|
|
|
【原创】破解Quick Screen Recorder) n7 E- l$ D4 |% ^
【破解作者】 yijun
+ p7 f9 z( Z: D0 M' b$ R【作者邮箱】 [email protected]+ l% l5 p3 z4 K6 p( u/ N
【使用工具】 OD,PEID
+ H4 _: F) _) l* k) C* e【破解平台】 WinXP2 L: J( C f; A: |
【软件名称】 Quick Screen Recorder5 v9 |; n5 i$ o3 o7 a& y: q
【下载地址】 天空
# K7 P9 C* E1 F! {2 }9 X' k【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
* R: U4 D' p# o# W; x【软件大小】 540K: M( \% O/ C+ M& e
【加壳方式】 无" a- s- T c/ j4 s) L1 c2 N |
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）1 o. g1 @$ U$ F: ^
-------------------------------------------------------------------------------- m- @* L5 v& B4 c, I# r, [
【破解内容】
4 k# P* Y. l; x; [/ k+ z PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：$ E& l. z' N8 r4 U) ?0 q7 f: {
00404C69 55 push ebp //在此下断& M: B& w% j! S0 `# s1 \
00404C6A 56 push esi3 p7 C3 L2 @6 u$ k! D
00404C6B 57 push edi
, W3 K2 ~2 M+ \7 w9 ]: e00404C6C 8BE9 mov ebp,ecx
4 _( X) G5 ?3 D$ ~ L00404C6E 6A 01 push 12 ]( g8 L5 X% m
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名, [8 A: l( G/ Y. _) O3 ~+ y
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]1 y, L4 q9 ^1 i! u( z/ N
00404C78 8BCF mov ecx,edi6 `9 ^ @: u% ^& t, g- {' j
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码& U! }6 t0 G. p2 s
00404C7F 8BCF mov ecx,edi
4 P+ L7 a* p% W& f00404C81 E8 A73E0200 call qsr.00428B2D
F% f/ a+ a; p" q% h& m00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]( E9 [% {6 _" o# V1 u' O
00404C89 8BCE mov ecx,esi/ r; s1 h* ]! |. y4 w
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX; |! i6 ^$ }' w) Z0 ^; g1 P# g; c$ Z
00404C90 8BCE mov ecx,esi' r F2 m# L" e$ f+ h+ N
00404C92 E8 963E0200 call qsr.00428B2D' L/ q/ i) C0 a) ?$ T" w
00404C97 8B06 mov eax,dword ptr ds:[esi]
( f: g$ B1 A8 a1 @7 T; G9 H00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
+ ]. c8 p: _6 F5 `* ^4 z! a00404C9D 7D 26 jge short qsr.00404CC5
+ x1 v% E) t0 b5 T00404C9F 6A 40 push 40
l! }* a; [2 {; q2 d1 q6 t/ W7 i2 G00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
, P; g/ l( j) [0 G00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."6 J0 C8 `- p+ E+ B* y6 A) \% O
00404CAB 8BCD mov ecx,ebp
! J, x7 Q8 q4 U n00404CAD E8 C3840200 call qsr.0042D175" I3 W- U) X, b1 X% M2 F3 @3 Z
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
4 X" C2 M, |# j& B" Q00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
$ G. s8 l1 E6 z00404CBD 5F pop edi
% B! p* H& M$ j" R3 S00404CBE 5E pop esi1 b: W- C4 y, d7 @8 [( Z ]* f
00404CBF 5D pop ebp
! i! Z: _% q- v* o9 Z5 e- R00404CC0 5B pop ebx
' M" ]& L: h/ N) ~# ~00404CC1 83C4 18 add esp,18
1 m6 J" ?$ _+ @" W00404CC4 C3 retn( L' v Z4 z+ G
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
2 A8 I( d' n6 O; C4 I00404CC8 84C0 test al,al, {; C1 v" |- ]0 ?( s
00404CCA 0F85 1C010000 jnz qsr.00404DEC2 w, w1 p9 R7 |/ ^' a @
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
, \' F" L' I# { O+ |! y! `/ ~00404CD4 E8 87E3FFFF call qsr.00403060
! Y, I% l! l: T2 K7 \- M& f00404CD9 51 push ecx
) T8 b& e. f. X5 [00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],03 z$ G+ N# K* I0 W2 E5 @6 o
00404CE2 8BCC mov ecx,esp
; F7 q, O) T. T1 t2 ~8 }6 C00404CE4 896424 14 mov dword ptr ss:[esp+14],esp! b: G/ s; B' M3 \4 p5 K& f% k
00404CE8 56 push esi
