|
|
|
【原创】破解Quick Screen Recorder: l# t- P& _, M) q7 f3 i9 v
【破解作者】 yijun+ h, \2 w0 s! G* x; S; }( L9 i
【作者邮箱】 [email protected]8 }9 ?& a, C0 x) r$ C
【使用工具】 OD,PEID& ?5 U) D4 s3 D" K6 q
【破解平台】 WinXP( y% G0 K: w* v% T+ o0 g
【软件名称】 Quick Screen Recorder
4 V6 U7 \! I* ~ j- m【下载地址】 天空. I x! Z$ K$ @: Q. V. |
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
8 Q% [0 b7 f& G1 ]【软件大小】 540K
1 e& K2 O$ ]* C【加壳方式】 无0 I& L" X3 j- |$ K: E
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
. [+ t! r }- X--------------------------------------------------------------------------------
" w9 J, `! l! E5 `: w* _% Q【破解内容】
; ~* Q0 }7 C% ~' z/ W7 E PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
' i( U% S5 W: q* q2 o4 I00404C69 55 push ebp //在此下断- ~& y8 Y" J% F7 e
00404C6A 56 push esi
) m" ^0 s5 `" B0 K# y0 q( {2 u N00404C6B 57 push edi) y1 H; u! n9 O2 W8 A& U
00404C6C 8BE9 mov ebp,ecx9 ]$ k/ }, n8 |* h
00404C6E 6A 01 push 1; f {$ L# @3 t5 [
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
' |$ b, G' W! z" r8 u- x. M00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
& a( F- e3 q: L2 d# v. W3 o00404C78 8BCF mov ecx,edi
- d+ B( q& u0 m7 U7 ~- q9 z, L# e00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码+ w% \3 L# p5 \9 C
00404C7F 8BCF mov ecx,edi
2 _9 ` z' L& y+ _5 n- ~( o. G: S00404C81 E8 A73E0200 call qsr.00428B2D
6 q1 {6 e" a+ y/ D( V( I1 z00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]7 N1 g6 U R# ]) ~# l9 K" m. ]
00404C89 8BCE mov ecx,esi1 z8 z, P @# ]( ^! a( }" p
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX! S, U: p1 W" E8 u! \
00404C90 8BCE mov ecx,esi
. H( Z" t1 @1 O9 n& Y" ^" q3 D4 T8 ]00404C92 E8 963E0200 call qsr.00428B2D: r" C: p4 k/ I5 b# i# U9 A' c
00404C97 8B06 mov eax,dword ptr ds:[esi]* i' D1 B8 M6 h% v6 h; x
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
; l; X' ~6 T: m5 [9 G$ |00404C9D 7D 26 jge short qsr.00404CC5, t' Z% Q2 u* T" U. {5 N
00404C9F 6A 40 push 40# ]" n8 ]' u+ i& V W
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"- g! c& f: U" F& o) U: ?+ ?5 F% j
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
2 P4 R; F- v8 L& F w. V" [: X$ o* i00404CAB 8BCD mov ecx,ebp
7 N* ?: d2 h0 x/ }: x% _4 `( E' Y00404CAD E8 C3840200 call qsr.0042D175
8 E2 N7 l( }1 _7 Y4 N; S00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]* g' | C Y3 C- a, E
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx. u7 } I. d7 {2 m. x, m
00404CBD 5F pop edi
; j& N: T" I7 q7 `00404CBE 5E pop esi
; ?+ ~+ W7 n8 [# K! `00404CBF 5D pop ebp( L3 z/ w' U1 ~' b
00404CC0 5B pop ebx3 n6 Q9 F; y+ ?8 p$ c
00404CC1 83C4 18 add esp,18
d: C# z3 C7 w4 P4 O/ A5 t* ]00404CC4 C3 retn
* j8 p, ^8 {2 q! {( F00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]3 P2 w. C4 K! ^. ^
00404CC8 84C0 test al,al
4 M* l4 _5 @% N00404CCA 0F85 1C010000 jnz qsr.00404DEC2 Q* r }. r& \
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]: g a! W* \: w; A* ^ |. x+ w
00404CD4 E8 87E3FFFF call qsr.00403060- Q) t y6 r0 F* {0 Y c" Y/ }
00404CD9 51 push ecx$ t2 ]2 q7 }6 Z8 {# a
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0% s$ s7 ^" a6 T, k b$ i! U, x
00404CE2 8BCC mov ecx,esp
8 H% ~/ I/ g. R& k5 r# s6 {! E00404CE4 896424 14 mov dword ptr ss:[esp+14],esp. o8 H0 }8 H% _/ x% M6 B
00404CE8 56 push esi% _2 s2 c; f& n# Y& [) N
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
; a# ^* z" g3 R$ w, u00404CEE 51 push ecx0 t* W2 u% _: j" p) j- c
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
