|
|
|
【原创】破解Quick Screen Recorder( q. |) d; ~# F8 O4 Z/ B
【破解作者】 yijun% c+ q {+ {& k: X; @* i" |9 P
【作者邮箱】 [email protected]
, p; ], _3 c' M& {2 m# k" J5 y9 A【使用工具】 OD,PEID }2 w9 ]( H( K
【破解平台】 WinXP' G( `% ~' }. F
【软件名称】 Quick Screen Recorder% X4 y1 S5 z9 w6 m3 m8 M! R
【下载地址】 天空2 _7 r2 d0 }# V' q& {- V
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 2 F. L y/ U8 p/ X7 x2 z4 m# l
【软件大小】 540K/ c3 e o* f7 v
【加壳方式】 无& O& M6 h5 S9 T( I/ F3 x& k8 e
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）* b J. H& R6 z
--------------------------------------------------------------------------------
& d3 M6 V% `+ Q0 T$ M; b【破解内容】5 X! M: q9 j1 Z! r! q: ^5 v
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：0 c/ G" R/ F$ _, i
00404C69 55 push ebp //在此下断
8 C7 ~; o8 ]6 j( p00404C6A 56 push esi
9 {7 |0 R. m5 t5 B( G* \7 J7 O00404C6B 57 push edi
7 A- ~; u1 ?" j" t) a/ Z! p/ G5 S00404C6C 8BE9 mov ebp,ecx) `9 r( m- M6 ?& P
00404C6E 6A 01 push 17 `! ], j ?5 g3 [# r- j
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名$ {& n$ g, P7 G+ O o
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]* f) o; P3 p. a8 r1 y: b
00404C78 8BCF mov ecx,edi# F3 U# D: V9 D5 Z3 |( v. m; o
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
3 Q2 ^4 \! G6 O00404C7F 8BCF mov ecx,edi
* P" q5 R6 w0 M' ~/ B00404C81 E8 A73E0200 call qsr.00428B2D1 {7 r- H1 {8 b5 D0 q% a( z
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
8 C- U" I$ U* a9 r00404C89 8BCE mov ecx,esi+ ?+ i4 u: D; H) j% ~/ `; Z, @
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX S& ^/ x$ `+ L/ Z: V; }5 X
00404C90 8BCE mov ecx,esi
, G: l1 L7 Z* o, |00404C92 E8 963E0200 call qsr.00428B2D- k' {. u4 N& W6 \, L
00404C97 8B06 mov eax,dword ptr ds:[esi]
9 j5 c6 T$ D! q00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2+ ~0 C& _5 s+ d X0 p: d: f% @7 a
00404C9D 7D 26 jge short qsr.00404CC51 m, @! c4 e" l. I. `+ r
00404C9F 6A 40 push 40$ \9 J6 t1 V1 Q3 k. x
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"" S) H( g4 P& B2 b4 w
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."+ T4 w( Y) y$ q, R
00404CAB 8BCD mov ecx,ebp
, W/ T" [9 @" G/ v2 x7 _: T00404CAD E8 C3840200 call qsr.0042D1755 W. x; ~! O' a7 n- w0 I
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]0 H. @7 _/ e! M) i' @
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
; a L% m5 o6 s' ^00404CBD 5F pop edi
: M! ^8 `) T5 U# H5 l+ s/ m6 _00404CBE 5E pop esi
/ e3 w- y; P: d" _00404CBF 5D pop ebp+ M) @* s- N' q! u9 L
00404CC0 5B pop ebx
: R& x% ?9 u: a0 b6 R7 w; W00404CC1 83C4 18 add esp,18/ c3 Y" L0 @6 ?# _; S- ~% y
00404CC4 C3 retn8 s8 }4 Q6 ?' P5 h+ h) w
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]( s) e, @) v& n
00404CC8 84C0 test al,al
' R1 t. D5 _" Z00404CCA 0F85 1C010000 jnz qsr.00404DEC3 Y) \( k: v' O) R
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
K. x2 C, G& o! v- l+ b+ c; v00404CD4 E8 87E3FFFF call qsr.00403060
: w, Q8 }4 j% J# Q00404CD9 51 push ecx& @8 z C. f& L2 w0 S; U
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0; h8 L. e3 ^4 E2 J" F
00404CE2 8BCC mov ecx,esp. a. K9 V; j& y2 I
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
# a) w5 [! |' l0 b6 E00404CE8 56 push esi
2 k, J3 D$ N: f% y9 J00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
. r" ~/ ]( H$ F00404CEE 51 push ecx% Y' n5 }" r% R
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],15 U% a7 o e8 i- ~
00404CF4 8BCC mov ecx,esp( e4 r: [+ k# n/ F
