|
|
|
【原创】破解Quick Screen Recorder
3 H7 S+ Z) c9 N- A0 B; n6 b; H【破解作者】 yijun
" J& I2 p$ H" ~* p( q【作者邮箱】 [email protected]
8 B6 S3 p$ [. {. z5 i& A4 O: E【使用工具】 OD,PEID3 ?* }& W! l5 v
【破解平台】 WinXP
) q6 a- P4 m: Z! y h【软件名称】 Quick Screen Recorder' E' D& I" w# _! K% W( |
【下载地址】 天空- p. H. f: E! W9 Q9 \7 J
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. ; G4 [# f! {& F1 u
【软件大小】 540K% G( P ^: _) I4 |
【加壳方式】 无
+ H* i3 d6 O" z0 v" a【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
) P) z9 v, h! [* X--------------------------------------------------------------------------------8 ^2 M9 M8 x3 _! `* d3 {& M
【破解内容】$ I$ n* U+ i) P/ g! |! r2 x+ R
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
: }9 C& ?( L! r. @; b! K+ y00404C69 55 push ebp //在此下断# }% S+ @+ u& }+ e
00404C6A 56 push esi
7 g1 E" [6 ]4 i00404C6B 57 push edi
# X4 L" a* p# s00404C6C 8BE9 mov ebp,ecx3 X3 Z5 F1 n( v6 N6 l+ {) a
00404C6E 6A 01 push 1
* T( z, c9 A- g( W2 @& N* c# D. Q4 Q00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名" Q. q% e4 c* |
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]0 c. p0 g9 V* G
00404C78 8BCF mov ecx,edi/ c4 u/ U: J3 O. \9 t
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
# g$ s* X, i( ~+ W5 a7 b7 c/ ], M00404C7F 8BCF mov ecx,edi' J! J. }9 F* m
00404C81 E8 A73E0200 call qsr.00428B2D
g2 f; z( G( @. C00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
0 B8 B, t% B* U3 q: c3 o A% Y00404C89 8BCE mov ecx,esi# t' q/ J% M7 Z$ \* M+ f$ z% n
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX: ?( |& t" P1 s' |7 \
00404C90 8BCE mov ecx,esi8 A& ^8 h# `6 a3 r$ C& {
00404C92 E8 963E0200 call qsr.00428B2D! s; l- |& T( o% D7 \
00404C97 8B06 mov eax,dword ptr ds:[esi]7 e: h* P# u3 m+ c' x" p: p8 N% Z
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
6 l# | A8 \- M: o: {00404C9D 7D 26 jge short qsr.00404CC5
. U" M( d) s6 c. j4 ^, q2 K00404C9F 6A 40 push 40
8 R7 W8 s) w# W00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"4 R6 i! z1 |; j
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."9 O; B/ C# Q; p% H' M8 u
00404CAB 8BCD mov ecx,ebp
, R$ c8 d* i; _4 l- o2 k" V00404CAD E8 C3840200 call qsr.0042D175! i, t$ r, v3 H% s* F ]
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
! K3 _5 H( t9 i00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx8 C" z6 f; D% ^
00404CBD 5F pop edi1 h/ M3 F7 \4 S4 s! h% N
00404CBE 5E pop esi' C# w% ^6 a S( P C& P# G9 O' V
00404CBF 5D pop ebp
) l+ C6 d8 g6 {' @- S# F00404CC0 5B pop ebx! ~- r$ O# L) u/ [+ o0 J1 _6 n
00404CC1 83C4 18 add esp,18- I8 z5 L* \. a) }# @0 o
00404CC4 C3 retn0 X: U$ T. t3 D) f. X! [
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]" v5 u+ i r( O
00404CC8 84C0 test al,al, G2 b e" K3 r' g7 b% K# `7 u: `
00404CCA 0F85 1C010000 jnz qsr.00404DEC
+ }; d0 N8 @; g, _00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]. j" E! I1 P9 E* u3 T2 A; d
00404CD4 E8 87E3FFFF call qsr.00403060
/ C9 }0 L# _& s3 q# J00404CD9 51 push ecx0 o& A( v2 ~" T7 {' }4 C& y8 j
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
, V1 u' f5 k% U3 ~ Q2 Y q00404CE2 8BCC mov ecx,esp
$ h7 h6 C: i& [00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
& K5 q$ ?8 B8 w! l7 i+ z2 W00404CE8 56 push esi
6 E9 n1 }8 }! A/ |" ?2 F( ~+ Y00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
8 S. f9 z" T7 x! r1 t0 X00404CEE 51 push ecx
0 }8 J* u# h6 S1 R1 t. E: W00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
