|
|
|
【原创】破解Quick Screen Recorder
& S2 I6 _' ]/ `+ V3 E( Z【破解作者】 yijun, c, T2 ]; t) N* g2 L
【作者邮箱】 [email protected]! N2 {- U3 F* A$ Q. `. @
【使用工具】 OD,PEID
# O6 h' d- I1 z' F【破解平台】 WinXP
( c/ A: Z8 r) O& N. G【软件名称】 Quick Screen Recorder
9 }/ T' s3 p+ N6 G3 P) Z1 x3 m2 O) \【下载地址】 天空
! H. h& y& {: G- r, [【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
( I2 k, G& ~0 z3 t: b【软件大小】 540K
1 O; I z, X! o; ?. _2 K5 ]2 Z【加壳方式】 无
" d' b5 Y. j" f7 N; Y【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
0 L. ?" F/ S1 v% r' ?: Z7 S# ^--------------------------------------------------------------------------------% D) D: F/ H$ @' X1 ]- x
【破解内容】
* }% o2 f% T8 _" u5 k PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：4 ?5 w' c4 }: O" y, t
00404C69 55 push ebp //在此下断
5 }) s7 {: F( {6 w& a, G/ M4 X00404C6A 56 push esi
8 v0 N: W( ]8 q) h7 `00404C6B 57 push edi
2 b! J7 {7 o* t8 h, [! ]- H00404C6C 8BE9 mov ebp,ecx" M0 `/ ~! r5 g3 L3 S. B4 z
00404C6E 6A 01 push 1% d3 [8 D1 V( d! u1 \3 k
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
* k0 h5 k9 A4 g. c00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
4 X& C9 \3 C3 X0 a& u00404C78 8BCF mov ecx,edi
9 `7 n4 S) P* O% d* V1 S! U00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
% ?/ v9 `3 D' x0 p+ V00404C7F 8BCF mov ecx,edi
4 s; h. V: t& L% o& u+ ]00404C81 E8 A73E0200 call qsr.00428B2D
4 I7 L2 D) o1 W% v; ]" g00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]0 |" z. h t* f, a. I; J% \
00404C89 8BCE mov ecx,esi
3 U) E; a8 Z+ E* q. o$ T00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX! E2 T# l/ a; S+ Z+ @9 g4 O$ y
00404C90 8BCE mov ecx,esi( p& o; I! r6 N7 |
00404C92 E8 963E0200 call qsr.00428B2D0 W' a& `8 e0 z8 K
00404C97 8B06 mov eax,dword ptr ds:[esi]/ Q( \& _0 C9 U0 q* }
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2( k; _" l; d! n0 S2 e
00404C9D 7D 26 jge short qsr.00404CC5
" K6 t+ f9 s+ m2 Y+ [00404C9F 6A 40 push 40
5 C$ N9 M0 O% C& d+ f+ j( t00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"+ P/ M1 t+ U( b. P: u
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
# \8 x! P! f, a9 W \4 i) V% B: D/ O00404CAB 8BCD mov ecx,ebp
1 i3 a5 K/ c* |. d: g. p) c00404CAD E8 C3840200 call qsr.0042D1750 Y* B1 R9 g- d, h( c
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]6 b! h* g/ X& @- ]+ L! u" b% I F
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx: }! N1 h" d5 S
00404CBD 5F pop edi
; G' x! ^( Z% [, N00404CBE 5E pop esi' g' n& g) E) z, K$ y2 E
00404CBF 5D pop ebp
) }, a: d, p; \% S3 ~00404CC0 5B pop ebx% _3 D( U5 S8 y5 \
00404CC1 83C4 18 add esp,18: x d$ Q* {( }' ^+ F1 V' h
00404CC4 C3 retn7 K- _! c/ I; c1 m( b
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]; W, b+ x$ B, L, z
00404CC8 84C0 test al,al6 s/ u; _1 K' z8 N( G7 [
00404CCA 0F85 1C010000 jnz qsr.00404DEC
; R$ J6 E; K$ F: Z5 q00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]" A. }! }0 p# V" R5 c3 f
00404CD4 E8 87E3FFFF call qsr.00403060
- Z0 [ d$ s! A: m- a: B00404CD9 51 push ecx! _( v; {& Z3 U1 t- g
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],07 h/ n9 r: _& W- f# y6 m) N, M+ s/ F Z
00404CE2 8BCC mov ecx,esp
% ~/ J I0 P+ r! |9 U00404CE4 896424 14 mov dword ptr ss:[esp+14],esp$ Q" @; b$ O7 a) F/ E' t
00404CE8 56 push esi
3 @; T' u# ^& R: L8 A; J) u8 F00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
, q$ D$ o: m& w00404CEE 51 push ecx. c7 E h; G- g4 n
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],14 N3 c* J. g ~
00404CF4 8BCC mov ecx,esp2 ^( K1 d) N& R) G& O
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp& H& i4 d# d. \! |
00404CFA 57 push edi9 t( M3 Y" x6 F) D- W& Q
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
$ O9 u) n4 q0 [. T' b0 U6 i00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
