|
|
|
【原创】破解Quick Screen Recorder
( M' M# {/ p- V3 C; A# [【破解作者】 yijun* q- \7 m* U6 {, _
【作者邮箱】 [email protected]" a2 d; ~. G5 K. }5 x, D! Q+ q
【使用工具】 OD,PEID
0 I6 X& r/ w3 _) z: `: X, K* r @【破解平台】 WinXP
1 [5 l+ Q" U8 K: @4 k$ R【软件名称】 Quick Screen Recorder
( F2 }4 `. u/ x O3 f9 q5 a【下载地址】 天空9 A0 l% _6 m; K" c _! ] M
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
2 I8 B! W3 D& J9 [【软件大小】 540K
+ T& l! i* {2 b- {【加壳方式】 无
" ]0 d4 ?; J7 ?, W$ p% }. L【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
- T5 n+ U X7 v3 Y4 _: A" A( I" I; L--------------------------------------------------------------------------------% ~- R$ t; [: e' q# Z
【破解内容】/ K3 B" w' H) s, t
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：: V3 A8 c) k( D8 i1 A% @$ g4 T- G1 q
00404C69 55 push ebp //在此下断4 g V- L3 y1 j# x2 E! p: Z
00404C6A 56 push esi" Y% Y- o H1 \1 o5 ^
00404C6B 57 push edi! C: ?5 Z$ c8 S/ \$ _
00404C6C 8BE9 mov ebp,ecx' @$ Y1 y$ ~ u1 Y: O/ E
00404C6E 6A 01 push 17 Q8 j+ v. `& f' V9 }6 M. D
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
7 x# Q& j9 [ {( G1 @1 ~! b00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
3 Z1 i, n4 G2 k6 W$ v$ X/ ?& d00404C78 8BCF mov ecx,edi
) n9 k) ^) b5 w, ~# o% D: S& J00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码2 J, g) a0 |6 F; _9 ^# m) S* V4 w* F
00404C7F 8BCF mov ecx,edi/ j* K* l1 W% H4 D, T
00404C81 E8 A73E0200 call qsr.00428B2D1 T% ^7 z" Q+ b! U9 n
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64], S( T1 O! I' y1 X; e
00404C89 8BCE mov ecx,esi
8 m1 x2 \- ~; C2 F8 |- q. `+ G/ h00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX6 h4 A: Z( e5 l7 |, g: m
00404C90 8BCE mov ecx,esi t/ z5 g+ R' V! U* s6 t
00404C92 E8 963E0200 call qsr.00428B2D
+ c" N7 d8 m+ K* l00404C97 8B06 mov eax,dword ptr ds:[esi]
0 x+ _. R- P7 I: n3 X00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],25 v! \* }; \6 D3 l3 X [% y0 {
00404C9D 7D 26 jge short qsr.00404CC58 f* c9 v7 W" I( @4 J, ~; D1 c
00404C9F 6A 40 push 40
) \* o6 o |2 s00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
0 e3 i) D9 [. s$ S# H$ ^00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
1 W% I/ r c6 `$ s00404CAB 8BCD mov ecx,ebp
u3 R' X# f! W( O- `" f2 a00404CAD E8 C3840200 call qsr.0042D1757 O* U1 j- Z# L* J4 _
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]# t0 w9 ^# ^# s/ @
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
2 z$ j% X5 e) {00404CBD 5F pop edi
7 M5 P& [) H0 `00404CBE 5E pop esi. F- i" M( t. ?% p% G7 p" i
00404CBF 5D pop ebp
& q/ ]/ L8 U4 u; p/ R+ a00404CC0 5B pop ebx3 R! ]! q3 b; C, m0 N
00404CC1 83C4 18 add esp,18& p. a" z0 O b3 X. H. h
00404CC4 C3 retn
, Y2 n0 Y8 f9 c8 L) h, Z5 c) c00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
0 V- g, r; [9 u( j$ R+ ^- o8 G00404CC8 84C0 test al,al
}6 G( Y: X3 }; v9 ^- I00404CCA 0F85 1C010000 jnz qsr.00404DEC" F3 b" _& Q3 t& b6 {+ N
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]5 J- G5 X+ W0 D3 B$ W
00404CD4 E8 87E3FFFF call qsr.004030600 K& @6 A' |& k
00404CD9 51 push ecx; t7 }7 D( X w
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],00 m% {/ I& O s& f6 a& V9 J
00404CE2 8BCC mov ecx,esp( d! w9 T8 ^' Y9 C; N3 H8 i* F
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
! L9 T' j4 z4 V4 N+ z00404CE8 56 push esi
: c/ r: A$ F" E" g; W00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0- \$ ~+ b/ |8 m
00404CEE 51 push ecx
