|
|
|
【原创】破解Quick Screen Recorder L2 l, M7 p, Z# k
【破解作者】 yijun' j! {; S6 b; ~/ s d
【作者邮箱】 [email protected]+ k. |& [2 W" v" \
【使用工具】 OD,PEID& J$ x% O' N! U" G3 o# C1 C+ u
【破解平台】 WinXP+ h/ Z: H. Z3 K' P: ^ Y7 A1 E
【软件名称】 Quick Screen Recorder+ f: D- c: T. ?2 A0 {/ S& b
【下载地址】 天空
% M) ]9 z( S7 S! o; f& K1 z7 n: \【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 2 l: m4 r1 k$ _
【软件大小】 540K8 @( U8 Y5 b5 p7 c
【加壳方式】 无" l) C' W6 n1 Z( b+ U6 [9 O
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
1 j/ W, a. K$ a1 e* l2 ^7 y--------------------------------------------------------------------------------6 [* a% `4 N0 q2 T. {6 ]4 r
【破解内容】4 ~3 h7 b: q+ L% G: }1 c
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
g8 ^3 K( R$ c00404C69 55 push ebp //在此下断+ u% j6 X6 x4 a0 F
00404C6A 56 push esi
/ \/ S }1 m" p) P8 y: N$ r( L00404C6B 57 push edi- e$ l0 j% y H& ?3 B% L; ~+ {
00404C6C 8BE9 mov ebp,ecx
+ s" |. q, G* j$ F% _/ H3 _00404C6E 6A 01 push 1
2 r' d |% _$ R" J; H00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名. o0 Y. e- y/ S2 g! r
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
* r0 V( h& q X5 G, ]! c+ N8 @00404C78 8BCF mov ecx,edi7 m8 F1 ?3 [2 p' B0 B: j
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码 E. f5 [! C# ]0 z v& X
00404C7F 8BCF mov ecx,edi, u( ^$ T* l3 E! _5 i
00404C81 E8 A73E0200 call qsr.00428B2D
) c! w" {( k }2 \3 w$ A+ w00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
1 @4 W0 c) M: |( \; C+ s0 h00404C89 8BCE mov ecx,esi3 z/ W$ K2 O' q+ R7 W( `: h; b
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX3 ]* u0 L- ~% i4 J( F5 v6 a- D* g
00404C90 8BCE mov ecx,esi
4 R9 D' K) {& o! Y9 _& ^, Q00404C92 E8 963E0200 call qsr.00428B2D* |# q3 T. }6 u& k* z( ^8 W' Q
00404C97 8B06 mov eax,dword ptr ds:[esi]' k/ r) b3 X+ C: E3 @
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2. M& N5 D) K9 g4 ~) e8 P* b
00404C9D 7D 26 jge short qsr.00404CC56 V [5 ~0 X, y* `1 q, k
00404C9F 6A 40 push 40
' R. y3 W* ?* U# M- \00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
( Y" `: D: F1 a( e, k% ]00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
+ R3 Q% K; i# H+ _00404CAB 8BCD mov ecx,ebp( _3 Y! B( I% N) B
00404CAD E8 C3840200 call qsr.0042D175+ Z8 \* J5 A- g( H l, X9 c
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]5 C; O% _! Q6 S$ M3 U, }
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
2 X; } G5 E% O3 w& U8 W00404CBD 5F pop edi3 a( W( I7 v& X
00404CBE 5E pop esi/ c% }# H9 _& o# a' b+ {
00404CBF 5D pop ebp
+ b H! A2 u' u* T6 \00404CC0 5B pop ebx
; ]4 b; a- R2 O00404CC1 83C4 18 add esp,188 z* a9 i6 D' l3 w# a/ q
00404CC4 C3 retn
4 ]4 T7 D0 Z8 J00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]; r1 O2 |! [$ G- D' u' M: l
00404CC8 84C0 test al,al
$ N _* x; T' U: C7 u3 q00404CCA 0F85 1C010000 jnz qsr.00404DEC: T2 T- A" i+ R0 Q, l+ x
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]1 M. n+ ^0 M* Q- z1 K
00404CD4 E8 87E3FFFF call qsr.00403060
$ V8 p7 d8 @ Z v- }00404CD9 51 push ecx