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp9 R6 ~9 E* G$ C L2 e! m* x
00404CFA 57 push edi l" n/ ^% x* W0 H3 b' x: @- \' U5 j
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0! A; {5 r7 y& d- h0 d
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ I; K) C4 @( y$ {00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0/ x" }! Z& L+ b# k! D- l& `3 t' @- s n) h
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
' D: I. F: `3 V* C00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~8 I3 [9 _2 e1 I
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~0 l* x, }' o& A3 o; e
00404D12 6A 40 push 40# e, Q5 l8 j7 v* ~- n* L3 w8 @0 a
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
& h( X6 X! ~0 C- X7 P4 x& f& M00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."6 l* m% Y! T( _* X$ q* f. [) p$ W
00404D1E 8BCD mov ecx,ebp
# ?1 a7 o7 {* A! Z- q/ M00404D20 E8 50840200 call qsr.0042D175: \* i5 i7 q3 k0 E% t
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; `$ o' Z I7 X7 C( C
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
+ t) _# l! A" `2 s# L+ d* U00404D31 E8 5AE3FFFF call qsr.00403090) K1 d, I% }6 J7 J
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
8 c7 s# i M9 C3 _5 q7 E; e00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx! V! H# U8 [2 M. i. }
00404D41 5F pop edi& b) I7 q+ x# T# q1 ^
00404D42 5E pop esi
9 f! c) M/ _: s, k$ h00404D43 5D pop ebp
7 a+ F, ^+ N1 ~. [* Q00404D44 5B pop ebx
X4 O. l6 F) `( p2 z" _9 Y00404D45 83C4 18 add esp,182 }. _2 i+ `, O0 Q' f$ X
00404D48 C3 retn$ d6 i) ~* x$ v5 d/ {
*********************************************************************************************************************************************************0 W" F# [* e3 b1 V) V& F
跟进00404D09处CALL来到：) R' f8 F# n$ D/ {0 B; f8 p
004030A0 6A FF push -1 //一路F8下去~~~~# P" Q9 i& H! ?$ |$ {
004030A2 68 C88F4400 push qsr.00448FC8
( l5 _1 c' r$ G* |9 L8 v004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]- Y; } u$ U# ~
004030AD 50 push eax, k' Q) B( I/ o0 @5 v
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
6 \5 h, d* T; F I004030B5 83EC 24 sub esp,24
( ]7 s! f! I: M# n004030B8 53 push ebx
, a" E$ p' y" }4 Q$ O& l9 ~3 h6 \004030B9 55 push ebp
& o% J" Z; X4 b0 H3 W004030BA 56 push esi
6 E; A8 M# M* N m1 u0 ]6 ]004030BB 57 push edi
* t/ n2 J2 o) e: ~3 W0 W004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"" H3 {; k% _" {3 c2 D
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, l) f4 O" ^7 [) m" D004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
- z V4 L& Z- m0 F4 L& d004030CD E8 27C40200 call qsr.0042F4F99 K# c: q7 _7 D
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
6 T- l1 s3 d1 \, d& H004030D7 894424 2C mov dword ptr ss:[esp+2C],eax ~& P& G8 i, j; A. K' ?) e9 v
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ ^ K1 X$ L- t1 E/ ]9 H& u
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
0 v: u( V3 k A6 H! ]; [" J" ]004030E4 E8 905A0200 call qsr.00428B79
Y3 M% d6 m* v/ z" I4 m004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 \; ~! T7 Q0 X3 l0 H/ J- N
004030ED E8 3B5A0200 call qsr.00428B2D
1 a- r. e+ f5 P& J ~ O1 p004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# e# [. W- z, P' X6 w2 M004030F6 E8 7E5A0200 call qsr.00428B79
# m) K& c& M# k! h; Y004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* u/ ^; @8 P; ^004030FF E8 295A0200 call qsr.00428B2D
- s! c+ b4 K: J9 A2 S7 {00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]0 h* G0 ]; \( s( B# s! I$ V3 L
