|
|
|
【原创】破解Quick Screen Recorder
& R; ]7 _7 s7 u, o$ N$ R【破解作者】 yijun
( N$ a1 L: F4 l. y4 Z【作者邮箱】 [email protected]3 x! I D* z1 T
【使用工具】 OD,PEID! @0 {; k' H1 g& B0 f- @7 \
【破解平台】 WinXP$ Y5 a5 s, |5 N+ H6 G9 U
【软件名称】 Quick Screen Recorder3 d* _3 t+ u4 X, M" Y; j, Y
【下载地址】 天空
. g0 ~+ v+ L9 H- b1 t- `% f* `【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 6 X- `% a9 m4 Z$ H. y" ]
【软件大小】 540K; q/ w- z- \/ n0 ~
【加壳方式】 无% A7 G5 Z: ^" ]' \: i
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
1 ?# j, k. d) c. p' D0 _--------------------------------------------------------------------------------/ K% n# v$ s H2 d6 R& b
【破解内容】
" \! M( l( n$ D3 u2 t5 V+ {1 l PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
: _2 N+ V- O9 q" U3 c00404C69 55 push ebp //在此下断
9 k; \! a) z* t" G5 {; F# ^4 s, u00404C6A 56 push esi$ f+ I. _- _% {' l
00404C6B 57 push edi
$ E8 f! \; m' h6 C" X% d00404C6C 8BE9 mov ebp,ecx
7 I4 e" g$ ~1 b+ w$ V00404C6E 6A 01 push 1
3 Q1 i; y4 U8 ?$ u h00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
7 F( t/ M. J: ]1 b% J+ W' r00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]/ {* @" J8 j4 C
00404C78 8BCF mov ecx,edi
8 k9 y4 h3 P2 t9 i3 `2 [* R5 c00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
! B4 }0 v' n- r4 a# L( M% v00404C7F 8BCF mov ecx,edi
! B4 `* }4 c+ ^) c00404C81 E8 A73E0200 call qsr.00428B2D
7 m. ]2 D* t1 d- M; Q" S* ]' w) x00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64], m) v, O! M" R
00404C89 8BCE mov ecx,esi
7 @8 o- M* N# R00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX% }% p1 o+ C# ^* B$ [
00404C90 8BCE mov ecx,esi$ U/ y- r; X7 Z9 i
00404C92 E8 963E0200 call qsr.00428B2D3 Q; X# M3 K2 B2 S ?. k/ Y" [
00404C97 8B06 mov eax,dword ptr ds:[esi]
2 H* k) o/ y; ^# f/ S8 m! b00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],28 k' u/ S2 `! B3 N
00404C9D 7D 26 jge short qsr.00404CC5/ [6 l3 l8 M o* R+ |$ Y
00404C9F 6A 40 push 40
- K( B5 e* s3 D: o. X% m00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"! v7 Q/ j) V7 O/ {+ M
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."1 w4 R% q' v j" Z
00404CAB 8BCD mov ecx,ebp- e; U R" g: L; l: [7 `
00404CAD E8 C3840200 call qsr.0042D175
9 e% B" `3 v' x1 A00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]' u/ K9 S# l2 Z6 H6 M. v7 ~
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
, o9 k9 F7 k, H! }4 @$ K9 f o% [00404CBD 5F pop edi& r6 O; a W8 r& x
00404CBE 5E pop esi3 d3 Q6 Z* X9 b' H% |
00404CBF 5D pop ebp1 c! j% T& d, S" R9 I
00404CC0 5B pop ebx
! W* Z; [3 _- r' K& ~00404CC1 83C4 18 add esp,18; c* x j4 ]2 e
00404CC4 C3 retn+ S. X5 J i9 e/ g4 P
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
# b8 e. [ }) U { J! Y/ I6 d00404CC8 84C0 test al,al2 l! z& d* j7 d
00404CCA 0F85 1C010000 jnz qsr.00404DEC ]+ U4 ]- ]6 m; R7 ^) c6 @) C- {
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]0 [5 K9 o8 Z5 E4 J0 E. L
00404CD4 E8 87E3FFFF call qsr.00403060
0 S7 i; h. ] Z) T* m00404CD9 51 push ecx
7 X6 c( P; a/ D3 a; W5 a0 w% U: I00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
/ W- ^3 t0 W$ o6 K0 F+ D0 F; t00404CE2 8BCC mov ecx,esp
2 h8 k U) n* U" e @0 Y00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
5 _* L5 f5 q7 K- K00404CE8 56 push esi
0 z. c0 E/ C6 i00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
4 O% _( t1 ?4 c) h& {, {. S00404CEE 51 push ecx
$ y2 Z" \' M- Z4 J7 }) L* q2 W% N; S00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
+ D2 y$ E; x7 t- [" ^" V00404CF4 8BCC mov ecx,esp7 o; _$ |( |6 z& |( m* B% B
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
& p( K7 o/ `8 e7 @; Q00404CFA 57 push edi
$ K, D: b) R3 ~, r00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
, `4 P8 @4 v( W1 V00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& [' Y _0 V8 s% ~. H! R" B00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0' v7 B" y, j$ G7 h) [& q
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
9 f" m- E8 n8 [5 D00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~1 D0 s8 C$ c! b" g
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~* b/ F2 B, z k' |; j9 f9 R
00404D12 6A 40 push 40
6 ] _7 G& {4 n& ], `00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
0 y3 P; g; }' f' } c" w2 I& b) S00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
, g. }1 S1 s3 X0 b2 o9 F9 m0 b5 D00404D1E 8BCD mov ecx,ebp6 X0 U& l [; d' A/ l+ _5 C2 i
00404D20 E8 50840200 call qsr.0042D1756 x) s: o6 b# f9 c
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ ]' b, t7 z) K00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