4 \+ y, W# E! Q& u* n2 N# B00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1$ Q) c* H% c& c1 M/ d
00404CF4 8BCC mov ecx,esp
8 n- Q( j5 n1 D9 H! L* s, Y00404CF6 896424 20 mov dword ptr ss:[esp+20],esp9 k# [% Y( r9 J7 _$ U) m8 P
00404CFA 57 push edi! D+ P# |: j8 H# b" E
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0$ J+ L+ m* O* G: {* r
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]' p% N3 \ M1 M8 z
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
1 J$ u% H$ ` U: k00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~* e7 h8 l0 @/ G$ Z- r* }9 g
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
# N; D4 d3 V# y/ ~00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~" d& U+ z9 _. \' }0 Q' p' l
00404D12 6A 40 push 40
- Q8 N7 K$ m) K6 Y00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
8 b4 L$ B) A0 v" n& r# S1 o00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."2 z. @5 `) w* Z6 ^7 `) p/ a! b5 [
00404D1E 8BCD mov ecx,ebp
) `. C' \. t( [! s" h' g! s9 W00404D20 E8 50840200 call qsr.0042D175
+ B& T% U$ n4 }00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ A+ u( a7 k. a6 p& W0 ?% S; k0 |* Z
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
- M9 \) y4 a, `00404D31 E8 5AE3FFFF call qsr.00403090
+ b' C- f. _( C1 T8 s00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]* m8 d' v: X5 z! v! N8 S/ x
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
# G! d, ^1 d1 d( H; s/ ~00404D41 5F pop edi5 ?& ^- F' o7 O ?1 o& r
00404D42 5E pop esi
& i/ R* v! n+ F: P( `00404D43 5D pop ebp. n! Y7 g( p# h, ~3 |6 k4 o# }+ F
00404D44 5B pop ebx
$ t O* F( Z2 W C/ H$ p+ z00404D45 83C4 18 add esp,18& o" l3 g# W; B
00404D48 C3 retn
* k+ P/ z* t" Q# C1 X4 e, E4 A) |*********************************************************************************************************************************************************/ s: d) }0 v3 \- \0 o
跟进00404D09处CALL来到：- W, L. b* {6 J8 V
004030A0 6A FF push -1 //一路F8下去~~~~# M& |& P, }- V0 h) O' |5 I! s
004030A2 68 C88F4400 push qsr.00448FC8: z4 E2 R, }7 H# w: \
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]7 J; ~4 K1 S- v1 n% {/ u
004030AD 50 push eax! f2 Q. |2 a( r3 G7 [+ O9 ?* y
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp2 ?5 i7 K) w5 X4 l: \. L) ?. V1 ?, {
004030B5 83EC 24 sub esp,24
: O' z# T4 q' B004030B8 53 push ebx
- |+ ^+ R# h9 f; {4 P004030B9 55 push ebp
. ^5 ~! ]5 G8 }4 a6 }004030BA 56 push esi
0 s( e8 B9 }. \1 i004030BB 57 push edi+ t* j$ y/ l2 ~: L
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
* m# o' E4 B9 U9 {004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
# }; C) c8 s% {! x& D004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1' Y+ s2 E: g1 L" @/ g' C3 s
004030CD E8 27C40200 call qsr.0042F4F9 b" l0 U4 p2 M4 b6 L8 c# n, R
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
1 ?5 g/ m$ f! f- a- G# g004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
, X4 P+ J* T( s4 U004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
4 C) a. a3 i2 @0 @6 J; s- A/ i& p004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
% k f" T7 r4 }, s0 q: R004030E4 E8 905A0200 call qsr.00428B79
5 I, s4 u$ G$ f) o# \004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
! I6 j2 d5 t2 C0 Y( L004030ED E8 3B5A0200 call qsr.00428B2D
1 s( H$ |% n: B3 V" K1 t004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
) L2 ^6 T1 ~" V/ ^, s* n004030F6 E8 7E5A0200 call qsr.00428B79
