|
|
【原创】破解Quick Screen Recorder& X4 C- @ w2 A8 O3 \7 i! p; ?
【破解作者】 yijun
5 b% \. q. J2 g# g6 b J【作者邮箱】 [email protected]
, p0 E, v9 o6 q2 ]# F. Z! i: y【使用工具】 OD,PEID
7 A! q/ o: v( c【破解平台】 WinXP
, p# n' l9 G$ M【软件名称】 Quick Screen Recorder$ T$ i, A! ~7 w. }8 n/ f
【下载地址】 天空
1 }# J g5 Y2 @# x" V【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
5 ~( @( u' `7 G4 U【软件大小】 540K! k6 L6 r, b1 g( c( X7 G: L8 c
【加壳方式】 无
, T$ U% ^6 I: A0 D3 ~【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
) {9 ~3 l0 J K/ e--------------------------------------------------------------------------------$ Y" W$ @+ y8 Z- e
【破解内容】
- w0 j* i9 F1 X' [% U! b PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：+ a3 f% i3 n- U5 Z7 [
00404C69 55 push ebp //在此下断) }0 ^ m2 A2 F7 q' c' |) S
00404C6A 56 push esi- _8 J; H0 X* G0 s4 p6 V
00404C6B 57 push edi
9 J, p% j# n2 T00404C6C 8BE9 mov ebp,ecx
0 ]5 D4 _% ?, S# m00404C6E 6A 01 push 1
* A# }) Q; R Q0 Q0 @! V& K00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名3 s5 q7 x3 a& N. X; N
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]) r. V- M& D0 P# j4 M
00404C78 8BCF mov ecx,edi; r9 N# k% t: H# T( c; g! r
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
5 y" |; g5 O9 h* [00404C7F 8BCF mov ecx,edi
- _" J/ B: f/ K; q8 n: ?* }0 _00404C81 E8 A73E0200 call qsr.00428B2D$ d3 I/ v$ G) `; A
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]6 h/ m" j$ _, X- v! p
00404C89 8BCE mov ecx,esi, F8 G+ M! V1 P5 W
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX$ m* b3 Q- e4 a! N d( h
00404C90 8BCE mov ecx,esi' h& k8 c1 ]$ Q [! e) Q0 ]
00404C92 E8 963E0200 call qsr.00428B2D, p* L7 p9 ^+ C, R. x1 e8 E6 I+ d# J
00404C97 8B06 mov eax,dword ptr ds:[esi]9 {7 S1 E B7 b& }. i7 ]% D% `
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],26 `9 |6 H c: D; q: ]
00404C9D 7D 26 jge short qsr.00404CC55 q: \+ Y! m" C4 g, a
00404C9F 6A 40 push 40
8 @2 @/ D* `( V& k00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"" Z, j( V2 V( s" P4 o7 W9 i
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
8 ?9 d2 M' n) ^# H9 t: D5 N00404CAB 8BCD mov ecx,ebp( ^1 ]" C8 @3 [4 i
00404CAD E8 C3840200 call qsr.0042D175
0 d( W" }# M& o7 s% j00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
2 t' N5 c, K% D( Z00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
) f6 J3 b1 f& j& s# O00404CBD 5F pop edi
' ?, S1 [/ I9 m( [! f' J/ {' R7 h00404CBE 5E pop esi, }+ s5 q4 o9 ]
00404CBF 5D pop ebp# y( s' f5 m5 `
00404CC0 5B pop ebx+ h; v8 x% Q5 U
00404CC1 83C4 18 add esp,182 n$ o! _. g0 ?4 |
00404CC4 C3 retn
6 q a2 A" y7 P8 k! c- m00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C] F, l2 Y6 t) a
00404CC8 84C0 test al,al
' G$ s3 Q, T6 Z$ d2 B00404CCA 0F85 1C010000 jnz qsr.00404DEC
6 i% L6 @7 r7 |4 i00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 Z* O8 V0 { M* l
00404CD4 E8 87E3FFFF call qsr.00403060
* L) j. t/ d G- K [8 v3 M: q. w00404CD9 51 push ecx3 f4 {5 |* S0 n: H' F0 e1 R' A
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
" R2 a, B, Y4 t2 V$ y% w |00404CE2 8BCC mov ecx,esp' f6 W {8 v3 L) Z7 W% k2 u/ g7 a
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp5 P$ Z' ]- x" b- w
00404CE8 56 push esi! a: Q2 o+ m! B& W9 ?( ]
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0! ]6 J+ b9 D% T q5 z$ R+ [
00404CEE 51 push ecx7 q3 B7 h' [: ?4 n
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
& ?/ F; s" K. F) ?% X00404CF4 8BCC mov ecx,esp5 h# g, [3 ]7 W! ?$ M2 P& R/ T
