O. R2 A4 M( D004031C5 8BC1 mov eax,ecx3 A& M( ?3 E i& d
004031C7 B3 0B mov bl,0B# F" B: }; z# c4 {) q. Z1 j
004031C9 0FAFC1 imul eax,ecx# d% y' |9 h( J4 r7 o
004031CC 8BCF mov ecx,edi
: Q4 E7 z/ U T: x2 k+ Z/ E' J004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
$ G& N" ]; c$ A" e8 u- L004031D2 52 push edx
- n( u+ R" N! L004031D3 99 cdq7 E+ E0 y8 L' W7 |8 h2 c) \2 e; Z2 ~
004031D4 F7F9 idiv ecx4 k6 U$ r ?' R/ A
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]# p! F7 {/ P1 o( t( M
004031DD 2BC6 sub eax,esi0 q/ u& T' m# `2 p6 n
004031DF 52 push edx
3 p* U1 g( u3 c1 L& L004031E0 99 cdq( C5 h. ]( ?% [3 M
004031E1 F7F9 idiv ecx, V8 `$ h- g* j) f
004031E3 8BC6 mov eax,esi Y$ ~6 W) S' v
004031E5 52 push edx
+ m) n4 V7 X( _7 j- T2 K4 a004031E6 99 cdq0 w4 N/ ^: U; N4 K( t* \# s
004031E7 F7F9 idiv ecx! L, j% P2 m8 A# O/ {; H& V
004031E9 52 push edx
5 i0 v4 s& C! ]; F" i004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]" a* N7 W* q$ o+ p" h
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"' e& f K& ~2 W
004031F3 52 push edx
" H3 o% G: k! n" p2 T004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48930 d& U: H4 U1 E! A4 y6 [
004031F9 83C4 18 add esp,18
0 f! m I# B* ~5 k( A0 f004031FC 6A 04 push 4/ D% s- A: t7 _# ]
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]7 E X2 X8 v/ b' ]. j0 X
00403202 6A 00 push 00 ]) z: E1 Z# `6 @; n& h a
00403204 50 push eax
5 h0 G {; {! ~6 V" C4 ^00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 B4 Y9 N( l: V; ^; i1 x
00403209 E8 D6530200 call qsr.004285E4
2 _$ L1 o, M/ k0040320E 50 push eax2 S7 u {2 {6 D" _, h; O, q: k/ y" N- R
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
6 [6 J( h% O! Z3 {% H00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
1 Y7 s2 x+ G5 b! C3 _ c1 Z00403218 E8 A7C30200 call qsr.0042F5C4
+ k7 d' C8 z# h8 d7 f9 [0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
; s4 q4 I. s" |( S00403221 885C24 3C mov byte ptr ss:[esp+3C],bl: l+ Y& R3 G! i+ E ]4 E" v2 q
00403225 E8 61C20200 call qsr.0042F48B% y4 }" H- U" W; F" B
0040322A 6A 04 push 4- A) P# {% U! L# ~: V- f
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]1 w5 R+ o4 m6 H4 O
00403230 6A 05 push 5
/ q8 x" `# \8 u) x00403232 51 push ecx
+ ]8 x, \5 c( D7 ^. Z: F1 T) E& V0 r00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" z* u5 ]% w7 U' b9 U00403237 E8 A8530200 call qsr.004285E4
9 w' |. J$ }9 q i" M& _: r3 X0040323C 50 push eax
7 r: N$ s9 C) p; O' _" `0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 W, q+ u) M/ P( B5 K- B00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
5 s" x/ a" \4 `9 }% ]9 D: D6 z- Q00403246 E8 79C30200 call qsr.0042F5C4
( E$ u) w# M' T: ?0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& C* s) x I$ h; Y0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
1 Y' [% q" e/ u( E5 L [+ X! u00403253 E8 33C20200 call qsr.0042F48B" S3 k. [ Z* u) z
00403258 6A 04 push 4
" p& k4 @) l; _- e o! x; [, v0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
+ G6 W( \. [/ A6 O& ^0040325E 57 push edi
/ y# T% v; t7 K2 ^& e0040325F 52 push edx( M' F: s5 v% A2 {* S
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 q9 I. Q3 a' `+ H8 e& e' Z5 g