, U( e6 d5 q9 t5 Y00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0- m& U- i# m1 A- N- m/ J
00404CE2 8BCC mov ecx,esp, H8 z: `( M! Z* b1 v. d
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp. s; |; `+ H: H1 _! q9 w [' o
00404CE8 56 push esi
$ G) k) n# r+ _00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
6 P8 l3 s/ X% @( m# U/ }4 f1 k; H00404CEE 51 push ecx3 \" k* ]$ S5 x% E0 ~
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
. i4 q. l2 M1 ~. @8 ~5 l4 m, C' S00404CF4 8BCC mov ecx,esp5 e9 w1 J+ ~3 p A" O6 Q8 R: v
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp5 K1 o: W) j+ v
00404CFA 57 push edi
2 h6 J6 a( @0 X! o00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
; M% H/ F9 o, p) V% \9 Q00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], S2 G1 Z& ^) Q e' h: |8 D
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
( c/ N* W$ V$ ?' g* {2 {' W0 W00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
- Y M& w" D) T0 L' ^00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
% R, |% Z( _0 h! D% y00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
: |4 R% [# j, J/ |: o7 V4 _# u00404D12 6A 40 push 40
% ~6 C+ h( a8 ~ l" A; t( ^00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"1 [) l8 Z& H. H7 L) C, K; K# u0 E: t
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
- Z" ~; s- D" ?8 z2 }& f00404D1E 8BCD mov ecx,ebp
$ c3 G( p. [. S; I4 y00404D20 E8 50840200 call qsr.0042D175
: ?8 L6 N% A9 K00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 X9 N* _2 @2 e8 u& i# \
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-19 S0 ?4 P" J% q# N* n4 e. u" |' b( l
00404D31 E8 5AE3FFFF call qsr.00403090
% k4 I3 W7 O" `# P0 v4 |0 W00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]/ _+ z, A- T: d& q" d
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
3 p f0 ], w: p00404D41 5F pop edi$ P B. G- n! H3 q
00404D42 5E pop esi
) [- N; E5 t; G( ]1 f00404D43 5D pop ebp. n2 Y; ^8 k7 ~9 M
00404D44 5B pop ebx: Z( T, d$ s7 Q! U7 k) t' Z u8 X
00404D45 83C4 18 add esp,188 C5 P+ P8 M% O* r; D# l
00404D48 C3 retn, T' R" m/ V* {
*********************************************************************************************************************************************************
" t# |2 t" l2 R8 P) B$ y7 q* m( O( i* y跟进00404D09处CALL来到：
8 H7 w; w) G# J3 @4 j004030A0 6A FF push -1 //一路F8下去~~~~
; Y% n" C% L; Y$ ]# Q7 b5 s7 {004030A2 68 C88F4400 push qsr.00448FC8) ?$ @! T/ b% ^' \- d0 \- P! _: u
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]' A7 g( y& W% m- H5 k
004030AD 50 push eax
% c5 Y) C9 S& }% W3 l004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
& ?- ]1 `4 l- l# i4 `004030B5 83EC 24 sub esp,24
2 K8 X( r$ U: L ?- P004030B8 53 push ebx
" b; N* H: B `" t: D- ~- H- }004030B9 55 push ebp7 _/ U6 c0 C6 Q3 t& X* t, K8 m; r
004030BA 56 push esi. f: K9 \( C. R* d
004030BB 57 push edi
% O) E ]2 x/ B004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"' A( X+ U$ a6 A2 ?