( ` f" g; e3 J: }, L9 V, f$ H" d00404CF4 8BCC mov ecx,esp
$ M3 q9 K9 p: h0 P; h+ M00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
! {! t* |% q c; G00404CFA 57 push edi
3 B6 U+ a% ^+ b, Q% y- z00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0; k+ _, X& k5 ~+ y
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]; K- g' ^0 f# k) @: Y. A
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
6 f, M: d. `& m6 T4 L! q00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
7 A9 z; C/ u2 i8 {$ q: ]00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
; H3 D7 J3 c0 l0 I00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
2 c0 s& X0 ^- f9 z T; ]00404D12 6A 40 push 40
( q; }+ i3 ]3 N00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"5 W- R0 d" {; f" e: k
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."8 O# U) G0 e7 W( V' s
00404D1E 8BCD mov ecx,ebp* w! t) {7 L& B( [ X- [3 ?
00404D20 E8 50840200 call qsr.0042D1759 c: f8 u1 N; `; P+ A
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
8 K# H/ f: H* C4 [00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1# J2 }2 c4 `9 ?( r( o3 e
00404D31 E8 5AE3FFFF call qsr.00403090( V( o& s$ {0 n& n( v& O
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
' U1 O9 S; Z* F8 r+ |00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
' a9 G3 f) E) ]) @( a8 i00404D41 5F pop edi0 h8 X: R- ~ s$ m a/ y
00404D42 5E pop esi
3 |0 t; g1 W' k/ X00404D43 5D pop ebp
7 S& b/ T, c7 W+ [& K' S6 s& _- z00404D44 5B pop ebx
9 M1 E" M% z4 h00404D45 83C4 18 add esp,18
- E% I, q, G5 Y. }9 ?, Z1 C00404D48 C3 retn9 J4 E/ t! s/ S2 g2 F
*********************************************************************************************************************************************************
" v" W0 ^+ Q; A0 _0 ], T8 n跟进00404D09处CALL来到：
( F3 [7 d* I: l2 ]004030A0 6A FF push -1 //一路F8下去~~~~* @ X, C: P8 n
004030A2 68 C88F4400 push qsr.00448FC8; x. s C7 q7 Q+ ]
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0], {* ^6 p7 _# j' k
004030AD 50 push eax3 p- u' h$ r: V3 F- M. {8 L+ ^
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp# w, t9 W3 s0 Y3 t# g/ Y# k8 W N
004030B5 83EC 24 sub esp,24: r& S9 a7 f" H* N, l/ x
004030B8 53 push ebx
3 |$ `1 E n( u! H+ [004030B9 55 push ebp
& F% e/ K, S% ?4 w9 \# N004030BA 56 push esi8 v! c3 V* {- E! r
004030BB 57 push edi
# O- g4 L$ N* S) C004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
7 n7 e) E* J5 v# b% j004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]! G5 \8 R; e9 l1 n0 w
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1 s ?8 n+ y; A
004030CD E8 27C40200 call qsr.0042F4F95 I; t8 N( x: j5 }& }
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
0 m, H( C! }) A6 J5 Z' M004030D7 894424 2C mov dword ptr ss:[esp+2C],eax: a) v8 [" f0 |8 e: s! i5 ~' M" s
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]/ D. y3 `. B' g) \- j2 X
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
. Z }+ Q! u6 t1 ]9 @: _6 m004030E4 E8 905A0200 call qsr.00428B792 z% ~# }: \! t. [ a6 \
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
! B+ A, a4 h. l3 d- I004030ED E8 3B5A0200 call qsr.00428B2D
% j! H' m# d1 c8 @9 q+ c8 i) X004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]* _ U/ F8 j7 m# E/ n/ p( G, a
004030F6 E8 7E5A0200 call qsr.00428B799 Z( a4 B* F5 ?* _# j4 E9 V