00403264 E8 7B530200 call qsr.004285E4- h \8 e6 T" \5 T" v& k7 l
00403269 50 push eax
" ]5 C% W% c+ ?! l# H8 {0 c0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]% ]3 [2 [5 \# @+ G+ K
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E9 A/ G+ n: r( K: e
00403273 E8 4CC30200 call qsr.0042F5C4
4 T1 |5 p( x X. W) B2 t00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 z5 j5 r8 o' }: Q0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl; L9 Z& _+ K9 S8 n
00403280 E8 06C20200 call qsr.0042F48B% L2 |3 f& N+ T# _8 A" G5 ^7 {
00403285 6A 04 push 4/ B) e" W! S- M. u& r1 W- n+ [4 A7 G
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]6 u, {6 F. v, h, }. K1 }
0040328B 6A 0F push 0F
! \; e( \8 \8 n2 w0040328D 50 push eax
! P1 I1 K, G8 R+ I0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
4 }& @4 n+ n) X9 \ w# `# X& L00403292 E8 4D530200 call qsr.004285E4: V2 C/ k0 Z# O1 Z5 O
00403297 50 push eax2 i6 Y* y4 N3 _+ A( t; _
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
, D% Z9 S" n8 j4 M* E0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F$ y+ i) }7 T" u
004032A1 E8 1EC30200 call qsr.0042F5C4- [$ l& @1 O7 M$ l" @
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 |# P, X* c; ]) X004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
- ]' g* n% D! k0 p6 k, ~004032AE E8 D8C10200 call qsr.0042F48B
, R' v0 a0 m6 X) @1 k4 s3 P004032B3 6A 04 push 4: z0 Y: u" u( u9 _8 J9 L
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]- ]4 M9 j' B% d
004032B9 6A 14 push 14
8 n% @ b" r9 {. p% r/ T: X004032BB 51 push ecx9 l) V: U9 j) ~* x' Y" U
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; h2 {2 y: o) A( S0 Z004032C0 E8 1F530200 call qsr.004285E4
8 _* `0 o6 U) r004032C5 50 push eax& f* A5 r1 u2 G7 c
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]# |/ |3 X% q, `, w& W
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
4 _3 E) f, k9 W3 h3 ]& R004032CF E8 F0C20200 call qsr.0042F5C47 z2 b; }- I+ {4 o; W
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 v9 C1 d* H" t( _% @2 H004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl5 M* y U$ Y( r3 F+ A: U( `7 E7 _: I
004032DC E8 AAC10200 call qsr.0042F48B
- b& ]2 y0 h* v7 K% Q/ v004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI7 r) M+ s; h0 T* b" ~3 B5 P+ O
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
( M4 A2 P+ u& f+ b- O004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL2 B ?2 p# |9 X7 J
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
4 n4 @9 ~! m6 F6 [004032ED 8ACA mov cl,dl ; DL送CL. g, n, s) L2 M1 `: B2 w
004032EF 3AD3 cmp dl,bl ; DL和BL比较
f" u$ Y# H- u: {004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）% W' \) q1 l+ a- w8 n+ u
004032F3 84C9 test cl,cl
1 R1 e3 }( s4 T" R' q004032F5 74 16 je short qsr.0040330D
8 H3 a! F1 A: m( e004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
/ V, r- E. q3 }: W+ m& l004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL. L4 p4 Z7 Z9 P1 p
004032FD 8ACA mov cl,dl( `4 b1 U% I& D; G+ W
004032FF 3AD3 cmp dl,bl ; DL和BL比较
; C' G9 C' r* R3 Q) C1 e00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
4 k5 d- O& G3 l+ x8 J8 y7 R2 k) v00403303 83C0 02 add eax,2 ; EAX加2: V/ p K* }; n$ E! ?