1 y2 o8 j* b8 y3 }% D00404CF4 8BCC mov ecx,esp
& U2 k5 V s4 e. z; c( s+ D6 `% m, P00404CF6 896424 20 mov dword ptr ss:[esp+20],esp7 o: m% @5 S& V# _. F" U1 X) Q& b3 N# C
00404CFA 57 push edi
' z; g+ L6 s( z: ?00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
) r1 ` m$ v" s z$ a6 `% I00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( Q& {" x7 l: c0 b0 B, B00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0: U+ |2 S6 N) o; e, {
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~; I5 l- _2 g: `
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~7 _7 _2 [5 }- C" v1 u" Z
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~7 ], H. h' y9 c( K- d, ?, D8 \3 |- W
00404D12 6A 40 push 40
/ O& d6 {7 A4 T. u. Y* |00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder") |# v* |# Y- T' ]; B0 O7 n
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
9 |8 I, _, e8 B( N. H* N00404D1E 8BCD mov ecx,ebp0 d% m) n1 ]7 I: P6 A
00404D20 E8 50840200 call qsr.0042D175% H# k' |+ m! B; E& ~5 l
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ q# ^$ }; |9 \/ \: h00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1/ U. f6 g5 g8 ~: q8 j$ u+ e8 L
00404D31 E8 5AE3FFFF call qsr.00403090. ^' h, w! H4 q% R, R" h6 D
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
3 I. Q/ B6 e) F6 f00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
/ H' v/ H2 E- ~- a00404D41 5F pop edi$ W' X. h, G0 L+ m! N6 F2 L
00404D42 5E pop esi
. U6 [' \$ |. m! g W7 p& S+ _; \00404D43 5D pop ebp# l H7 E4 a) O
00404D44 5B pop ebx. D) Y2 T: ~) G* ^/ [" U; l- N
00404D45 83C4 18 add esp,18( \2 R( g( Y) j* E
00404D48 C3 retn
! q2 Q4 }6 U }# Z& W. n*********************************************************************************************************************************************************
; F, C4 W0 f& v3 n0 k! L跟进00404D09处CALL来到：
8 M2 ~6 B" S9 r+ _$ J6 V004030A0 6A FF push -1 //一路F8下去~~~~ P. j# o' [' i
004030A2 68 C88F4400 push qsr.00448FC8
2 Z1 K( U v0 O/ }( f004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]' K* Z0 |, p0 ~. E4 ^
004030AD 50 push eax
5 z6 E ] v- D- Z! t; _) q004030AE 64:8925 0000000>mov dword ptr fs:[0],esp8 U# Z4 Q5 f" [& B3 C4 A
004030B5 83EC 24 sub esp,24
& y( s' |8 p8 B0 d# I# d7 ^" U004030B8 53 push ebx6 d9 ~" b: n+ ^+ @/ E
004030B9 55 push ebp
& f8 I( {" P# z004030BA 56 push esi$ K9 U8 f% X1 a
004030BB 57 push edi
$ b' \. k, N) \. y0 }; y004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890": T& Z& ^% r& P1 {
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]5 P1 Y# U, H. e2 P
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],16 _! t: ? E" {* n
004030CD E8 27C40200 call qsr.0042F4F9
# ~+ u0 b& M! d1 q9 h( m6 o y004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
8 D$ i) H% N( z: ]1 I/ y! x$ K004030D7 894424 2C mov dword ptr ss:[esp+2C],eax' ~6 z" D+ s+ `3 \
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
" r. i$ v9 r- \% y004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
" s7 s& b# g4 v4 P C! z004030E4 E8 905A0200 call qsr.00428B79
, c/ t) X7 k# Q$ _3 F/ T: Y$ Z! U004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]; Y% @& U* a! Z9 G/ K
004030ED E8 3B5A0200 call qsr.00428B2D5 w$ T5 k# ]' q" w* L& c) T
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: {7 s3 g. ]* V) C
004030F6 E8 7E5A0200 call qsr.00428B79
( z: B/ M( h; w5 o X3 V004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
3 s' g/ H5 _7 X9 @2 B004030FF E8 295A0200 call qsr.00428B2D
