|
|
|
【原创】破解Quick Screen Recorder& `. _+ h8 A% G; i
【破解作者】 yijun F) S# r! t% ^: R3 q; T* S- o
【作者邮箱】 [email protected] ~# h! `' n$ D- [
【使用工具】 OD,PEID$ j! R: \( X/ `- ^/ @ Z
【破解平台】 WinXP
4 v- U+ ^& ~5 }- N【软件名称】 Quick Screen Recorder
! ?+ e p5 G* F) Y- A( F: q【下载地址】 天空6 j2 N: x. k! a4 j A# a$ l+ B7 V
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
9 R1 R# c$ B! F9 R, A7 D! D【软件大小】 540K) U% _6 J9 b+ [4 q; n7 Q1 v, B
【加壳方式】 无
3 |3 P/ v2 z: v: w5 d+ [4 J【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）8 F e4 ?& U8 j$ N! G& w+ K& r, e
--------------------------------------------------------------------------------
0 |; R+ p' O) I/ ?0 w+ J【破解内容】& l. z2 `) g: |9 k$ A& R$ D0 _" }
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方： t# i8 {+ u) w$ R! j, F, A( p% q
00404C69 55 push ebp //在此下断
7 N$ G+ x8 K# q' E. Z00404C6A 56 push esi
% i* `+ E8 P" b& j& |) U00404C6B 57 push edi* N/ u0 d' e! q/ S/ N5 [0 v
00404C6C 8BE9 mov ebp,ecx
/ f4 K0 B* v5 T" x" w00404C6E 6A 01 push 1* I A$ i, F z+ M8 m
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
& w( T. D' E: w0 n9 Z# R7 h8 P00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]( e- f, w* i2 C
00404C78 8BCF mov ecx,edi1 ]) Z2 M# u, L: p7 Q" l2 s% s
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
4 R$ s$ f9 e( J3 O2 H6 X00404C7F 8BCF mov ecx,edi
' Y0 z: k1 B: k l" e! L00404C81 E8 A73E0200 call qsr.00428B2D
& N( h" ^! }# z* S; R2 O4 \00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]+ S6 b; ?+ ]6 a5 Q! E% Y9 \
00404C89 8BCE mov ecx,esi
8 k* d9 ?9 g5 B/ `. q7 g( q00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
% U' K0 G6 l( K) M1 E00404C90 8BCE mov ecx,esi
6 X x' B/ q7 E8 a00404C92 E8 963E0200 call qsr.00428B2D
0 D6 _* y b0 f, [; ?00404C97 8B06 mov eax,dword ptr ds:[esi]8 @3 h, n0 D! B1 F8 p
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
# k, x$ v. W1 `5 V/ V00404C9D 7D 26 jge short qsr.00404CC5
5 m! K# I4 C6 R+ [. U2 I00404C9F 6A 40 push 40" i- E6 R5 Q8 n, {) E' {- Y
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
/ X! j9 t! K$ H7 s& m1 g$ L00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."1 G% I$ C5 r1 {/ a
00404CAB 8BCD mov ecx,ebp
! L$ O3 L6 |& A5 W! d" i. t0 N( Q00404CAD E8 C3840200 call qsr.0042D1751 P D# a0 i( f
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
6 b1 B6 _; [! y* f6 F5 M' W00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx* q3 P' `: P. ~
00404CBD 5F pop edi
& e3 }/ |* u2 k$ x00404CBE 5E pop esi: @- z2 T8 A2 a- ~- c5 [) v
00404CBF 5D pop ebp
/ y; a* H6 \! x0 \5 @& |% T00404CC0 5B pop ebx
/ S& O! H* ]- A( n& j" X _00404CC1 83C4 18 add esp,18
9 V" K& U+ { ]$ B& k* O/ G, S5 }00404CC4 C3 retn
/ N3 k; z0 ?+ T q" X7 x2 k00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]5 M' [/ }- e# }9 L: Y. A