& {( U/ r; X. g4 u00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是06 l" j0 _0 S0 {. d& G
00404CEE 51 push ecx1 {2 _" m' T1 Y o
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
0 t: n" E/ _4 F8 m) m00404CF4 8BCC mov ecx,esp: `7 z+ w: D k( n( D
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
7 |2 z" B4 }2 u, L00404CFA 57 push edi
0 C# V* d0 @% x- J00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0/ @# z2 d8 ?! U7 {( ~
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
' n4 p: J' `; j' y& G3 J0 _" V* Y2 ^00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0* I, G$ h$ T8 U
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~0 } T5 n3 N- r$ u6 m
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~& b% w/ W( \ m" L
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
3 ?4 o" O1 U" W00404D12 6A 40 push 40
0 D a0 A+ @9 J9 B* V" h; R00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"% z8 H( L; F0 U) E7 t& f
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."7 a. l( R; j7 h% j) O, f
00404D1E 8BCD mov ecx,ebp# Q# @! N6 t9 Z) p
00404D20 E8 50840200 call qsr.0042D175
; u* ]' {2 L! m! \$ F00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]2 f! V+ R: z" s/ V v0 m8 [
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
2 I3 n) t4 L0 u00404D31 E8 5AE3FFFF call qsr.00403090# |" K( f7 t* t* t4 e0 Z0 U
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
" G/ b" B1 z6 M$ Q5 I00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx7 L3 ~; s. i) O p' ]& N/ R6 V
00404D41 5F pop edi
2 d4 ^& _, M, `. J: `* r00404D42 5E pop esi
3 C6 z8 E, g# Y5 B: A00404D43 5D pop ebp9 {4 Y' ~7 R. m/ F
00404D44 5B pop ebx
( C* ~2 j/ U3 v6 G4 Y! X% T00404D45 83C4 18 add esp,181 m" V5 f5 T) J
00404D48 C3 retn2 \ K4 W$ Y5 V% z# m
*********************************************************************************************************************************************************
0 G" Z$ m8 A5 k4 C! T0 a7 S- M$ ?跟进00404D09处CALL来到：5 n( U t) r+ |+ T
004030A0 6A FF push -1 //一路F8下去~~~~
0 n; V! u& L6 q8 m004030A2 68 C88F4400 push qsr.00448FC8% |2 I2 i- a5 z& W h
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]. _3 y3 c3 J3 ~ r5 A2 n
004030AD 50 push eax# m2 Z, Y& M" q9 m4 P9 @3 s" ~7 X
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
5 C- s- p2 @8 P* c004030B5 83EC 24 sub esp,240 H7 W( [4 |) s4 [, ~
004030B8 53 push ebx
$ m0 s' X, N/ O- R0 ?: b2 L7 `004030B9 55 push ebp# ?- }% K7 F* B! G2 G
004030BA 56 push esi
" [2 o9 [* u6 A( h004030BB 57 push edi: `+ i# |0 H, L: Y% _" I. _
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"' ?7 O* V4 }; V& X! ]4 b
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, X+ n- e U; L h% k# Q6 h, `7 V004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
: {+ T; U' M4 b3 {5 ]( n004030CD E8 27C40200 call qsr.0042F4F9* o O, ?* ]/ T$ q! `" N1 v
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]5 f7 u: O5 i7 P$ H1 V1 W l& \: j
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
) p1 [; R( @" b1 I5 e* p004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
. s, e) D, H) u/ \ S4 W004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
+ Z# H7 y3 ^$ A004030E4 E8 905A0200 call qsr.00428B795 _, g( ~. E8 q. S) }9 w# \# z$ ~