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp+ L6 W2 k' x3 \% B
00404CFA 57 push edi
6 l% [9 u7 i8 \- @( x1 Z0 G00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0: d- Y3 V! N5 l a) Z! u+ _) Y
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ i) g! \; }0 J9 l% @# O00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],09 l, C2 g0 p: e. d9 }# V
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~+ `9 y2 z2 L% |0 h+ ~ c
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
% l8 c e2 i5 ^00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~; p _* Q$ |2 p% P
00404D12 6A 40 push 40
: L4 O$ X5 L7 [+ c1 g6 Q8 b: j00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
' G5 M3 U: r; S' Y6 \ W7 s00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
1 |3 B$ S9 T5 |: X' s; Z4 G" q00404D1E 8BCD mov ecx,ebp
" W/ d; n6 g3 A* [00404D20 E8 50840200 call qsr.0042D175 p) r. G c X' g% }6 G+ O: X/ \! G
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ^8 B& o- D7 N0 T
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1" q: K1 E9 D5 v2 y; K" z- I: m
00404D31 E8 5AE3FFFF call qsr.00403090
; N/ ^- ]& E4 N \ I00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]. w7 ]3 _! r; a/ Y
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx9 n) e$ {- D3 L& `* D
00404D41 5F pop edi
5 y( P0 T* a. t4 j0 D E00404D42 5E pop esi
8 \9 g4 T( O: ?; ?5 @' F2 `00404D43 5D pop ebp
$ K c( F, }7 o: c% m4 R; D00404D44 5B pop ebx
- x7 g t7 H. o6 `- t00404D45 83C4 18 add esp,18% B- ~) ?+ S3 e) Q% N4 k0 v
00404D48 C3 retn- R/ M: q- s, N, V
*********************************************************************************************************************************************************+ B/ i" w6 j! B# ?0 U4 K2 G7 X/ u$ ?
跟进00404D09处CALL来到：4 z) u: m% B9 @% i2 V8 W
004030A0 6A FF push -1 //一路F8下去~~~~
/ r) z6 }8 ]* c. ]2 Q8 `( w004030A2 68 C88F4400 push qsr.00448FC82 r) d$ P+ a* q& I
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
0 y, }* P# _+ U( W7 k6 H- S* @* {004030AD 50 push eax) d; u* d2 ~9 y$ e2 a4 Z2 D
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp5 Z& [" p, ]/ u3 e* w9 r
004030B5 83EC 24 sub esp,241 G; V5 M6 I/ q
004030B8 53 push ebx- ^3 D( a( b- [1 a. M- \
004030B9 55 push ebp
: l3 F/ Y- L+ a. o$ O004030BA 56 push esi6 S; g8 [- N1 O# i' V
004030BB 57 push edi7 P7 f) ^. O% C
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"& K, ~/ ~' J5 b& N# j; P
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
! B: J/ j. m- J0 D" Y5 p004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
( } v+ c( M5 c% I# p004030CD E8 27C40200 call qsr.0042F4F9; t% I+ f1 G* S% i' b! Q0 c s) N
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
1 o1 \5 q( D" ?- f" q) `$ ?5 @ p004030D7 894424 2C mov dword ptr ss:[esp+2C],eax- H7 F. e, b" b& t; A3 S
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
; ~# c0 x' j& M+ [( L) u z004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
+ }0 G; |& H& t( ~! V) i0 P004030E4 E8 905A0200 call qsr.00428B795 y: b' Y4 C3 N5 H& w/ [
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]$ `7 ~( s4 O6 A
004030ED E8 3B5A0200 call qsr.00428B2D
- P; K- g- W$ B1 ]004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
; t* s% R& I; B( ?' r! P004030F6 E8 7E5A0200 call qsr.00428B79
?5 T f% t" \% D004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]7 h0 k& b; W7 X# l. ~
004030FF E8 295A0200 call qsr.00428B2D9 K% G" x$ A! S( Y! f
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