00404CC8 84C0 test al,al# z5 M2 {9 R$ N- n6 ~; ^
00404CCA 0F85 1C010000 jnz qsr.00404DEC) _9 t4 A, e7 w+ k5 f/ V
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' f& ^! D* \6 q9 ~* ^, g00404CD4 E8 87E3FFFF call qsr.00403060
& l: l, Y6 y, C, O% R4 @$ ?00404CD9 51 push ecx
& t5 @$ v" U; ^' Y% Y: s00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0' n' g$ S# r# g( r7 t9 O
00404CE2 8BCC mov ecx,esp. j: J/ c& s! ^8 ~
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp5 G1 }' a9 U" W/ L
00404CE8 56 push esi9 X* U6 S8 T1 r! C0 e% n
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
' d0 d( _+ Y7 J' Y00404CEE 51 push ecx/ J" v2 G3 q* L. h
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
) t5 a* V( k# j00404CF4 8BCC mov ecx,esp- u- `4 _ I. j! _) k F2 ]5 G8 M
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp; t8 O& ^$ o6 M j: ]1 c
00404CFA 57 push edi
# q. Y, _; a! d4 }; ~- k6 B+ Y00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是04 i0 F0 x- X: w6 o3 g& m
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 J. O6 u, q$ [3 e( U7 N
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
$ b+ h) d' t8 @% B/ t/ c00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~4 q; }2 ?3 H3 U# G" a; n
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
$ d# O Z' c; T7 j/ q00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
# A5 ]4 F' S% s& T00404D12 6A 40 push 40
1 i9 K" J- B, x& y' b4 t8 j00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"7 I& N3 j$ i) q" V
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
2 C+ M1 h4 v; ]: D! b; ]( P00404D1E 8BCD mov ecx,ebp
! `4 l. K i# T8 |. ~00404D20 E8 50840200 call qsr.0042D175" S% r% B/ R0 |( }3 Q: Y' N, A
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: N2 ^# l; P' p00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
8 c3 J) u [: I! T! P00404D31 E8 5AE3FFFF call qsr.004030906 i5 k% V7 u) ^2 d! j, C
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]) I, R" L0 E9 y& Z$ C
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx, T! `4 J Y+ W! Y
00404D41 5F pop edi8 M9 Z, y5 I5 K1 t' a
00404D42 5E pop esi
4 ~* ?7 W0 Q0 A; z! n/ r `00404D43 5D pop ebp g2 E" @: r, O
00404D44 5B pop ebx
% [& r; h, Z e4 K4 I H$ u- r00404D45 83C4 18 add esp,18' q! i9 e. ~6 \7 A- N+ _
00404D48 C3 retn
7 a) G; l- s# i4 W; C- K*********************************************************************************************************************************************************
3 o2 v. \8 U% `6 P, f) s: x9 k跟进00404D09处CALL来到：
8 s* F9 S6 j/ A1 [! p004030A0 6A FF push -1 //一路F8下去~~~~, @- r# S" u5 L6 l! n
004030A2 68 C88F4400 push qsr.00448FC8% m5 ]7 e( g: [ k4 A
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]; F' w) t2 Y3 ^" ^! Y
004030AD 50 push eax' \9 I& D! v- b; Q) h& j' z" ?