; c( H$ G; J+ Q1 _, W, x7 K00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],03 I3 s, A. u: m; _
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
( F. [' h, D1 e+ t1 D00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~* @2 s+ l3 ?7 c9 A, ]1 |
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~- d- {3 M% ~) @
00404D12 6A 40 push 400 ]% X) |- ^, ~: n1 m
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
+ I- |% ~! r( M00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
W* M( d9 Q* g" T" m00404D1E 8BCD mov ecx,ebp& L( z) `0 O) O( Y+ Q
00404D20 E8 50840200 call qsr.0042D175. P9 n8 T1 ]" V& V* d9 W5 ~. f" T
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# E7 m4 U: V. [00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
7 T+ o0 p; m1 S; z# a7 Z) Y00404D31 E8 5AE3FFFF call qsr.00403090/ l9 K: y. B+ g5 V, A
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]; H. E2 x/ n5 W8 _" _
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
2 {% o9 |' D3 N( P: z( P00404D41 5F pop edi
8 P V, g' K- h! T- `00404D42 5E pop esi3 h: S8 d0 ^: Y) x1 v
00404D43 5D pop ebp
9 v4 i2 O! {$ h9 C00404D44 5B pop ebx6 F+ E6 P! f2 }' {" s) G+ H
00404D45 83C4 18 add esp,18) o$ q2 u p/ g4 N8 ^
00404D48 C3 retn/ k8 X4 P+ g# h2 `* ^5 Y9 ^
*********************************************************************************************************************************************************
( E, ]4 W6 P6 J: a6 c跟进00404D09处CALL来到：
! W# m7 U6 H! p, V7 G2 Q004030A0 6A FF push -1 //一路F8下去~~~~8 H. M& U7 |0 a7 ]
004030A2 68 C88F4400 push qsr.00448FC8
% O: g5 b# p2 V9 k9 |7 d) N, B2 t9 S004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
( i1 J% E- c# r3 r; q/ T004030AD 50 push eax
3 \. z' y& a5 k' p0 `4 b, r004030AE 64:8925 0000000>mov dword ptr fs:[0],esp i5 F6 Q1 J& C l0 A2 c
004030B5 83EC 24 sub esp,24
" E1 F. Y! {0 s+ T. ?' e004030B8 53 push ebx! z+ l0 G4 o, H) e
004030B9 55 push ebp; _/ P" W' \; W A1 u1 a7 E
004030BA 56 push esi
% F0 D: @# X g7 F* z004030BB 57 push edi
9 j# [ l f/ U/ G004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"( e, K5 M0 z+ U/ P
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]6 d+ L8 p$ u+ }# U, F3 Z$ x( v
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],18 v O7 y) t6 R
004030CD E8 27C40200 call qsr.0042F4F9" k7 Y4 E5 e/ s, c
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]1 o8 Y l; }% V0 W
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax+ p1 `! y; |4 ]$ A8 g& I4 B
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
/ q' Z( f0 {' R5 O; d) p004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],39 Q b3 I. H I
004030E4 E8 905A0200 call qsr.00428B79
1 A/ @/ Z) `% w9 Z+ O004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]5 z% y5 I R7 p( d( m) k0 K
004030ED E8 3B5A0200 call qsr.00428B2D+ @# U8 H0 F' E/ R6 J/ s6 _
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44], w! B3 n4 ]4 V. R5 G+ J3 K
004030F6 E8 7E5A0200 call qsr.00428B79$ c! X6 p4 Y H# Q8 v$ s3 l
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
B n& o1 @- h& t: Y$ C/ w: t004030FF E8 295A0200 call qsr.00428B2D$ W$ E: `7 W& w5 S0 ]- j
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
$ u& ?. I# n2 h3 R1 W$ b00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
2 @7 Y4 e. j; S# {0040310B 83F8 02 cmp eax,25 P$ z5 m5 e' h/ W& ~& I% l
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
9 ?2 @0 `. \9 X0 ~00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
1 w+ ~% o: u, _& g) V- P$ t( B00403118 837A F8 18 cmp dword ptr ds:[edx-8],18. a/ b9 X0 y) y5 [
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳* F/ N( u' w- P
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
$ \4 w( [& i5 e1 c: ^: n00403126 6A 01 push 1
' |" M- ]5 V$ K& C00403128 50 push eax: ] {8 m* d6 t( O, z/ S* ?