00403306 83C6 02 add esi,2 ; ESI加2
+ h! ^3 M% y. g( L7 F00403309 84C9 test cl,cl: n: [( v$ L. [/ J
0040330B ^ 75 DC jnz short qsr.004032E9
$ C- {- X0 r+ ~5 h% ~9 g) Q3 X' n1 [0040330D 33C0 xor eax,eax
) }$ y4 W1 r* L5 t3 Z% @2 G- k0040330F EB 05 jmp short qsr.00403316
4 l, H$ ?3 O. l6 a1 ]+ q* ]00403311 1BC0 sbb eax,eax; T+ P* E) j, d) u1 Z, W
00403313 83D8 FF sbb eax,-15 E4 C+ j% C0 j9 k( O1 U
00403316 85C0 test eax,eax
: |7 F5 J+ R* ]- W00403318 74 0E je short qsr.00403328
7 w' {/ U8 W7 E- n h% z. _ x5 y0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A9 L4 n$ V% R" B: v+ I
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
5 N( A, S! b; x4 E$ K00403323 E9 F0000000 jmp qsr.00403418
) M, \$ w( n1 d* ]00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
. D+ i5 s" s6 T. ~" I0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 a& g) F+ W9 [' \2 p& ^
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]% F/ U% F# i, s5 }# u0 ?+ `: B5 Z
00403333 50 push eax
2 j( P8 g, E1 y00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
! \/ Y0 W v1 i- Q/ }0 @00403339 50 push eax1 C S( s$ w& p8 l8 O3 E4 f% O
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
7 J2 F- X/ [; B. C5 D0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX0 P( W5 |2 ~! E- N, r( v: Z3 [
00403343 83C4 04 add esp,4" D0 l9 M6 @' h2 Z
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
5 j+ p0 ^6 m5 R00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]$ b1 R1 i" S+ M9 z- {; r
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# a' ^; [, T3 t+ P( J
0040334F 50 push eax
0 @6 q% h( ~! r, N9 H00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
' N# }4 m X; ?# }: K00403355 50 push eax
7 i- F+ R3 }' P: q8 w. m/ `00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
* {" m3 q0 c4 f1 n3 `; P; a0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
2 w3 G9 z; \; b8 m, v0040335F 83C4 04 add esp,4 y5 y- K5 J8 T6 f- d
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI) [2 I# W h6 n( I- R
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& T& B$ d2 b) {" B8 C( K8 ]) k3 e00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]7 d3 u8 q2 C) L8 ]% l' \
0040336B 50 push eax
) V* I9 h; O1 z0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX {3 n( n1 x- ^5 ]
00403371 50 push eax
4 x* K& H) w0 Q: I2 |# _, d00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX/ T) z0 n% [# P3 U
00403377 8BD8 mov ebx,eax ; EAX送EBX3 q5 E! x+ k- L
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX& Q9 L" g# Z% K+ z6 N* D- O
0040337D 83C4 04 add esp,4+ ~7 l! @4 ]; i2 Q& H) P1 L& m
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
1 ?8 a0 e/ x& b) o00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
! d4 Z# b. r' s00403387 50 push eax
/ f& V8 a8 e+ G7 N! }1 b00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
6 N+ z. ^: N) N7 H7 _ v5 \8 l0040338D 50 push eax
+ \% [/ a6 s u# h0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
! s9 ?( b4 u$ B00403393 83C4 04 add esp,4
/ d, s8 u) O8 }6 c00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 C) P* \# W- p% `3 `. b% x7 r
0040339A 8BE8 mov ebp,eax ; EAX送EBP7 b$ B: w4 W% b# B
0040339C 6A FF push -1
( i3 x3 P' u" i. R+ E" W% j# Y1 p0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX$ M' r5 {$ x g- w
004033A3 6A FF push -1
7 d0 ^% P* z7 C$ Y0 l6 R t+ d0 e004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
- ]( S# H/ D# s" b004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX; F8 c' n4 S8 f% G8 V
004033AE 6A FF push -1; e& Y. G7 r- N$ \
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
" U" I6 q0 f/ r004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX6 n& [# G: }" |; \/ t/ S
004033B9 6A FF push -12 y4 ^/ b+ V9 y+ E
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX' h7 t9 \! x% O
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
3 g9 Q! P ]( x% h4 {; L004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
