|
|
|
【原创】破解Quick Screen Recorder W: u& q8 L7 ?- Y' u
【破解作者】 yijun
% b9 O) x( {% Z/ @【作者邮箱】 [email protected]0 i9 h8 I$ M. V9 O3 m
【使用工具】 OD,PEID
# N0 G4 A( S: I, m【破解平台】 WinXP, G; U% X2 u- w5 u
【软件名称】 Quick Screen Recorder, F2 K. U3 D; m. ~1 Y/ m9 g
【下载地址】 天空7 |9 C1 d3 V$ A- q" W6 `% T5 w8 h
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
8 l! x7 e( o+ f. F( H【软件大小】 540K
( K2 W; a% p, }) A【加壳方式】 无* ~7 u9 u0 f/ `! J8 X, P8 o: H
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）2 r5 o- b1 U! E. i" y
--------------------------------------------------------------------------------
& M. U. V: N) F3 U【破解内容】 ?9 I7 W- v/ a' M: Y4 h
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
0 {# t2 s( ]9 ~* e- V, M2 V: v2 C- o00404C69 55 push ebp //在此下断. T7 P6 e2 W+ ~, {) o; Y: |# z
00404C6A 56 push esi; U1 l. `! w" g2 \! ^" p+ u: o# M
00404C6B 57 push edi
1 `8 Q! D; F& P1 F) W00404C6C 8BE9 mov ebp,ecx
8 U: e" E) q0 O9 w1 L# |00404C6E 6A 01 push 1; y, e0 a3 N v$ Y, d/ m- ~. t( k
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
6 r" j. }, k+ v0 w8 A" \+ {% e" K00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
8 Z' c7 }& a/ o00404C78 8BCF mov ecx,edi
! b+ N/ N7 h, X) j" J A3 o00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
5 _6 I! H. y3 ^) C: A) h. [- a+ o00404C7F 8BCF mov ecx,edi6 L/ p3 c3 j4 M' g: r
00404C81 E8 A73E0200 call qsr.00428B2D
' y; ?& ~5 A- k2 D00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]7 N" L- R; {/ @% N2 {& E
00404C89 8BCE mov ecx,esi
7 v6 ?; W6 c h4 m* E; k00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX5 o' j3 p# Z+ v2 f! P) f! y
00404C90 8BCE mov ecx,esi
, @/ d0 B+ Z/ s( a' V* f00404C92 E8 963E0200 call qsr.00428B2D1 ~& p) Q# `5 e f/ i# l
00404C97 8B06 mov eax,dword ptr ds:[esi]) D! g6 P/ f& C+ Q
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],21 i5 e' V5 Y1 n; o k' _) O
00404C9D 7D 26 jge short qsr.00404CC5
1 ^0 R' L# a3 F% F( X3 r' Q00404C9F 6A 40 push 407 A O! i" u/ o: b
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
1 p$ c) P& N- [* w00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."! Y2 \ S' r2 P& L
00404CAB 8BCD mov ecx,ebp4 G& d2 {; Z* E: w2 e, U. Y7 m% q
00404CAD E8 C3840200 call qsr.0042D1751 Y9 v( u( j. @! p
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
" h$ B$ u2 l0 X% n00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
" E2 g# y1 L/ o0 y$ u7 }00404CBD 5F pop edi
( s# m8 f2 x4 I% `00404CBE 5E pop esi
, f7 |- a" G& z00404CBF 5D pop ebp
: o; L+ a0 x/ r00404CC0 5B pop ebx
5 x" c$ @, G% y9 C6 @/ V& b4 g00404CC1 83C4 18 add esp,18
" T- r) k. W2 p' d! f00404CC4 C3 retn6 R: h) {* A4 I1 Q" q
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]& f3 k* w S- z$ W7 K6 L
00404CC8 84C0 test al,al
. s M. T/ j7 u2 A( S3 R' Q7 ~. r; ?00404CCA 0F85 1C010000 jnz qsr.00404DEC" {- t! W, T' Y" A" f
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]7 }9 [, f# @& i# |' i& I8 f4 k m
00404CD4 E8 87E3FFFF call qsr.00403060
9 L$ |1 j* L, t00404CD9 51 push ecx
* K3 @2 A- B% m: v00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
, x6 y1 x% i0 G4 p# b, X00404CE2 8BCC mov ecx,esp
: }# D/ ]3 w# g; F6 A% z00404CE4 896424 14 mov dword ptr ss:[esp+14],esp9 P2 o$ n4 S# f4 m/ T b
00404CE8 56 push esi; A2 G1 C4 r3 `6 w
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0* }& \; W# ?7 i# q5 L7 z
00404CEE 51 push ecx" T' i5 }! B) f( t6 F& u5 a
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],17 M) N+ G2 |$ d( M$ F2 N" g8 h5 W