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; v5 |2 G2 O: D( O
0040312D E8 C4550200 call qsr.004286F6+ b, H4 e! N. f5 y/ {8 V
00403132 8B00 mov eax,dword ptr ds:[eax]
; {6 }4 B& r5 D+ y9 M9 I, E5 C00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]; g6 N E9 I7 [0 i$ N) S" u
00403138 50 push eax
) Z9 A* \7 Z9 O$ |+ Z- B00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
8 h* E9 f) |; c& t. p4 v' e7 }# V0040313E E8 4D560200 call qsr.00428790: y* X3 x& d% P9 l' X
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
7 l+ b) X- D0 r" N' ]00403147 8BF0 mov esi,eax
' f. Y2 i c S: |00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],37 [3 {9 @; u8 z5 N: v
0040314E E8 38C30200 call qsr.0042F48B- |: L% g/ k% h
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]7 x, a6 X9 u# } x) M
00403156 B9 3E000000 mov ecx,3E" [1 n! b# {+ L, h# y
0040315B 99 cdq ]! g% a; j2 [6 C, Y8 D q: {$ ?! {( T
0040315C F7F9 idiv ecx
& R* Q2 w% u. K- A9 F0040315E 6A 01 push 1
2 J7 N @1 d; N00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]+ @1 ?( f* F! v6 o9 A% l; V3 e
00403164 8BF2 mov esi,edx
3 D: N* O( A. N00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
% E5 x# V5 d+ t* o% o0040316A 52 push edx
4 B- W7 h* d; W: R0 j! ~0040316B E8 0A550200 call qsr.0042867A" g, ]( _6 |, \4 @2 \
00403170 8B00 mov eax,dword ptr ds:[eax]
( A+ f- J" |/ r5 Y00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" n( j% B4 T* D& o0 }( Y# r' o
00403176 50 push eax0 Z6 i# ^# f+ I/ a/ |' B! `% f
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
! W4 f8 d! M7 b6 Y) i0040317C E8 0F560200 call qsr.00428790% E0 d! s% _/ j* L/ G, _4 u
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) X6 J7 c1 o& J5 b5 ]8 ?
00403185 8BF8 mov edi,eax m4 j/ e0 I* T' ?
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],30 i9 t* B$ x4 Y4 c/ `7 ^2 q4 C
0040318C E8 FAC20200 call qsr.0042F48B: f+ [: \- y# p0 ~) [+ G% ~% R7 U7 {
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
( f9 N- u. k; Y p0 D' v! Q00403194 B9 3E000000 mov ecx,3E/ Q) [$ D, n6 c3 D
00403199 99 cdq7 q( I5 d! l7 F* M0 I7 e' m7 ?