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]% I. I5 d, s6 ^& N2 t' |% C2 W
0040310B 83F8 02 cmp eax,2
. M% H0 I/ }5 t' K$ N4 Y8 _, X0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
7 F6 S& L" l# D. M* \' `2 V) T5 {, @! A00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]" b2 i" W* z" \9 S3 R
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
9 p8 J2 C \, k# C n/ a0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
/ {# ~" P' K* E, o, i( S00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
/ C* Q+ ?" j! d4 p9 \% b) ^0 A& Q00403126 6A 01 push 1* Q. ^. c. R* c0 o8 q2 o
00403128 50 push eax
" C4 r0 W$ ^0 E9 V9 B: o* N8 S00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 q4 k/ R* @: k
0040312D E8 C4550200 call qsr.004286F6. ^' h8 D# c0 i
00403132 8B00 mov eax,dword ptr ds:[eax]1 C' w- L/ W2 v- h) X C2 ]
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" c: o q) O: m4 U2 M8 r
00403138 50 push eax
- x2 G; V2 Y% N# `00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
: z& q& E8 _' T+ ^0 _6 y1 I1 {% U0040313E E8 4D560200 call qsr.00428790" i, N! j' T9 G: W1 _
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ s% A: z0 f1 m5 K4 F+ o; W00403147 8BF0 mov esi,eax
9 a3 K0 t4 p& y6 ?00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 f* `6 I& |7 r/ v2 Y0040314E E8 38C30200 call qsr.0042F48B
, V; u. L" h4 y00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
1 t7 }% U% d% c2 o8 ]00403156 B9 3E000000 mov ecx,3E
3 Y( m. _" _! {$ n' I0040315B 99 cdq; j, D& q' f7 y {/ X: v% N- d$ p
0040315C F7F9 idiv ecx
) t0 T2 ] d- c$ R0040315E 6A 01 push 1' |8 P9 I. K1 ?* ?
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]& ~' J, m. ]; j9 c1 S1 y- k, C
00403164 8BF2 mov esi,edx* s$ E3 H/ ^ @! l: E# N) x j
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]3 x5 W2 f* ], F& |/ K: J
0040316A 52 push edx ~+ w$ T9 h0 M6 c$ ]" N. b
0040316B E8 0A550200 call qsr.0042867A
" k- ^# b6 f5 p( F4 j: l( i0 s00403170 8B00 mov eax,dword ptr ds:[eax], j3 i9 G6 X6 W4 Q4 g
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* J, @; ^: N" s4 {+ ]# U+ G
00403176 50 push eax: D# @3 _$ Y+ m+ y; f% V
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
" y, i% K4 X8 f1 f0040317C E8 0F560200 call qsr.00428790
: F5 T4 z" a% e5 P+ M1 i7 f# w+ Z00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 b x" E4 F7 ]' F
00403185 8BF8 mov edi,eax5 Y# {! ]4 e1 q& V& a* ]
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
; K2 \, T3 M3 s/ b% w- K0040318C E8 FAC20200 call qsr.0042F48B; C- G; L/ E" y$ e' o, d
00403191 8D47 0A lea eax,dword ptr ds:[edi+A], M( V, I4 I. Q! ^2 s
00403194 B9 3E000000 mov ecx,3E
9 Z# ^- j O! n8 j( N* ]; w00403199 99 cdq' e" h6 p2 @4 _& d( u5 l# w: ^ W
0040319A F7F9 idiv ecx
3 l& W* B! G& w0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
8 N- P& f+ D/ m) b6 \$ C/ x004031A1 894424 28 mov dword ptr ss:[esp+28],eax
7 @- t& h9 B# h5 L( w0 _8 H) H) w004031A5 8BCA mov ecx,edx K. m) Z- D1 o* _( w6 R( R3 I5 j
004031A7 894424 24 mov dword ptr ss:[esp+24],eax; z3 [* R$ Q; B: L! H
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax$ F, y( t2 C9 S [
004031AF 894424 18 mov dword ptr ss:[esp+18],eax3 P% {1 ?- t" ?0 [+ l% Y: H. h
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
8 Z4 A v1 a7 N5 q& @$ \004031B7 894424 10 mov dword ptr ss:[esp+10],eax
7 T7 @: j0 z3 |* N+ A/ x004031BB 8BC1 mov eax,ecx: K: ?3 U! P0 j) `4 C* M: {& F, O
004031BD BF 0A000000 mov edi,0A