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp C4 H( U$ Z7 l, m" [
004030B5 83EC 24 sub esp,24
! w1 L2 J$ K2 Y( Q8 u: F004030B8 53 push ebx, {0 C8 ~/ W! c! H- o" d
004030B9 55 push ebp
- S- Y% z6 i2 A. G4 U) ~- [! a% E004030BA 56 push esi
. A }& b- q. }! l1 t3 z; k004030BB 57 push edi
: G* B/ K" y1 c( }0 G004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"% o/ K% G; h2 [ H D
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]( T1 A0 n2 _. ?, E
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1' @4 \1 v7 ?. K' w& Q# t1 }: O* n
004030CD E8 27C40200 call qsr.0042F4F9! R! K' B3 I( L+ D( b
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]/ r* J8 Y* y# c. b2 L( A
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
# L: s1 Y, X: A7 ^004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& R9 |/ T% \' G$ {: i
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
( X$ D. q1 Q' t- A' h ^0 k004030E4 E8 905A0200 call qsr.00428B79) V5 v& n& Y4 }* j4 d8 i8 [! E
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
4 W b, g- f/ _+ k1 K004030ED E8 3B5A0200 call qsr.00428B2D
% \ x0 Z/ ?/ k004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
. r+ P9 g+ j+ Z7 d8 j4 P004030F6 E8 7E5A0200 call qsr.00428B79' a- ^. q2 I& S- e7 u5 k
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
/ C# k; ]. n% K1 H' p1 X" q; F( }004030FF E8 295A0200 call qsr.00428B2D# u5 X& v0 q# r a9 D" ~
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
& U3 Y: Z1 v( l" V5 T' H00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]. f1 T# X, y" _2 q9 V
0040310B 83F8 02 cmp eax,2- Y4 w: d: j5 o* Y
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
; ^, E9 R- y+ J" V$ Z5 n00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
! f! V/ ~1 a2 ]7 u% H' D00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
2 E4 ~% Z0 F k7 w0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳$ J4 f6 W& E, K
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
2 w- Y& ^6 Z! s. C$ \00403126 6A 01 push 1
$ r3 a5 H6 T) X$ {8 X+ g00403128 50 push eax
2 I# x; @( P* J8 Z: W' k00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 \( Y- n f3 r4 b/ a
0040312D E8 C4550200 call qsr.004286F6
" Q' G$ F R g; z5 M2 o00403132 8B00 mov eax,dword ptr ds:[eax]8 Y' v$ v# A5 f- K( N
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
& u. L3 N( t, h3 m00403138 50 push eax
& P2 e6 k7 W& g4 g00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
) V2 O: r( h/ ?0040313E E8 4D560200 call qsr.00428790
, ~* s) P+ [9 K# G+ d, J00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* S1 x5 j0 }9 v9 W8 X8 c00403147 8BF0 mov esi,eax
6 O; ~6 N2 D7 y; ?! }7 b0 X" I7 X! ~00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3- U: g2 P1 l, ~8 }4 Y2 Q5 O2 J6 {$ D
0040314E E8 38C30200 call qsr.0042F48B8 k) n6 x0 A& l- j5 q/ @
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
! b+ R c: ]5 d& r00403156 B9 3E000000 mov ecx,3E
( t( b# `" e1 v8 P: W! [! `- K C0040315B 99 cdq0 E' H5 X5 W" g" v; i) d
0040315C F7F9 idiv ecx
' z/ h7 f% v+ M( [3 j% N0040315E 6A 01 push 1( @7 Q0 Z, b( j/ z: @# c
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
7 G3 e6 H4 ]! [3 L# ]00403164 8BF2 mov esi,edx2 z( ]. d" G6 ~
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34], [: G5 }1 k0 ^5 Z$ \2 t, Z
0040316A 52 push edx C- u" ?% G) H7 |) {9 u# w
0040316B E8 0A550200 call qsr.0042867A2 `& U: t7 w6 x/ X
00403170 8B00 mov eax,dword ptr ds:[eax]
# J2 ]7 s1 C% Y3 p00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
' ~! ]" P& `: |5 Z6 K00403176 50 push eax0 N& {$ [% q. z7 P4 w* o
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
5 g7 P" Z% z4 d- K6 a0040317C E8 0F560200 call qsr.00428790