7 I! p/ K) E) q# `0 f. |, Z00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]# q' Q6 ?+ B: C+ u& R5 o
0040310B 83F8 02 cmp eax,25 d2 U8 ^! `1 G( J: e z: S1 `
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
8 H' [1 R/ H4 ]. t: u% Y+ H00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]6 u ]0 f+ G6 R3 r; N d/ S* C
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18) t% I) u. ]" K, [+ m! V
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳/ I" a2 b* V+ o- t
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
) b0 W% Q+ H" _: _: o# `3 A" F6 {( n00403126 6A 01 push 1
' |+ ~2 o5 S0 C00403128 50 push eax6 g3 w# p! c/ v: r6 x! \$ P9 B; m6 L
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
! @ a* P! Y4 {8 N" B# R) z" y1 x0040312D E8 C4550200 call qsr.004286F6
* U R6 r, z0 r0 y$ N00403132 8B00 mov eax,dword ptr ds:[eax]
; h& R, _! ]) _. w$ @& B; q$ n00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
. _4 ~) k+ Q6 e% F1 ^' W00403138 50 push eax/ W1 c) x* C. Z4 V) R
00403139 C64424 40 04 mov byte ptr ss:[esp+40],42 {: U8 j" S. T% F+ r+ ?' A
0040313E E8 4D560200 call qsr.00428790& Q6 A0 \$ e+ Y: l* {. I' c
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 k b. f+ k8 z7 O9 `00403147 8BF0 mov esi,eax7 I" ~1 d! a- o4 }% L! r3 A
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],32 D+ x, X/ ?0 z# U( {
0040314E E8 38C30200 call qsr.0042F48B
3 u$ q$ H/ r4 K3 H) K8 ]00403153 8D46 0A lea eax,dword ptr ds:[esi+A]; \$ e7 l2 \/ j3 _* i9 d
00403156 B9 3E000000 mov ecx,3E
" N8 a2 D! d/ h t0040315B 99 cdq" p9 Q/ e8 a: n5 d
0040315C F7F9 idiv ecx
# A$ ]* y- ]! w: ~; }; t0040315E 6A 01 push 14 K5 I3 z6 r7 `
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]% w1 B7 _7 G5 x- W9 W6 K& x
00403164 8BF2 mov esi,edx
# W, R: T& { ^# m. `00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]' H J5 f7 C" M
0040316A 52 push edx
G1 ]* w' m' h3 t/ b! k0040316B E8 0A550200 call qsr.0042867A
! X# d' |. e: G( T. h; X00403170 8B00 mov eax,dword ptr ds:[eax]) Z! G) S' d$ ~( n4 [8 {
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* x+ Q( G% |; f, U# I7 t
00403176 50 push eax$ u3 y/ _0 V! Y& v% I$ {
00403177 C64424 40 05 mov byte ptr ss:[esp+40],56 q% v* t1 m% h% x0 c
0040317C E8 0F560200 call qsr.004287908 A2 V: K0 K0 N! D* e N
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
! U* P/ X) @/ r o V2 L( I00403185 8BF8 mov edi,eax
' a# S2 l2 E8 w, T00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
% ~2 V- e8 D, o0 H/ u e0040318C E8 FAC20200 call qsr.0042F48B9 ^4 a$ ~- Q2 s; Z
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]7 X% M2 b8 X; P; N0 Z* M
00403194 B9 3E000000 mov ecx,3E
+ g8 D# Q7 ~4 Y D5 k( k6 y8 e3 @00403199 99 cdq
! c7 h) w0 ]6 |2 k+ f* g0040319A F7F9 idiv ecx
2 h' k! E0 ]. G8 p; b0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]$ {2 o- Y Y" K2 a2 `- V+ `" W
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
1 U$ T) ^9 ~! l/ ^/ ?004031A5 8BCA mov ecx,edx2 x a, D! Q3 C
004031A7 894424 24 mov dword ptr ss:[esp+24],eax! U6 y( S+ z* J
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax- I9 B' v2 H( R: A6 B
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
* h9 l) t/ `3 U1 n' c004031B3 894424 14 mov dword ptr ss:[esp+14],eax2 \+ M2 e+ l: e* N
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
- Z' B% Y; X4 G) D6 W2 C: A004031BB 8BC1 mov eax,ecx
( |7 n+ Z2 J9 l" S004031BD BF 0A000000 mov edi,0A. Z$ I) D9 F+ g9 ^
004031C2 99 cdq/ F% s5 Y% W4 _
004031C3 F7FF idiv edi3 E( w/ D7 m& e1 ?