" w( e7 r7 d4 I! G9 F$ u; y. ]00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
9 H- D! j% O5 ^% r+ L( ?, J00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]. U( P6 i2 U* u2 T- T% }0 V
0040310B 83F8 02 cmp eax,29 I$ W$ U# M {! X O
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
/ f1 u2 y* _# e# @% Q/ i4 x00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]1 H8 ^* g, `& l7 b6 E4 o+ ?7 W$ r+ u
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
! Z4 C5 Q, E# t# ?* z0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳$ R4 I2 Q5 m. ~& R3 S! O
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
4 U+ H7 {/ G. M+ O) H7 y' U3 a00403126 6A 01 push 1
7 g; E3 G" ?$ H- C9 ^$ P2 ]8 j8 h00403128 50 push eax
# q p; f9 a5 }8 l: ?! H+ f00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" Y' @$ O/ X x9 ^0040312D E8 C4550200 call qsr.004286F6
) I" z( ?& y) u3 t4 d! o. K: _: v" M9 u! A00403132 8B00 mov eax,dword ptr ds:[eax]
* C" p8 M' g7 u6 Q$ O00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
+ W0 o( m" _ }3 g+ V3 ^4 F3 l) S00403138 50 push eax
" C) [5 \: b& ~/ m$ d00403139 C64424 40 04 mov byte ptr ss:[esp+40],4# X9 Z4 a6 r- y, \
0040313E E8 4D560200 call qsr.00428790# a4 P, E* X/ w& k$ B' ?
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]: @# v9 X) D( p- [' |) ], G: X
00403147 8BF0 mov esi,eax/ [8 f5 g* V! O$ f" _$ b* ^) p
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
( L; E9 X3 f& \0040314E E8 38C30200 call qsr.0042F48B- M* m, B: h* L' S
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
O- y A, L* c00403156 B9 3E000000 mov ecx,3E5 O: d6 Z4 p" w6 O7 }) a
0040315B 99 cdq
0 t$ x- Q' X( B. R7 ~; w2 s0040315C F7F9 idiv ecx
0 I0 N% ^8 w& v( W" [% \7 J0040315E 6A 01 push 1
' g! Y) U5 \1 ?0 d00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
) y8 T; D- z5 @* I h9 T( ?( X8 Q00403164 8BF2 mov esi,edx
1 ~- ]# V) X8 I! }& v8 t: Z00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]8 ]* }% b) K0 u, V
0040316A 52 push edx% G7 ^9 @1 \& z- z% [; H) h
0040316B E8 0A550200 call qsr.0042867A
& Y. D# A$ o0 u0 Z" g# N: V00403170 8B00 mov eax,dword ptr ds:[eax]8 C: J- r( `9 [" Y0 Q" J/ K" C& C, g
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" ^2 h1 Q: a" f1 S
00403176 50 push eax
3 V! g6 A$ ~8 O& Y$ Z00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
: i. v0 c, `3 h; n+ c' U' C- P0040317C E8 0F560200 call qsr.00428790- [0 t& f; v4 G! ~# t' S$ I. f! `
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
" q4 L+ L8 G% ? M* u0 ^% Q1 b( G00403185 8BF8 mov edi,eax2 f% m: T2 y9 u8 {- I( G
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3% `9 h B) G% X# J. _
0040318C E8 FAC20200 call qsr.0042F48B/ j+ H" T/ Q" J
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
/ j5 k8 g7 {1 Y I8 v4 M00403194 B9 3E000000 mov ecx,3E9 o# P1 |. Y/ L2 H6 Q
00403199 99 cdq, H2 `4 n/ H# e3 ?# k- c& A; r
0040319A F7F9 idiv ecx
3 c: b% }7 s; ]+ u2 x$ T9 K( B0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
) d$ B" q2 f* ^" p6 _: q+ Z004031A1 894424 28 mov dword ptr ss:[esp+28],eax/ i! M, o/ d9 f# ~! A1 ]
004031A5 8BCA mov ecx,edx; B5 ~. J* y/ Y$ ?" b& m6 m
004031A7 894424 24 mov dword ptr ss:[esp+24],eax3 d# Y9 A5 B' U6 T r$ g0 V) d
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
6 t4 B: z' a8 o4 {# o4 r8 s2 F004031AF 894424 18 mov dword ptr ss:[esp+18],eax/ f! _ y" E) j: d$ C) k
004031B3 894424 14 mov dword ptr ss:[esp+14],eax! c3 r. Z" l& `% R6 e