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" t' @6 v; I1 g! n- t$ @$ h, ~
004030ED E8 3B5A0200 call qsr.00428B2D) \" x8 R# h F4 f
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
8 [' l) `5 h4 [' g" C004030F6 E8 7E5A0200 call qsr.00428B79% X/ g) I) k/ a8 Z$ S( `* y5 \
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
: |9 A8 o% W" L6 c& c004030FF E8 295A0200 call qsr.00428B2D% \: _/ O1 [ p, \% X+ H! z/ Q5 Y
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
5 x. r' J( T) S( U6 Y$ I1 J, o- k0 G00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
% X( j6 @6 N( @& K5 P9 R' s' Q0040310B 83F8 02 cmp eax,27 j- w8 f% e6 f y2 U
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳, }; ^4 H2 |' _+ p) A0 c9 I/ p4 \- V
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]8 x4 y; O! s8 c, P) R
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
2 Q1 k) c/ U: t6 |2 x; P0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
1 e+ Z) [) j- W$ S& |# a00403122 8D4424 30 lea eax,dword ptr ss:[esp+30] k0 P. a+ Y2 B; Y
00403126 6A 01 push 1/ D( j9 I4 H8 I! W6 b
00403128 50 push eax- t# D& }3 u1 l
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]4 F) L1 U5 g2 L3 v) I( R& P& K5 \
0040312D E8 C4550200 call qsr.004286F6
" y; y& p* Z& n' C00403132 8B00 mov eax,dword ptr ds:[eax]
2 T, l4 v8 V8 j9 C8 Y1 E00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 g- ~' C1 o8 o( _, ], f8 f00403138 50 push eax7 Y' Y) s7 C7 R3 E: K
00403139 C64424 40 04 mov byte ptr ss:[esp+40],47 M, Z$ z% r" m+ c0 t- x0 f7 o
0040313E E8 4D560200 call qsr.00428790# B$ Q" \& y3 Y" d7 D; o7 _0 `
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% K5 ~/ y" f+ z) z+ I& h4 f" K00403147 8BF0 mov esi,eax+ ?& L F! {% ` E) ~! |/ T4 @
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3* B' M! y' a# j* l4 X5 `
0040314E E8 38C30200 call qsr.0042F48B
: ]+ w( C- N4 o) A00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
0 j- U1 W3 _) p5 j* Y n! I00403156 B9 3E000000 mov ecx,3E
& J- { u1 R+ D% s: e' D. m8 Y0040315B 99 cdq& ` i& ]; P3 m2 C* A4 M
0040315C F7F9 idiv ecx# ^& l( Y- I" e6 ]
0040315E 6A 01 push 11 i- ]; O& N A
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]% \" f' w8 J7 S, K9 v# _4 S: Y
00403164 8BF2 mov esi,edx
6 \0 @1 m) w* w" p00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]) e2 W' { a7 q" z( E
0040316A 52 push edx0 n7 z; b1 A# E4 @6 {% K2 s
0040316B E8 0A550200 call qsr.0042867A- h7 b: H; m `0 V0 t; W* C
00403170 8B00 mov eax,dword ptr ds:[eax]
; J2 N/ E/ R% S6 f. d. a R00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
0 E Z v5 ^7 Z* S8 I00403176 50 push eax
% H$ Y# A" ~1 P6 h# x# S00403177 C64424 40 05 mov byte ptr ss:[esp+40],5 v! C3 k& ]* O( H9 l, @* D& [2 f
0040317C E8 0F560200 call qsr.00428790) p2 Y6 t: E% j
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
! v: {4 l; i9 v. t2 i4 o, }& b00403185 8BF8 mov edi,eax
) c$ y* y$ B) V: T+ f& o00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],35 K7 R+ h: R& R) T: a% U J
0040318C E8 FAC20200 call qsr.0042F48B
. I3 R' y% p% X5 z! X# S: g, E00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
, d* H4 o- i1 B0 |" U00403194 B9 3E000000 mov ecx,3E
9 @. s* u7 `$ G- e00403199 99 cdq
: R! v; A2 S5 h0040319A F7F9 idiv ecx ?& W; l2 @; z8 x" x K( j8 f: L