004031C5 8BC1 mov eax,ecx9 j1 L! c' m; Y* ]& t
004031C7 B3 0B mov bl,0B9 V3 |5 v; ?& N X, T }
004031C9 0FAFC1 imul eax,ecx9 @. }9 h3 t, @$ l! s& {7 ]# n$ R( X: `4 n
004031CC 8BCF mov ecx,edi# {% U: K6 G+ u# o- f; f2 m2 z
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl- U% n: t& K) ` C( \& [
004031D2 52 push edx
5 l1 _2 N J r$ N9 j/ n9 U+ I004031D3 99 cdq
1 W" t/ ^2 i; t1 X' i& q004031D4 F7F9 idiv ecx
' L$ I9 k5 @7 H& o ]004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]0 `! b8 e& g& O% M$ _1 \% h0 {8 D
004031DD 2BC6 sub eax,esi
/ ]4 l3 B8 G0 q0 g" X8 ? q6 G004031DF 52 push edx/ r. u" \1 i: G! P
004031E0 99 cdq G7 y. d: X! i; y# y, f/ K$ k
004031E1 F7F9 idiv ecx9 v; }0 P' Q' V
004031E3 8BC6 mov eax,esi# t& ]+ q/ ~& L3 H8 L
004031E5 52 push edx, ?2 m, I# ^' ]
004031E6 99 cdq
9 t! v5 M0 e, A6 o% W004031E7 F7F9 idiv ecx- G' b; i' U/ R1 S4 @# o
004031E9 52 push edx" K/ G4 V! |( Y+ `2 t% f
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]3 s' D" F( t' N: @8 A
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"4 n, N" W0 [ z( v2 @
004031F3 52 push edx
# @: M0 g7 S. E3 |- J9 l4 [8 i004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48930 N0 e1 {' i3 f
004031F9 83C4 18 add esp,184 b, Z1 h' q0 O v( w! K
004031FC 6A 04 push 4
& S5 n) ?4 o4 n004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
* v2 K1 F: f, q" y [/ q00403202 6A 00 push 0" E3 H$ h, T1 x
00403204 50 push eax4 O. L0 Q r6 A! @ Y
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% R6 q, R0 S, ]; r. y00403209 E8 D6530200 call qsr.004285E40 |7 H- Z8 A! X, @7 h
0040320E 50 push eax
8 s# ], R. R+ n, U' X7 L0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]; Z3 Y3 _5 D' w# n [
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
9 }# B( A4 r. C9 N# E00403218 E8 A7C30200 call qsr.0042F5C4
0 W; v1 h0 S0 K. ` I$ m& W( [0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, v; Q/ q) E2 c* M* I00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
" r! \ d* z# }" G00403225 E8 61C20200 call qsr.0042F48B- a) A" h9 j* ^ r$ O5 n) Y# |
0040322A 6A 04 push 4% S1 d& r) v- P A5 Z! ?- S$ l: T4 r& ^
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
2 _0 b4 ~( d, E00403230 6A 05 push 5; @" m/ d5 \# @( O& B# h" j
00403232 51 push ecx# q. e9 b$ `) h- O
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( G& Q+ Z& G+ ^
00403237 E8 A8530200 call qsr.004285E4
3 Y! \) u/ k) T0040323C 50 push eax
' M$ s5 J5 c1 ^7 O9 {. G8 w |( G0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]. k( F( r9 U; j. V6 a' p' ~/ K
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
5 O9 M7 c) j5 x( r( J00403246 E8 79C30200 call qsr.0042F5C45 C& v6 P1 s6 L9 `& r: P
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. q9 m3 _; Y; u5 l. U; {8 ?9 Q0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
9 R0 C5 j' m/ ]9 N$ D) c" y00403253 E8 33C20200 call qsr.0042F48B9 t* @' L, x8 h5 S- z2 u) \+ V
00403258 6A 04 push 4 n( Q/ C. [2 O5 u% s5 f- G
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]- u7 b, n4 P0 h2 i1 l8 b3 P
0040325E 57 push edi; }2 K9 N, w" j- {4 V" i3 ]
0040325F 52 push edx5 X- e7 y( |; c/ A
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]/ @9 D, W0 j* q2 I
00403264 E8 7B530200 call qsr.004285E4& _4 j' k1 N2 O, t
00403269 50 push eax# ^4 R2 w4 i" P1 f, D