00404CF4 8BCC mov ecx,esp
3 |8 {- H& b) R3 b1 E6 x00404CF6 896424 20 mov dword ptr ss:[esp+20],esp7 t' O7 a, B, B5 h2 b1 P* I
00404CFA 57 push edi
+ N$ E( A, F1 W( Q" k! \) c00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是00 V9 H& t1 V1 n% M
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ D! w5 C& f3 ]+ n! d; M9 t' B4 Y00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
" l6 u, i- l+ Y) i. ~00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~, r9 l: e; i* Q# n
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
$ } p* m6 |9 c5 [5 Z% k00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
. f U7 X2 s# s v4 _; u00404D12 6A 40 push 40: |8 P8 Q1 F- R% s) i' Y& B7 Z3 Y
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"! E$ t% h5 J" v9 ~5 u
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."0 D* M: e8 J; G. [2 [% M+ F
00404D1E 8BCD mov ecx,ebp
- \2 D' P: n+ H+ X9 p [$ P00404D20 E8 50840200 call qsr.0042D175' C+ t# _# W" b& W) B
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# T* x1 u' ^ y00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1- x1 W( r% D0 K3 x8 ~
00404D31 E8 5AE3FFFF call qsr.004030902 t! w7 p |6 X
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
# u* X% P9 W# J1 o3 k- [, W00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx- T7 R, T! _1 }. m6 k
00404D41 5F pop edi# m4 B) c( ~0 {4 U. I) o
00404D42 5E pop esi4 ]4 q; C( I" A" L
00404D43 5D pop ebp* o4 q8 y2 u: |6 ^9 r
00404D44 5B pop ebx
. d3 Y- q& P- D- i* ~- z00404D45 83C4 18 add esp,18. {6 X4 [1 M1 O) ?3 w
00404D48 C3 retn
& \6 P& T% ` r0 z" k7 e* Z*********************************************************************************************************************************************************7 j; k" W7 O2 Z3 w: X% N5 V
跟进00404D09处CALL来到：
4 }1 l$ \4 Y3 X, v004030A0 6A FF push -1 //一路F8下去~~~~* h3 {5 `7 M H9 x; n
004030A2 68 C88F4400 push qsr.00448FC8
- L$ C& ~% q! B; J6 C3 S2 j004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
9 k: d# J' R3 q004030AD 50 push eax
( u1 }) C7 _6 B$ E; O004030AE 64:8925 0000000>mov dword ptr fs:[0],esp4 [1 Q( ~% X9 ^) E) a' F/ A" U
004030B5 83EC 24 sub esp,24! G- X& `9 \ ^* X+ ~$ }
004030B8 53 push ebx
8 Y0 Q9 L9 H8 k* |+ s2 ?& D004030B9 55 push ebp! J; G* V. _+ u+ G0 f6 H4 f
004030BA 56 push esi# r }5 m* C. M* d
004030BB 57 push edi; \# Q$ v& `' n# _/ @2 r- ?& M
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"2 F, {* x, J; C4 ]) H
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 ~7 b4 X$ X9 }6 ]/ B' R8 q004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],18 v8 J( S" C& e. b/ p
004030CD E8 27C40200 call qsr.0042F4F9
4 I# C" Q1 V O/ _) ?- ~9 A004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]6 R, h( F8 [% c
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax6 K: M( n! i H8 c! ^; c
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]* x+ U% V% M, K; I; L
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
* V9 n5 H' G$ j. G s4 ^- T% C004030E4 E8 905A0200 call qsr.00428B79/ G! u, ] ?- Y
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]6 ]/ r U0 `+ P7 D' k' E& h
004030ED E8 3B5A0200 call qsr.00428B2D& M! d( M9 J9 z8 h
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44] V# o8 r( I8 h3 A
004030F6 E8 7E5A0200 call qsr.00428B79% c3 J: ]1 t( g# Q5 }
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]0 M7 w6 H3 M6 n
004030FF E8 295A0200 call qsr.00428B2D
" J5 Z* p' n0 q1 K00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