9 P4 n u8 E: c {3 N004031C2 99 cdq6 R" h+ d: p+ S0 u
004031C3 F7FF idiv edi3 ?( O5 U5 N8 e. [; B0 L+ o
004031C5 8BC1 mov eax,ecx0 d9 g$ D% R. J
004031C7 B3 0B mov bl,0B
5 |/ D2 i' I0 x' l6 i+ @5 C' e. m, [004031C9 0FAFC1 imul eax,ecx
6 l8 {3 l0 q8 h! G: M5 U$ z004031CC 8BCF mov ecx,edi( A" `$ Z D3 S. q4 T2 d+ j5 C* |& q
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
8 y d6 P- V6 X7 I! p004031D2 52 push edx
5 Y/ r5 {( _" q/ f, j) F0 Z004031D3 99 cdq! \+ |& [; _' b: ~& X
004031D4 F7F9 idiv ecx
" x- f4 Q3 C( {0 @+ A0 K. _004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]$ a: D; _9 H: |8 w- R
004031DD 2BC6 sub eax,esi9 j0 P* Y, M- F
004031DF 52 push edx
( u2 j: a+ M9 v0 Y004031E0 99 cdq; w0 X. k' S( O3 D$ T7 q1 x* D$ k. H
004031E1 F7F9 idiv ecx4 b/ T/ v: y- J Y# Q; S* g4 v& N6 s
004031E3 8BC6 mov eax,esi
; W# @$ d- o" _004031E5 52 push edx
$ Q8 k( q# M0 A7 Y004031E6 99 cdq* Y6 @8 D1 Q0 i) N
004031E7 F7F9 idiv ecx! [8 {+ d z$ z' B" J% f2 y
004031E9 52 push edx
8 r( k+ G7 c2 L7 z8 w004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]4 P& b* @: I: X8 {. Y' X: q
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"& v n" Q# E7 D+ v! H) n( j! ?7 V
004031F3 52 push edx
2 L8 _& \% P# x* O004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
: q) g5 R3 w0 Q$ z7 q004031F9 83C4 18 add esp,184 b# U. _3 E% k$ v! U1 b
004031FC 6A 04 push 4
+ S0 A. w/ G5 @% P+ z0 ~! x V9 T004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]+ z" Y% L4 }# |6 o2 q: D9 x2 i6 f
00403202 6A 00 push 0
( n9 \3 D% H. Q' I1 n00403204 50 push eax' A7 }0 I& R7 W6 f: C% T7 @
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 u" [! D% |- s3 a, T# R# ^00403209 E8 D6530200 call qsr.004285E4: q5 P! r# b! n7 _- N
0040320E 50 push eax$ L0 r. O/ b; B7 h4 |
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]* s% S. N2 g! G+ s/ T& f; Q" F
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C+ M$ J3 m$ E. O6 Z1 u4 _7 J
00403218 E8 A7C30200 call qsr.0042F5C4& c& i. C; o% h" N( V2 I
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 e6 r& x1 }) i8 ]! J- z9 F00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
" k# O- B+ j/ M% Y9 J00403225 E8 61C20200 call qsr.0042F48B
& L( U* e5 R$ _4 w+ H9 b4 r0040322A 6A 04 push 4
- g7 J4 b4 U8 T5 G" E L8 l0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]) K8 s8 W* d" P5 Q
00403230 6A 05 push 5
8 r: K. W7 s" k" \00403232 51 push ecx
" Y! A9 C( o2 h7 ~00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]. \* b1 N. E9 Q# s
00403237 E8 A8530200 call qsr.004285E4
3 e: H: i! _$ |) D4 w6 ~0040323C 50 push eax; |" u4 }1 J, }" m1 [7 ~) `; {# F
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]6 A2 A8 F, C/ p6 i/ y9 r0 }( U A
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
1 E% r" T6 a! K r F H& h00403246 E8 79C30200 call qsr.0042F5C45 \3 j5 k- P3 k9 f4 i8 ~* p
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) S% ]: S6 `5 w( r% s9 j0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl# J ]( [) q1 E/ I
00403253 E8 33C20200 call qsr.0042F48B9 B' G- ~8 |% R/ e+ J7 ^
00403258 6A 04 push 4
( L1 v3 u: y- H4 C" ^7 g* I3 u: ^: a0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]' V+ S8 C1 r/ Q7 H
0040325E 57 push edi5 z1 W3 [, H5 _4 G
0040325F 52 push edx
$ j6 ^& G' ` `5 \: Z" P/ F00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; S6 e- M" K& z
00403264 E8 7B530200 call qsr.004285E44 E0 k; q/ L- w) L# d
00403269 50 push eax