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
9 y- z" Z5 A6 T$ [0 C$ F004031A1 894424 28 mov dword ptr ss:[esp+28],eax
) N: x! G% W7 x& r004031A5 8BCA mov ecx,edx
9 s2 y! a: c8 j- y0 n004031A7 894424 24 mov dword ptr ss:[esp+24],eax
* l i' @/ z; W004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
* `, L. N o6 G) I* w004031AF 894424 18 mov dword ptr ss:[esp+18],eax" m6 U7 l& n' {5 B. S9 d0 u% |
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
) [) x8 F9 \! _4 U2 V004031B7 894424 10 mov dword ptr ss:[esp+10],eax8 _; o [6 f2 `- J! r* D- I+ B
004031BB 8BC1 mov eax,ecx
, H3 m5 Q/ z3 w004031BD BF 0A000000 mov edi,0A. Y) l. z% S) q% Y* x
004031C2 99 cdq3 `# W* D! R6 D$ k/ D
004031C3 F7FF idiv edi" r0 j' b9 X+ `9 ~; t
004031C5 8BC1 mov eax,ecx
5 B0 `+ R/ i! _# u004031C7 B3 0B mov bl,0B
, O' Z+ t, T* A2 x# v$ n* I3 `004031C9 0FAFC1 imul eax,ecx" r) R+ r1 O& n* J t6 h$ ^1 g
004031CC 8BCF mov ecx,edi O3 |* I6 ~# `) Z
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl) R" M( d' s9 i4 r
004031D2 52 push edx
( v1 t, M4 }% {/ R* d! M3 W004031D3 99 cdq
# P6 o8 j& y. U004031D4 F7F9 idiv ecx
) D( d3 w0 Z$ |, p( h3 R! s004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]5 j( A$ R5 c, l p% C9 B
004031DD 2BC6 sub eax,esi
/ i1 H; `8 e5 [! E004031DF 52 push edx8 e; Z# k X! L) l
004031E0 99 cdq
* M/ B( s% t/ |004031E1 F7F9 idiv ecx/ z( K2 G+ C8 d
004031E3 8BC6 mov eax,esi
2 ?) W- O: c/ y* Z. g+ V* v; x004031E5 52 push edx) m. Y2 v' h4 p6 ]: Z- A+ Q
004031E6 99 cdq2 }- U/ n; b, e7 u& N# s
004031E7 F7F9 idiv ecx
$ a( V* H R! |% n0 w004031E9 52 push edx0 v, g' V$ Q1 G8 s$ f! U4 K
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]' o+ j( U5 D8 \7 C
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"5 ^4 P* Q1 G, c, R8 X! u3 D
004031F3 52 push edx {2 l! @6 @% U* \2 c
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893. ]7 B9 l4 w% Q! X! }; L, Y0 D
004031F9 83C4 18 add esp,18% x0 @. N' \5 q8 }, f' A; I y
004031FC 6A 04 push 4" |; ?1 T# ~) {, p
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
! p1 O2 T8 r" }! A8 \00403202 6A 00 push 0
, T0 Y+ ~9 r8 F; R3 N00403204 50 push eax
/ f1 v! c, ?' L, K0 Q$ N00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]0 i. u( p7 y7 G' B0 q3 O; t' W
00403209 E8 D6530200 call qsr.004285E4
& O6 p1 O' h4 W1 p5 M0040320E 50 push eax
- l9 {8 S; g4 N' x5 a* B0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
4 h8 n% e+ u/ ?6 a0 G! }00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C( [6 H$ m+ o# q0 R0 R1 Z
00403218 E8 A7C30200 call qsr.0042F5C4, ^# `2 T( X# [2 C
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) X3 W* r$ C9 Q6 o$ e% T% a0 X$ h
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl1 S/ Q0 \- z! P9 V; \$ I: U
00403225 E8 61C20200 call qsr.0042F48B
0 M1 h% r3 d; c+ W9 u0040322A 6A 04 push 45 b" Z+ Q- B" c; P/ u
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
, ~/ e e. U9 i( ?0 k! I* J00403230 6A 05 push 5
+ c, R5 D' _3 X: Q, y00403232 51 push ecx7 p. j& W: _8 a. q
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]3 @; c( `+ M& K3 w6 C
00403237 E8 A8530200 call qsr.004285E4! a9 _$ U* L# I4 [$ s
0040323C 50 push eax! V$ Y) O/ L0 z; q3 P y1 z# i& l( P
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