0040319A F7F9 idiv ecx' p u1 L5 I0 Q
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
9 T8 N8 u% s3 f$ F* ?1 w004031A1 894424 28 mov dword ptr ss:[esp+28],eax
+ ^. D! W/ Z9 k5 g5 ]004031A5 8BCA mov ecx,edx
- a* d# R, h- Z7 }5 I3 ~" F) D* m004031A7 894424 24 mov dword ptr ss:[esp+24],eax
1 H* U- u7 f; W004031AB 894424 1C mov dword ptr ss:[esp+1C],eax' |$ J) b, P1 {& v: S7 q
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
! b( Y+ M! L- b0 k9 ~004031B3 894424 14 mov dword ptr ss:[esp+14],eax
5 p7 `- ?; _# t! o2 p, n+ a004031B7 894424 10 mov dword ptr ss:[esp+10],eax
% O1 Y# B- a7 X004031BB 8BC1 mov eax,ecx
# ~8 K: s% T, i# U8 Y3 _004031BD BF 0A000000 mov edi,0A
' x) D$ [( W9 g* `" ]% B. n004031C2 99 cdq V g0 D- x8 e1 U+ y8 v( f
004031C3 F7FF idiv edi$ _( d N# Y9 V7 F: ] Z) G1 t
004031C5 8BC1 mov eax,ecx& t7 D/ \" P4 Q$ C, {
004031C7 B3 0B mov bl,0B R* k0 y" w x3 G2 K
004031C9 0FAFC1 imul eax,ecx
1 [) E/ ?4 E1 S7 E004031CC 8BCF mov ecx,edi7 y3 _+ J# M. x/ n9 _6 q2 k+ u
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
$ m2 b4 B3 s6 X4 x# D: q004031D2 52 push edx
( a, D z3 F$ \0 r0 [3 F1 j9 h9 i) t004031D3 99 cdq# A+ U, L) q2 O7 ^, b
004031D4 F7F9 idiv ecx
6 y* u& O7 Q. m3 a$ c004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]+ e5 u! R9 E$ S: T' D: d
004031DD 2BC6 sub eax,esi( ~ ^2 Y/ C- a7 C" @2 U* B) ?6 d
004031DF 52 push edx9 b( g* I; I6 v1 H
004031E0 99 cdq8 |" v) Y& w/ K! q* J
004031E1 F7F9 idiv ecx
2 H& d' @# A" d, ^, b* _004031E3 8BC6 mov eax,esi* W- ~ \# _. ^9 k! F: M5 j
004031E5 52 push edx7 L, M, }$ q9 |! h' A i _& G
004031E6 99 cdq
- h% V6 _1 W* t! {/ ~7 w004031E7 F7F9 idiv ecx
, g- O+ R' F, \4 Q4 ^) m004031E9 52 push edx
% A0 R2 N& ~/ F" y0 Z" B, E004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
. U6 Q) T2 z! T( _) e* Q' ?004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
/ z$ \/ v1 ~: D004031F3 52 push edx
0 T' Q& r$ X" H% g004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48935 S# \; e2 }& w7 R5 H4 u
004031F9 83C4 18 add esp,185 o# h" R8 H9 ^# o/ B
004031FC 6A 04 push 4
" ^& |& y8 e7 h004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]0 P+ H7 V' u# r! y2 x
00403202 6A 00 push 0
3 o/ L6 w6 F4 `; u% b00403204 50 push eax& G, r" U+ \; S- }/ E
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% I+ _5 z% u9 A U3 Q1 D) E3 G& u7 @00403209 E8 D6530200 call qsr.004285E4
# V1 E; Y, e/ k( a4 h0040320E 50 push eax
& a6 e, R4 L6 i3 B0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]3 L1 X+ q+ b& z, Q
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C! {, U% j1 v4 P5 \, s
00403218 E8 A7C30200 call qsr.0042F5C4% w9 f$ W5 O5 P, J- P$ w1 d
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) E. e6 M: R& U! J+ B
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl. V- G/ e w8 s' P& E
00403225 E8 61C20200 call qsr.0042F48B7 l8 m/ S. Y0 Q; m2 Q2 J$ q h$ b
0040322A 6A 04 push 4* [2 l( ~+ p4 o4 R
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
% V. L& p E$ z' [00403230 6A 05 push 5( ~& D( \1 ^ X7 o5 f5 ~% h
00403232 51 push ecx
+ ?3 t6 {) w2 |9 x: K# X7 ^& Y00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
2 z$ ?$ v, N" r9 Y00403237 E8 A8530200 call qsr.004285E4% ]# c8 x, H) p3 K M- R2 R& z5 j5 q
0040323C 50 push eax
}3 a+ v7 Z5 m* |$ c2 K0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
6 V1 g4 A; n0 \1 U00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
5 Q' s6 z. F5 W& e00403246 E8 79C30200 call qsr.0042F5C4
. N) [* M4 W& k0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
, a) K+ ?0 m1 {- L0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl! M% g+ o! l* a0 d) ^6 x5 L