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]4 g) S/ e0 K6 z% ]* \/ y2 B, t
004030FF E8 295A0200 call qsr.00428B2D
! `& }& Z U* n8 X% G00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]8 ~' I1 K2 O! j$ A" C! F
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
2 N( m4 Z' i$ ?; x9 x' Z: M( ?0040310B 83F8 02 cmp eax,2+ A( b& Z: y. t: F3 E7 |
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
9 X" N+ A& B$ x1 F/ s9 g1 G00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]' q" }2 P( d$ F& f( S
00403118 837A F8 18 cmp dword ptr ds:[edx-8],182 |0 {0 E# l7 D3 l- J
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳- t$ G- }7 o) I3 {6 d
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
M/ J* J! S* [# {5 f, w00403126 6A 01 push 1
7 l; E: k6 D* J00403128 50 push eax
Z9 N0 }8 }* {: q% x00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ G. _. R% i/ D# B0040312D E8 C4550200 call qsr.004286F6
9 N ]- R: k7 G [00403132 8B00 mov eax,dword ptr ds:[eax]
* T+ A) e$ a5 j B/ r00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]) r0 h) k) m" C' Z+ _0 M8 z
00403138 50 push eax. `: V' ?: U! i! K; V8 W
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
# k- S3 W6 w# N0040313E E8 4D560200 call qsr.00428790& T8 N- m4 V8 b O+ x" q
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30] ?9 w9 _! A: K3 t0 B% d9 {
00403147 8BF0 mov esi,eax' Z& p! l; y7 }3 Q+ ?, o4 y+ @
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
7 w5 D0 _% h1 c0040314E E8 38C30200 call qsr.0042F48B
5 Y: W; ~: h( K/ `& l0 l00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
. u& ^0 c( c# R# ?' Z00403156 B9 3E000000 mov ecx,3E
( i% q4 v+ M1 f& `0040315B 99 cdq
7 c( y8 q, w8 B( T# m9 ~0040315C F7F9 idiv ecx- R( B, L* j1 [! ^5 n) m
0040315E 6A 01 push 1
' N/ G. q/ w5 M4 r3 c M! Y00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C] G" p# d3 X# R0 t5 l3 Z3 m9 m( t- s4 Q
00403164 8BF2 mov esi,edx
3 J& {. h2 O& b5 U00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
4 W& O% q" \2 h7 x0040316A 52 push edx: z5 a$ p1 J6 a; Q8 X4 G
0040316B E8 0A550200 call qsr.0042867A( R2 k j4 N- h+ L, ]$ w! e& H' Q; ^0 Z
00403170 8B00 mov eax,dword ptr ds:[eax]
# }/ J- H: e# k) B+ b00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]8 z' }. h) g$ H+ z* |9 S
00403176 50 push eax
- t: o$ o- ]! [9 V4 H& y# j00403177 C64424 40 05 mov byte ptr ss:[esp+40],5( o4 @4 S6 e6 d- {
0040317C E8 0F560200 call qsr.004287902 K$ z5 m, |. b: D6 W6 i4 Q
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 }5 b) N [- Y* W' ?
00403185 8BF8 mov edi,eax8 ^9 J: _$ C n1 J4 R* v/ m0 D
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
; F" m0 j3 n* l2 |; @0040318C E8 FAC20200 call qsr.0042F48B
* {7 W5 U# I( p- o00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
# I6 Z7 F# y! o9 Q. T Q1 }; L00403194 B9 3E000000 mov ecx,3E
: h9 ]# s" D( u. h7 W3 w; `00403199 99 cdq# T+ \; {% v4 ?( V0 x
0040319A F7F9 idiv ecx
o" y) T' I8 K+ u5 Q) j+ c0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]6 C$ [1 _9 X4 T1 x
004031A1 894424 28 mov dword ptr ss:[esp+28],eax8 R# {% ~ {3 g/ e( N2 @
004031A5 8BCA mov ecx,edx9 m+ Z- l$ P7 y
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
" _) G- n6 Z) d$ x% |5 S$ \# y004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
" n! `$ x, B# ]004031AF 894424 18 mov dword ptr ss:[esp+18],eax& Y/ b/ L, s9 x9 q+ U
004031B3 894424 14 mov dword ptr ss:[esp+14],eax7 ?4 g. V" V# F* ?