004031B7 894424 10 mov dword ptr ss:[esp+10],eax- l N8 u$ F$ j8 E* r n+ Q. B
004031BB 8BC1 mov eax,ecx- R+ n- u. g: `. n6 o
004031BD BF 0A000000 mov edi,0A6 N' s, `% C4 u2 C" w. k
004031C2 99 cdq# L/ z2 a+ }8 a8 A& y, l( u5 Y
004031C3 F7FF idiv edi
1 _: N) o9 N0 o% z004031C5 8BC1 mov eax,ecx
. t1 c3 m& M& i5 F. n3 v( R004031C7 B3 0B mov bl,0B
% F' D. L7 W0 r# ~! ?004031C9 0FAFC1 imul eax,ecx
/ H2 P% K. ?# Z7 L' @* K5 w004031CC 8BCF mov ecx,edi
; `2 ?6 Y( V) B) Z3 m- j004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl* i' v3 z5 z9 l5 }, L9 D0 X- [, J% M
004031D2 52 push edx
3 c# C1 p* a& A/ o- t4 O0 P, M004031D3 99 cdq3 Z. p8 M: Y, Q7 p2 s1 @0 g
004031D4 F7F9 idiv ecx
" X$ M1 K- ]( f4 t/ a( M004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]7 h$ H1 ~% t- {4 H
004031DD 2BC6 sub eax,esi" p& }: u$ u; Q E" m
004031DF 52 push edx" a$ E/ _* K9 z; \
004031E0 99 cdq7 G) L, L! N) A* C D8 a8 G
004031E1 F7F9 idiv ecx
# o0 p w. O1 M8 b$ [004031E3 8BC6 mov eax,esi, ~+ R5 B- A8 [4 z
004031E5 52 push edx
. N+ S @! B' v* i004031E6 99 cdq. z+ g9 C3 A+ t: B
004031E7 F7F9 idiv ecx) ] Q. X: _+ s& G
004031E9 52 push edx4 d f; I/ l! G6 F" c: y) W
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]3 o7 i( u, u; x
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
5 @2 Q x8 e4 u) e/ K004031F3 52 push edx: p3 H1 \! g& i$ |
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
7 l! N2 [+ a. s4 d004031F9 83C4 18 add esp,18. b" L1 f3 w) y9 X, ^, X8 C1 z
004031FC 6A 04 push 4
* N( s, A& A5 [! ]004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]( u3 u# Y1 ~, p9 z
00403202 6A 00 push 0
j" v0 C: a* B6 m00403204 50 push eax7 H8 r9 W x, U
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: [' z( m4 q1 k0 \' P. I& V
00403209 E8 D6530200 call qsr.004285E4
/ Q) ~. ]7 ]8 T5 j, ]0 b0040320E 50 push eax" F4 t& g' y+ _
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
$ E. ]2 c3 v7 r9 t$ z00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C5 I- v( v6 v" |& F9 t
00403218 E8 A7C30200 call qsr.0042F5C4
/ J0 J. `. i+ T7 ~0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ s& Y/ F! M% ~( e' e00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
7 y Z2 t7 h7 X' U" R Y00403225 E8 61C20200 call qsr.0042F48B
/ j' Z/ T6 c* L2 C$ x+ ]0040322A 6A 04 push 4
0 m. q( s. Q5 b+ S# d. W0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
/ r7 [* ?: k2 l4 l2 M00403230 6A 05 push 5% I0 M# |/ H. `+ D6 `, P3 c) @
00403232 51 push ecx
+ c( n1 \7 x2 |2 M% v6 S00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 q. j2 I! Q) u4 O00403237 E8 A8530200 call qsr.004285E4
0 g/ q* j; }1 p0040323C 50 push eax
. i/ v3 l& U" \0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
6 O# E+ T" T9 }; r! s4 g3 t1 ?7 q2 D00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D3 ?( q" t' `3 E8 `; `! a; I+ e
00403246 E8 79C30200 call qsr.0042F5C4! f0 H. u1 e3 l- R/ H7 v
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( Q& h0 f6 u+ f0 B8 ]8 \
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
6 K+ l- o# i% k# T00403253 E8 33C20200 call qsr.0042F48B
4 C' Y- I: i+ V0 p( @! _00403258 6A 04 push 4
& p7 c, T: C% ]5 u7 Z* R0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]# c3 P1 }0 e* |2 n0 {& d
0040325E 57 push edi8 \3 O, C L. c3 U' i f; H
0040325F 52 push edx
8 D# L9 k- M0 _: G6 T4 [00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
8 Z/ M& i$ U8 J; ^00403264 E8 7B530200 call qsr.004285E4
' o+ z" k' U% ]8 F$ A6 Y00403269 50 push eax