00403253 E8 33C20200 call qsr.0042F48B
3 h8 \* b6 s- Z$ H2 D) T00403258 6A 04 push 4
, y, S: z% J. X' }. ] N0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]. e1 P. T" w. Q
0040325E 57 push edi% r* w4 u9 P# w* z
0040325F 52 push edx
% I/ I% o- b3 `00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# P/ s8 I$ k+ k9 D. s6 _# z
00403264 E8 7B530200 call qsr.004285E4
9 ^! e% Y4 b* p9 S- A* U) q+ H00403269 50 push eax& [2 l* ]8 i+ a- A3 V5 y) \6 e
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 c/ A G- [' j5 S, n3 J" ~+ Y
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E; s& H( H- v" u* j! B
00403273 E8 4CC30200 call qsr.0042F5C4. S- z- R: S8 _ J
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- }7 {/ V5 h7 [: n$ T2 r0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl& ^4 V, d7 B% T3 r( l. L- b, N& U& k' i2 [
00403280 E8 06C20200 call qsr.0042F48B
0 a7 h0 e# [) C) l00403285 6A 04 push 4" I9 c/ A; b* @8 G
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
6 j, Z; u( [ O& f# P2 @& G0040328B 6A 0F push 0F
m u; S8 w) V3 D' l- K9 Q; s0040328D 50 push eax
& T ]2 I- i' c# g8 N/ k1 K F0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 G& v% s" k; m; j$ W$ Z00403292 E8 4D530200 call qsr.004285E4. C4 R! N2 i& F
00403297 50 push eax
& U$ u. v; t2 ~% c; z, z$ p2 L* p00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]; [$ R/ r, b" y! Y. T
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
$ {# g; r, _; d' U/ M# k( v004032A1 E8 1EC30200 call qsr.0042F5C4
4 T6 z; i; p5 C% B' r2 v _7 g004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ S8 z* f9 d3 I004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl. R7 J. t% C: r
004032AE E8 D8C10200 call qsr.0042F48B
4 F: K5 F, O' m9 x0 Y004032B3 6A 04 push 4! _# m+ I2 _6 l
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
" P4 Z& Y& P3 q( K3 r! j8 W# _004032B9 6A 14 push 14/ ?0 D) R2 D5 ]9 B5 ^
004032BB 51 push ecx, C# [+ n2 P" I. t' Y
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ V# q1 a2 Q. p" T& P ~0 _1 C
004032C0 E8 1F530200 call qsr.004285E4
. S" N! o7 b& k! f8 V* P4 w8 s004032C5 50 push eax0 u% V$ X9 e/ f, G
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
6 I n3 h2 @$ ]. }8 V0 t7 E( a, d2 e004032CA C64424 40 10 mov byte ptr ss:[esp+40],10( ~6 q. s' b, L1 T7 v, b, b
004032CF E8 F0C20200 call qsr.0042F5C46 h( o7 o, Z0 L# E; P" O& Y
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' c0 l, ^0 r( k3 k: ~) w9 G, G! o
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl% W3 U# n' ?' _+ Y2 }4 j* H
004032DC E8 AAC10200 call qsr.0042F48B6 A8 j8 n2 W" l' A
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI g% ?: V& T" O
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
5 v' j" K1 V1 h5 K( ~004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
% K5 u- H6 k0 j5 A6 I7 A004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL+ Z1 f% h/ e# X
004032ED 8ACA mov cl,dl ; DL送CL8 L8 ~" X$ e, K" L. b
004032EF 3AD3 cmp dl,bl ; DL和BL比较
. S1 p& X4 U% V) b* T" T5 H0 u2 ~ a004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）' b4 D' C+ m( d- ^' {* `
004032F3 84C9 test cl,cl
' }- R( C) i$ ~7 B" ~* V7 Q004032F5 74 16 je short qsr.0040330D/ E( c$ S5 D1 ?7 n9 n6 k
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
" \ D1 }8 Q( p6 r, t- F3 @7 L. R) a004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
, V; ?8 F6 P* M. x; j/ y) k004032FD 8ACA mov cl,dl
/ e* U6 _- _1 [' j/ U004032FF 3AD3 cmp dl,bl ; DL和BL比较+ a. R! m1 {5 {5 Y1 B& R6 l
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