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]) `1 D+ d( X/ u7 E* i( n( O# e4 W
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E: E) ]+ W2 C& {- `
00403273 E8 4CC30200 call qsr.0042F5C4- X% t. Z0 r) Y8 A
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]% v- c5 [- k$ F( [! u& y1 B
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
5 |1 [ O3 X. T00403280 E8 06C20200 call qsr.0042F48B& ]* V# s, w8 A8 ~
00403285 6A 04 push 4
4 Q- ?. Q& [& X+ T00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
# e6 X' ?# l8 d2 A, U& U0040328B 6A 0F push 0F. h, @3 V& ]# i0 G8 v
0040328D 50 push eax8 |, l: B. L6 ^) x. T8 e
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 V6 C5 Q) A: `" k7 R00403292 E8 4D530200 call qsr.004285E4
; Z' o- _& ^4 R7 E8 I+ J00403297 50 push eax
: I9 D" d6 a' B( v2 k5 w00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
# h7 N, t z# _; ]/ N( Y0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
! e$ c6 V. S7 I004032A1 E8 1EC30200 call qsr.0042F5C4
# M, E& e( D% k5 v" J1 E2 \* o004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]7 _' E7 |: S: {+ V7 o' w
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl" x% W! A7 u7 \5 J3 f
004032AE E8 D8C10200 call qsr.0042F48B
* V- M' \2 a( `6 ^2 w! w004032B3 6A 04 push 4" r" p8 B- e& M/ j
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]1 I9 E, G* \5 T5 ~7 q
004032B9 6A 14 push 14
' K8 J& p3 {# N% I/ k004032BB 51 push ecx! R M: ~ H9 }/ n& ^
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 J$ A+ L3 d! r7 X/ `004032C0 E8 1F530200 call qsr.004285E4
; U3 U% z( K9 N004032C5 50 push eax! L8 W, s; A3 Y0 w3 _
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ l& k' |3 p6 [$ e6 q1 t- `
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10/ H, s! g6 k9 `
004032CF E8 F0C20200 call qsr.0042F5C46 D4 c6 Q7 h/ r3 n/ t% L7 k9 a3 \
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
$ U* L2 P# u; d% u* E, t004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl; r+ k9 t& T5 k0 U5 T
004032DC E8 AAC10200 call qsr.0042F48B' W2 S3 Y5 V% f% Z+ W
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
2 m8 B. b+ I& c" T9 t004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
: C# h9 }# h& [$ b9 I8 \, U004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL% i( @0 T8 O' o& Z0 k d4 ]. r
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL K1 O* L J$ L. }9 }5 ]
004032ED 8ACA mov cl,dl ; DL送CL$ T" X6 { Y* S# H6 k7 i/ \
004032EF 3AD3 cmp dl,bl ; DL和BL比较3 @4 ^4 F d$ M
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）( ~% Y" J8 ?5 o. A% S
004032F3 84C9 test cl,cl
+ j4 d) Z8 _9 X: e+ N) \004032F5 74 16 je short qsr.0040330D u, C4 O% y, f+ o }; I$ y3 Y
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL9 M4 [# N6 Q' D0 _
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL8 Q$ ~% k/ ^6 t f/ H: F! _- n1 c
004032FD 8ACA mov cl,dl
6 O+ ~ Y5 u9 Y$ s' }4 [5 r004032FF 3AD3 cmp dl,bl ; DL和BL比较
: h1 u+ `0 |, W; u9 S- V+ n$ r00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）, {6 S# E9 K. f+ R
00403303 83C0 02 add eax,2 ; EAX加2& \5 W0 T$ d& H6 P6 D5 g
00403306 83C6 02 add esi,2 ; ESI加2; N) g* s, \8 G) }4 I
00403309 84C9 test cl,cl
/ |; ?9 F$ e3 T; r$ [8 T3 F) U0040330B ^ 75 DC jnz short qsr.004032E96 v* k# a( e% o" @+ S& {1 M