- |+ c/ r# S, d- }004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]0 U) {3 y% E) [
004030FF E8 295A0200 call qsr.00428B2D3 x; }; {3 u( ]8 [: o4 n# V; F
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
' U9 `, C, j* v" `, t00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
0 z, @$ S4 W9 f0040310B 83F8 02 cmp eax,2
4 w) R: }- M0 m3 P% o0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
9 |! |1 z; F0 x5 B% X00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
4 a `) M% m0 _: y00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
- g) B: k7 H6 z$ N/ n0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳; G! X3 F! D$ m$ ^" g
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]/ w: D- G2 L* J2 d. F7 y! i
00403126 6A 01 push 1, {2 h% Y% j* @3 Y+ {- W2 J
00403128 50 push eax
$ Y7 t {) T7 U/ g4 M3 j00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; ~6 h: O0 |6 Q+ p4 G4 r0 @0 u
0040312D E8 C4550200 call qsr.004286F6
( S% D, j* \8 E* W6 n! r00403132 8B00 mov eax,dword ptr ds:[eax]
1 K1 t( W, ?) B00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
8 d4 `# }5 _5 v00403138 50 push eax9 ]6 }3 H, C' Q( {( ?( }
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4 @1 q) q; n3 y
0040313E E8 4D560200 call qsr.004287904 n, J4 t* P: u8 J5 W) L
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( u/ q: y" w8 V$ x3 [! e
00403147 8BF0 mov esi,eax5 S, M: H9 f& n k* R9 K
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3$ i. E D' G: R T$ @, L3 P
0040314E E8 38C30200 call qsr.0042F48B) U( x8 S1 @. l
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
8 x, Z1 m' R( k00403156 B9 3E000000 mov ecx,3E
m R3 k0 L) X+ S) d0040315B 99 cdq3 g( x, c( A. i7 H) G0 C3 S
0040315C F7F9 idiv ecx
8 d3 ?8 D" R2 ~. @0040315E 6A 01 push 1
8 h7 J+ i Z' o" o% Z. N00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
( ^6 L& v( ]. a00403164 8BF2 mov esi,edx5 f) i% @+ g" ?. w4 o1 o
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]' Z W$ g* x$ v: {9 a# j, x$ O2 u5 }4 U
0040316A 52 push edx& ?9 d. ^3 L+ k, r% I
0040316B E8 0A550200 call qsr.0042867A- k- A! c+ A% W1 k. p3 Z
00403170 8B00 mov eax,dword ptr ds:[eax]- M( M6 [5 d5 _1 Q' P, n
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
) w2 {) w% s# g7 \+ z, E) C00403176 50 push eax
- \5 g7 r* ^7 r' q" p00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
) Z+ S( a3 d% _- ]. C3 z( e$ d$ Q0040317C E8 0F560200 call qsr.00428790
8 ?% y& K, o( b- u+ }' j v00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% ^" @4 E4 Z g6 P, \00403185 8BF8 mov edi,eax6 l' M+ U2 u2 k5 _, C1 @+ Y
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
4 ]1 A; c2 F6 Y) x$ r5 v; f4 k0040318C E8 FAC20200 call qsr.0042F48B% R; i. y; [- s3 m$ _
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]1 @% Y' V5 |0 ]" U4 R
00403194 B9 3E000000 mov ecx,3E
2 J/ V. M+ ~/ M1 \; i00403199 99 cdq
$ C7 x' l1 K4 {5 k o; }! a3 p0040319A F7F9 idiv ecx5 ~ X0 u6 K, [$ ~
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]5 s7 l7 Q, s3 \8 b2 |
004031A1 894424 28 mov dword ptr ss:[esp+28],eax- D) |# O I, n! O6 p E
004031A5 8BCA mov ecx,edx, c$ a# E$ {3 u
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
; x5 c* U: E/ B4 S: n) h0 {004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
- y/ L/ h8 g; l( f4 |$ `, n004031AF 894424 18 mov dword ptr ss:[esp+18],eax