" d8 W; d3 p* B! Y; z: }1 T) W0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
Z# `. D5 V! [: K3 r# |0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E9 h- E7 N7 E; l& p/ Z! H; b; V
00403273 E8 4CC30200 call qsr.0042F5C40 K- E7 U( \7 ^ B
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* m9 t- t/ ?. C1 p- K
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl5 x7 q# o: z# @. p3 H3 ^
00403280 E8 06C20200 call qsr.0042F48B$ `; k( B9 z7 k! |2 E" P& v
00403285 6A 04 push 4
5 B/ D: i; M& }00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]* E8 S2 P. P9 T
0040328B 6A 0F push 0F; H3 ]$ j0 U5 ?0 b/ K3 _
0040328D 50 push eax- T+ {- F! I7 x% w
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
5 i u2 R9 h: c/ n1 A2 N* g00403292 E8 4D530200 call qsr.004285E4
( `( l2 j% }, V00403297 50 push eax2 }1 O/ [, ]7 Q9 i
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
" e1 ~6 x. b; i& U. b0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F$ O* C; _# N% ^' B& h3 L1 G
004032A1 E8 1EC30200 call qsr.0042F5C46 y1 o6 @* o+ V
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
! u( ]7 D3 C# N) h1 G6 }3 r u004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl: k4 x4 {6 l" I0 r+ z
004032AE E8 D8C10200 call qsr.0042F48B: i: R" d8 |6 r8 Z0 V
004032B3 6A 04 push 4
2 M* h0 c" E$ ?. V g004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34] U+ T; Y6 W( H5 H- A5 K. B! H
004032B9 6A 14 push 14
5 O5 y( f& D' q' p2 i0 d004032BB 51 push ecx
/ J( |3 r/ c& A% s( u s5 {004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ |3 [3 ^ q" H a( G5 y
004032C0 E8 1F530200 call qsr.004285E4
6 w5 r7 ^; U8 Q7 u) e( v' W004032C5 50 push eax, }' o0 U3 N+ e5 s
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 c: J& _( f( N7 t K004032CA C64424 40 10 mov byte ptr ss:[esp+40],10; r$ D9 n8 i$ n" c% B3 {. O5 u
004032CF E8 F0C20200 call qsr.0042F5C4
( I2 S/ [# M! N/ D: n+ g& J. X004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, J7 K! |% B! d& o. A3 X+ s004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
9 Q: c$ w* B, [$ v004032DC E8 AAC10200 call qsr.0042F48B
" \) i( b# F3 `$ I6 l* y0 ~6 _004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
4 Q E( F; d7 u004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
% M- v2 Q* ~/ n8 _' L% P004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
# T+ p3 C. z2 q3 i) }. f; z) }004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL3 i) A, j7 ^. n) ?# K$ R7 v7 L% p
004032ED 8ACA mov cl,dl ; DL送CL
4 G+ `% ~; G7 J+ b7 O004032EF 3AD3 cmp dl,bl ; DL和BL比较
2 C# ^1 i- m3 f9 |, x# i; R004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）6 T( l0 y0 P0 c5 i; o
004032F3 84C9 test cl,cl
8 u0 w$ x% W" c+ e: [4 F004032F5 74 16 je short qsr.0040330D
5 [1 A* g9 s0 D# ^6 L* G004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL+ O0 l. D% \8 Y6 J( v* A2 r+ l$ l6 Y
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL, X* m9 A: X( D" a# L1 B, x
004032FD 8ACA mov cl,dl
/ f* K& {+ n: l004032FF 3AD3 cmp dl,bl ; DL和BL比较& j2 K3 V* M2 s- l" @ t5 ^
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）" Y4 s$ c- ~- f* U9 Q8 j
00403303 83C0 02 add eax,2 ; EAX加2
7 b. V/ w% r, k2 K" |00403306 83C6 02 add esi,2 ; ESI加2/ i. c; n( a1 }5 H: }
00403309 84C9 test cl,cl
/ _. T, y; I' A0 Z2 U3 E& Q+ f# p" f0040330B ^ 75 DC jnz short qsr.004032E9
( g, G3 p% z. T( H: j4 @0040330D 33C0 xor eax,eax
$ f6 v" M$ n7 S6 ?0040330F EB 05 jmp short qsr.00403316
/ y+ Q% p1 q5 v7 u9 @00403311 1BC0 sbb eax,eax