0040330D 33C0 xor eax,eax, V* F) r1 j4 Y' a5 p! V
0040330F EB 05 jmp short qsr.00403316* ` D9 Z8 R5 d, l+ T2 O# B0 C
00403311 1BC0 sbb eax,eax
6 o& j( J7 j; h% r6 K- L00403313 83D8 FF sbb eax,-1
: d$ Y) z. a1 h# [00403316 85C0 test eax,eax, a) y! e) @; E/ c
00403318 74 0E je short qsr.00403328
( d/ `' K" E l3 ]3 Z0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A+ V8 l' R8 }5 X+ l# b5 t* z4 H
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
5 m& r3 B X, s( b4 s4 y i( d00403323 E9 F0000000 jmp qsr.00403418
' M: d1 h4 Z) i5 t, ?) C00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
. t+ R+ k0 i. i5 v* T0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]# _+ d, |. z8 J* E) z5 G# t% ]
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
2 u I$ T5 J6 \. H7 X' y00403333 50 push eax5 ~# ~) R! [# |1 K! ~
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX$ q! g$ [0 g. _: _; r1 m* b2 ~
00403339 50 push eax
4 \+ e% ]0 ?; m$ z6 o4 n: K8 }0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
5 k7 f2 }! B; m1 r0 l" Q9 Y0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX; ^+ s6 `. G* K2 I, `
00403343 83C4 04 add esp,4+ J9 Q- i- O% w0 x# Q3 t4 Y% U' e4 R
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI0 ?% E C* g: n& \; Y
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]4 g6 B1 |) a8 Q, x) h* P/ ]
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]! B2 X' `% k: U% c# Y5 R
0040334F 50 push eax
( Q9 b) i7 g) }- P+ z00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
- G& {& ]. r: I4 f: l00403355 50 push eax
7 f& s( n/ K: }. ?7 z- P. }00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
e" n" r+ j; U2 q0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
" l" X; q+ Z/ b. U' u' u0040335F 83C4 04 add esp,4, {0 F2 R9 z: ` j9 o6 L5 a
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
" B9 G' l) Y% g9 e4 C/ l00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
( Q4 x( a- L2 m; V8 g6 W h00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
6 t( I, V8 | e) U$ y0040336B 50 push eax$ X" K" W. k! Q9 U% ~. q
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX! ^# }+ j c% f7 E5 {% }5 ]! d9 G
00403371 50 push eax
' B, \7 R, {7 X) i" |00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
6 Y7 C+ u ^ B# f* x6 I) \00403377 8BD8 mov ebx,eax ; EAX送EBX- e9 e6 x4 [5 I$ n/ Q- g5 {8 z4 |! L
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
( }( j7 A! {) G6 z- Y1 K0040337D 83C4 04 add esp,4
& X& d& g6 X2 i9 x8 S& Y: |00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
% ~( }& T: y4 F* V# O00403384 8B40 F8 mov eax,dword ptr ds:[eax-8], f/ w3 ?, K7 F5 |2 C2 R
00403387 50 push eax. Y2 K q% E5 m# `6 S
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX1 E) G; ?2 G' L4 N8 e; B
0040338D 50 push eax$ e8 |' I4 N; Q0 F" n
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX" ]0 O' y$ Z9 _7 Q9 b
00403393 83C4 04 add esp,4 m$ D+ F5 z' \
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ y2 O1 g, U' l& r0040339A 8BE8 mov ebp,eax ; EAX送EBP1 p5 g& v U+ i1 |4 h8 J3 s i9 [
0040339C 6A FF push -1
! w0 {1 c9 F) ^2 [3 [0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX' `7 N' L/ P6 |! z
004033A3 6A FF push -1
* g1 s, b; q/ S L/ v+ D004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX2 e+ X* j! [3 ?