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]& r& o$ E% |3 g2 D4 T5 d0 h( \7 _+ S
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
5 t5 \1 F# ]/ ]9 @/ W* ^& w004030CD E8 27C40200 call qsr.0042F4F9
1 U( K3 i& x! |' ]3 @5 m004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
6 W! K6 D. j0 D, r# I004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
/ _1 K: c3 C3 k5 a004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
* H$ D. ^! S0 g) k6 M2 V1 v% C004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3$ z% D( I. P# Z/ @0 j
004030E4 E8 905A0200 call qsr.00428B79
. j8 k' }4 B- c* C/ p004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]2 `! \% [/ D2 M, h9 q0 r. Y
004030ED E8 3B5A0200 call qsr.00428B2D) y$ g* Z7 C) {% P* e
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]$ ?* U, i* B7 G$ L- L' ~- d2 e
004030F6 E8 7E5A0200 call qsr.00428B79
4 n6 c0 q* n4 ]4 `3 d1 R0 s004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]- ]) D1 K7 U% d; P
004030FF E8 295A0200 call qsr.00428B2D
8 M ?1 e9 w Q/ u! Y z8 ^8 W8 R00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]& F( C6 K0 O U; A- W! N
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]- {9 _: g. a* q$ F }
0040310B 83F8 02 cmp eax,2
& T6 z* ?2 m l0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
' i }1 h( e" r) C! N3 s; N$ ^8 f00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]# l/ ?" f. e7 N: V' @$ o; Z2 `$ z
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
% G/ p, e5 j% C0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳/ o; N% K0 @' ~& y
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
, b; `8 N; n' e5 E% a00403126 6A 01 push 13 S+ t: d! n( T6 ~) W
00403128 50 push eax
z/ I: [: Y+ P: a: u/ J! {00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
/ [9 i& E3 T3 G3 R6 F" F( V0040312D E8 C4550200 call qsr.004286F6/ a' N" ?! h" Z, C1 S* S' f2 B# [
00403132 8B00 mov eax,dword ptr ds:[eax]
+ P6 c5 o1 k# U0 T9 Q00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
2 m$ ~% q+ M! s( q00403138 50 push eax
9 b( F( V+ C1 g; Y3 R00403139 C64424 40 04 mov byte ptr ss:[esp+40],4; h+ O6 y: f1 M% U' c7 |
0040313E E8 4D560200 call qsr.00428790( Y& @" Q4 t6 {( c: X) E; V
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- z: v, T: c4 V$ ^
00403147 8BF0 mov esi,eax% i8 n7 Z; J- c! g% r) a( k0 N
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
& I/ G- i. a/ w: s7 K0040314E E8 38C30200 call qsr.0042F48B
+ y" s7 @( D1 y* B# l+ O00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
0 q3 B8 {/ t3 A8 @3 G00403156 B9 3E000000 mov ecx,3E% }4 s% z4 F, p2 B& |
0040315B 99 cdq, V8 j5 |( w. L0 ~6 d0 S
0040315C F7F9 idiv ecx
$ P& J% H# i6 `9 ^- g; n: r- l& F0040315E 6A 01 push 1
, K7 i* }0 u) ^4 b% _! U00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
) m/ t X; E1 P7 r+ U6 c00403164 8BF2 mov esi,edx- h. X$ k3 e6 K8 A( b
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
" c) K: [- @( D# N; Q) d0040316A 52 push edx( @& a( J: n: W) y6 f
0040316B E8 0A550200 call qsr.0042867A
( c4 x* `9 j; @3 v" D& Z$ L00403170 8B00 mov eax,dword ptr ds:[eax]
! R8 v4 Z+ M, D2 Q: n00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]1 x- O. i% N* g+ N8 A
00403176 50 push eax( X _3 w& M& @% `( x
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
$ w, V# L& K5 g3 M: k u# J5 F) n0040317C E8 0F560200 call qsr.00428790+ F+ D- S0 S z
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 ]# ~' n7 i$ F) ^' ^4 a# P
00403185 8BF8 mov edi,eax
! ^ L, W* |; O- C6 G9 j00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
4 y" J- E8 c$ f$ {, s% U0040318C E8 FAC20200 call qsr.0042F48B8 Y: x4 b1 s! v
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
: v/ V% J5 W) J) k2 h! F% Y00403194 B9 3E000000 mov ecx,3E4 R+ }3 D, N4 D
00403199 99 cdq( k7 I' { w6 m/ _ U5 o
0040319A F7F9 idiv ecx