- F& X6 G/ K/ S. Y$ i0 J9 G00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" S2 {1 n" D1 Y
00403185 8BF8 mov edi,eax
0 M$ |9 B8 n+ X00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3% i" ~3 _+ B! Q+ g3 A) m
0040318C E8 FAC20200 call qsr.0042F48B. B, W6 h9 e8 B" k( T3 r; g
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
4 R8 F% z3 \" f3 ^00403194 B9 3E000000 mov ecx,3E
: ?. a3 x1 M% d r00403199 99 cdq2 h/ x! v R& p# c ~
0040319A F7F9 idiv ecx
" q8 _$ F% Z$ K! N! R# K0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]9 x4 q% o& r" U+ ~7 t# t/ A/ y8 v
004031A1 894424 28 mov dword ptr ss:[esp+28],eax6 J3 O* }3 x" U& Y3 P
004031A5 8BCA mov ecx,edx) E( C O4 c2 ?- y, m/ \
004031A7 894424 24 mov dword ptr ss:[esp+24],eax" k" \* F2 S8 m2 F0 W2 t
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax* A9 A9 c% D# ]6 N: H
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
P! @- l$ Z% f* l' J004031B3 894424 14 mov dword ptr ss:[esp+14],eax1 f7 O+ S2 `- X; Q! Q9 O3 q
004031B7 894424 10 mov dword ptr ss:[esp+10],eax+ V% G# Y# t# c& i% @
004031BB 8BC1 mov eax,ecx
. y& w4 n. G" X) Z/ O004031BD BF 0A000000 mov edi,0A4 f6 M+ J. @9 s$ J, K- ? N
004031C2 99 cdq
0 N" m* B& k% F3 j+ U5 n3 C n004031C3 F7FF idiv edi' b: G: X0 V+ z$ k
004031C5 8BC1 mov eax,ecx
6 v" B3 W9 m( _7 I1 H+ O1 a1 S004031C7 B3 0B mov bl,0B& ?0 i( \+ o5 d( h5 E
004031C9 0FAFC1 imul eax,ecx8 T4 p% L8 z m- J: h
004031CC 8BCF mov ecx,edi0 K+ _+ L" V( U7 u( s4 D
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl+ ?) B6 o# K+ A/ e) O5 f! l
004031D2 52 push edx- v) J B- P7 d( [0 O" M
004031D3 99 cdq
+ d7 J m: s& P8 j7 Q6 C004031D4 F7F9 idiv ecx
$ }% L* {1 X: C* k5 m& W) U004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]% f+ x+ X( k# u
004031DD 2BC6 sub eax,esi
1 W/ z6 s/ C; t/ h004031DF 52 push edx
( ~) p2 R. s' @/ E8 }004031E0 99 cdq. X5 h& }: k. D( i/ Z- Q: s
004031E1 F7F9 idiv ecx" U1 C# {( \: g6 h+ V" g- }; F
004031E3 8BC6 mov eax,esi
9 \# F; r( h: O7 l; d/ F `. L004031E5 52 push edx
1 A: i% H5 K7 O# o& D; ?0 C4 a$ s004031E6 99 cdq7 ~0 s) v1 r% X+ ?. R# W9 c/ E
004031E7 F7F9 idiv ecx
/ K1 o! a2 Z; J$ a+ N004031E9 52 push edx( t) }) \5 P0 z/ @. G6 N
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
8 N& \! m- \! W7 J! L004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
/ g0 \4 [6 y& W3 r7 X3 C5 |004031F3 52 push edx
: f6 L8 J/ h& ^5 S; o, T6 E004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
% q" j' B$ V. H u& W004031F9 83C4 18 add esp,18
2 v! d; b, X+ r" m9 S004031FC 6A 04 push 4/ w' _( L0 j3 o n5 k
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]1 `, E: _0 P- f5 @5 Q( [
00403202 6A 00 push 0
/ }' e+ z: x% w% [00403204 50 push eax! E4 k$ t0 Q5 A# Y# N* G: }+ R
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]7 _ k7 m* ^, O3 L
00403209 E8 D6530200 call qsr.004285E4 ~( ?5 z( K0 p; f" K* G
0040320E 50 push eax
0 h8 P2 L8 T; a1 O+ Y( X0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
! C5 l0 X1 t0 ?! A; `% W00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C1 h: O3 {2 k. S% J/ A4 [
00403218 E8 A7C30200 call qsr.0042F5C4
" m8 s* j G1 R# [9 y3 p0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 I. q1 L* l8 H. ?- M1 v* x( g1 j00403221 885C24 3C mov byte ptr ss:[esp+3C],bl* B9 w4 \: j0 n
00403225 E8 61C20200 call qsr.0042F48B" n2 i" X" u/ u" n0 Z a
0040322A 6A 04 push 4
" L5 T2 o" ]: u; h4 @7 y0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
* p; V& ]6 P2 W a7 f2 p6 j00403230 6A 05 push 5
4 Q [% s! t8 S# V4 p00403232 51 push ecx
i& n1 w; p+ l5 ~00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50] N$ u+ X% X [8 s: P
00403237 E8 A8530200 call qsr.004285E4
; R6 [% Q8 l S( j6 y0040323C 50 push eax