& K3 Q6 y4 z \6 v. @- ^% t004031B3 894424 14 mov dword ptr ss:[esp+14],eax6 [/ I2 U3 V( j- @
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
. o% e- c3 p8 n) S3 x4 n; B004031BB 8BC1 mov eax,ecx
/ M5 o3 s U# V+ P' L004031BD BF 0A000000 mov edi,0A
& L1 M- s, ~7 D1 {$ J* ]004031C2 99 cdq/ W& V) Z, i: d" p& J2 y+ Q! O I
004031C3 F7FF idiv edi; o& c! S+ x+ W; i8 {
004031C5 8BC1 mov eax,ecx
/ ^4 p0 L' w: k. X004031C7 B3 0B mov bl,0B
# ^1 m6 ?. B2 E; W7 `& V; V% X004031C9 0FAFC1 imul eax,ecx! M3 @: P$ ]* a
004031CC 8BCF mov ecx,edi
$ }7 r; _( K0 Y' f, W3 K$ g8 L6 r004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl' s6 v% S9 P6 \: U. e P
004031D2 52 push edx
: g. T* c8 A6 ^5 v3 y( w, v; o004031D3 99 cdq. t2 T. p) m# S& n4 m
004031D4 F7F9 idiv ecx% V' [9 x6 F- v; f1 D9 v2 J
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
4 ~: e' D) F5 j004031DD 2BC6 sub eax,esi
4 n* |* m7 f7 V. d; o3 r) `004031DF 52 push edx
& P- a0 z' O+ q004031E0 99 cdq+ _4 ^ [ s3 {& V+ X
004031E1 F7F9 idiv ecx
- _2 `4 j4 n' t+ c2 }/ S W e: @004031E3 8BC6 mov eax,esi6 Q6 f0 W3 L% w( V0 L
004031E5 52 push edx
1 @5 W) u& C, `( n004031E6 99 cdq$ E' t) Z6 k6 a/ X) V, Z
004031E7 F7F9 idiv ecx" C1 `6 F6 [: o: E) i Y! K
004031E9 52 push edx
, s- E/ `1 Q9 c, W* Q- @6 y004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
( I6 k: X* S7 l K004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"2 B# Z( V1 |: \0 ^
004031F3 52 push edx3 n2 E; d! E( ]2 ]7 V5 A0 l
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48933 M' R9 y. ?/ z* ~" a* w
004031F9 83C4 18 add esp,18
; z7 C7 r: [" t9 Z# z2 r004031FC 6A 04 push 4
' X8 p8 q6 v, O' H004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34] L8 [9 O6 ]! `& W2 X' }1 [
00403202 6A 00 push 0
; v1 w. n& p/ r% u6 \00403204 50 push eax1 Y' q9 E4 t4 V4 e! f
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( I1 N* V. @ Z6 C; I00403209 E8 D6530200 call qsr.004285E4
. k! ?3 u# m* O6 j2 W( h0040320E 50 push eax
2 y2 |; K! }4 V6 o2 S0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]4 N; c& [: z( G: V: g5 {% m
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
4 N0 c7 ?2 _/ R% B( A00403218 E8 A7C30200 call qsr.0042F5C4. \+ X; \) J- `: |$ h
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 e& c; s$ N5 X5 v6 V. Q# E00403221 885C24 3C mov byte ptr ss:[esp+3C],bl3 B$ X, W% D7 C- E8 b: k5 v- A7 p
00403225 E8 61C20200 call qsr.0042F48B
1 y# q9 H3 |2 `! m( g8 v1 j- Z( w0040322A 6A 04 push 4- o+ F$ e+ H, ]( \* k
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
" V9 j! c& n) @; I2 a0 e' q' n3 N00403230 6A 05 push 52 T# G) F$ S, ?& G
00403232 51 push ecx
+ l- @, P% ~7 f2 s00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 D/ k5 h" F. [& }% @* ]" i& g) G6 K
00403237 E8 A8530200 call qsr.004285E4) s0 D, ^$ k3 c( y0 l
0040323C 50 push eax
+ Z3 R; W$ G9 p2 ^5 l, `; U0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
9 G% d4 I8 m( [) P1 I9 g/ t00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
/ @! e% T4 h4 M# v00403246 E8 79C30200 call qsr.0042F5C4
' h1 I7 {( j7 X' G5 r0 A0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* b/ @( w, @3 |" Q0 Y6 c, t$ S
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl( U& e; m2 V; n0 t
00403253 E8 33C20200 call qsr.0042F48B' l% R4 I% [( \1 X, V
00403258 6A 04 push 4
3 _5 C3 y- I g0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]0 M7 |6 K$ N: H W$ x
0040325E 57 push edi+ L" C" r# s/ s+ a1 L M0 b ?