; j+ d* ]0 g3 t( y4 r00403313 83D8 FF sbb eax,-1
2 p/ E& R& n# c, r+ p, z/ I00403316 85C0 test eax,eax
. J/ w* G6 B' y& }- V00403318 74 0E je short qsr.00403328
% ]! p1 E9 X! U1 D0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A+ @8 p/ i8 t: a6 @2 c
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]( Y2 \1 R. X! E9 E# @6 r+ ]
00403323 E9 F0000000 jmp qsr.00403418
# t) ^& J$ w# _! N2 U2 ~00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX$ n: W' o. H0 x. C$ s7 |9 G. r
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]2 Q0 U, k4 X3 K& m! g+ h
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
: O; l, L _7 n/ \ r00403333 50 push eax
+ P- `; d6 ^5 j* z00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX& e% c6 g* l1 }0 M" B0 U
00403339 50 push eax: x) M# u @5 c" w# m( B& u
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX& _5 j2 w$ I$ B9 f) ], A
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX2 ~' K R- F5 B% }9 @
00403343 83C4 04 add esp,4' \- O" N5 L9 n; o* ~( H
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI# ] Y/ p$ J) N0 Y/ }
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]& f, b' s; v- A: v
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]; G3 k! ?% Q( U
0040334F 50 push eax
$ p' R- l# A( D/ ]00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
5 S' c* `. ]) S1 z. C0 ]( p00403355 50 push eax# u/ y5 S- O) c& z/ F
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX. V3 }: T. ], h3 u
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
% f5 O; {, q! T0040335F 83C4 04 add esp,42 w% Z! R+ J0 r% T( S# d" g
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
# ^- N; Y& S+ z00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]9 E5 Q8 |* i2 Y$ Z8 M
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
3 P8 d1 x+ a5 z5 e& H6 a& U' k0040336B 50 push eax7 v% c+ Y. B% n$ `
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX1 E9 U4 D' |! V9 B2 _" k W& k6 F( P
00403371 50 push eax
: x9 t& j% e1 `+ N00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX7 ]$ t6 L: n+ y d
00403377 8BD8 mov ebx,eax ; EAX送EBX
# E3 Z4 ^/ n4 M. H# e% Z00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX% e( k8 ?: l- p- Y& q
0040337D 83C4 04 add esp,4
" z+ i- R0 \3 \, | R00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
' y2 k; e9 R; f2 K. ~9 W5 `00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]; |& X b6 l0 b8 |$ V
00403387 50 push eax
( {' k- k0 E/ r: m' d, v4 h: F# t& t00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
* @2 c8 c& m4 K4 y5 j3 M* k. b0040338D 50 push eax5 L# u- } C, E' a
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
) V1 t5 [4 N" L$ e$ S00403393 83C4 04 add esp,41 }( E! X; j; b
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# K3 v8 k" u! U
0040339A 8BE8 mov ebp,eax ; EAX送EBP
9 s& c9 T: D( d% C0 G0040339C 6A FF push -1. T+ r+ ?! D' R% z6 P
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
9 z& R- u: i. _* }6 e' w4 f004033A3 6A FF push -1
! b, H W. h+ b- \# V6 g% I+ T004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX( O$ Z& P3 J; \% P
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
0 E& n0 E: o: Y7 Y* D* Q6 S004033AE 6A FF push -1
$ u! A* D( I6 t5 `4 b- N: S004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX6 t; X1 F4 w7 r+ c5 p
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
! T# b( Y* N8 e& `004033B9 6A FF push -1- U8 G/ r2 l5 D/ C. {, |* K
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX& G, U$ o# L8 C