, X8 R7 c3 p6 A! u2 ]- O7 w7 H004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX! U9 u) k/ O$ g9 {4 _6 f
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
4 i2 I R1 j/ ]1 J& o3 b$ {9 ~+ W004033D7 D1E0 shl eax,1 ; EAX左移1位
8 F/ I3 [% e2 S8 m3 ~6 E+ F" w3 A004033D9 99 cdq ; EAX扩展4 D+ l! K: c% @2 K* Z. ?# @
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
8 d5 Z- M: t9 {; S004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较, z! [9 z8 _% C$ P0 j) L
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
; ]4 Z1 q: } \& j# |004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
) E+ ^ H9 S4 u7 p* r. J+ s004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
* a4 Q+ u6 j* g, U9 L* m004033E9 EB 2D jmp short qsr.00403418
: B' y. r- [0 k; s; @004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX5 g3 `8 t9 h) y( S$ _+ c5 n
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2. G7 S8 a% p) q8 S6 X$ n; ], J ^; r
004033F7 99 cdq ; EBX扩展2 u) N X# D9 s! ^$ S u8 z
004033F8 33C2 xor eax,edx ; EAX和EDX取异或 _# r/ b/ c N- l& \4 Q) A
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
) h% ?) ?( m% I) ^2 N004033FF 2BC2 sub eax,edx ; EAX减去EDX
6 ]3 c; x/ i7 z& n3 x7 L! k00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
% c8 F [. {0 N. ?; p; B00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
) {5 ^$ X8 u) [' f4 | ~8 X00403409 99 cdq
5 _' j* Q: }/ O6 ]- @+ ~$ Q( ~0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
3 o& e2 g5 }" z0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
: X, l: z3 ?; j% M) ]9 b. W00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较/ a9 ]6 n: T* o9 ^; j/ `; P
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）& U1 x. U$ p. h4 }
00403418 E8 6EC00200 call qsr.0042F48B ; 2 m& |# U# K; h( s1 s
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
1 H5 V* z' z* G) `6 z+ K& z9 S0 S0 N00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
" Q0 W* @: }7 y00403426 E8 60C00200 call qsr.0042F48B
% Y7 A G- Z5 {6 T' n6 h4 ^% t0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
; d0 X" o" s6 E/ u$ b7 D/ J0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8, [8 d" w! _; T% o
00403434 E8 52C00200 call qsr.0042F48B
n6 E$ `3 e# e) P1 K& U% K5 s# x0 `00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 Z3 w# r, y0 |. \- D, l$ j. ?4 m
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
e0 `8 p8 j! _. ~, Z, Y00403442 E8 44C00200 call qsr.0042F48B: l& l. x9 J" F2 k6 ^4 A" J+ r
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]' t- u9 J) H- E* E
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6$ o" V: \. c# o k, S/ ^ N/ ~
00403450 E8 36C00200 call qsr.0042F48B
& x2 Z3 q: O* ]/ d00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
% r3 r( F0 U3 m/ A% q% l00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
2 a* y& a# a2 w7 F0 c. }0040345E E8 28C00200 call qsr.0042F48B& E5 S7 n& M: s+ L& B$ V. |0 _) B4 G
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]$ w5 r7 y- @0 A7 @7 ^* p" ~( F
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2, |3 ]7 y* N" }( p
0040346C E8 1AC00200 call qsr.0042F48B( A- b2 C. |$ z. T- S1 \0 k
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20], ~, @5 t" L1 v$ a* q
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1+ ?. a7 C: u w+ T6 o+ B0 g4 o
0040347A E8 0CC00200 call qsr.0042F48B5 a/ b6 G5 C. }+ N: V
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 y3 c2 [* N+ F9 v00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0: t! m1 q: D {; A# T
00403488 E8 FEBF0200 call qsr.0042F48B
0 Q9 d- t8 o' E; a2 u0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]1 E% t- u: [6 k5 s7 ?% i, L
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
, M8 w. e' C$ [00403499 E8 EDBF0200 call qsr.0042F48B
' Q* R( L9 ]: O6 Y: t9 b# u0040349E 32C0 xor al,al ; AL清0
- z p- h2 [& ^/ \# X) q, F5 h004034A0 E9 88000000 jmp qsr.0040352D% H$ b) I' [. n D
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~- y; s1 D$ e6 Q- I0 ?