8 G6 b' y, I2 w W* a0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]! ^7 _/ K" _$ s6 R# F# ?6 Q
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E- E* N+ \7 `5 M; f3 d) T7 f
00403273 E8 4CC30200 call qsr.0042F5C4
1 D5 c& i% d* G5 B8 b! I00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 Y6 q0 J8 y' _3 }: M+ b
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
) N/ E2 ]' [- O0 G, f0 Z2 h00403280 E8 06C20200 call qsr.0042F48B4 z: _) F5 O( O7 p$ Z2 ^& M O
00403285 6A 04 push 4
. M9 h G% m3 p/ J# q9 }; c00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]& A: _9 L; T: i, k
0040328B 6A 0F push 0F
0 U B. R6 K; V" B; Q8 e0040328D 50 push eax P0 B/ n# u ?9 P* m, D
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- Z. C0 {, v$ d' [00403292 E8 4D530200 call qsr.004285E4
4 @" u2 H2 f- e0 \. K# R00403297 50 push eax
5 t/ C7 d+ x9 M00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 F- Y5 m- W$ j- s I2 O$ Y0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
* t- n# V) b0 S" ?* |3 \7 H004032A1 E8 1EC30200 call qsr.0042F5C4
0 h y3 ?: ?! x" W004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30] \6 H& F' P$ m9 z
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl4 A8 U1 C @+ v$ H
004032AE E8 D8C10200 call qsr.0042F48B2 X% e3 K$ b- z; |( |0 e
004032B3 6A 04 push 4" F/ O I0 ~2 _" A. n
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
# h& s8 j+ E& K r2 Y/ D; G1 ~1 w004032B9 6A 14 push 14
4 A, j5 s! t0 |- o4 `0 K004032BB 51 push ecx8 R. v# s0 Q% v
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]9 ]0 d5 X1 t. L l
004032C0 E8 1F530200 call qsr.004285E4
1 T$ t: |1 J8 E* i5 w004032C5 50 push eax
8 ]: Y; x* L! p6 r6 z' d004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
; i& \* q# U- n5 w( g6 I7 o004032CA C64424 40 10 mov byte ptr ss:[esp+40],10+ m) m, e2 J; ~5 T3 z: J3 _
004032CF E8 F0C20200 call qsr.0042F5C4 p$ `% j3 `2 l4 e
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& Y2 }6 f. L7 J5 b; C1 v3 T( k8 l! B004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
" a3 C, ?; R, S/ j. n004032DC E8 AAC10200 call qsr.0042F48B* J8 W5 _: p2 l: v9 B1 L! R
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI5 |9 O' x6 d7 t4 `* R& f
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX7 N% N8 N, b) F
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
4 V6 _% G% s3 z3 |% h004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
, Z; G. y4 i/ T% u i5 n004032ED 8ACA mov cl,dl ; DL送CL
: t/ T; p+ B+ R$ a% Y! i004032EF 3AD3 cmp dl,bl ; DL和BL比较
& F& s7 L! ]. j9 F+ H* Z& n; \8 o. T1 q0 A004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）3 N" w( L5 a7 [7 m! Q; \
004032F3 84C9 test cl,cl
5 M) {! k8 N0 R004032F5 74 16 je short qsr.0040330D
7 }9 J3 C* @' h. z5 Y; G3 p004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL" g, k. R0 U8 s1 h8 E3 [ j
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL1 u9 p) ~# J, P) b
004032FD 8ACA mov cl,dl; L, p' l% E N5 [
004032FF 3AD3 cmp dl,bl ; DL和BL比较
T1 @! _* W7 e00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）* O* z. z+ L) {& Z& z( i S
00403303 83C0 02 add eax,2 ; EAX加2 ^& t; D+ A$ z+ E. E+ Q& U
00403306 83C6 02 add esi,2 ; ESI加2
/ n; P: t4 ?3 V Y$ |! s! d00403309 84C9 test cl,cl! b6 m; w& h! O! w% Z. `4 `; X1 Z
0040330B ^ 75 DC jnz short qsr.004032E99 K) w+ Q! T0 | V3 k
0040330D 33C0 xor eax,eax
0 g+ ?8 X( f( K J2 C4 F W0040330F EB 05 jmp short qsr.004033169 m% p# q5 |8 Y
00403311 1BC0 sbb eax,eax% s5 N/ x/ G! i. n0 K( O