; \1 t7 m4 r4 c8 [5 p+ K0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]+ C& L( t% |2 A! `/ H
004031A1 894424 28 mov dword ptr ss:[esp+28],eax9 k1 C9 ~4 P w8 g5 p* k
004031A5 8BCA mov ecx,edx2 p1 X* F7 F, `" K4 d$ ]( k% L0 a
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
' I6 Q9 e8 r! y: V6 z004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
T! S+ {$ R/ ?" @9 k1 L004031AF 894424 18 mov dword ptr ss:[esp+18],eax
. \" r+ {, u& f5 ^004031B3 894424 14 mov dword ptr ss:[esp+14],eax/ v: @$ u- }. c
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
0 g! [4 i& T+ {) [9 a004031BB 8BC1 mov eax,ecx3 b: h0 l2 _; J. |6 z% D( t0 o
004031BD BF 0A000000 mov edi,0A
* A2 |5 m) ~) l2 J! ~004031C2 99 cdq
! E$ e f3 P! H7 F; E004031C3 F7FF idiv edi
3 J0 r- o' [+ O v004031C5 8BC1 mov eax,ecx( p8 Q4 }- b0 n* ], u
004031C7 B3 0B mov bl,0B7 v" X, D3 ?2 ?2 O, E& }7 \
004031C9 0FAFC1 imul eax,ecx' k* O" O D P2 U7 r4 ^1 D" N- L
004031CC 8BCF mov ecx,edi- f7 c. E" s5 c! l' }% n
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl7 M4 |+ B% |$ L
004031D2 52 push edx# V1 ~, u8 }& N C6 n2 {
004031D3 99 cdq
1 C N: I" Z2 M; |: I. f9 _004031D4 F7F9 idiv ecx6 h# r: f" S7 t5 P" q8 j( A* F4 ^
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
# F; u5 r+ X6 ^+ @7 }" f* ]004031DD 2BC6 sub eax,esi( ^& v' h0 l- Y/ f( |' L6 p( C6 |$ w
004031DF 52 push edx
% \1 J. q! e- p6 T* Z004031E0 99 cdq% \; [$ l7 K! ^: l, i
004031E1 F7F9 idiv ecx p; o# v1 U0 S; s$ e* H( J5 O9 c* Q: \
004031E3 8BC6 mov eax,esi9 x: _/ m! p! J% c
004031E5 52 push edx
; n- D( C: y8 l" ^! G& `8 b004031E6 99 cdq# k- n: E* Z- P" d7 J4 o0 o
004031E7 F7F9 idiv ecx) Z& v4 l# |$ D- G0 T+ y1 C3 a
004031E9 52 push edx/ w3 T" a$ y5 X$ Z; ^
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]1 O. j" f4 R- X' }2 |' ^* [
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
$ x3 V$ N* r9 v/ q# d% E% I004031F3 52 push edx/ F# F5 t4 ^5 \1 S; p
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
' u4 F8 [" A9 j+ i004031F9 83C4 18 add esp,18# j6 g0 [" p$ f( j5 `( E1 T
004031FC 6A 04 push 4
' [$ X7 j9 C, ?, @: y7 i& e004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
# u) H! P* `1 M7 Y00403202 6A 00 push 0
1 R/ G+ }8 }4 N00403204 50 push eax
. I' V2 Z& ?. N$ Q$ y4 |4 H00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]% t# S! b# k7 A4 n% l
00403209 E8 D6530200 call qsr.004285E4
- f7 g% Z" W+ m$ {5 Z0040320E 50 push eax
. n3 U' l' G' q4 M) n0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
7 D% U2 w- C3 e" |- X$ Q: \00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
! P6 u( N( x& T' S( E& m00403218 E8 A7C30200 call qsr.0042F5C4
2 @* [1 r0 k) v% |9 t9 t/ B1 z& }0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
: ?* O( }1 W5 y00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
7 S: X, o0 |" w00403225 E8 61C20200 call qsr.0042F48B
# d7 S) G* X: b) D! X; |0040322A 6A 04 push 4/ Z# X/ n9 m7 }) b) q+ D
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
; U' u' D8 j& Y# p, @/ a% b00403230 6A 05 push 50 V* U$ @0 Y. h7 E
00403232 51 push ecx$ ^2 a" J: u% U2 i7 O& `
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 H0 ?5 v9 k6 {, @, q5 E00403237 E8 A8530200 call qsr.004285E40 `& }9 B- m3 d- _2 ?6 l. H: P
0040323C 50 push eax
9 _; }7 D) T9 Q. D3 \8 W+ y0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
6 A. }: ?' I/ Q00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D8 ], k+ C$ K8 o% T8 k/ [
00403246 E8 79C30200 call qsr.0042F5C4+ v( G8 L& o5 S+ Z
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30] S+ g- ]0 n/ z: d' d, c9 r, C" k
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl7 q8 ^3 ^& o# O/ G7 t% x) ]
00403253 E8 33C20200 call qsr.0042F48B
% `6 h7 U# H6 b- B00403258 6A 04 push 4' }3 L. l- M' y8 o
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]* q6 v7 v- w; @- j% ?