- _- m0 e& {8 z0 \+ J0 x00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D6 S$ ]2 R+ c: ~1 b, `+ j6 o7 X% k/ j
00403246 E8 79C30200 call qsr.0042F5C4# f2 b/ c( v( ^
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]6 V8 f7 s* q# @# j
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl! e0 Q& \( v$ s0 V) {3 F+ S' W
00403253 E8 33C20200 call qsr.0042F48B. C( `$ O; o& {' O( _
00403258 6A 04 push 48 w1 v* t. N3 q3 u x
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]7 W+ r8 c3 I5 m/ S, b4 J* N( b6 | @
0040325E 57 push edi
, c3 `5 K# {1 H7 J0040325F 52 push edx" x& F6 S/ }& o, [; x
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; j L. C% m+ {6 I# b W00403264 E8 7B530200 call qsr.004285E4
& K' T; C% }# c) c2 b00403269 50 push eax3 v+ C) M: i3 C7 V
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 J* ^: ?! }; e0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E! }- U7 G' @+ [0 \) M/ s
00403273 E8 4CC30200 call qsr.0042F5C4. V& W+ R9 g/ `: D, f+ Y
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]/ O3 S! K7 V1 D9 O2 _
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl( o6 \2 r( [6 A& ^- L0 `* f% _- h
00403280 E8 06C20200 call qsr.0042F48B( t. P l3 M# B, v N# Z* S5 A( v
00403285 6A 04 push 4
$ Y0 p% f4 Y8 g% u0 f! n00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
, b5 M m# x( o8 |' t$ u0 n0040328B 6A 0F push 0F
3 T/ X+ W% p3 f$ M- ~9 q. e+ x4 |) `0040328D 50 push eax
& ?4 M8 f4 c" S! K. p, P; N& h0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
& K) x b. ~7 W2 z00403292 E8 4D530200 call qsr.004285E49 s1 T, y. y, p2 q, n- _, o& v e8 W
00403297 50 push eax/ U v1 d# k% u0 G7 W+ x
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]. L# ?0 H& R& ^' T, }
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
7 u k% a6 x9 c y004032A1 E8 1EC30200 call qsr.0042F5C4
( q5 D: ]$ O7 p& d: W004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% M/ z- ^5 L6 o6 M004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
$ H/ {, z, w$ A! R% C- j2 e004032AE E8 D8C10200 call qsr.0042F48B! c5 R2 }4 }% t, x$ e$ }/ X w
004032B3 6A 04 push 4$ M z4 ~1 N: M
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]; k9 P2 p7 H' i% }" s6 B5 x
004032B9 6A 14 push 14
3 n0 d g# v# X3 s004032BB 51 push ecx
8 T- D1 r3 X) _6 v- F; S4 z004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; p- X8 N1 P x8 h3 K6 l m, [8 I9 |004032C0 E8 1F530200 call qsr.004285E40 e( _8 m O! ?6 t- b
004032C5 50 push eax& T- @* w7 d1 N$ a8 _; J( |' o
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]2 P2 Y- W0 P2 S/ R
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
6 ^2 L# e6 u2 s I, h004032CF E8 F0C20200 call qsr.0042F5C4$ L7 |& \9 {8 H* l5 S# x9 ~' O
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- k: R% G' K3 }* e' w! z004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
2 I9 O8 p" C! E9 ?! _) N004032DC E8 AAC10200 call qsr.0042F48B8 {* P* @3 C) }; Q! [, I* y5 ]* p
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
% z. Y( Y2 ^+ b' e3 Y3 _" w" K+ |7 W004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
# e6 Z* ]0 ~4 l+ X% i' j004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL7 |5 c% [# o3 Q5 }1 a
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL w- ?/ a! m% ?