: Y) y0 \7 T# R6 v+ {' e3 d5 I00403303 83C0 02 add eax,2 ; EAX加2: \# H: |- z. T
00403306 83C6 02 add esi,2 ; ESI加2$ G! J3 C4 W2 z1 u1 z; C
00403309 84C9 test cl,cl1 q3 x) u! j$ b
0040330B ^ 75 DC jnz short qsr.004032E9
0 U4 | q( k& a' B5 _7 w" n. B0040330D 33C0 xor eax,eax
Z9 j" P1 e" F( x, ?! m5 K0040330F EB 05 jmp short qsr.004033164 u- d$ \/ X5 V+ C% L; y
00403311 1BC0 sbb eax,eax. g8 W( n9 `& X- r* X
00403313 83D8 FF sbb eax,-14 B+ A; r# Y+ c. ]0 d& ~( P
00403316 85C0 test eax,eax4 L; ^- }- A* F/ Y9 L* Q- F
00403318 74 0E je short qsr.004033287 L( j) _6 c" o/ Y9 Y# n) w
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
( x! ?& S: ^' g0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
' c8 _* h4 M* C) w00403323 E9 F0000000 jmp qsr.00403418
; ^& p$ i7 f1 \2 ]* \00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX% v4 D0 ^( y8 ~8 x/ S
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
J- l8 j, \6 Q/ o; x* r2 L* O00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
. y8 c( Y& b6 L0 I00403333 50 push eax
' y$ J( C! \1 `2 {7 W0 V! P00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX) n* Z1 m, S# D; d" h" f/ D+ i
00403339 50 push eax; u- Q. p! q: {
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
5 E4 @; a1 `0 W# z0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX3 R; b x3 M6 w; O
00403343 83C4 04 add esp,4) I# v$ C1 b" P: q: D+ e# z1 f
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI' k1 p- i( g: B( n7 l% I- M
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
" |+ F6 R+ z( t& M" z* |0 x0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]9 n( g o% }% C: x5 {, c; _
0040334F 50 push eax' `6 J/ Q$ q2 { R- I; O
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX3 X8 v: ?% V1 `2 K. Z B$ C
00403355 50 push eax
' D n& X# y* O+ L) Z00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX# Z: i' u2 I" r
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
& M1 |( t2 x f9 L" G0040335F 83C4 04 add esp,4: a4 v" d0 a/ m H" A5 b3 o
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
2 D+ E( r! R& z9 T) Y8 D00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]% e2 {! M. N3 F/ B$ u( q& C9 C
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
0 W1 z; u4 u. ]3 R0 i6 }% F8 ]0040336B 50 push eax
* d9 X1 Y; M6 @! ~' C' A0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
: s' m. `/ o, o00403371 50 push eax) M6 k" j3 s) t: \+ l3 ^
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX9 g( v# C' _3 A' z
00403377 8BD8 mov ebx,eax ; EAX送EBX
1 s9 K9 R7 p" M' H00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX- G' F- W) t3 I- M3 L
0040337D 83C4 04 add esp,4/ J, Z0 z# L) r+ k I2 p
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
' Q3 ]$ p/ U0 K9 _: @8 f00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
' {; r1 Q) t. ?00403387 50 push eax
6 p3 H# j0 y' U- w; p00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX5 p& t6 b; I2 b: O
0040338D 50 push eax% }+ J! m: f* W3 u% c6 g' G
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
: }: P( v4 ^0 j$ S: h' J4 {00403393 83C4 04 add esp,44 l' b% h3 F4 e0 d2 ` }
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]" l+ J: \# }/ P1 I
0040339A 8BE8 mov ebp,eax ; EAX送EBP
9 \# N7 x- E' s/ _& ~9 q( d2 |4 c0040339C 6A FF push -1( P( r( d( d2 l+ d! s
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX7 H3 Q5 e2 V t+ w4 l# K
004033A3 6A FF push -1 J1 S9 |8 e! j) d4 v8 w
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX: C7 \2 @) Z5 E6 q5 I1 `- \
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX& a, x4 r) i7 R
004033AE 6A FF push -14 ?9 Z" X; f0 s' }. y