0040325E 57 push edi
1 U2 `% O3 p: K1 U3 ]7 b. @0040325F 52 push edx) P7 t \9 x5 p, s" `( ?% U
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]7 w8 G* E7 U! e1 V8 S9 E; K
00403264 E8 7B530200 call qsr.004285E4
$ ~ ]0 `5 S: f4 N8 f00403269 50 push eax* Q0 ]0 Q; S0 p7 m3 d) @
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 k0 D% {- [ v- S
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E# F% }+ i+ H" Z4 A, J2 I8 {
00403273 E8 4CC30200 call qsr.0042F5C4
4 J# |- |1 S: A, s" Z" m00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]" o) c2 u8 c; P$ Q
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl- O3 Y4 c/ H# r0 M% d" I: s
00403280 E8 06C20200 call qsr.0042F48B
: V$ ^* V7 O6 I3 {* ?* G* k00403285 6A 04 push 4! i9 j8 y2 h& T" p9 A
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
# h/ b/ K. W: M @2 Z& N( _0040328B 6A 0F push 0F
) c% X4 b" |+ O7 z: P( X9 ]5 y0040328D 50 push eax
& O2 {( w8 b! W0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
0 s. H) m& `/ |9 H) w00403292 E8 4D530200 call qsr.004285E4# x" f ^2 c2 @7 v' L
00403297 50 push eax7 U' O! E: E% l4 I5 \
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]; p; | e) j3 \% G, Y) F& V7 L
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F3 \8 P% Y; D& [) Z* J/ c
004032A1 E8 1EC30200 call qsr.0042F5C4
- j0 X& }! _' X5 z, L7 [004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 a1 S! ?0 ~. f3 F& W( E004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
) h# _9 F, u( x( O3 n' ~+ M. ~- e/ n004032AE E8 D8C10200 call qsr.0042F48B
7 w' u" C+ y" A0 ] E004032B3 6A 04 push 4
8 O& ~2 V9 F' c) K004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]6 F5 @* P1 D4 ?/ M- b: J! w
004032B9 6A 14 push 144 U4 ^& X) K$ ~+ h( y$ E% i+ G- T
004032BB 51 push ecx
f3 j- ]) T# l. i0 _# \004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
6 M; D, ]+ t8 h% \; ?004032C0 E8 1F530200 call qsr.004285E4# m' S# k4 ]0 k0 R
004032C5 50 push eax% r5 H" W$ Y% `- J/ f
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 w2 T6 k. f: D1 Z1 u
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
8 \8 O e( `: n0 P7 }, W2 q, `004032CF E8 F0C20200 call qsr.0042F5C4$ b5 {! D9 V& p$ ]
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]! }+ g3 {. N$ }2 T
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
& h& w9 R- ~, i8 {. y, {004032DC E8 AAC10200 call qsr.0042F48B
# m3 X3 H2 F' T7 c4 g004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI* a$ {6 P# X1 L! W6 o* q
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
9 x- {4 v0 h% p+ T' u' g004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
* M3 N8 u1 u [/ x) {3 |004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
F" P. h8 Y: y004032ED 8ACA mov cl,dl ; DL送CL- L" \+ X9 S T- @6 y