0040325F 52 push edx9 j0 B5 {; i) x
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# }& z! `0 `7 W4 r
00403264 E8 7B530200 call qsr.004285E4
! M; l V1 S6 r3 K$ K3 j0 e00403269 50 push eax
j! M6 B9 M+ A$ j |, Q0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& D# L& ?1 Y, Z8 M1 V+ b) J0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
! Z# u2 H" S2 R; W$ t' N# a00403273 E8 4CC30200 call qsr.0042F5C4
2 S4 e9 X% E9 a1 j y. O00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]% n( X3 e8 `! S' k' P* O
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl' L% G5 }( W$ v2 ^+ Q
00403280 E8 06C20200 call qsr.0042F48B3 n1 O7 G$ f1 Z j4 L1 V4 K7 W3 @5 w0 P
00403285 6A 04 push 4- \/ I" a4 s; j2 f
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
6 }0 R3 D- I$ K" i$ \! x& ?0040328B 6A 0F push 0F3 D/ A. |. e n% y: S. t4 l
0040328D 50 push eax& E! P6 p- R2 @( h
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
7 ~. }6 l- `! a" d. |4 Q }00403292 E8 4D530200 call qsr.004285E4
( N* q' u% X4 l, H3 }) h6 e00403297 50 push eax
. k1 }' L/ o& A3 j00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]- i9 n5 A4 x& `+ M9 i
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F3 }: k* Z' `# k" s
004032A1 E8 1EC30200 call qsr.0042F5C4
* p# X8 ?9 N& K! E0 G004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
: ?1 T+ z1 @- ~5 _004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
! i7 ^/ U2 K) B004032AE E8 D8C10200 call qsr.0042F48B& p" g( a p% x b2 [
004032B3 6A 04 push 4
9 G! `+ k- p+ J9 J4 S: O004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
( ?# }- T# E4 z004032B9 6A 14 push 14
' Z- f: G* [) j3 E1 m; I% @004032BB 51 push ecx
; E9 s4 z m+ }0 m- g, T004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
( j# K# }; ?' \8 P; g }6 p* N004032C0 E8 1F530200 call qsr.004285E4, s/ v0 U! F( o2 ~1 D- p& Y
004032C5 50 push eax
+ C: u, N( m9 _+ x004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
" r8 i/ n1 O; g# l$ A E, @004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
7 L) }8 o. b. t( b6 v; n004032CF E8 F0C20200 call qsr.0042F5C4
, b( x8 F: K6 K* h: T1 R- D# @004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
; }! d9 o$ \$ M004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
9 C: P3 N8 c ?& Z1 @& v' r4 ^, Q004032DC E8 AAC10200 call qsr.0042F48B
% S# Y) \8 l `- Y) e004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
1 H+ [/ D7 E) j/ [& H% X004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
% V# m4 m& U _# e! Q* n: z, n004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
7 O8 m2 x) u* t' i4 `004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL# f! f$ T7 O2 `$ U
004032ED 8ACA mov cl,dl ; DL送CL
2 N4 i1 g% ~3 Y% r5 j2 Z004032EF 3AD3 cmp dl,bl ; DL和BL比较
* O2 N) M k4 i v* }% g4 W% M004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）+ h- A. @2 ]. j7 l+ Y/ |
004032F3 84C9 test cl,cl
( g D/ A7 Z' |! j' e X! H2 O; c9 X004032F5 74 16 je short qsr.0040330D* j1 R) H8 R1 l# m8 h' Y
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
5 T! {1 F" q* T7 m5 s# l( ~004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL( {. i. E& d6 [7 S: E
004032FD 8ACA mov cl,dl+ Q, D+ o8 p. k% _4 s/ v0 ~9 ?6 i
004032FF 3AD3 cmp dl,bl ; DL和BL比较1 l+ C. s1 @- K% ~# P
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
& C: p9 p' n7 u00403303 83C0 02 add eax,2 ; EAX加2
2 M; D1 D$ I2 |: ]00403306 83C6 02 add esi,2 ; ESI加2
$ S3 j/ v4 ]2 |5 G1 U00403309 84C9 test cl,cl
# c- R; w2 p$ R, p) j1 R0040330B ^ 75 DC jnz short qsr.004032E9
' B, j% B" |9 ] g0040330D 33C0 xor eax,eax