! r1 `8 ^4 D! K7 R/ E/ Z- P b0 b$ ?% B0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
, p9 j9 s, u: c9 I2 a00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D: ~2 L/ T1 Q4 G" ]0 {! o/ r$ k0 R
00403246 E8 79C30200 call qsr.0042F5C44 E" j8 b j. b" y; P9 K
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( z6 `. d e: N( h3 i
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
, E3 ]6 n4 v( b" _( p5 ^5 l5 Q4 J, t% P00403253 E8 33C20200 call qsr.0042F48B
8 b7 W% u+ _- o2 `! F& v2 v( q# C00403258 6A 04 push 4, J k1 t# g0 E4 X; U
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]! }$ u' t, z9 ?" c
0040325E 57 push edi* ]$ u7 P, X1 c/ R$ h
0040325F 52 push edx i8 y( X9 g5 C( s2 b. Z" ^+ V O
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 r+ u9 n* D. R, l
00403264 E8 7B530200 call qsr.004285E4
, r/ h( R/ p( O& u2 p6 F00403269 50 push eax7 @3 o. I) j" U% i* c( i& S
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 D) ]1 U. h R5 h8 R
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E3 h/ \% m5 m0 h6 f! e* G8 G/ m
00403273 E8 4CC30200 call qsr.0042F5C47 n# E2 a: c1 w
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 q% x7 i3 |1 M+ n- \7 M
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl8 j9 Q- r' D% G4 u. O
00403280 E8 06C20200 call qsr.0042F48B
8 N3 S! b, j. C00403285 6A 04 push 44 Z3 D* F9 w; T
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
& E+ x* b5 @( Z$ F0040328B 6A 0F push 0F* ], C/ M) n# h/ J
0040328D 50 push eax0 Y2 \' D( `) n% C0 @% P
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
* Q0 ?- e$ w% n1 m+ T! `' E+ N00403292 E8 4D530200 call qsr.004285E4
c2 j8 B$ E. U! o4 H00403297 50 push eax
V% v# U; _! s1 t) c! M# ?00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]: U6 n; K. _7 q* O6 Q
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
; x# ? o I5 c8 N+ u004032A1 E8 1EC30200 call qsr.0042F5C43 k" A4 E0 J! K" c: }$ S- M `
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]. w3 Y; V" }. y! S% G
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl. e/ T i* s1 k0 B8 E Y
004032AE E8 D8C10200 call qsr.0042F48B
4 {# u2 G' V& |004032B3 6A 04 push 4
8 T' _1 B; t! P# G! p004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
" N1 e% {! ~- U1 P( Q1 H: v9 e004032B9 6A 14 push 14
2 {0 n$ m/ s( j# g1 J004032BB 51 push ecx
% ^1 v7 u3 C% T& y. q2 y3 d4 z004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- U; u( O9 O8 ^( U) `. r004032C0 E8 1F530200 call qsr.004285E46 l# D5 v3 Z2 ]$ H) J; p% E
004032C5 50 push eax2 F5 d C1 Q3 t' w6 A
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ F0 V/ g3 o& t6 `; i% ]& V' @004032CA C64424 40 10 mov byte ptr ss:[esp+40],102 e5 [, K7 T+ [5 u; r* e9 M4 w# A2 E
004032CF E8 F0C20200 call qsr.0042F5C4: d! e" X1 m8 V4 `* B4 w
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 S5 k3 t6 D! z A004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl& a% X, C) K/ u* X
004032DC E8 AAC10200 call qsr.0042F48B" s' b" `" v( O) M& ~
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI G3 I. h8 F5 r2 s/ y
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
. l0 p. z; i2 U$ n004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL3 p2 H- I9 h2 p' A
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
, x1 |7 U) h0 k& }& d0 [004032ED 8ACA mov cl,dl ; DL送CL& ^, O, @3 {* s: Y+ M
004032EF 3AD3 cmp dl,bl ; DL和BL比较9 A# b9 u+ } @4 ^6 Q, |! o
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
4 R2 e, t" A4 v0 p {0 b004032F3 84C9 test cl,cl
" L( T5 d6 Z( O004032F5 74 16 je short qsr.0040330D$ W# ?7 A. P" c# B; m- A
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
7 n2 n7 X4 h: B: w" A004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL# F0 u. ]+ R5 s7 e. u$ T% }
004032FD 8ACA mov cl,dl