7 l$ ~8 L3 l7 \+ c* G! T6 n00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
4 }+ D! P; i$ ]4 J$ x- v/ L0040310B 83F8 02 cmp eax,2
; C: X2 ~; \7 S0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳7 G' B4 e: |; {
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
/ ~4 X8 o3 V; \" a' k/ \00403118 837A F8 18 cmp dword ptr ds:[edx-8],181 G$ t* ^; |. b
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
: [; w) y& ]& ]& l' R00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]+ x! `! I3 Y6 ]0 m. b% u# G( B
00403126 6A 01 push 1% j) h- C0 Q+ A5 W
00403128 50 push eax
' s8 o L5 r+ ^8 k; V4 `8 p3 |00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 x/ g& S% }) M: J+ L/ D0040312D E8 C4550200 call qsr.004286F6
) f9 L, ]( |; ]1 P00403132 8B00 mov eax,dword ptr ds:[eax]
5 y& _2 f0 m# v' L1 J6 U& g2 m00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
( ^. r# f3 B, o- Y6 o) `0 t00403138 50 push eax
2 F' |# c6 b( |6 t/ k00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
7 F6 R- X" T' l8 s" X8 ]0040313E E8 4D560200 call qsr.00428790
8 P! s9 C" e- @0 s2 u- C2 ]00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ ~# [6 H* D# u9 q
00403147 8BF0 mov esi,eax
, v; ^9 S+ E& ~/ u8 h8 l4 n; L00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
, s9 c6 A/ i4 O* `1 i" U4 J0040314E E8 38C30200 call qsr.0042F48B6 ^ ^% G6 m& T5 K3 P
00403153 8D46 0A lea eax,dword ptr ds:[esi+A] c1 Q8 D; Z! s6 D
00403156 B9 3E000000 mov ecx,3E
' _- z! s [) p0 {0040315B 99 cdq
/ K0 I! x9 z. M: a$ L0040315C F7F9 idiv ecx
- z' h2 `7 P" ~1 |0040315E 6A 01 push 17 ]& s3 Y& e& ^7 }$ d( a/ |
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]0 o+ Z" h8 y4 A X8 x; l
00403164 8BF2 mov esi,edx
! ]; C: q$ \7 y, X! v! i00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
# ?) Q1 X0 Z, Z/ a0040316A 52 push edx3 } p) T: O2 \1 n6 k( ]6 i6 W. E
0040316B E8 0A550200 call qsr.0042867A
9 u3 b8 k u9 Q3 U# j9 ?! ~00403170 8B00 mov eax,dword ptr ds:[eax]
3 }: D/ U/ ]6 V* D9 ]9 E00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]. A8 @: i; b! C! x
00403176 50 push eax
6 g8 m( c4 n+ W, F% x+ ?5 f00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
* i7 j( y& K, K, X% [& F" F0040317C E8 0F560200 call qsr.00428790
/ W( _- t) {( Z) K00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. A, s4 t' v8 ^( C7 U( ?00403185 8BF8 mov edi,eax
, H$ T2 i" [& o00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
" L7 G$ r6 ^, P0040318C E8 FAC20200 call qsr.0042F48B
. v1 f9 M, \2 g3 w" p" j8 S00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
" w/ j+ X2 y1 b T% m! |% p00403194 B9 3E000000 mov ecx,3E
9 b2 L k, X1 [3 J0 q. ?6 q00403199 99 cdq
7 t- Q* E' S! Y/ E0040319A F7F9 idiv ecx" k5 R: ]0 Y* ?4 K9 o
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
+ j( N9 ^7 Q+ c5 Z0 m3 x004031A1 894424 28 mov dword ptr ss:[esp+28],eax7 q5 z/ Y' S7 {% a* b3 M) R
004031A5 8BCA mov ecx,edx
+ s. C) y. w2 X7 |+ o- i) C+ D004031A7 894424 24 mov dword ptr ss:[esp+24],eax) c/ u0 n: V( M, [9 i+ S
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
: o+ C# A( r" S$ S6 k+ r; N! j004031AF 894424 18 mov dword ptr ss:[esp+18],eax
! H/ B) ]* \2 F4 k. w* D( Z004031B3 894424 14 mov dword ptr ss:[esp+14],eax
9 P, ~9 m: I e# m/ U+ {004031B7 894424 10 mov dword ptr ss:[esp+10],eax
3 M6 y" L. t) ~9 n004031BB 8BC1 mov eax,ecx1 m+ J% d: W9 X
004031BD BF 0A000000 mov edi,0A
, r: Q0 E& O, x& C004031C2 99 cdq