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
2 O1 C( @9 U4 H9 E: ?$ R; z* u004031BB 8BC1 mov eax,ecx L0 i/ V0 ?' V; r
004031BD BF 0A000000 mov edi,0A
8 ]% W3 e, }3 l" J4 V& E5 b6 c004031C2 99 cdq
4 u) t, C, N6 c4 ~8 \6 ^7 W, Q004031C3 F7FF idiv edi& u: w8 W" i+ w9 U
004031C5 8BC1 mov eax,ecx
4 F3 X: {% S) e3 i1 K004031C7 B3 0B mov bl,0B9 b; Y9 D6 I8 B% f% h2 g) T
004031C9 0FAFC1 imul eax,ecx
. E( | x+ D# s004031CC 8BCF mov ecx,edi6 [& V5 W( j- e% E! {
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl4 h7 Y" N3 Q. a" v1 L+ j9 V
004031D2 52 push edx
; H _+ C7 X( v" ~) q004031D3 99 cdq
- t# Q+ P& { V0 A004031D4 F7F9 idiv ecx
1 P4 P9 p# x+ y# [* x1 T+ e004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
/ H. B9 l% q! J: N7 `9 l004031DD 2BC6 sub eax,esi! j6 d9 z9 Z' J; r: M X9 a8 i. p
004031DF 52 push edx
+ t2 e* h% |' [. p9 r004031E0 99 cdq
( J8 W: j* F; z& d" H004031E1 F7F9 idiv ecx7 j( ~6 S$ }/ t2 U* z0 @
004031E3 8BC6 mov eax,esi, ?% A# F" M! x# ?7 H
004031E5 52 push edx
. |- p) V2 _4 }" e0 T& H/ k ~ Z004031E6 99 cdq
8 b$ k! T5 p! W& J6 V004031E7 F7F9 idiv ecx. [: L) L; T; y+ X0 Q
004031E9 52 push edx0 F8 J; ^. `5 Y7 t
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
6 i( v2 }3 l2 o5 K' p* H8 N! B: [004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"+ ] |: x7 \& V% ^; x2 k. m4 @
004031F3 52 push edx; W4 p7 l# Z1 d
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48933 Z$ z$ a, \5 Q5 P$ s
004031F9 83C4 18 add esp,18
; }9 s7 v2 M. u- {6 K0 d004031FC 6A 04 push 4) L$ y3 ?; ~- o; n4 H' |
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
4 c5 u& p1 {- h# p9 Q3 r5 V7 G00403202 6A 00 push 0
0 M4 Z0 Y, r1 R. @7 d: a00403204 50 push eax0 l6 _6 {/ @+ A* M$ W
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
8 |/ e ]- v4 t9 H7 [, T00403209 E8 D6530200 call qsr.004285E47 T! f* Q4 A% M8 K+ F) k% I8 g
0040320E 50 push eax- r( B$ t a, S2 J- z7 h
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
% G) y. ^% q y5 R0 \00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C' t- g6 q& E/ Y! Z [! |
00403218 E8 A7C30200 call qsr.0042F5C48 i. @# K6 P( m" a! L) U, |" @
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- c0 j+ J# l" e, P
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
0 g8 ~& }- r8 v00403225 E8 61C20200 call qsr.0042F48B$ o% f6 \2 B0 S5 a" ~
0040322A 6A 04 push 4
; X+ v+ R" c) ?5 F# z7 @0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
1 F: B0 R8 k' R" u- C7 w+ m+ c00403230 6A 05 push 5
: m& y- m6 J. q, Q6 ^) J& e3 \00403232 51 push ecx
+ Q+ W; | _0 V00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]3 p& X5 b1 Y3 t7 P `* b, q' q
00403237 E8 A8530200 call qsr.004285E4
0 ]" w) E2 X& x* v9 H0040323C 50 push eax6 Z3 ^9 T, X8 e0 t
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
* [& H# {, ], o5 c8 Q+ u8 X00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D/ I! ]1 N) M, g* n% h
00403246 E8 79C30200 call qsr.0042F5C4
. j. G2 F5 u O h* E0 k' @3 \0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
0 N3 A" t) {- K. g( }0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl3 k& ^" k* I# B& k9 S- a
00403253 E8 33C20200 call qsr.0042F48B J8 V' A' i% ]0 M# H" c' h! O# a0 I
00403258 6A 04 push 4