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX* l: F f: P) L* f5 j$ Z) ?1 {
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
- c% R7 r! j3 Q8 @7 o$ E3 E004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX; @* O( d! ]0 u, t1 ~. ?( \$ ]7 y
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
) {7 w; n' p# v& k2 O004033D7 D1E0 shl eax,1 ; EAX左移1位
! F. ^2 P! [9 ?8 D% V004033D9 99 cdq ; EAX扩展
& ]$ e7 {3 y3 M; x1 e" q/ m7 f! P004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中5 u c: \' u" ]$ e6 n
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较$ r3 a2 ?1 H/ ]" x2 i- d* \
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
& ?0 v6 w: Q' h! p7 S004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A; B; }! J. Q! {6 T0 _; P8 h1 E
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]5 e& \/ q5 s" D$ q2 `! M
004033E9 EB 2D jmp short qsr.00403418
0 C# z3 g+ J3 c* h) e004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
) H% c" }* y T$ D# }' R5 `: W004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
2 C5 ?! |. w e0 n& L004033F7 99 cdq ; EBX扩展) C- c: z" u0 V! e& V% E* Y! t* k
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
! H9 E" Q) ?1 M+ t004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
$ K4 K% `& z; B) V. Z004033FF 2BC2 sub eax,edx ; EAX减去EDX
4 t( a: u* ~0 z& I00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
$ a& V0 \1 `2 O% {00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX% Q1 o6 B* w1 |* Y
00403409 99 cdq
3 j' r% [, I8 I% y0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
; S( |9 Y( u8 ^: i* E0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
) p& A; C6 B9 Z00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较4 w. n# B- O Y% }
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）5 `+ s$ y+ T, H4 ~
00403418 E8 6EC00200 call qsr.0042F48B ;
" h5 n, \4 m( d6 F* t0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
* P4 \, }* b" X+ r$ g$ H5 c* f, v00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9* H# Q# m$ J" K! p6 q
00403426 E8 60C00200 call qsr.0042F48B5 @+ y2 H( U% v7 y5 k
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]8 ?% p- }, m8 e
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
4 N0 o3 V5 A; z8 N/ f4 }6 j00403434 E8 52C00200 call qsr.0042F48B) n) Y" I4 M8 [* b1 v
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
( F8 i! z- B8 j1 w0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
% `7 A1 O% Y4 k00403442 E8 44C00200 call qsr.0042F48B& a3 z# ~! l6 G+ `
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, P8 o! p+ V, \7 V( {9 @0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],65 ^# } ~) G* h. P
00403450 E8 36C00200 call qsr.0042F48B+ B8 V+ ]" o! P3 G$ {0 u
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28] l3 ?1 y: K/ E: P; r
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3! j8 ?% r- R f7 q l2 T
0040345E E8 28C00200 call qsr.0042F48B4 c- {! N, O$ j' z$ T
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]' i: Z0 k: \' X( \5 |
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
7 G! D9 T! n1 u/ Q0040346C E8 1AC00200 call qsr.0042F48B
! D( W! D* t! N3 l5 t00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
* ~5 ?/ _; ]8 _: y0 W! c00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1! e1 f8 z. Z$ r: s8 h* |; ~' r9 ~
0040347A E8 0CC00200 call qsr.0042F48B6 c& @6 i( V A4 ]+ m
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]$ K2 Y6 L1 B) H! K8 L0 X