& A; K; y1 h; H) z' q# c' q; ?004031C3 F7FF idiv edi3 A+ j: }, G* V; P
004031C5 8BC1 mov eax,ecx
* ]& }3 E0 K n004031C7 B3 0B mov bl,0B
5 ?7 `$ n9 U5 o004031C9 0FAFC1 imul eax,ecx
U( v. I: @+ w" @0 G6 i. s004031CC 8BCF mov ecx,edi# \$ ?: ]3 I" `
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
6 ~' `) W: c! y" B# c+ M1 w004031D2 52 push edx
2 ?0 \" ~2 I: i004031D3 99 cdq! q8 r! d/ _$ J+ Q6 ^( K
004031D4 F7F9 idiv ecx
% @) B8 L+ }- o# H1 z004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
9 {3 H6 k' g" G; }3 j$ `7 v0 q9 w004031DD 2BC6 sub eax,esi
" ?8 [$ l! k4 z, d: s, G004031DF 52 push edx: |/ \/ G0 i. o; }$ f
004031E0 99 cdq! N7 |6 Z# O- `1 c' D
004031E1 F7F9 idiv ecx# @0 h q- M( ]/ A2 b
004031E3 8BC6 mov eax,esi
9 f; F. M! n& Y0 Q" X004031E5 52 push edx
r5 i' ?) H& h1 D1 W. w004031E6 99 cdq
, U( i C3 E! `3 k! i5 X+ l/ q004031E7 F7F9 idiv ecx4 z) l P0 \2 G- }
004031E9 52 push edx
$ D4 }$ \, ^/ T4 R; X" y. b7 ]004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]# C. {. m: I" W, G( H8 a1 t
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
/ c6 o I4 A K& p! d004031F3 52 push edx
$ z% D/ d! Z6 ]. U- [' K K6 t004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
" o& R" u2 h @* {% ^; S004031F9 83C4 18 add esp,18
2 L* `0 P: c" D& z4 R: z# N# H. c" Z004031FC 6A 04 push 4$ E4 F6 b. v2 R6 s/ H
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]/ h: |/ J: N" s5 m2 w
00403202 6A 00 push 09 }9 O* B: m% ?3 g0 H% S
00403204 50 push eax
* m, r+ J: D- @* T00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# u- t/ X& I% h9 e. i% ~: G
00403209 E8 D6530200 call qsr.004285E4
' x: C! ]# I& z( @8 f+ Q0 k8 K0040320E 50 push eax
0 r1 c. V" X, W- T0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28], p+ q6 d/ Z+ ?# M
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
6 ?% w, c$ i$ y1 [; _00403218 E8 A7C30200 call qsr.0042F5C4
5 E0 l8 ~ `* X. T2 w0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]5 {8 S$ W; H% e7 D
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
' i% J P" @& R2 m& ^00403225 E8 61C20200 call qsr.0042F48B" b# b- f2 m1 D* I7 J
0040322A 6A 04 push 4
" y: B2 D5 r8 Z V; i0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
+ {0 @' p+ u, w4 e; w00403230 6A 05 push 5
- k/ e9 D# o) I0 K- E00403232 51 push ecx; g7 F. v9 s; k
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
# z" o0 D7 U7 s, N8 O00403237 E8 A8530200 call qsr.004285E4
& R, l$ H% c: r1 K/ t0040323C 50 push eax0 n# {8 [3 G a0 ]1 `
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
6 U3 ?4 r) K: p' J' Q; r7 X00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
5 @' i( c# y6 h00403246 E8 79C30200 call qsr.0042F5C4
( a8 _9 |; ~" M6 k0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- P2 `) y& ]* A, Y. `1 O6 g; ^0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
9 U/ g7 ^0 \8 |6 M2 G7 [! ^- ^00403253 E8 33C20200 call qsr.0042F48B
. _' W( z( A: A0 i" `: a9 p2 n00403258 6A 04 push 4
' D$ j, O! M. t3 h: f! A4 j9 n! o/ g0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]5 }' Z. K' Q" h
0040325E 57 push edi7 q& { I+ G/ u; ?* j* m9 [
0040325F 52 push edx
1 `: [9 A8 y1 b& W6 Y+ K. t00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( q* W( f" b8 ^' ^6 O" {: z00403264 E8 7B530200 call qsr.004285E4: Z3 m. f N3 S; E' r
00403269 50 push eax
4 \. u9 X% d. Y$ [5 g0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 c* {5 \, i* `; g
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E* {/ f. ~3 Q4 d/ W, J( d8 _