# O. U4 o4 J8 U( s+ ^0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
. Z+ N3 Y9 a- ^: T% t0040325E 57 push edi4 h; P- O4 V/ p/ n) W- A4 Y
0040325F 52 push edx/ U4 F/ z* X' G `5 C& o/ m
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( H6 W2 C$ |: [5 @# b0 V6 ^
00403264 E8 7B530200 call qsr.004285E4
- c9 P$ I% i6 t) C& T00403269 50 push eax/ s: W9 N8 Q7 u4 q& p4 H2 r
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
4 \ V' O3 E7 L9 l9 H8 n. J0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
6 X7 n; U4 a1 K# @- E1 u2 U00403273 E8 4CC30200 call qsr.0042F5C43 f7 C5 n# O' |* D6 m. F; q
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
8 t! [3 V2 V. R$ p8 Q( s0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl1 ?- P" L& u5 c0 t# q8 A
00403280 E8 06C20200 call qsr.0042F48B' h4 b( B' w/ V/ R; E4 |
00403285 6A 04 push 4
3 }# O+ n+ b6 p' H00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]" s- Y9 X: C+ C! C9 P3 Y9 F% _( n. t6 I
0040328B 6A 0F push 0F
1 F' x. z# V, [" E) B0040328D 50 push eax4 x4 A( }3 f& y3 j% G2 _ N/ A I. M
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]$ J* |: Y d, C; g- \/ A& A
00403292 E8 4D530200 call qsr.004285E4: }8 |% T$ R/ s) ~8 S. i
00403297 50 push eax
; D' {9 v9 q$ ~& C5 x00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
& B% w! U& Z- A0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F1 C- @1 s' w4 T
004032A1 E8 1EC30200 call qsr.0042F5C47 Z9 ^+ a. X* }: |) H o
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ S7 R- D6 E. p# R$ L# D004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
; M9 G: r# k$ E/ K9 c004032AE E8 D8C10200 call qsr.0042F48B6 Z$ c" x( G+ | O1 x: b0 B
004032B3 6A 04 push 4
6 T$ F3 M- n# d1 s9 j$ D- k004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]0 C h9 S* A1 h% V8 f! L
004032B9 6A 14 push 14+ Q/ j% j' m5 n' U' ~# ?, y5 b
004032BB 51 push ecx4 S7 w* ]+ h6 y
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]6 b1 L$ A d5 z9 K
004032C0 E8 1F530200 call qsr.004285E4
: ~& a- f4 r) ]4 ^- k Z004032C5 50 push eax
# p8 Z8 P: i; A. A- y8 F004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
6 u2 `! w6 ?0 @4 T% W004032CA C64424 40 10 mov byte ptr ss:[esp+40],107 [9 n+ a' S* Z$ i# `
004032CF E8 F0C20200 call qsr.0042F5C4
% Y6 ~9 J& X. S004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 G, o+ `$ W. q004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl" Q2 l5 N8 J6 Z1 \
004032DC E8 AAC10200 call qsr.0042F48B
7 }* ~' ~+ ~1 \' Z) G2 v% c004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
/ T. J/ o; [& Z/ _004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX ^2 o4 {+ z9 p) K$ o6 e8 ~5 W/ m7 O; Y
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL4 r3 `% F1 U5 f- S: ~" L
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
! P& @: ^3 Q, ]4 A004032ED 8ACA mov cl,dl ; DL送CL. I- D0 m( q# c3 |" X6 P+ V8 f2 W
004032EF 3AD3 cmp dl,bl ; DL和BL比较8 {' R4 K' n3 g: Y9 N# [+ G2 S* c- q
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）% V4 p1 C [" J; C. g; J6 B
004032F3 84C9 test cl,cl' W, l$ z4 \9 i4 c$ D
004032F5 74 16 je short qsr.0040330D' I1 y+ s6 {# t' S% S" r/ t
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
t5 x8 r4 L; q004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL ?9 F7 n" ]/ Q0 h/ o1 d
004032FD 8ACA mov cl,dl. a; Z* g& b' K$ ?