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0) `9 B# D5 s- M+ x& g
00403488 E8 FEBF0200 call qsr.0042F48B! M5 N2 J7 ^& `: {/ W/ Y* H
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]# X. m: B' w3 E n t
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1. r$ j" r; L) F, d4 C: F& l4 g( E q
00403499 E8 EDBF0200 call qsr.0042F48B# h* Q0 I3 z4 W" H0 M8 c
0040349E 32C0 xor al,al ; AL清04 O% C9 B4 c- J X+ c
004034A0 E9 88000000 jmp qsr.0040352D
0 N/ d4 b+ b( x `% h004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~7 N( z" p$ j4 E' @: Q! O3 @
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
$ I- h D* {3 d1 R# e( r2 C004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
0 m& s/ i0 N5 Q$ }* y004034B3 E8 D3BF0200 call qsr.0042F48B
" t; ?4 x& Q& K# [004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]; z( k* E( _/ q! I
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8% h7 q, ]/ A2 c6 c
004034C1 E8 C5BF0200 call qsr.0042F48B# @6 l! G4 s& ]$ w
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
7 V& ^" ]8 ?% c" K1 V {004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
9 P: l- z3 G+ L1 g/ g6 L004034CF E8 B7BF0200 call qsr.0042F48B" n* n; F- N$ q1 [. M# Q$ T. ~
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
0 }& n+ Y6 J0 ~7 E004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6& n' d; e' C7 f- s( ?
004034DD E8 A9BF0200 call qsr.0042F48B/ Z- U/ a1 b% h
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
' R" `" W/ h" @- F% B004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
4 a x6 o- R }5 T004034EB E8 9BBF0200 call qsr.0042F48B
- `1 t5 k$ m& W" x/ g" W& z004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]0 o, |# Y, G3 q
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],22 Z6 h( Z3 u- d+ Q9 H D# A
004034F9 E8 8DBF0200 call qsr.0042F48B
. {* y/ s$ v# R6 P' |" U) D! N) s& f& i' m004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 _2 D# L& G+ p% U
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
0 U0 h8 d- s# h00403507 E8 7FBF0200 call qsr.0042F48B( n% e. Y W; b* l; f
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]0 A2 o {: V7 ~) P7 P0 V
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0. g6 e' e6 l6 C9 u3 ]' Q
00403515 E8 71BF0200 call qsr.0042F48B
4 c/ d. V0 ~$ n# D6 o1 {0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
6 D1 p9 ~ [1 h+ N0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
' w( I! V$ a+ n Z( V- G# }00403526 E8 60BF0200 call qsr.0042F48B' b! f3 u4 o! }6 r* g2 e" B
0040352B B0 01 mov al,1
, A% I8 z) `4 q M2 N0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34], a1 x; D' d. u! g4 q7 x7 T) B5 V
00403531 5F pop edi
3 ~% O% Y Y- w, `1 v1 }$ w+ ^ A00403532 5E pop esi6 X* C; \! N6 A6 ?, L3 }% P% y
00403533 5D pop ebp
2 U2 t6 t7 }; [0 L$ V00403534 5B pop ebx
4 [' U+ I ~. y: j1 Z- [# u00403535 64:890D 0000000>mov dword ptr fs:[0],ecx* q+ T1 f0 v$ s. C
0040353C 83C4 30 add esp,30& d `& `) }0 y0 s
0040353F C2 0800 retn 8. B: k& G0 ~, x4 Y& C8 q+ L$ J
--------------------------------------------------------------------------------% D2 j! ~; R& j9 @ S
【破解总结】& U& u% E0 G& z6 s, O; v
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^% T W& \# S4 S2 d7 u
用户名：yijun
/ W' w' h& {, a: \/ ^注册码：4893*7777*3726*7777*0529
3 P$ V! R5 |, G+ v--------------------------------------------------------------------------------6 z; P' S$ q& G4 m( E
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