# ~: {4 r% c6 k7 H) A0040330F EB 05 jmp short qsr.00403316+ U7 y4 z6 y9 y" @' }
00403311 1BC0 sbb eax,eax$ @ E5 P5 k6 ~; s
00403313 83D8 FF sbb eax,-1% F4 i- Y- K; C9 b
00403316 85C0 test eax,eax. Q$ h8 R2 j4 k J: o
00403318 74 0E je short qsr.00403328" r( p9 N7 Y4 g5 |: w
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A: @) R7 A- U2 L4 j
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]1 Y7 f* |; b. K( A2 z: |0 o
00403323 E9 F0000000 jmp qsr.00403418- }. n+ W, c5 ~! I, }
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
: }: q1 `' ?9 B5 D* ?% J: E0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]- k2 \2 Y6 L/ C- `) U2 ~. V0 ?
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]. S4 U9 L% s+ o& _
00403333 50 push eax
2 n& N( m9 b, E" D4 }00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX4 w+ ~9 R% Y8 w7 P$ B* J% Q
00403339 50 push eax
8 M- p# T/ t0 M! n+ ]0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
9 B" N0 l6 `6 C5 \, ?* x% |0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
. [/ }9 ?2 x8 c+ W3 P00403343 83C4 04 add esp,4
" S: r2 b! h% s Z \00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI% E0 y, }* @ z) w2 L! j# Q4 \
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
9 E7 L1 m, L2 j' W& P0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]/ G% o% ~1 y+ i; e T, ?) `
0040334F 50 push eax3 O& X) l: W% h; ~% ~ G% K$ h
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX' Y p) [' ^6 I8 Z r
00403355 50 push eax
4 M- N0 D8 Y% r) j: [/ Z00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
; t* ^8 y" l7 j! e6 X" j7 J* G4 E0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX' k4 o1 s B. v. L3 \! K
0040335F 83C4 04 add esp,4
4 S f6 D( _* ?3 ?- \2 }7 t0 F# q00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI% [5 A4 U7 ~. G$ B6 O+ z
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& O o/ f3 I$ i) r& S& c
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
; S' D) W8 } j/ a3 o9 f0040336B 50 push eax9 q0 k( T( h2 v% K- v
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
& C6 h- ~0 n5 e' u& C1 b: R6 b8 Q1 C00403371 50 push eax9 {" u7 B+ `% i0 i- ]$ J. L' h
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
: ?) s& o. U% g00403377 8BD8 mov ebx,eax ; EAX送EBX
, ~$ s s0 B0 K) W7 S" N( y# G00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
% ^& ]8 ]2 V: |" X0040337D 83C4 04 add esp,4; u, I, N* x7 e- x% h; H" G# N3 h$ \
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10], F1 \6 S7 q2 q. O( Y
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8] J6 Y' Y( n1 J! o/ a
00403387 50 push eax
z+ H% I% w) x l1 k4 `00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX; k& J7 F5 o+ r0 \- b' V6 k
0040338D 50 push eax
8 g4 K4 g6 u6 I9 h9 `+ a0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX, I1 { b) t6 s) W% W
00403393 83C4 04 add esp,41 \6 g9 l4 G3 ]) K/ s
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 }) K; j6 ~4 c' L( N/ T" O3 q0040339A 8BE8 mov ebp,eax ; EAX送EBP
% G% v- z6 p' N8 E0040339C 6A FF push -1
! h9 b7 z4 h9 V* H ]( g0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX. w8 R+ v" `0 g/ p! ]7 z# y. U4 g
004033A3 6A FF push -1
- O% d$ F; k E' O' d% X004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
- p, [8 T* x3 f. k6 k$ g! a9 J004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
" Z* _: ? N- @8 }# T+ @004033AE 6A FF push -1
! v' I7 c7 ~0 r' g. l# z004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX. |4 d0 ?3 S9 A
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX+ C" I% w! @1 \1 d. h