00403273 E8 4CC30200 call qsr.0042F5C4' A# {7 ~4 G$ _: b& i% M
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]% N# L1 x; K# {* ~
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl3 M, i5 Y7 m' M U, S
00403280 E8 06C20200 call qsr.0042F48B7 d* j" I; P8 `' z0 {
00403285 6A 04 push 4. ]' q( H) }7 q
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
" m. s) G' l8 V; R# N7 ?! a$ K' w0040328B 6A 0F push 0F
4 j+ {) m6 h9 o0040328D 50 push eax
0 t8 `4 z, E2 z0 X$ W0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
3 q2 x% b: D/ p% d/ O' ?00403292 E8 4D530200 call qsr.004285E4
6 X& F2 c3 H$ ~5 w" B" J' c% R8 _( ~00403297 50 push eax
0 i- |; S) {9 p2 u! ^3 T00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]9 ^5 L% _0 h, F h
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
" S6 D( m' B& ~" X' \6 J/ W9 K! Q004032A1 E8 1EC30200 call qsr.0042F5C4
! }4 l, ]. f3 |* S- @! q004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
8 U w( C$ V. b4 J004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
& @, {2 u: y8 B004032AE E8 D8C10200 call qsr.0042F48B$ f( S+ z% R0 a; V; F1 R9 l
004032B3 6A 04 push 46 I g' d' j' R9 a
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]; W+ U5 t" f. g& n
004032B9 6A 14 push 14
1 P7 C1 K' L. @! V004032BB 51 push ecx
" g B! e$ K) Y) k% q) S# J% Z004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 }5 K2 |& ]! s' \) l( \1 ? N) A) V7 j! ]004032C0 E8 1F530200 call qsr.004285E4
9 @. A! l/ u/ i0 F1 z) O004032C5 50 push eax8 m T/ b, T1 M8 \
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14], {5 H# n) d1 m
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
: Y' N0 `* Z& w5 b5 K3 _004032CF E8 F0C20200 call qsr.0042F5C4
. s; e5 H& t8 E9 O- a3 c/ Y5 o. }004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
# L/ h. g6 K# y* ?004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
% `+ L I q$ R/ A004032DC E8 AAC10200 call qsr.0042F48B
/ I0 N% i' ~( }: q004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
' H7 A! C$ {1 f, {004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX' E" _) L5 v+ O: O
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
9 s( X9 e( \# L% W0 [' `004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL9 _% [- k+ O _ I2 R) u. T
004032ED 8ACA mov cl,dl ; DL送CL+ ^1 V4 v# n( ?2 d: f
004032EF 3AD3 cmp dl,bl ; DL和BL比较! W% ~, U, L! x0 V x& B+ e
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
# p" [, K5 c. S$ N7 [004032F3 84C9 test cl,cl( x8 h$ G7 q$ v$ W3 u
004032F5 74 16 je short qsr.0040330D; M6 P" t# {1 L z8 s: M8 H
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL% c$ A% m) ]* }
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
) _! U0 A! [4 G- Y004032FD 8ACA mov cl,dl" `( p1 T% R+ B) f
004032FF 3AD3 cmp dl,bl ; DL和BL比较
- F' ^2 k5 t2 c/ K- e* I00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）1 h6 D" R6 X2 P) m x# V1 P) o, x
00403303 83C0 02 add eax,2 ; EAX加2
6 s0 j! x4 t3 e00403306 83C6 02 add esi,2 ; ESI加2
% Z* F$ F. {6 v1 J3 r# Y" S A( `7 j00403309 84C9 test cl,cl
; V, i- S- W8 Z, h) X0040330B ^ 75 DC jnz short qsr.004032E9- Z9 U/ Z. L7 ~6 q+ _; l$ Q! |( ~) C
0040330D 33C0 xor eax,eax
! R9 y+ D. t0 \ a0040330F EB 05 jmp short qsr.00403316
+ \ w! w7 s6 l% l00403311 1BC0 sbb eax,eax1 j4 H+ W% v# Q; s% o" N9 G s: L
00403313 83D8 FF sbb eax,-1
7 i4 Z- q# `+ b) N1 G00403316 85C0 test eax,eax
0 d, @% G# }% T' m5 N00403318 74 0E je short qsr.00403328