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
9 `$ ?: |+ q2 d9 K2 f3 {! u004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9- |; o' a7 M- M9 Y
004034B3 E8 D3BF0200 call qsr.0042F48B
! E; v, w$ Q) r8 v4 x [004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 ~3 |$ A$ p$ W; j9 z/ a+ @004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
4 F1 u& K2 o9 u6 @4 K8 z6 o/ X6 P, g004034C1 E8 C5BF0200 call qsr.0042F48B
2 D& E2 c2 A' V5 v0 `+ A004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* o0 i: ~+ g1 }0 G, F: c3 E3 {/ [/ {
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
! y- s. x; n" f004034CF E8 B7BF0200 call qsr.0042F48B
: g7 g6 B, T4 [. F9 F: `004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 k6 ?# f' d* p4 Z& r) Y004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],69 ^* w& p( A8 h2 f: `
004034DD E8 A9BF0200 call qsr.0042F48B$ j4 Q3 {& z& y+ T5 m$ _
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28] \& o7 |( \: A$ {" z$ L& e4 k3 @
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3- L+ u/ ~$ W( E" h/ r" k$ J; w
004034EB E8 9BBF0200 call qsr.0042F48B0 o3 `9 E' T, R& M+ ^2 V, `9 z
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]; a$ V& L s8 { t& H
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],20 O8 y( ?/ m9 X3 X0 [3 { i& A
004034F9 E8 8DBF0200 call qsr.0042F48B; a0 @6 R* V5 V' Y, Z4 {- L8 L8 K ?. h
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ H* R; T& I: W3 O
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
' a3 ]9 f) L9 r" P. h- S00403507 E8 7FBF0200 call qsr.0042F48B0 T# x. ~; v) Z7 I( f
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
- p! M5 Y% i- N+ l; [* ^+ A00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0- n$ n- H% ?) J' E% \5 h! n5 ^1 v
00403515 E8 71BF0200 call qsr.0042F48B
( l$ q+ t! D3 O3 C( h. B: c0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]9 y/ d: |4 E' H* q7 F7 s1 J
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1% F1 T/ L' b, ?1 E6 E
00403526 E8 60BF0200 call qsr.0042F48B( x! B$ }6 S6 W8 j$ K
0040352B B0 01 mov al,1$ @5 e: z3 K5 ]& c J
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]! Z2 H" w L% a" F1 O1 u
00403531 5F pop edi8 \4 | r! G$ x! X0 x$ }' [
00403532 5E pop esi( U: ~( E9 U2 a1 T7 X
00403533 5D pop ebp6 u2 F4 \ [8 k$ `, f4 j1 S
00403534 5B pop ebx$ q/ ]$ l' U+ q7 f1 t% [" a
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
9 H0 k" ]6 }6 t5 N: c2 k2 C/ X0040353C 83C4 30 add esp,30- |# ^4 g! q0 V; o: G% d
0040353F C2 0800 retn 8
( e2 g' H. p! `--------------------------------------------------------------------------------
) S& { T) N9 r【破解总结】1 z! F4 R* C5 _) }5 G
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
* q; N! m8 L9 a- [' I用户名：yijun
4 j# |: c# d* M6 | b2 ]注册码：4893*7777*3726*7777*0529
6 j3 r# q" p/ K--------------------------------------------------------------------------------3 J( }$ ~( b B2 j$ q* t
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