00403313 83D8 FF sbb eax,-19 K0 Q7 n+ C# D1 l F9 T
00403316 85C0 test eax,eax
9 Y% B- N) _6 x6 D00403318 74 0E je short qsr.00403328
0 z9 y' u" @1 j9 H' w/ h; z2 l, V0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A1 I0 e" w- O& A; [6 i
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]9 u0 E9 U0 W! [- h; z
00403323 E9 F0000000 jmp qsr.004034183 ?* b% x% J* a$ K/ j* k
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
. R q5 D- o+ r0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
Y" ] F8 ]8 }! v00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
( [) ?; P9 { y0 G1 g1 Q5 b00403333 50 push eax
- G5 Q* M, {8 s6 C* I% R$ p00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX6 [9 o( T" m5 p8 |. x& Q# o
00403339 50 push eax
0 q4 }2 j" e4 ?$ k0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
) z+ m2 |% T0 s8 t0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
8 V I1 F1 E# }! h00403343 83C4 04 add esp,48 M( A1 C! Q7 C# S) l0 |; [- d
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
* e) F9 p2 M' w; t( L00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]& G/ a, m9 t- a8 g1 J3 Y# ]
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
5 o5 G' H$ } |" P; G0040334F 50 push eax
/ k, q3 k) I2 e' K00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX3 Y* P7 Y% p l) j6 {
00403355 50 push eax" v5 i; F* T" B' X- {# u' J
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
1 @7 e. k% F# g1 G4 Q( C, i0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX! n2 [& G6 E; ~5 K0 [, F- r) p
0040335F 83C4 04 add esp,4
]8 l2 {8 T7 i ?7 i; r+ `* n00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
- \) V' U; H- s, c$ Z% T+ t- O; t o; e00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' p( Z$ U9 b; I$ t# Y+ {. X00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
+ y/ O) p+ o1 ?: d, q0040336B 50 push eax
4 E- v. D/ `2 H; c- p' h. v0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
/ w! v2 h6 J5 e! D [00403371 50 push eax
5 B5 l$ H/ s, o+ c* F! [) P00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
4 k" }" b! W5 }# U* e00403377 8BD8 mov ebx,eax ; EAX送EBX+ \6 L& {) v3 f: V& S, `) N
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
' K3 o" z! o7 q, v0040337D 83C4 04 add esp,45 U' ?7 g l- t; ]+ S) X
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]8 m/ a% f9 y7 y: g/ r* D
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
# }9 \1 S! @0 }0 L: N00403387 50 push eax- d* x. \# Y! c+ p3 a+ n* J5 ~. F2 x* ]% H
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
3 u; l1 J8 [& X& Y0040338D 50 push eax0 r* R, y# { i6 Y7 {
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
5 p+ _ Z1 o& R( `* Q00403393 83C4 04 add esp,4
" o# U( n) Y8 E9 w5 R8 e00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( G# Z' y V9 w6 o+ Q/ @0040339A 8BE8 mov ebp,eax ; EAX送EBP
I0 S" L" C1 }7 X) F" M( P9 Q2 X6 r0040339C 6A FF push -1
' v5 {* V/ w" J0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
' {7 Q5 E0 c X6 g. ^004033A3 6A FF push -1$ c9 ? h9 G2 r% i
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX' h' M! H; l3 x9 U
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
9 a, u" x$ M/ D) ]- H# I# v M004033AE 6A FF push -1
0 Z8 B( {1 b2 A1 p004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX+ Y; F: H& ]2 x- Z Q5 z
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
7 W8 S/ G+ [( w1 }2 t004033B9 6A FF push -1