) |6 [- o1 n$ ^3 c004032FF 3AD3 cmp dl,bl ; DL和BL比较
+ ^# X) f+ C" C/ O6 Y% m$ M. k5 H+ q00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
& o0 H" q" F! ~! T! f, O" E' M00403303 83C0 02 add eax,2 ; EAX加2
7 A$ M7 y7 s2 T2 x2 x$ J00403306 83C6 02 add esi,2 ; ESI加2
6 \# x0 A+ R' d; c0 l: o6 c00403309 84C9 test cl,cl2 @& n+ p0 L' B# G
0040330B ^ 75 DC jnz short qsr.004032E99 i7 w8 A H* N& ^; U7 @/ s
0040330D 33C0 xor eax,eax7 r( B6 K% `) T' Z
0040330F EB 05 jmp short qsr.00403316 ?6 [' Z8 W1 ~6 B! f9 l6 q
00403311 1BC0 sbb eax,eax
8 j x9 R* A& u m, ~, j7 d/ F00403313 83D8 FF sbb eax,-1
$ K. E# s, e! q& `00403316 85C0 test eax,eax& w0 n& K% O( F+ W, C' f
00403318 74 0E je short qsr.00403328" i4 X8 _5 J2 z1 E9 C
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
, B ~6 z, t' P' F9 N/ M0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10] f% y; Z& i( l) v0 S
00403323 E9 F0000000 jmp qsr.00403418
0 i/ c/ p" \) b8 m; j00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX% ]4 [0 G1 U4 m) \& J9 K$ C7 r5 G
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
; T' K. D3 D5 x' s+ F$ c1 m/ J" O00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
6 @3 R& D* H% u) n6 _00403333 50 push eax: e0 p4 ~6 \% d; y$ R$ ~ X3 ^: {
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
- }* }' v8 c. p+ k: Y8 r* X- I/ b$ |00403339 50 push eax
% T3 h8 L; J8 W# B0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX9 c, \0 f$ c7 s) Z' T' `$ m- d7 E3 j4 }0 N
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
" }9 U' z7 n Q00403343 83C4 04 add esp,48 P: g7 w! M8 Q1 |2 M
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
: p, M1 S' E9 y" z1 U9 j" D3 f00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]. \2 i" f3 R! y3 y0 J* Q
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]0 @& l0 w* p/ m( n& E
0040334F 50 push eax
4 }+ o6 O! z: I. M: u/ Y00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
0 s# U8 k- V+ @, k! b3 N00403355 50 push eax
# B) [! x: d) n2 X7 ^5 H00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
- d% h# B5 T+ V; f* b9 |0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX( [/ |8 o, a1 e
0040335F 83C4 04 add esp,4: p$ ?: M( S( H9 G
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI8 A2 @& T9 I0 R) I; ^9 {) z! e& O
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; U6 r" i! `" K4 @- U2 J Z6 H
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
+ w+ p' {( D- Z6 T! O0040336B 50 push eax9 G; H6 q* l3 X7 _! e0 W
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
/ ^& m! s* @4 R; X- N00403371 50 push eax
7 j+ u' Q# t+ Y00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX( d# r, i! G. O$ d5 _( D8 W
00403377 8BD8 mov ebx,eax ; EAX送EBX1 o4 X! H# Y: ?( F1 ?! o* X: P' r$ A
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
1 X: x+ G- m" h0 Q- N M+ c0040337D 83C4 04 add esp,4
& A5 @) Z/ y( \; K1 V00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]: B* f4 }8 [. {+ c
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
0 d0 b6 W( [8 f00403387 50 push eax
/ [, [1 ?. p( a7 o; U00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX; M: N# y; O% X) ]; h$ B
0040338D 50 push eax
7 [0 A3 P$ [" j+ G1 t( K6 c0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
+ n S( s: ? @# `' W00403393 83C4 04 add esp,4
( \) G7 Q2 q W& _3 k( d00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]& U+ `7 t6 ^, F& l# V0 ~, T. p6 @$ u
0040339A 8BE8 mov ebp,eax ; EAX送EBP
. u8 p$ t: q2 [1 Y9 M0040339C 6A FF push -1( @* f2 t) v( q) c" o
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX( l m$ P1 l" b' s7 z. B, J* V- V
004033A3 6A FF push -1 Z/ q/ ~8 h* ]
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