004032FF 3AD3 cmp dl,bl ; DL和BL比较
& z6 M+ o% `& x# o00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）+ Q* g5 m' p) \, l$ c
00403303 83C0 02 add eax,2 ; EAX加2
/ z7 J# f; ]- v4 C00403306 83C6 02 add esi,2 ; ESI加2$ W4 u6 w W" L5 X' P
00403309 84C9 test cl,cl
8 s+ p% C4 K- b% M0040330B ^ 75 DC jnz short qsr.004032E9
% I# x* K& w" { D+ u, U- U0040330D 33C0 xor eax,eax3 D7 ]6 j2 `' R$ ^2 \3 t
0040330F EB 05 jmp short qsr.00403316# t: F0 X( \1 a. p* _; R5 u# _1 R
00403311 1BC0 sbb eax,eax
; a. ^; {' j$ {00403313 83D8 FF sbb eax,-1 l5 l8 a$ G: ~$ W5 U. J
00403316 85C0 test eax,eax
6 l7 i8 x+ H+ g& m d00403318 74 0E je short qsr.00403328
& ~8 c5 `8 ?# k- S7 s0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A, B, s( S* U% k5 t0 _
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
1 \( j& |2 ? }% B5 k0 y00403323 E9 F0000000 jmp qsr.00403418
2 C, s) m& r8 X; L% ~+ u00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
& b; I M* D# `2 r0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& U o+ M# c; \6 \4 R0 T7 G* }00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]' @/ u6 \+ }( S: z' E( V
00403333 50 push eax& ^0 P. n. c5 @ d6 m
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX# o4 w" E p' Q Z, Z( ]
00403339 50 push eax" Y A0 ]8 ^% r: V3 h$ Q) i* o
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX6 G. f% j0 _8 i1 i2 H
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
P8 E; ~$ _: @) E7 m00403343 83C4 04 add esp,4
0 a- F: r5 N4 B) `2 ?00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
( E E m& @* o+ d6 X _5 |00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
- v1 H t, S+ \$ U. Z5 Y. R0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
7 u P# A6 L& N/ H* ^" }( C6 \% c0040334F 50 push eax
% h4 n) t9 @; }1 X/ M00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
6 x2 ]# {# E$ J* j00403355 50 push eax5 C# F$ B5 B- ~& P) B4 \" g8 l
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
0 m) H% P# S7 @7 z" {4 O% f0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX( |- F' e _: E- v/ s8 f
0040335F 83C4 04 add esp,47 ?3 D9 c5 E2 Y1 v# o* b9 E
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI( ]( t4 r) c$ S) k# C/ ]2 B
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 Q1 a c$ }! X8 G' v00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
7 S; w; ^% d$ Y6 y0040336B 50 push eax6 X+ m0 E/ _' U( Z
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
$ j0 s3 a8 w* H" k% r1 D; o8 Z0 _00403371 50 push eax- f7 H3 X9 t) p
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
# B5 D! M+ @$ Y! ]% B/ N7 S/ {00403377 8BD8 mov ebx,eax ; EAX送EBX
- ^. T( x2 V& v5 a8 f+ d00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
3 f: M- Y% H) E& P( ^" d0040337D 83C4 04 add esp,4
" a! P2 O5 B6 n2 C" _; a7 Q% H00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
$ j0 v7 M3 `' a6 J00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]5 k+ _- b( O1 _5 a) K) b9 d' q
00403387 50 push eax3 `8 K: P" a1 J% q M8 I4 Y
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX, a% i o. s; A/ g% u o b
0040338D 50 push eax/ @8 n5 f* a* c2 L8 x( m9 B) C
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
& O% l5 @% u( y3 L. a00403393 83C4 04 add esp,4
- V9 g0 R- I9 G2 I' f( s/ U00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]. O& i+ Z+ ~" r, b$ g3 \- E
0040339A 8BE8 mov ebp,eax ; EAX送EBP
" b9 @8 t7 X1 z2 @- _/ q p) Q0040339C 6A FF push -1 Q" Q6 H' o: U( c+ ]4 j& G
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX$ M5 b- d2 [% n0 b
004033A3 6A FF push -1+ w& }4 u0 r5 j: E5 U: C
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