5 |) s! e! e! ~* `" n; {004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
! M5 x8 g; f! a% e004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
) l2 E9 e3 y) `( l" w004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
7 L( z. `9 x8 S" i* a004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX, }5 N0 Z+ J( O: w1 k0 h
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX; _+ H% r! @; q0 q
004033D7 D1E0 shl eax,1 ; EAX左移1位1 g8 m$ s, \( [7 E+ b" d5 C
004033D9 99 cdq ; EAX扩展
" [! {2 `$ H, D( v( T/ A004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中+ ^# S U0 S. N8 v! e
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较, d. d( }# w, Y! x
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）2 k; T# A% x+ S0 J5 n6 P/ J" n+ h; q
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A8 ~1 N$ ~" w! D6 C# B6 |0 s a
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
9 s3 a `& b( b1 G1 q& ?004033E9 EB 2D jmp short qsr.00403418
& N* S* D9 \+ m004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
4 g7 p, r$ G8 B/ O& ~004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E27 N& c! c$ [3 ~+ W( \2 q' L }
004033F7 99 cdq ; EBX扩展
# s0 V6 G2 F- {004033F8 33C2 xor eax,edx ; EAX和EDX取异或" r5 m% t# G; d
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX$ R/ @9 D2 f) Q; q3 M
004033FF 2BC2 sub eax,edx ; EAX减去EDX
- j! _/ R+ D) L" R9 k00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
/ B% B: w5 q4 g- x* g- G00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
) @2 H9 d2 H8 j X0 T! |00403409 99 cdq
2 T( s8 W" w& l$ h( j% m+ P0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中( f4 H& c' _; i( Z+ h
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
4 G: R ^8 C) W' l00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
! R9 m0 d' T) V3 R6 M00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
+ t M* L. X2 E+ z, i00403418 E8 6EC00200 call qsr.0042F48B ; # J G/ _3 ^' d: j( M" E, W
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]1 _% E2 L; L1 G8 d# z
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
; E {6 E9 a4 e C% k) V00403426 E8 60C00200 call qsr.0042F48B
6 U5 w" [! ]1 S& H( d8 S% _0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
" p! K2 {# |% x( [: J3 A9 L5 ?" b" v0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
% u1 }6 w5 z- G$ D$ x00403434 E8 52C00200 call qsr.0042F48B. _ D1 ?+ `8 R4 P% q$ _; Y4 K
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
9 ] K- L$ Q! V- k8 j1 E0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
; P2 Z* l$ I1 n0 R9 E. z7 U0 M4 Y00403442 E8 44C00200 call qsr.0042F48B
; T+ ]1 H- i. G4 w' f9 s8 a {' j00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
9 n8 u( G5 L, Z/ j0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
" C# Z- ]% \6 r/ L# p( e00403450 E8 36C00200 call qsr.0042F48B
M8 q+ r1 a6 E3 s9 d00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
( \# L" I+ w- Q9 `6 H7 @00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
/ O) z Y% q" @& k0040345E E8 28C00200 call qsr.0042F48B- m1 f! U8 h: T- s6 q
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
0 F5 ?1 x1 m( U/ \/ X" N" Z" }00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
' Z- g" ?5 y" l0040346C E8 1AC00200 call qsr.0042F48B
) H7 T M; w) x* w$ y2 D% C00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
+ a" f" K2 s6 H( ?. F8 V00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],14 E( ^* t" x" F; U
0040347A E8 0CC00200 call qsr.0042F48B; v2 |, D8 x; K2 L8 g; ?