5 H/ R: O! m& n0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A9 Z9 ~6 U6 d, P
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]6 g7 T% |: Z1 N( G8 K4 p
00403323 E9 F0000000 jmp qsr.004034187 b4 ^- _2 N3 a2 G) r$ `
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
# U8 x) h- v |' ]# a( r$ l( A0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) v1 ~/ ]1 S: {; G) \, R6 L00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
/ T' X, N" u. \( E! e, B# }* z00403333 50 push eax* k- Z, _6 s! x
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
' @1 J7 q; l2 K8 V/ c, v00403339 50 push eax
& `4 V3 h5 F \0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX7 o9 S/ g! L$ b% C% b* r. w( B
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX$ j. j4 _* x# b+ I
00403343 83C4 04 add esp,4
! ?0 V% O# A: P6 E00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
, [9 B5 _% `8 F, Q8 J' D5 W& ]00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
% a" e }! U* a7 t! J8 m8 C0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
, ~( s) H8 z9 T' h' W0 `0040334F 50 push eax
) f4 o) ]9 V& E. N& ~00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX4 F! |+ i- j6 U2 B r
00403355 50 push eax, T- s; o6 o8 J3 J
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
& }# q3 j: y* M# j' S/ t7 s0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX" A) B- p$ \8 {8 u% n/ \, f
0040335F 83C4 04 add esp,4
+ R. O/ o" s, L |* w/ l( N9 F00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
& O) \+ R' b8 _0 }- M( Z00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]- i! ^1 O6 X' D' G3 s
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]5 i- J: s5 c$ L+ {+ \! p3 G! N' v% x$ z
0040336B 50 push eax
1 S$ T9 Y( M; e; `0 n/ z8 k, K/ s0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX5 m. W% }2 k3 K3 C7 h
00403371 50 push eax$ T+ ], P. ~( G
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX- o7 B; @( J7 p e, ]) t0 S
00403377 8BD8 mov ebx,eax ; EAX送EBX0 M3 e. w5 b E- ?3 h j! B
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
" u$ h* Q$ X$ \* D9 t5 [* M$ p0040337D 83C4 04 add esp,4, x! z: P' @2 X' ~
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
& X& h* }" G! G00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]0 B- s7 ]4 {0 K- O% m6 } `0 k
00403387 50 push eax
c( J( E0 A6 {: [00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX- }1 z9 l1 [7 i, r+ o" u6 _3 V
0040338D 50 push eax
' k1 _7 V, ?& t6 w# E6 ]0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX7 N k7 \0 D. I# T: C
00403393 83C4 04 add esp,42 e+ j9 u' l/ x- R5 u4 f
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
, W" Y4 R, j5 j3 r, n/ b- Y4 M0040339A 8BE8 mov ebp,eax ; EAX送EBP
# {2 ?' r, `2 H% \6 p$ ]+ R6 E0040339C 6A FF push -1
: A9 `# A, r7 v) u% w0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX" X3 C# Z, \; x- p
004033A3 6A FF push -1
9 L& y6 `3 j" D0 L004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
3 c- C# X0 _9 H7 s7 M004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
9 a! M3 a- ~( ^0 A1 h; }" g) X _: D004033AE 6A FF push -1
! D9 m" e c* c- A+ C5 u- W( s: Z004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX7 S4 L1 R" `0 q+ H2 w. v" Q7 Y
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX+ Z' P+ T* A. g: l9 N$ L1 e- ]: t5 g
004033B9 6A FF push -1 n V: [6 O6 O+ s
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
) r+ q4 t( n) o- K! z3 p8 V004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX- b- G0 s; h$ I