004032ED 8ACA mov cl,dl ; DL送CL; }: \5 H* Q: B5 S) `6 [
004032EF 3AD3 cmp dl,bl ; DL和BL比较
; C" I5 H9 s! O' h$ v0 s. Z004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）" r$ Q9 `* q* e( d
004032F3 84C9 test cl,cl# U) I+ E+ ]+ d$ k9 t
004032F5 74 16 je short qsr.0040330D: u) U5 j7 G% S$ g5 d
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL9 [) D1 j1 F2 z
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL& X8 q- D5 B( A1 Y
004032FD 8ACA mov cl,dl/ j6 i! F5 ^4 o( w, N! @- P8 x+ @
004032FF 3AD3 cmp dl,bl ; DL和BL比较
9 U* c/ R( Y. W8 t3 j9 o+ Y2 |( m00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）$ z9 q+ b# A( @% X2 q
00403303 83C0 02 add eax,2 ; EAX加2
- z) b& e7 Q8 n2 B1 V, H E00403306 83C6 02 add esi,2 ; ESI加2( ~0 }' F9 X k' r+ J
00403309 84C9 test cl,cl
! a" | V3 q4 v3 [0 p2 C4 G0040330B ^ 75 DC jnz short qsr.004032E9
8 q- E+ z4 U1 S3 O0 {' o) c0040330D 33C0 xor eax,eax x0 ^3 }0 D6 z3 r. ^
0040330F EB 05 jmp short qsr.00403316
, ?( C/ T3 f2 J00403311 1BC0 sbb eax,eax4 Q N0 `( W5 E1 v& y* t' }
00403313 83D8 FF sbb eax,-1
2 n6 r; _& U) o5 I00403316 85C0 test eax,eax
. M n( \2 {( ]+ f" A" _00403318 74 0E je short qsr.00403328
5 q1 l* @) \$ @: n9 j; e0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A5 y8 i) M y! _) ]0 ~
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
2 f. u8 V k R00403323 E9 F0000000 jmp qsr.00403418) r4 a/ {/ U0 {. P9 n$ U# T, k3 H4 G
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX8 N3 g6 H& ~, K) d$ {) e
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 d( M8 ^# @7 T a
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]! B+ z! E5 I7 z ?0 A/ L' i
00403333 50 push eax3 x/ a5 j: T& R5 t
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX0 @# m2 M& U. z$ q) J
00403339 50 push eax
& q& S q7 f+ ?0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX" w" t- k" v3 y! U# a9 u
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
3 c0 |' M7 A2 j" L00403343 83C4 04 add esp,4
# V: |( F) f1 N00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
# p2 c1 H8 B/ n$ d8 A( S b1 M00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
0 }0 v" @0 _ X" g% Z0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]8 l; f! f+ S& w$ f% c( ?" r O
0040334F 50 push eax/ ?, h' h- `3 m5 L1 ~
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
- L" v1 A. Z0 P" c& A00403355 50 push eax
% E \& q" i# G; ?2 \2 ~! c00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
- G7 K) D# Y1 T/ U" l0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX5 ^. ?3 e7 G( o7 {4 y, J
0040335F 83C4 04 add esp,4
+ {# ?* D& A1 o& ^6 x0 r! {. I00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
' Y- e- q# b7 w' X/ P/ u8 B* h! q |00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: M% s, l& i9 c; N" M00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]) \5 f/ R! g- u
0040336B 50 push eax/ r6 C5 f! q9 Y$ ~ z
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
% g, G- k2 p6 ~& U3 @00403371 50 push eax* N$ \! i- ^7 ~& j
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
2 x) q) j) |" D. o9 J1 r ~' P, ~00403377 8BD8 mov ebx,eax ; EAX送EBX% l' p0 _3 _6 I4 _( ^3 Z+ `
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX* c9 l" O, u( A) P6 ^* b2 l0 T; \
0040337D 83C4 04 add esp,4/ i' n. C6 a, b; j4 C
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
5 d4 x) k: n* A- F5 d00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]5 i6 i' J; B' W# H' d+ P$ V
00403387 50 push eax
8 Y8 c) y$ Y2 E! \+ O! Q00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
- B/ M( n3 j2 K* ~5 \0040338D 50 push eax
' \, G; _# z* h$ i: K6 }' A8 y0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
" Z9 h8 i F5 u+ g( i00403393 83C4 04 add esp,4
9 y* I+ @0 v. L% R00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# g, f- U# J8 g5 p, A' N/ \
0040339A 8BE8 mov ebp,eax ; EAX送EBP