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
1 @$ |8 {: B A# c00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0+ j5 q4 j, w- D) O
00403488 E8 FEBF0200 call qsr.0042F48B
- C, P( S& K2 j$ i0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 B5 I( `$ H3 V1 h4 \7 Z% R1 `
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
/ p n% d' v) H3 k- r5 w* a% `; q) g00403499 E8 EDBF0200 call qsr.0042F48B+ k1 \: j; s1 G
0040349E 32C0 xor al,al ; AL清0
" {* E/ P$ Q* q5 m004034A0 E9 88000000 jmp qsr.0040352D
( z) e" B" y; |+ g004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
3 |0 b# B* l5 u* \. o004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
4 W0 N1 o% g9 t! l$ S4 O004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
! n% F5 B( n. q. I( w004034B3 E8 D3BF0200 call qsr.0042F48B
/ b$ G7 a9 _. \3 ?1 |+ L6 M004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 a( J* {0 c- _! h% i004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8" ?' @) r) q& s2 M/ T- t$ e: `* Z
004034C1 E8 C5BF0200 call qsr.0042F48B. C6 a) X! Y' D+ o
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]4 @: U0 ?5 K1 E; n" k
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],72 p+ {7 ~1 ^: D) A9 ^# V
004034CF E8 B7BF0200 call qsr.0042F48B
6 Y |# ^# H1 `1 _3 a5 J004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
) i4 i% O+ y' Z3 a1 Y( P) g004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6( c; ~6 `* U4 \ y
004034DD E8 A9BF0200 call qsr.0042F48B: h U% f1 i, \1 ]7 V, m
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
3 @% o$ q6 }4 A5 `004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
( S% K. `) T6 {004034EB E8 9BBF0200 call qsr.0042F48B
5 D& w3 f: x) U4 [% |004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
9 X0 }" x, ^ ^/ R004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
* `/ X) p( K: `: S3 k1 F2 Z004034F9 E8 8DBF0200 call qsr.0042F48B, O: O1 ]+ ~# I9 e0 @
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 F! @$ Q7 R) W00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
2 z; `9 s6 N# d00403507 E8 7FBF0200 call qsr.0042F48B
- W; K$ t7 u9 b7 z; m/ |5 P0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
8 i7 Y* L7 \& b( s00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
2 ~2 r; F: U$ g00403515 E8 71BF0200 call qsr.0042F48B
s: X, u8 L+ z. } n0 ~+ Z. V0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
. B# h/ Q, H A& o: w0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1! J( h; Z* j' S! h$ ^+ c! \7 o
00403526 E8 60BF0200 call qsr.0042F48B% P; W" A* X3 Y, ?9 k; S: Q" G1 ^
0040352B B0 01 mov al,1% O& I$ N/ R# a
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
% s! k( A* s6 T- p8 N$ w3 c$ l. w00403531 5F pop edi
' E7 E' w1 T5 ?/ O. L6 Q00403532 5E pop esi* p0 E b$ G( R
00403533 5D pop ebp/ y1 q# ~4 T& v% {9 O
00403534 5B pop ebx/ H" ^$ E! L( L) g" K
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
8 c/ A2 c# Y$ T! n/ X0040353C 83C4 30 add esp,30
% k' Q. W, I" k) C$ m2 f0040353F C2 0800 retn 8, K; y' y& E. v1 A+ n
-------------------------------------------------------------------------------- X2 w) ~5 }! _8 I
【破解总结】: q) ~" `' \. X7 `9 a5 o
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
; s: I+ T# J# s' x. u用户名：yijun
$ f+ U ?$ c8 `: z注册码：4893*7777*3726*7777*0529
, ~/ t( t# @. z8 q8 T--------------------------------------------------------------------------------$ m7 `. Q6 p* m8 n, w
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