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX7 x* h; c& `5 Z. u
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
, k# A P3 d. s- r004033B9 6A FF push -1
! z) n i" R" h; O4 V% J004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
2 ]7 y9 v+ F: \) _4 @+ ?004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
" o) r9 o( R$ e) h- b4 u5 _6 i004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
9 Z0 g% ~4 Z3 E% }5 |: \& O, _004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
! ^9 X+ b5 C& }& B004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
2 s9 R, R3 n9 W# A6 K5 b004033D7 D1E0 shl eax,1 ; EAX左移1位
" o% F" D/ u- i+ N( Q; U0 K004033D9 99 cdq ; EAX扩展
% P6 p1 S, V4 I2 U004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中# \) Y+ P1 B T$ S' ^. j
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
+ g' I" O0 P, G004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）0 h2 |, G; |& b" R4 V& A
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
; K- V A% \/ J8 R$ u6 U) V7 j004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
9 w3 o* i, Q' H004033E9 EB 2D jmp short qsr.00403418
8 N& i2 T4 D5 Z5 P+ Z' ~6 r004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX) A4 X+ I; x& S$ i3 x5 G( I, t& ?. O9 G
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
( X! z% | T! y' S) B004033F7 99 cdq ; EBX扩展1 o- p) h5 S7 p. L( g! B9 P
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
a* x- O/ l! W8 m* X004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
3 ~" E5 e/ T7 e$ G004033FF 2BC2 sub eax,edx ; EAX减去EDX
! N# D1 l* ]) d( K00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]) ]$ `! ?- _0 e6 u& U- I; y% r& L! }
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
5 T5 i2 P- |- F9 D4 x00403409 99 cdq! G+ R4 \: O$ M4 E
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中% `# V9 g% T9 t! l( M: |
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
1 U- [8 W3 v6 ~* C8 i& S00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
) z& U" h( o) A# a8 o; [. x00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
$ K9 p5 n5 H, z2 m6 V. X00403418 E8 6EC00200 call qsr.0042F48B ;
1 [2 [2 r% B! c ^! Y4 O0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]# o! p! U1 ?7 ?( n' O
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
4 L: V8 D% i5 T" g5 M) D/ g& @00403426 E8 60C00200 call qsr.0042F48B
1 Y4 z8 [3 ]7 |6 n+ ~0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]$ c$ t1 P7 l s g8 h' n& N
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],80 o0 o& o1 B' B( {, Z( Z5 q- ]/ F
00403434 E8 52C00200 call qsr.0042F48B" v5 w; J% @1 o2 M
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 u9 @% R6 E* l' w! R" p
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
9 H$ N9 ~2 d6 h, c# m3 `; h00403442 E8 44C00200 call qsr.0042F48B
. I2 p6 o4 r, p+ A2 s00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
/ U$ l/ B" Y8 k! W! N3 H6 E0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
4 i) c1 E) ?0 r# Y+ J) T" o00403450 E8 36C00200 call qsr.0042F48B
8 W' N0 y7 U( N4 H; @( C/ p00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]' u1 u* a8 D w
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3+ C U. i$ K: j6 F) I
0040345E E8 28C00200 call qsr.0042F48B
_) v' _$ L) j( h$ K00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]$ E! r$ B7 \ }6 i
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
5 \1 g6 m% D9 I; g5 M1 h5 P0040346C E8 1AC00200 call qsr.0042F48B( L) P$ n' ~8 }# ~1 q) [" w# A
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