" c5 v9 x5 B& M2 A$ K' d0040339C 6A FF push -1
5 d0 l3 s1 h6 D+ `3 V0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX+ @9 @; ^5 J& S0 }( s: A) C( p% N/ s
004033A3 6A FF push -1
) m" r2 S; \" a3 U004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX; a, u6 Q% w: c8 a/ w6 j# i* Y4 z
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
. M3 H, e4 N( U- t+ |4 Y3 R% E004033AE 6A FF push -1: a" I, I. q5 {& {
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
3 u) X5 ]$ p$ @8 D, ~+ c+ O004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX8 G# u1 `- \$ K( C1 }; F
004033B9 6A FF push -1
" T8 _, w6 u/ x2 v004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
) A7 f7 V$ `& t4 Z6 \7 }( H004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX$ e. v" J% x- z" y% F
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX1 o' s: X8 M% X/ [5 j/ A
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX. h4 ^! n* B$ u* b# K8 Y9 T- x
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX, I, b* |. \9 R( G- N: [5 q
004033D7 D1E0 shl eax,1 ; EAX左移1位
* ]. y( T. V3 ~- l004033D9 99 cdq ; EAX扩展
, @5 a; y* T* v8 t/ \004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中3 W) }4 R& R+ p# m
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较$ F3 W' c0 B7 |* g" g& t
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）5 v) i% l/ G* o& v, T" q
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A/ P6 r; u: R6 D& k9 }4 E
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]; p% C4 R4 h0 q
004033E9 EB 2D jmp short qsr.00403418, D! _! y2 y4 {* @, v) A$ `
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX* h. C Q, C0 o& ^$ L9 F9 s
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E23 B* ` l# w' b1 L, y# p
004033F7 99 cdq ; EBX扩展- ?, G1 E9 t5 P0 d4 t& w
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
; Z5 g) }) F! t4 K/ |1 [% _004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
1 ?- l: R( d) k# T k0 k1 ]004033FF 2BC2 sub eax,edx ; EAX减去EDX. m" ~. {. J/ }3 {. C& w, x& q; P
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]+ R% |3 ^& F+ q. Y6 D
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
4 C, v1 @$ Z8 a+ h+ ~/ a7 A0 e00403409 99 cdq
& N/ x) D7 X6 I# k8 V- J0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
6 W% w$ S! g" G9 @0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
/ p0 q- E" t( a4 p. j00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
. I7 r7 ]; \& ~+ a# ?00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）4 q( `( X/ y2 E
00403418 E8 6EC00200 call qsr.0042F48B ;
) L, O8 [6 C- M! i2 k0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 p! m/ i" ^- j3 }% F4 ]; f
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
. w, ?4 O0 D: W, T5 v3 @00403426 E8 60C00200 call qsr.0042F48B; T% Z) b( W' L9 h; T. c2 u" K
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]" {% u, i0 q6 T. P8 m& O) L
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
9 w6 l( C7 i1 L- W) C4 P, x00403434 E8 52C00200 call qsr.0042F48B- Z; a% x4 W1 B! G4 `0 H! j
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]+ k" B( D2 u0 M
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
/ A6 f- O9 a/ a7 l$ Z00403442 E8 44C00200 call qsr.0042F48B
. y" a, ]6 B4 p. \) c- Y7 h00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]- v# g3 L4 g% ?- H4 j. v6 M/ H
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
- ?6 ^, j: ?4 \% A5 K( a00403450 E8 36C00200 call qsr.0042F48B
+ A6 @- y' F+ O/ i" k9 x00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]9 N: M- J8 C4 L" e f8 t& P
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 ~7 u9 y8 y O: ?. L0040345E E8 28C00200 call qsr.0042F48B
+ q) u) Z H, g" W00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
6 J; O m7 f+ v00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
6 X0 ~5 X1 V5 e8 J* ~; U4 H- r- P0040346C E8 1AC00200 call qsr.0042F48B