004033B9 6A FF push -1
/ F4 |+ g& {3 |7 }4 s004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX+ s0 J$ v$ P6 }
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
+ n) V9 ~2 [; F" z/ l2 g004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX" J+ u# k A9 c* r
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX- T6 B8 v" ~$ M, Z, V* G
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX* K A# l7 R! K+ i6 H9 u8 e$ F
004033D7 D1E0 shl eax,1 ; EAX左移1位
, y$ I- J6 ~# L$ ?004033D9 99 cdq ; EAX扩展( j# {. x$ W0 ~. K
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
& r/ U% b6 ]( T8 q/ m0 s. ~7 D0 H& n004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
8 M1 V5 A& E; @) t004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）1 D% X0 J0 Z9 O. o$ _, r
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A6 `3 j% j' p, j+ h$ V
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
, M* K9 Y( B' A0 x8 _004033E9 EB 2D jmp short qsr.00403418
- C' k. \2 K/ Q4 a! [004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX7 c5 N/ C8 g2 ]' L
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
; J4 ?* K1 K; e+ c6 P3 M004033F7 99 cdq ; EBX扩展
' S9 n% t l) x7 S& O004033F8 33C2 xor eax,edx ; EAX和EDX取异或
; V, i$ i# | D$ G0 T004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX, v H; N2 \& v3 d4 W
004033FF 2BC2 sub eax,edx ; EAX减去EDX" O6 ]3 Q7 E2 j+ \( e' _( M
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]( p0 J! i: v5 O0 `' d' f
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX: q9 m; S0 n* i: C" D3 `
00403409 99 cdq
( M1 z1 n- z2 D+ t4 N0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
1 V9 Q! {6 R, }0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX0 l8 l* U) _4 G
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
4 Q8 i7 _" L$ |' `2 L$ x00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）9 T5 b b' Y, _4 _+ a I2 x; [
00403418 E8 6EC00200 call qsr.0042F48B ;
6 {# _# ~1 z4 S# c' j3 n& @0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14] `$ r' U( |$ F
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
9 v) f5 z6 B& D3 g# K2 K; x00403426 E8 60C00200 call qsr.0042F48B
; m: v( g) X# ^& E! o! B' i; T* K0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
- E9 l* g1 s, R' X0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
% Z0 T. c$ O. z" ^& X5 X, u1 I00403434 E8 52C00200 call qsr.0042F48B
+ f7 X L8 y: t00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]/ ?# o5 Z! V8 O2 T1 [
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
) D& s% H. O/ ?, \! ~' U00403442 E8 44C00200 call qsr.0042F48B3 _) |# J- q! M- E6 z9 a: @6 g
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]% U2 N. M5 D( y2 k3 a
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],65 p& ^4 L" B$ z6 k; I& l7 a5 u/ m
00403450 E8 36C00200 call qsr.0042F48B# w/ w# O' m9 j1 ^( {
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
3 Q) ^* w) }6 }; _& @! h& e( h0 B00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],38 m4 a! F8 u7 V* u {$ e# W" l, p2 \
0040345E E8 28C00200 call qsr.0042F48B
2 u2 r* b }9 R4 {9 L/ S00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]* D& o, s8 {# V: \
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2! O" o. k1 i% J
0040346C E8 1AC00200 call qsr.0042F48B
. L# [' g+ W% r8 q6 ]" d) a00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]; r, ~7 d6 L. O3 [
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
- J6 h) S5 _5 a6 p* A. M4 X0040347A E8 0CC00200 call qsr.0042F48B4 F$ r$ Y7 N5 b