7 J0 R" p# }1 Y" F! p, O2 w( N004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX; N/ ^8 {+ U3 P: u4 S
004033AE 6A FF push -1. M, @# N1 n5 V& f+ {9 J8 }0 Y
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX' F3 G1 N3 ?/ [# h
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
) R" ^9 o# L" I004033B9 6A FF push -1
; t2 U" S" J2 ~0 p004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX! j; K) [0 @) r: e* o! o
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX' E2 ?6 b3 p$ n( U* @
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
2 `5 W& g) r9 ~; w' k* T0 W- b( U004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX9 s, V s# F* c' X0 D
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
0 P8 x: l9 C, X3 M" p004033D7 D1E0 shl eax,1 ; EAX左移1位3 ^9 ^# M7 J. L. B9 O: s N1 A9 m
004033D9 99 cdq ; EAX扩展: o7 \% t* ~/ J; ]
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
+ q# h& p; g0 D3 f004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较5 `9 I& H7 Q5 S4 \7 K4 @* C7 a: M
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
; m8 R, n; j; w3 `. v0 `& V" g004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
9 j/ k* [- ]0 _$ h004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
- q- [4 M2 t! e6 l8 [004033E9 EB 2D jmp short qsr.00403418, w g" C) C; S: u9 ^& D' g
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX0 i' I0 z+ B2 r c& [/ D
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E28 `2 x' Z$ q) l( N+ V$ y
004033F7 99 cdq ; EBX扩展, x% `) D+ [# F
004033F8 33C2 xor eax,edx ; EAX和EDX取异或! H/ W# n; B1 W8 D1 [
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
0 @4 q5 k5 E( u. g7 y8 `: n- J004033FF 2BC2 sub eax,edx ; EAX减去EDX
7 L( o; G5 x% _; ]% `00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]7 O, N/ H. X" }7 ^& N# t
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX {" v* g9 r/ M5 O8 O8 q+ u$ d
00403409 99 cdq; T1 t% T; L) r6 a; ^ `( @5 K( q( K
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中( H1 z' b* a0 G" c3 u1 Z1 E( o- A
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX9 C' W$ u0 P/ n& o# P* D
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
3 X' k- s/ B5 ^1 f! ~4 j00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）8 ~. f* n; S" L- Q3 v& y4 _
00403418 E8 6EC00200 call qsr.0042F48B ; , R1 m7 D$ Y( q% y
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
6 O; o9 H9 A1 \7 J00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9* Q ^! H9 Y1 S+ b' f6 A
00403426 E8 60C00200 call qsr.0042F48B+ r @; ]4 D: L/ m* X
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]+ p2 z) H1 G* z+ M" {& S8 D1 o% d
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
1 I; g3 @# O! R$ P7 r% J2 ^00403434 E8 52C00200 call qsr.0042F48B
0 |1 a( P6 e8 u U8 Q6 I00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& d. |( R6 Q0 r/ f% W1 X. R0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],70 F, V4 R6 I8 [4 n4 A1 E
00403442 E8 44C00200 call qsr.0042F48B
" F; ~: G- B1 v7 _7 r4 P3 I00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]5 n" {( f4 ]# m. a7 H. H
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6( ?2 Z' s9 \5 C
00403450 E8 36C00200 call qsr.0042F48B0 c2 ]; L4 h" L; l
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]2 ?8 t1 k9 @# L9 a8 M
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
( F- W% ~ i% _9 _% \* W8 b0040345E E8 28C00200 call qsr.0042F48B
, U3 d& `6 j5 I$ C00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]% u+ w4 \) T- N# P- q
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
" u( D% I- h9 ^0040346C E8 1AC00200 call qsr.0042F48B
5 i9 f8 C& O9 b9 G$ x9 _& j00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20] X1 ?- H! m! D8 G1 z4 R4 t ?* j" ?% N4 v