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX" b; Q7 G* a3 K
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
- S0 @" l6 @# T8 Y+ M004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
. y1 m$ I- f* ^; X004033D7 D1E0 shl eax,1 ; EAX左移1位- m, a2 N8 d9 E7 U
004033D9 99 cdq ; EAX扩展
- l$ Z- O# z5 r7 ~' V& Y/ C" k004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
7 ?" j$ v: w( P004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
0 H* ?7 h" c! j) j0 E004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
- R# C) M% m7 _& N/ Q% O( [# z, W004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
! P" ?- U% g& j4 i& G4 d004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10] J* e% U: d' I! G% G3 {
004033E9 EB 2D jmp short qsr.004034186 T5 R# C* |9 \7 w3 f, s7 P1 q
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
4 t; j/ E6 R( e3 C004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E22 i0 L6 O! t4 U0 s" m; T' R
004033F7 99 cdq ; EBX扩展3 f! J" v% u% H
004033F8 33C2 xor eax,edx ; EAX和EDX取异或+ Y" \' H, r6 l2 Z( f
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX ?) q p/ Z- N8 a6 n+ w( W
004033FF 2BC2 sub eax,edx ; EAX减去EDX
" r& p' Q) Q5 b00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
. j8 n$ ~3 N5 s6 F6 a: z00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
: k2 M* e" f: N1 s5 C2 [5 p, S# t00403409 99 cdq- G2 K! w: U( P( k5 i
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
* e, I5 g+ w1 K# E0 F* `: k* ^0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
+ c) K$ d `) L+ v7 x$ W00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较- ]3 Q* c9 [8 e A7 y
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
' i6 U1 f, @" I) u2 `00403418 E8 6EC00200 call qsr.0042F48B ;
- G3 P2 u* \& E/ y0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
: o& \# ]+ {- Y" f00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
/ U) J7 x1 O' X4 k* `# {1 u" A00403426 E8 60C00200 call qsr.0042F48B9 U1 t2 q( S+ B7 N3 C3 l
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: y7 } w$ I# Z& z& R0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
- t+ \) e' y8 C$ H! \; y. a/ K- e00403434 E8 52C00200 call qsr.0042F48B S" d+ q0 U( d8 M, b
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) Q( Z. N! Q' b3 ?$ C: R1 T* E0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],76 }5 w( [2 K1 A
00403442 E8 44C00200 call qsr.0042F48B
! j6 R; c9 S& U00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
; {8 a. G# Y( L* L! Q) ]0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
9 x' i- ^! d/ E. [00403450 E8 36C00200 call qsr.0042F48B
& X+ h8 ~ G0 X4 ]# W00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]% t: D7 Y8 @7 h F3 ^
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ c( a9 F- t; X7 V8 P0040345E E8 28C00200 call qsr.0042F48B
' F* d$ O- \7 J- J, n. C' C7 o00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
% I" \# h- T5 X' N9 r; a3 S00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2. W( X" f$ r! B# ?2 }1 u
0040346C E8 1AC00200 call qsr.0042F48B" C$ V6 G/ _' L
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
- S4 r5 c1 @; E* R# g00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
, M3 |: g, H7 ^. l/ c {3 r0040347A E8 0CC00200 call qsr.0042F48B
3 p3 `5 F" |; I" D A0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
0 R" G+ G# k" D" K7 u00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],04 a1 k3 P+ ~& e$ A