004032EF 3AD3 cmp dl,bl ; DL和BL比较# }/ W* t% z) ` L
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）0 C% w- _, G, }* S
004032F3 84C9 test cl,cl
3 D4 i8 g. f9 W6 d: t) c: e3 c004032F5 74 16 je short qsr.0040330D2 ] l" a, S/ E# D4 |6 z8 r
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
. n' T* f& |6 `' I; L004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
! m; c. g' j1 N0 K) l004032FD 8ACA mov cl,dl. }8 }% l1 O% m3 @9 {7 p9 c
004032FF 3AD3 cmp dl,bl ; DL和BL比较4 y) q8 |2 F7 |4 A* O+ b% a9 T
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）) J1 V) h+ a! m! H+ n: O1 x
00403303 83C0 02 add eax,2 ; EAX加2
) A* I3 {" U1 M2 z1 g! c8 u00403306 83C6 02 add esi,2 ; ESI加25 b9 k6 o6 c+ l9 C. e7 t
00403309 84C9 test cl,cl
3 G" j6 A4 v3 x0040330B ^ 75 DC jnz short qsr.004032E93 E s& G3 m5 ?4 a
0040330D 33C0 xor eax,eax
% y) G0 K) q4 |+ W0040330F EB 05 jmp short qsr.00403316
" \; a5 O0 s* N3 | [00403311 1BC0 sbb eax,eax9 \: k# G8 r3 c( H3 i& `1 x" t
00403313 83D8 FF sbb eax,-17 s" T* r+ N3 K( ~
00403316 85C0 test eax,eax8 M) K& u, d. X$ A9 d
00403318 74 0E je short qsr.00403328
% G) |: R: @% X. e3 @9 J6 D/ P0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A1 y3 W$ }1 v" ?3 n: |
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]4 O" x$ p) F( ^. Q) J
00403323 E9 F0000000 jmp qsr.004034186 [- C% }/ N- F; d' \: Q/ B' A
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
% K3 d+ S3 X9 b6 A6 l0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
7 v% D: i% `* x! i6 R$ k: d$ b0 b& J00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
$ {" S% `# e! I+ }5 @6 }00403333 50 push eax
- _% z/ c6 d( c: ^$ }00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
: y# r, b0 F0 _8 G" x. m/ O* H: s00403339 50 push eax
5 J& K4 u) Y3 z! A. V% k1 L& ~0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX# Q( s' d9 K. s" B# V7 c
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX8 M4 A1 F5 o3 E; F! j% X2 a- d
00403343 83C4 04 add esp,4
( A+ Q2 t6 [) Y- h( @00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI5 X* }1 [1 g$ y% e
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
# `7 z& j9 p, r8 i A3 D0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]' B9 k! ] T$ y( R9 Y) V# R
0040334F 50 push eax0 r/ c- a9 f; [: _! G8 O: x
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX. |1 Q' q8 w9 X; y3 t0 \- A* u8 E$ N
00403355 50 push eax" x' S4 _" g: {/ d' B& K0 F' g
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX: ` x/ D) U% y: W# K" h/ @
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX* C5 ]6 b8 w: b9 K0 r6 v5 Y0 ?
0040335F 83C4 04 add esp,46 K% X. H" I' q
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI m# m' v5 n& i' I- I* ?