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]9 ~. C! ?0 A9 ]. n5 F! Z' {; C- t
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],08 M9 c- k2 ]+ d: c
00403488 E8 FEBF0200 call qsr.0042F48B
* P. @: A: R2 v: ^) m0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
2 t4 ~- l0 u" k8 X00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
1 K1 E! M( }9 b% q/ ~" Y S00403499 E8 EDBF0200 call qsr.0042F48B. ^5 Q! ~7 ]: N2 B" i
0040349E 32C0 xor al,al ; AL清0 F0 x" v- T- I t9 ^+ A, `' }
004034A0 E9 88000000 jmp qsr.0040352D+ e5 \7 c7 e4 N& y7 w- g; w j; o- z j
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
4 j6 C; f& r" h3 C( {004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. [# f/ E1 Y6 N) i: `( q8 ~004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
$ k, B" X+ ~' v C4 R004034B3 E8 D3BF0200 call qsr.0042F48B
4 r0 }8 b# n8 U004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]! z# g. B7 r# ^3 T) N/ J Y
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8& T" W: E+ {1 x( m6 \: X' a
004034C1 E8 C5BF0200 call qsr.0042F48B: i0 `" I) G- ]+ j0 _
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
, b9 L' I: U5 V- P+ z004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7+ Z8 K' x0 j2 [
004034CF E8 B7BF0200 call qsr.0042F48B
* h& ~ [7 q. l& d- \3 o5 B004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]' S" n' d2 X/ w; F' U8 I9 @
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6$ L/ r; @: L) c% _$ k4 d9 [3 f3 V
004034DD E8 A9BF0200 call qsr.0042F48B
5 L, N5 b5 z5 a, f+ W% F+ J004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]* Q) q! e, G% D7 S. n5 H, g5 [% r
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
# s! S) e4 M$ t5 C! I004034EB E8 9BBF0200 call qsr.0042F48B
* K K1 W0 ]) Q004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
8 T; |4 Y8 n: Z004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
. z9 I& \# _* v/ L( ?" D& W004034F9 E8 8DBF0200 call qsr.0042F48B
5 F1 |* K- v6 y; i5 |' s004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]2 ~4 I6 b& q, d9 ^, c6 f( N
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
6 k" z: C" P1 U' X2 R* [00403507 E8 7FBF0200 call qsr.0042F48B
+ j! J3 G1 e, t, h5 [& J0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
; x" z$ q3 O$ | m: v, B00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
1 E( g) X) z/ y7 W" ^+ @" i00403515 E8 71BF0200 call qsr.0042F48B" w; F+ k ~* O1 Z. P% s5 {
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48], T+ `1 s( H0 x. L; e
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-17 N; E( x$ [9 O b
00403526 E8 60BF0200 call qsr.0042F48B) \+ d3 p" v# C) E/ _. L
0040352B B0 01 mov al,1
8 i1 w! \* I& i! W9 _( F {0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
- N* Z$ q% i/ C% e F% v# s% m00403531 5F pop edi9 n9 M, N: K- Q x: E
00403532 5E pop esi6 E1 `6 t& G3 n" G& y
00403533 5D pop ebp
; e( z. C) V0 z0 O6 }0 @/ A! S00403534 5B pop ebx
^- i7 N) _% V/ J7 i00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
( C& p* h% D/ y" I! \4 l0040353C 83C4 30 add esp,30) ^# s9 V5 N. n4 ]5 D
0040353F C2 0800 retn 8
0 Q7 \0 B" n3 O--------------------------------------------------------------------------------. j& S4 T; r. y5 h
【破解总结】
+ n% P! p T' v7 u1 B 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
1 f, v( ~) h4 A/ v) X) L用户名：yijun% {( Y. b7 Q4 c
注册码：4893*7777*3726*7777*05299 ^$ J6 u: }$ ]0 J9 \4 y( Z
--------------------------------------------------------------------------------
& l( X* y6 Z5 ]4 I6 c6 I7 Q【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