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],16 O) [3 [2 b/ ?! ]. l
0040347A E8 0CC00200 call qsr.0042F48B2 r: h7 ~- H9 [ {1 Z
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]6 T, k% Z7 k- A& f& D
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
2 D3 v) Y6 q' a00403488 E8 FEBF0200 call qsr.0042F48B
; e. {, y( ?4 _# r3 h* B' D4 l0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]1 V0 U9 A7 z$ ^/ |* A/ Y
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1. I \, Q3 \. R; M3 t
00403499 E8 EDBF0200 call qsr.0042F48B6 T( f3 [: l0 n
0040349E 32C0 xor al,al ; AL清0! D6 B' w- m1 U. ]& J% e% e
004034A0 E9 88000000 jmp qsr.0040352D
! z8 b0 v5 f: P2 q2 H# u+ q004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~& W; K/ P8 D8 }% {& B
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' j% \7 q" u0 Q4 d# z, Z9 T' \004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
" E. h1 e1 s3 Z+ \6 R004034B3 E8 D3BF0200 call qsr.0042F48B+ v, e5 |1 B* E1 L
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
+ ~2 h3 c* B' V) Q- \3 D004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8: R" Q- }/ `$ C% }5 Z
004034C1 E8 C5BF0200 call qsr.0042F48B) ^$ U- e) v6 z+ X: }
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
X+ ?* w: ?2 ]004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
) ?- H- U; `0 s3 d5 O004034CF E8 B7BF0200 call qsr.0042F48B$ u2 D' H' G6 W2 L8 c7 x* u
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
. T8 _: _1 y2 \7 v0 b* _# C004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
/ Q$ M: E& f6 c0 T! o004034DD E8 A9BF0200 call qsr.0042F48B6 P C- ]6 G3 H. F! W
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]% @2 s5 i- Z* p2 E+ Q i8 v
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3: B/ j- u* Q' {1 L, T; R
004034EB E8 9BBF0200 call qsr.0042F48B
) |( R. b9 ^' }) L004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
9 h: E" m" X$ l$ L* n8 @1 m004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2% m) I1 d+ p, v) _! _ |$ m
004034F9 E8 8DBF0200 call qsr.0042F48B; \) L" n0 A$ R, y6 V
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
4 L" P9 j: _3 m M00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
& _" t2 L+ i/ U9 J9 s00403507 E8 7FBF0200 call qsr.0042F48B; {3 Y& P v" ]8 ~8 Y
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]9 J: T7 X' Z6 P' H" a
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
! w0 z5 b2 d# u00403515 E8 71BF0200 call qsr.0042F48B
9 g' S5 n, i8 D( }4 ^8 Z0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ c6 `8 i! I; d$ L
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
" U- i+ y& C. G, X. f& J00403526 E8 60BF0200 call qsr.0042F48B
3 S% d: D9 w6 U5 n; a" _/ P1 C0040352B B0 01 mov al,10 l H% ` k. e& j
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]- @. k% f8 @3 c* A# `
00403531 5F pop edi
0 S, y8 Q) Q5 {- i00403532 5E pop esi
7 ?) E- k" W9 G; J7 B+ {2 D3 t! y00403533 5D pop ebp
6 q% W8 T$ {( S) ?00403534 5B pop ebx
. z' T O5 O2 I4 M3 ], H00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
9 A$ Z$ M6 \& ^$ C! y3 r0040353C 83C4 30 add esp,30! l" _& K* F, _7 d- Q! x
0040353F C2 0800 retn 8
6 Q& h9 t- W3 n--------------------------------------------------------------------------------
5 Y% I$ x$ I2 W" U【破解总结】
0 j; W: ^8 R, W: G 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
* p. a! i( A3 O1 }, J用户名：yijun
/ B- y- d6 W4 t$ R: V+ q' ]) j注册码：4893*7777*3726*7777*0529
+ m1 `9 X' d( y2 }8 N G--------------------------------------------------------------------------------" d/ y2 p6 z; }; Z& i* H5 d) B6 R
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