! B D# O: X) t) u) `, I/ A00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]3 @' c& f- h( w2 i! c
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1, B) V" i; o5 W& j; S. R- I
0040347A E8 0CC00200 call qsr.0042F48B
" v- E V1 p, H7 N' a" M6 f1 u* s ]0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]' c% X3 e, \7 P+ o, b4 y
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0& R9 n! |/ @- T& O& U3 s+ |& d' }4 c
00403488 E8 FEBF0200 call qsr.0042F48B
' S7 K7 k! S R$ u9 d6 h0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]; g7 @7 Y i8 M5 S2 ], Y3 W; o8 m
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
~% W/ a' F3 s4 r00403499 E8 EDBF0200 call qsr.0042F48B _. w+ w1 d# \0 k
0040349E 32C0 xor al,al ; AL清0- s: \" M% M3 t& I0 ^! `. v
004034A0 E9 88000000 jmp qsr.0040352D
; r2 K+ f4 K8 L, I6 L% b004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
/ d7 U' M( b+ ^. z004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 N, ~, b5 f3 ^' a$ Z: m( n) Y8 |004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9& R0 R) Y" d+ d3 \
004034B3 E8 D3BF0200 call qsr.0042F48B
! S9 C/ D9 ], S a- D004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]2 P+ z1 ^" ~' u
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
* Z5 H( z" S* N2 \) m2 c6 [004034C1 E8 C5BF0200 call qsr.0042F48B9 @6 f5 k3 h% ]% y" m5 G
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 I1 K S" h4 t) o7 s3 ?# B1 K
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
, s( g& z k2 ]004034CF E8 B7BF0200 call qsr.0042F48B
" h0 }4 i) N/ X7 s( E3 ]004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24] G7 ^& W# [, z- P
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
' J' R: x: t8 p% W8 e4 _004034DD E8 A9BF0200 call qsr.0042F48B# N0 o+ o9 f$ j
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
& ]1 | d, ~, Z004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
5 Y' P- i3 B6 r0 [004034EB E8 9BBF0200 call qsr.0042F48B
- y6 B$ D* Q6 n+ G% a- I5 Q/ A004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
" W' Z; b2 @6 R9 [0 X0 o$ J004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
7 i6 M# G* W2 p1 Q: S+ \ o e004034F9 E8 8DBF0200 call qsr.0042F48B- Q* Q( B2 s6 o+ v. z# b ^
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
6 @; `6 ~, \3 H3 |$ _00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1- K# d G: g6 Z5 n( D( _3 E. T8 o
00403507 E8 7FBF0200 call qsr.0042F48B
$ V8 F) X; W' Z0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
6 p6 Q- X7 e: G0 V$ }00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
, d* Y2 x3 d6 h# D$ [00403515 E8 71BF0200 call qsr.0042F48B
( P' T) `% r; f/ c; L+ A @ G/ D1 _0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ c2 n, q6 ?9 ?4 [& j# W9 U3 H5 l U+ j
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
- o' L9 _+ r% x. m, ]6 i* {+ f* x00403526 E8 60BF0200 call qsr.0042F48B6 R5 |3 y$ o- r0 Q0 L3 R8 h0 g
0040352B B0 01 mov al,1
: L% B& o/ ?% y7 e0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
7 j4 ~5 E, p! a J4 Q1 [00403531 5F pop edi
% Z- ^; |( L! A6 u( ^00403532 5E pop esi" a+ Z+ ?5 E0 q+ N4 O8 q- N1 l. t
00403533 5D pop ebp
8 e0 l4 g! |3 n' [, S) G& ^00403534 5B pop ebx
4 Z/ ?3 f2 G* r4 a7 r- e1 b. h6 y00403535 64:890D 0000000>mov dword ptr fs:[0],ecx1 K1 r: `' k6 g* r7 @% Q- e
0040353C 83C4 30 add esp,304 t# `7 z2 _3 E2 ^4 W8 G' E9 H c
0040353F C2 0800 retn 8. v+ W7 f- }0 H3 t
--------------------------------------------------------------------------------" n w; h6 k R1 _
【破解总结】
$ b: j4 l6 i8 } b6 z4 ~4 e 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
5 U4 c k9 E6 s- d$ c用户名：yijun( w4 J' b2 Q1 T% V- O
注册码：4893*7777*3726*7777*0529
9 U3 {( V! o* ~- m' P--------------------------------------------------------------------------------
5 K9 ~$ T9 l8 l' f- D【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