00403488 E8 FEBF0200 call qsr.0042F48B" I: j! T% d. }: c; R5 o
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 E; w4 l" R) ^) r, R3 v/ n8 ?* k00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
: b @8 Z" T9 v/ e! r00403499 E8 EDBF0200 call qsr.0042F48B
) G5 H& x4 z! E0040349E 32C0 xor al,al ; AL清0. B; f' N# ?3 D, F- E1 J
004034A0 E9 88000000 jmp qsr.0040352D; W ?8 U4 m8 @: r- ]& D5 K+ O
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
: g5 G5 @' y5 x8 D6 z' V5 n004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 ~9 T- t# W6 H! V9 U& ~" `, c
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
8 m4 |& O% Z! n- s$ A004034B3 E8 D3BF0200 call qsr.0042F48B
9 e% T( {9 {/ D7 S' y6 m6 f) y004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]* _6 M) M9 n5 o' M P* E7 W) Y. {
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8+ c- W, x2 O! o* Z; e
004034C1 E8 C5BF0200 call qsr.0042F48B
w$ ?. T* o* Y' L: s$ T6 y004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* L6 t& W! i0 ` h; ^' S( Q
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
0 n1 ^. q9 E7 ?, L9 @- c004034CF E8 B7BF0200 call qsr.0042F48B
- t/ l* @* x, J: A004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
# x) k0 G9 b& @; P( q% F: \. b/ j004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
3 c0 c% O2 S, `: y$ G1 z, }004034DD E8 A9BF0200 call qsr.0042F48B1 f% A e8 e- H" P) h+ D
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
& k- I6 D- p/ W5 `8 M& ^6 T004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],34 u. X4 e, ~9 f* @ P; T
004034EB E8 9BBF0200 call qsr.0042F48B
2 \' O. c0 z0 j004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C] c6 E8 w4 j3 R- i5 K. P* i
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
( v& g4 W7 C: i6 Z9 h7 S8 ]/ E1 U004034F9 E8 8DBF0200 call qsr.0042F48B
2 D' R% Y5 D# t$ J004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]! L! k( K. N, c3 q$ [$ N
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
9 T% C# E, \1 j) B: A3 g00403507 E8 7FBF0200 call qsr.0042F48B/ L7 r. p: u+ v" Q
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
$ N O( c, I# b00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
* X ]/ [3 G$ ?; _* H2 p& S {00403515 E8 71BF0200 call qsr.0042F48B
* y! f, U" X! i# {$ M% z0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
* ~& @0 j7 ]0 z+ A! z0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-19 C0 n" B7 V/ H" g4 u C& a
00403526 E8 60BF0200 call qsr.0042F48B
# z% S" {; {3 m/ X0040352B B0 01 mov al,1) A2 j7 w! x) W& L3 [5 u
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]( i3 d* F; _( q7 L' e7 W7 M' Z
00403531 5F pop edi5 I3 T! ] G5 \4 U* F' `% g# _$ g! n# Z; O
00403532 5E pop esi1 x2 v' Z' a# z+ H% f+ r) e
00403533 5D pop ebp1 z+ o: e' A, s4 Q
00403534 5B pop ebx
) Y4 a, K5 \! G9 \) T! e% `00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
$ y5 \! s1 ]% N3 W0 o0040353C 83C4 30 add esp,307 }* U, J$ U! K) Z
0040353F C2 0800 retn 8
8 x, l/ G" E0 y! ?& p--------------------------------------------------------------------------------) j: ^" ?3 O+ c$ C+ s
【破解总结】
5 o$ L; I/ e' f- ~! A8 s: R" u- g 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^" I8 G; N8 h0 h* c* Y" C
用户名：yijun9 K6 b/ X2 }# A% |
注册码：4893*7777*3726*7777*0529) i" E2 R$ B2 {1 \( r
--------------------------------------------------------------------------------
1 ~5 a' x4 i/ E$ P% c& A【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