, k, u8 U7 G' I" f% ]6 E/ T% ^' b004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX4 M# v4 s1 W a6 J; b
004033AE 6A FF push -16 z$ k' K/ x2 l: [4 m5 K0 M% H; {
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
2 N% P. C% L9 B$ H! e9 i S004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
$ ?( F( U+ X0 Y5 s' D6 V! s0 {2 k004033B9 6A FF push -1+ c- \) v: [1 \ r0 ^. c
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX! b6 X. a8 \0 b! ?) T4 H
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
+ q ]7 _4 e4 Z$ A+ k; L1 x, o: g004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
& a( V6 b" d; H4 ~" O" ^4 x004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
. B5 {4 i% D7 s004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
' f- N4 \& s* S% l6 t* z004033D7 D1E0 shl eax,1 ; EAX左移1位
7 w! \5 X8 R9 Q* o004033D9 99 cdq ; EAX扩展! D. q- J8 _4 H9 p! g+ ^
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
7 ?5 ^% ~7 k; E! c. g+ t004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
^/ D2 @% g3 n+ c7 g6 `. }7 f, L004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）* x1 Y& J0 F# V' N1 \: L2 h) o
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A4 S2 F t* a2 Q/ T
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
5 z3 L/ q7 ]$ G- \+ j004033E9 EB 2D jmp short qsr.00403418, u) p$ Z7 F8 _& ?8 Y; C
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX9 J, P, T% Q2 N6 [( {% d
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
4 P- a9 ^# o6 Y' K' m4 U' P- n: g. k004033F7 99 cdq ; EBX扩展
* X/ `5 J$ n( K2 C0 N5 B004033F8 33C2 xor eax,edx ; EAX和EDX取异或
) Z% `2 a+ ]0 |. K004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX/ x9 F6 j! m( G* d7 _- U2 f
004033FF 2BC2 sub eax,edx ; EAX减去EDX& k$ F4 W# M3 s/ Y! ?3 S
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
3 P! F+ ~0 b+ C00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
2 |4 Y1 i4 [ a5 T00403409 99 cdq
& K' a. H, b5 c3 r+ `4 Q0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中! M- g8 T; j- @5 a3 K
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
1 o2 Q/ e; h! ?8 [) S# G00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
3 d' C+ B0 n8 m6 @( o00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）3 v0 O5 {% a+ [" D' w' X# u
00403418 E8 6EC00200 call qsr.0042F48B ; ; C0 s4 Z5 f: I& y6 B' K& Z
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14] X4 a/ ~ p$ \' r7 H( ]% L3 x
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
2 D; ^8 C9 Y: C6 h( [00403426 E8 60C00200 call qsr.0042F48B, a0 U; A1 M6 |* @) R4 R) K) t* q$ d
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18] R" h( l, m& Y- O% m
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
1 {2 t% F& ^; T+ n0 @1 g00403434 E8 52C00200 call qsr.0042F48B
- E" B- z( i. I8 r: r00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
6 P5 e+ i {/ K( e* r0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
: s2 w( {& ?+ m! G0 ^00403442 E8 44C00200 call qsr.0042F48B% ~& l2 k$ k4 k% I' x7 J
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 U8 G; a G: H; h8 e0 ~0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
9 q' }7 `# P6 _: l$ u00403450 E8 36C00200 call qsr.0042F48B
P/ m8 t+ }7 ?00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]) k7 t7 z8 P$ ~. ^3 {5 {
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3% H' D ~1 N, m" ^5 |/ D- M9 q% f# m
0040345E E8 28C00200 call qsr.0042F48B+ f8 v8 b4 v: m7 d* i* j
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]; E1 m7 K8 X3 Q' ]- n
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2, O8 l% y, f, ~0 w3 k% Q
0040346C E8 1AC00200 call qsr.0042F48B+ [3 h* l1 [+ _" O2 h
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" {# D% O6 ]" i" N. e