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
1 ~# T$ _4 D' k" q00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
( X; [: E; @' d+ u% C3 ^( r/ h0040336B 50 push eax
! h9 Z8 d' o8 S3 ?0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
; T. B1 @$ S! v2 `" w& z7 i00403371 50 push eax
& ^; M0 p* G" o% i" b! B! T p: a00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX; h' g4 s8 d* [3 R w
00403377 8BD8 mov ebx,eax ; EAX送EBX
0 H5 g( Q; e A! K0 L' G; _00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX& O' v/ X- N. `' A" g9 N5 [' {
0040337D 83C4 04 add esp,46 ~6 @+ y1 G3 F- K/ D7 f. n
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
! r6 i0 a5 T$ A00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]% ]% U2 I1 p, g" D E4 O* o# ~
00403387 50 push eax6 z2 y/ o5 y- b" j' O; Q
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
% l* i- _% v3 r! K5 f! x/ E0040338D 50 push eax. m. S& ?* l3 I
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX; U5 Y0 s; R: J
00403393 83C4 04 add esp,4( A b$ s! [8 `8 r+ P9 |' ~
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* M" ^ w1 e5 x2 Y# W% L, \ |
0040339A 8BE8 mov ebp,eax ; EAX送EBP
. `% T ]' m6 D3 d' e0040339C 6A FF push -1" X9 F/ ?! `9 S" @( {5 u
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX+ ]# Q* c+ ?# j) ^; z
004033A3 6A FF push -1$ z; z! S" N, d9 M" M
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX! \. p. b# i X
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX! e" n' w' F: {' D
004033AE 6A FF push -1. ?& _ J2 \1 Y; S, L* W) m
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
8 V1 ?* L6 X8 @, I/ [. m: f004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX- Y5 E. {: A8 j
004033B9 6A FF push -1: o- E. n$ O" b0 ]( C+ e( _
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX" M7 o6 i; w6 D" G$ Y
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
8 m( r9 r8 {' X8 d/ {# I004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX+ ?) j) A6 p0 ~! s
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
6 M# l: n {# t7 l% E; e( g004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX) b0 j# Y- S4 G0 a
004033D7 D1E0 shl eax,1 ; EAX左移1位
+ }: y% U' B! @, m4 j2 X004033D9 99 cdq ; EAX扩展
$ G. h/ }# `6 s1 i' [2 e5 y$ \004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中- f/ K/ J2 i0 G9 F/ i# [1 Z
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
1 m; F$ a# p1 n* e4 d004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）. E& ]( G, y% C# z3 r- @
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A- w) ?8 j$ x+ d! F4 \3 }3 a" j
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ S4 R3 R/ g ^# p$ Y( u004033E9 EB 2D jmp short qsr.00403418
9 k. z& s' t) Q4 z4 m- R# @8 |. _% C004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
6 d$ e1 m7 H3 Z$ l: X8 G" x s004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2, k! k1 z- x; j4 G, U4 Z
004033F7 99 cdq ; EBX扩展) ^/ Y. {1 I/ z/ g* R1 s
004033F8 33C2 xor eax,edx ; EAX和EDX取异或! E2 ~- w* y( q, T. n) v
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX) B2 Y9 l* @' T* O" i! \
004033FF 2BC2 sub eax,edx ; EAX减去EDX
2 q+ |' z& X; {& [6 r: R00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]' z% c5 m8 Y6 C" h- B) z8 W- W
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
4 {1 _( V( z6 F y7 X00403409 99 cdq" k9 o- H7 h! r. F% b1 W& [
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
. E3 O) p; H0 w( O; U( @0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX# U% j$ W) j! N
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
" ?; k% G& c5 n$ b00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）" J3 Q+ ?5 x5 n
00403418 E8 6EC00200 call qsr.0042F48B ;
. \. A4 F9 i3 v8 ]: O, _; Q) X5 e0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]0 d& f: R! i! E& w0 P1 Q
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
0 g4 h/ `# e6 D+ G: l7 N$ { h00403426 E8 60C00200 call qsr.0042F48B
' |( p* i' i' G6 B& P6 E0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]6 ^+ x; K6 O: f" G
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
- |3 k' n" O a5 {7 w00403434 E8 52C00200 call qsr.0042F48B% P+ I- b2 n* b+ c) i
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 H% I; ^) @; [* f$ O* u
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],71 ]" S* H S' J4 _5 S# ^
00403442 E8 44C00200 call qsr.0042F48B
! ? _6 }3 k0 v& ]' b% a& ]5 j00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
3 ]/ c# G6 f; |6 u0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6+ D4 O# I9 b: _7 {+ U7 b: ?