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX5 U# u7 m3 R' W# d. T+ f
004033AE 6A FF push -1
# K2 [& D, t" a, g3 O3 m004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
9 n1 y& z( y# {$ ]+ Q004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX: z0 r8 d3 O3 \, D" h5 V. Q
004033B9 6A FF push -1
6 @7 G0 |, M0 D/ [004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
$ i$ K. v! D! P1 e) U6 G004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX* E! I( e# h5 s8 g/ m
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX1 y) \( |9 `2 _2 r! |
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX% k: a$ A, V& b1 J) g
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX u8 k6 c5 j9 J
004033D7 D1E0 shl eax,1 ; EAX左移1位
$ x" K, j/ H- A! G& G0 ?" z004033D9 99 cdq ; EAX扩展
8 y( ~4 o* m8 D004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
* i4 a& c- G; g; [9 U004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较; D$ ]! S2 h7 I3 f- v: x6 k
004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
# [- H5 a) q8 o/ T0 y# ?004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A, J1 l4 p) |" G- l# l# A1 k
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]$ C, a; @! Y" d$ G8 c
004033E9 EB 2D jmp short qsr.004034184 \7 o7 q' F5 R. K2 W5 X5 y5 z
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX8 d% k5 Z; i0 A. J7 S2 J
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
# [ P9 d O p1 s004033F7 99 cdq ; EBX扩展
% l; `! a2 g$ ]% p6 D0 V6 H004033F8 33C2 xor eax,edx ; EAX和EDX取异或
7 y' S) \. L9 C3 e8 m004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX- i7 X K, G! n; N6 V2 B
004033FF 2BC2 sub eax,edx ; EAX减去EDX& m, I0 `% y/ F% ^5 ~1 X$ E2 D$ V8 @
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]' S# c+ d/ S( G3 z" |
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
4 }. c) T0 G% V00403409 99 cdq" ^3 e+ Y& l4 K
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
8 A D$ s) o& \( `0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX8 P1 H: R* K6 j8 j6 X
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
$ O6 L. G/ N0 g( x# |00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）& }1 }* K0 {( I% e: y b8 E7 f' G1 V
00403418 E8 6EC00200 call qsr.0042F48B ;
: C. \9 V8 U" Z/ }( ^+ k0 f) E0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: V/ M: t* x4 b+ ^( g. H00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],95 P' g2 Y& @2 R( k
00403426 E8 60C00200 call qsr.0042F48B4 f$ @4 u$ I% a# A
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
6 C+ ?, s: K& ?- _8 J0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
0 m9 H/ t, f+ K1 \# ?) Q00403434 E8 52C00200 call qsr.0042F48B8 B# R" g: y3 K8 ~8 J/ ^
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] O5 Y3 ~2 D$ T
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7; e" V$ R8 ?/ H' [. U
00403442 E8 44C00200 call qsr.0042F48B
; s1 j h( g- y& V; w) H00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]' Z; \ u" T/ g' X6 t
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6+ p' `* ~, I' V% i/ J* o, N. y" [
00403450 E8 36C00200 call qsr.0042F48B
9 p! m% z6 y8 G1 x$ G, D00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]+ h7 c& Q( {3 P
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
# h2 X( k% E6 }3 a/ h8 w0040345E E8 28C00200 call qsr.0042F48B" y! W5 U% [( V4 y5 r
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]- N, j$ i' @5 e0 w& D [. m
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
4 @# H9 g' B6 |2 x0040346C E8 1AC00200 call qsr.0042F48B
' E9 S) \+ a/ B# @. D" t00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]9 T, k1 B( o6 l" H
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