3 K8 D$ c/ C3 P1 S( Y00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1# x- T5 J0 i9 ^* ^1 |) k
0040347A E8 0CC00200 call qsr.0042F48B) @% S5 I0 Y& u- h4 N
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
9 h; { q' P1 g% j/ |+ u00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
. }7 A( G2 d2 ]: |" C4 ]00403488 E8 FEBF0200 call qsr.0042F48B9 o+ b# N4 ^$ e2 [0 ?! j
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]. ?& K/ z) j9 P, h0 }# b
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1: F/ N. C- Y4 h! L) k/ o3 i, O
00403499 E8 EDBF0200 call qsr.0042F48B
1 Y! L# I+ m/ d; P0040349E 32C0 xor al,al ; AL清0- D: m2 B @! w- B, m9 ]
004034A0 E9 88000000 jmp qsr.0040352D
& ]1 n* U9 T2 H2 H* K; b+ ^004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~- Q0 z' K5 q/ z) B4 c: g
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]/ u$ C1 o O, {: [& ]
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
1 V3 C/ X5 }* N; t1 q004034B3 E8 D3BF0200 call qsr.0042F48B* [* z6 f% E' ]2 X5 x# r
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
8 ?% I( w( _% u( ~- a9 g! a004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8' P' Y; u O( Q! g, L
004034C1 E8 C5BF0200 call qsr.0042F48B# p4 ^- }0 G, W
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 A* ^5 P" a) W* G( u
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
X5 b8 G3 B8 S/ i004034CF E8 B7BF0200 call qsr.0042F48B" r1 h9 W* ]+ y) o t
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]; ~' A2 o+ |9 [& n! P; L
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
5 O8 m4 F" l/ D( M0 U& c0 e004034DD E8 A9BF0200 call qsr.0042F48B
4 y' U: Q) R: O0 Q. t004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
! r- ?4 I+ O& d' ?: z) u& }004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
; g4 h8 |# M* {$ f004034EB E8 9BBF0200 call qsr.0042F48B
- c4 D N6 o( ]004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]1 B9 a- a! G$ m
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
( F/ x: E1 i/ @+ z( O5 U004034F9 E8 8DBF0200 call qsr.0042F48B+ `3 ~1 \! G+ l
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* ~! r9 d5 C! T0 c6 C
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1' U" t$ r+ C; h- s
00403507 E8 7FBF0200 call qsr.0042F48B
* M1 x2 F, S) R$ c- N5 i0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]; T. ~) a& g% `6 {" x0 l' Z
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
/ i! }, e, y, ?4 D! S4 A5 b) {" \00403515 E8 71BF0200 call qsr.0042F48B
p/ H; `$ z' P; R0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]4 S: G6 l( D/ E4 i e! ]/ j
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1" {6 t3 T5 U0 g, U. P0 P
00403526 E8 60BF0200 call qsr.0042F48B4 O$ @- f p v% T' G
0040352B B0 01 mov al,1( h y% [+ d8 x. \$ m* a& u5 J" Q# J
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]+ u- t- Q- g1 D- Q+ I! Y
00403531 5F pop edi
6 I2 [9 S1 }- E R00403532 5E pop esi
& J- d. x* D1 K0 i* z3 K, g00403533 5D pop ebp
) r% u' p+ Q! n6 F0 Q" ^00403534 5B pop ebx0 `8 E2 A$ h# W3 a3 O
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx0 k: j5 s' X0 g7 ]9 [1 o, c
0040353C 83C4 30 add esp,30
- E4 H5 x' Z9 m& j0040353F C2 0800 retn 84 L3 Y& N* V0 |3 M
--------------------------------------------------------------------------------/ z# ^5 b u4 J8 U
【破解总结】3 x! _ n: H. O( ]( e# P/ y7 W5 L
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
/ F" f3 C7 ~7 V; B! _7 ?用户名：yijun& d& M; d) k7 l
注册码：4893*7777*3726*7777*05299 `. u' D5 [: y
--------------------------------------------------------------------------------3 q# v8 {- O' w5 ?# ]
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