00403450 E8 36C00200 call qsr.0042F48B: [1 Y- ~, F: s/ P0 K$ y
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
1 c/ {# g% V8 u- t! ]$ J5 w2 i8 f00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
o: X0 x/ ?1 D- W3 n' Q$ J0040345E E8 28C00200 call qsr.0042F48B
' s: [3 {5 s5 y0 O4 G00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]; q$ `) i! j8 j! `* f
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
3 j, [2 Z* C# [8 }0040346C E8 1AC00200 call qsr.0042F48B6 s/ I M$ a$ D& t5 ?* |
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
9 o ~( c- I% K00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],12 s4 q* v" N2 U+ G8 h6 n/ X
0040347A E8 0CC00200 call qsr.0042F48B
v1 Y8 b6 m A+ u( r7 N2 u0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]$ R( O* E) U& ?8 o5 d% U. j
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
; {! U5 m: r3 B' E+ `, F00403488 E8 FEBF0200 call qsr.0042F48B# }* P* x7 ~1 o6 B
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
- j$ Y ~3 Y" C3 _8 x( s+ u- @00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-16 z& V2 r) _( H$ S. L) s) H J
00403499 E8 EDBF0200 call qsr.0042F48B$ ]* L W9 K2 E' m; Z5 }
0040349E 32C0 xor al,al ; AL清0. z+ p/ c, K2 b9 {+ m+ s
004034A0 E9 88000000 jmp qsr.0040352D% I z/ a" ?# r" S2 q& r- ~9 l+ p5 K
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
G1 \$ @: K/ d3 D& p004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& @, J* E1 t, O8 I: C004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
3 z. Y/ n/ l/ C) V! r, N e3 w) ~ l004034B3 E8 D3BF0200 call qsr.0042F48B2 m( \- G: [% X* p* w5 k0 n8 C
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]& n* V3 d, P* s6 e& e- n
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],81 r4 m9 M" p& {7 r% s- x
004034C1 E8 C5BF0200 call qsr.0042F48B
0 V1 g* q+ a& F- d4 q% y, Y( d004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 W8 U" \' H! D |8 S004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
; g" m1 C( g# `/ ~004034CF E8 B7BF0200 call qsr.0042F48B$ R2 g% P+ z# n9 f' e5 e! m* V
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
$ R7 Y: ]6 {2 S+ L& N/ J004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],60 G ?8 ^4 Y; e9 Z. I
004034DD E8 A9BF0200 call qsr.0042F48B
; w* d6 a! u; L- I+ X004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
& f) Y8 Y9 [ T" \- V9 B" A! r3 u- p004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
3 W, R/ W& h! k4 b& y3 {7 R! z, f004034EB E8 9BBF0200 call qsr.0042F48B
' U) ^2 G3 @8 P( i004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
7 y |6 d# P6 d004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
9 b4 q9 `+ e7 @1 {# ^# _% _004034F9 E8 8DBF0200 call qsr.0042F48B+ v& Q4 h* O+ w* ?9 P) N
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]' S8 ?1 o. Z; R/ S5 ]$ y
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
: v* U/ o* L6 j% v3 O8 [% W6 P! N6 H00403507 E8 7FBF0200 call qsr.0042F48B
7 j: _$ d. R; R# n* A" q0 z0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44] G& R. C/ `/ t8 P h
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
}7 s; v9 m+ n* w1 m1 i6 f00403515 E8 71BF0200 call qsr.0042F48B- |3 e" |. c( Q
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( ~1 L, ~/ M8 i& X0 Z0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1) ~5 L. l1 k! h8 P8 O% N
00403526 E8 60BF0200 call qsr.0042F48B
0 E4 N4 n+ |* \! f8 L6 Z& `. A0 R' u0040352B B0 01 mov al,1
% T' [- ?" M$ P4 X0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]' A% x/ y. x |$ B" x2 X- J0 v1 h
00403531 5F pop edi
, L: n, `, u! t00403532 5E pop esi
# L. m6 H0 m3 c00403533 5D pop ebp0 g% J) L3 C6 t. i X
00403534 5B pop ebx
( V9 D8 N, m* c# Q I00403535 64:890D 0000000>mov dword ptr fs:[0],ecx" x- q6 I" K% F% N9 I
0040353C 83C4 30 add esp,30: {' s, e1 C) a0 O$ y
0040353F C2 0800 retn 8
7 j& t( M5 |0 Q! A5 C2 V) T0 E--------------------------------------------------------------------------------! M V8 ~! o) {7 k5 |
【破解总结】
8 |7 u, Z% R" d" b) v 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^5 K9 w/ d" B" B# b; e2 j1 `
用户名：yijun: q/ ~ L6 ]1 w0 B( e0 W
注册码：4893*7777*3726*7777*05294 W, t4 r6 i0 |- P- M
--------------------------------------------------------------------------------
6 ?/ I5 m z; p- ^+ X1 h5 s【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