: [4 q" e7 g8 \' I' A2 Q0040347A E8 0CC00200 call qsr.0042F48B7 _6 x9 G$ I' Q+ z
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: Z% \9 G0 U6 b. k$ ^2 z
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
0 |5 n8 O" C/ b2 U# F# e# C00403488 E8 FEBF0200 call qsr.0042F48B
0 r/ J+ Y! H* } i: y3 |0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" x X6 z6 e0 J
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-18 ?- K( t" Z% e! A; Q9 E: [. t
00403499 E8 EDBF0200 call qsr.0042F48B
8 p2 E8 G* z7 Z0040349E 32C0 xor al,al ; AL清0* s* U+ [3 L5 x a3 |
004034A0 E9 88000000 jmp qsr.0040352D) ]/ `- z. u( v8 V; I9 D
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
8 K! t4 P' Z% ?' ]: k7 X004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 Z: ~/ k( t6 u5 q6 Z0 l3 B* K
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9& l# i, h2 a' n" `; r! L
004034B3 E8 D3BF0200 call qsr.0042F48B% ^- j8 a6 A q$ m( p
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
. U8 d/ X2 ?$ n9 g5 v7 b; z004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8! a' j1 k/ }/ G% O0 Z! v
004034C1 E8 C5BF0200 call qsr.0042F48B
8 f$ q+ o: Q1 P; ]! i' \004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ l, W4 Y0 m2 D" \% E004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
$ H, m8 a) q) c' Y D004034CF E8 B7BF0200 call qsr.0042F48B
% J! x# Y) f" }8 J, h% ?004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]5 y$ O; P8 k4 c- f0 O; Y4 x6 q+ @
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
$ R6 u5 F0 r! P5 j S6 u0 M004034DD E8 A9BF0200 call qsr.0042F48B. c6 C" ^$ h. R) J4 A7 \
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]- f& T5 T; W; W9 ?& l$ k! ?
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3' P7 I" u& P7 C) m
004034EB E8 9BBF0200 call qsr.0042F48B
- W6 k# D2 Y/ ^8 L G004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]" ?; J# R3 G* b% g) _- h- O
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],23 n# |' ]0 N7 W2 x! d6 F
004034F9 E8 8DBF0200 call qsr.0042F48B# |' h; F. p8 G, \' k
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
! K+ T% c6 C9 T9 }% m3 }, G00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],11 E k! K2 c: l% l* ^5 ?
00403507 E8 7FBF0200 call qsr.0042F48B
/ Z8 M& c8 E( ~0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]7 d4 G! E8 |$ d! p( Y7 `3 j1 c7 m9 l
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
4 m. h8 [4 z. `. O w8 B# Y8 M00403515 E8 71BF0200 call qsr.0042F48B
/ l- E. S' Z. f2 U1 k" c# n0 ]0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]8 P6 P1 x% X( o/ @/ P
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1! ~1 N" ]" b3 b- Y
00403526 E8 60BF0200 call qsr.0042F48B
1 }: G) l2 M t& R' m0040352B B0 01 mov al,1
1 `7 K! |( @! M4 ]! o% c% q0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]' [6 _! L+ _4 U" R: \8 t4 e0 R" D! ^
00403531 5F pop edi, ?% U1 }2 D6 s0 m" K
00403532 5E pop esi
2 q" X3 V# ^6 M; k$ |% y00403533 5D pop ebp5 h$ J- t( e2 L ]
00403534 5B pop ebx1 g$ K" _! T2 {$ x+ p: q6 S" r/ ^
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx% t9 Y4 j x* a% y- m0 }: l
0040353C 83C4 30 add esp,30
0 p! m" h" O; Z/ j# I; k0040353F C2 0800 retn 85 D! R" T0 @0 T6 w
--------------------------------------------------------------------------------& {8 X1 y. K4 C7 l) C* b
【破解总结】
l3 Q0 ?; F, q7 A" R. m# {0 y 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^9 U' F. V5 r( K- W( Q/ y
用户名：yijun! ?7 G! @# ^+ [: l
注册码：4893*7777*3726*7777*0529
/ D3 h+ w! }5 O; Z$ `- @--------------------------------------------------------------------------------
% [3 u; ~; z" @+ h6 @【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