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],14 A! c5 A+ H. L4 d! u( S3 K
0040347A E8 0CC00200 call qsr.0042F48B
& v3 A8 ~7 |2 _0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: x* n" ?# F/ X0 N( K4 k
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0$ D$ r6 n* s2 g8 C3 _% W
00403488 E8 FEBF0200 call qsr.0042F48B# P+ m6 y5 H: A: e: s9 }" E
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]5 v. \5 E5 k* i; n$ T/ j
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1" J- B" x: h" b3 O' H( p5 [; r |. i
00403499 E8 EDBF0200 call qsr.0042F48B2 v1 k* |' `' H8 E+ N
0040349E 32C0 xor al,al ; AL清0' ?5 Q5 \+ a8 L* H1 u" S" A; W
004034A0 E9 88000000 jmp qsr.0040352D' _) }9 l% w/ R! Y
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~' @3 A$ H4 a" g- E* W# T
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ J% M7 ]4 ^' V- m! z- a; |8 b
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9# p5 z, o3 m) l0 U! }) f; {
004034B3 E8 D3BF0200 call qsr.0042F48B
4 Y# I; D3 l6 U8 S2 L* a* N004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]( V7 W, L+ l- j! F
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8' A4 I- [9 {% M5 u) {6 G
004034C1 E8 C5BF0200 call qsr.0042F48B! S8 c0 |" g ^4 p7 S7 E
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]- L3 P5 K" a$ X# P% @
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7# G) O! _) }5 x7 H
004034CF E8 B7BF0200 call qsr.0042F48B
3 V! q, d2 G2 ]+ E* {004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]- W1 d3 c. g- f/ N- h
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
% C, k o( o6 u% G9 Z004034DD E8 A9BF0200 call qsr.0042F48B) o- }% I6 R/ M2 c j+ Q+ c! X8 ~
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]3 P5 [, n' c. m$ w/ F
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
: z1 [! l- s) k2 K L004034EB E8 9BBF0200 call qsr.0042F48B% C$ W2 \3 o9 ? o( V5 \
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
* X4 I4 P1 d$ S% \3 K004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2& H9 b' M2 l$ i3 M H# }6 s# Z
004034F9 E8 8DBF0200 call qsr.0042F48B
1 c3 {9 v( U6 \- M' V3 s004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
4 \) w! I c& ?& T+ C00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
& i8 W8 R9 y# A, Y! Q1 F00403507 E8 7FBF0200 call qsr.0042F48B. I+ u9 L- b6 G6 Y! C; u& X9 t
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]0 \: _8 G$ P, U% z# w
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],07 c5 @1 ?) Z9 P# w
00403515 E8 71BF0200 call qsr.0042F48B& D! S: b1 E/ F( {; A& m
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 M& o& k. \( ~* @) c6 F- b
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
# V7 l- m+ p+ ?+ O! K3 d; ]! t g) _00403526 E8 60BF0200 call qsr.0042F48B
* s3 f: T1 Y4 v3 @& e& E V, V0040352B B0 01 mov al,1
; Y( _; j& c; ~% Q/ |- |0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
- }- t9 O/ e3 }( O5 ^" A" i1 E( U00403531 5F pop edi
5 [+ H: Q' l' m, z8 N8 _00403532 5E pop esi
6 S+ s4 _4 V% W0 x" G00403533 5D pop ebp5 ^. N, o0 I/ S% M8 Y* q' R
00403534 5B pop ebx+ c3 ~1 P, x+ r5 ~$ `1 }& D
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx9 S; K+ j7 W4 [
0040353C 83C4 30 add esp,30: H+ t$ X1 @" s# p( d* V n, F, W7 y
0040353F C2 0800 retn 8- Z# [+ @3 w& D+ y. Q0 s V) D" ?
--------------------------------------------------------------------------------/ Y7 X" t& s! V5 \
【破解总结】. m( {) g% Z, n
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^" {$ {2 N' W R' {- m
用户名：yijun
# S! N9 J1 b; |' j9 M注册码：4893*7777*3726*7777*0529
3 S# N; s# z: c/ e3 z G--------------------------------------------------------------------------------
$ o% E( p" u `/ f# F【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