( ]4 S/ `3 @7 ]/ x1 k; d3 M6 }) f00404D31 E8 5AE3FFFF call qsr.00403090
[/ M% Z, A1 e( \3 Z00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
4 ^ Y$ Y5 A k9 f' S4 ]. `6 w2 F00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx; i& H6 L4 M" f* _$ h# F# K, f
00404D41 5F pop edi
& y y& f' L; V: ?* X8 O. j3 F00404D42 5E pop esi
( j0 T6 j! g2 t7 I& |; S4 Y9 y00404D43 5D pop ebp
& U6 R% @9 K9 Q4 x/ o00404D44 5B pop ebx; k8 u7 p) A/ q) |8 e$ H2 A4 [
00404D45 83C4 18 add esp,18# {; ?* R/ d s8 Y
00404D48 C3 retn
$ f) x6 i2 b/ y9 m( t p- w% h*********************************************************************************************************************************************************3 H/ h& I+ `* O6 ~! V
跟进00404D09处CALL来到： B" V/ k3 {9 O/ W& c, b3 |
004030A0 6A FF push -1 //一路F8下去~~~~+ ]# r, W7 `/ X8 I0 Y6 u. V
004030A2 68 C88F4400 push qsr.00448FC8
/ e4 s/ ~: t! A K; N5 S9 t004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
- p0 A$ ^" w: J# v! m+ F+ p V004030AD 50 push eax
v4 n- d# @+ B8 {* g6 J004030AE 64:8925 0000000>mov dword ptr fs:[0],esp! \. Y! J+ Z/ `. L
004030B5 83EC 24 sub esp,24
* X" B& h# l" M! m8 p g004030B8 53 push ebx$ C2 N( j7 M/ D% r# _" p
004030B9 55 push ebp
- ^% U6 b* c+ ^) c1 k004030BA 56 push esi1 C# c2 G* M6 ?7 H
004030BB 57 push edi/ f: ~* ^; F9 _# C+ E, g0 h- v. u' Y
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
% h6 ^+ a& q1 s5 Z: W004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
x# ?' q- K5 R) u z6 _004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
0 R7 s6 O) k! a7 G& z. H004030CD E8 27C40200 call qsr.0042F4F99 X! R$ D: J s+ q/ ]
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
$ j& M" X' @$ ]0 a: R- X004030D7 894424 2C mov dword ptr ss:[esp+2C],eax2 T6 m! N* V- ?6 W; h# y3 Y
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]& Z6 A: I+ L/ Y- ^% J. u; p& g9 R5 d
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
' x4 D# p6 b/ f% \* k004030E4 E8 905A0200 call qsr.00428B79& B) ~0 q. J& ~' Q
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]% ~0 T# m. X8 J0 J& j# [. k4 m" M8 G
004030ED E8 3B5A0200 call qsr.00428B2D
) a1 ~" y9 R& t J004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]9 ^ m% M0 h5 f; {8 B/ f
004030F6 E8 7E5A0200 call qsr.00428B79
( p& |! X- [' _; o004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]( J$ `' B- n' k5 q; v/ k
004030FF E8 295A0200 call qsr.00428B2D
. r0 ]" u. H+ Q, |. h* N5 m8 W00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
9 E* }. j/ ~% A8 t# U00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
$ }( U* Y* ^0 h$ G( |5 e7 m3 D0040310B 83F8 02 cmp eax,2
, `& G' I9 e( s: g0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳8 o+ P0 {: n0 U, D- u0 V
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]4 F# C$ Q) u4 S
00403118 837A F8 18 cmp dword ptr ds:[edx-8],180 {1 r" h0 ?+ l7 d; M
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
, C' R; U2 Z5 o1 t$ X5 ?00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
+ r0 j5 s/ {) w% e& a1 ^4 R00403126 6A 01 push 1
7 {7 c# Y2 [0 x+ b9 M( E6 Q00403128 50 push eax
9 y+ M7 Q( K5 [9 K9 i00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
& f6 z# k; C& U0040312D E8 C4550200 call qsr.004286F6: E2 W6 H( B" O8 ^
00403132 8B00 mov eax,dword ptr ds:[eax]
3 A7 h4 _2 I# v4 ~2 ]00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" g2 [' @4 U2 v' P
00403138 50 push eax
: J2 c& ^; H: `' `8 ?00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
2 a4 n; F, H" y; M+ a* S o% z0040313E E8 4D560200 call qsr.004287907 c4 x# ]5 Z4 m/ P
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]& f+ A" _- W6 t8 h6 S, o; |$ |
00403147 8BF0 mov esi,eax
7 b( }" v5 ]1 k( `' T00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
' F: y E: N: i l$ b0040314E E8 38C30200 call qsr.0042F48B, ~1 Y' H3 O N X' _4 A
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]3 E6 `* k ]6 |$ S- q o
00403156 B9 3E000000 mov ecx,3E- A- Y0 @+ i- [' m- y
0040315B 99 cdq+ \. m" j, Z( z \
0040315C F7F9 idiv ecx4 q" J9 b$ _3 Z) N* v* E0 Q' O
0040315E 6A 01 push 10 q, a Y, q. }$ w
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
' i' }2 F& b( g; L00403164 8BF2 mov esi,edx
! o! n) E: U# K4 R6 i% c1 V00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]6 h/ O# A( X) y1 ^9 W) \3 }
0040316A 52 push edx1 C4 {! O! x1 {, s+ k K# ]# i1 s
0040316B E8 0A550200 call qsr.0042867A- q- v( l% s% F- m7 K6 J
00403170 8B00 mov eax,dword ptr ds:[eax]
/ A" o1 x! c W$ N00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
& _( s7 x) j2 v* R00403176 50 push eax0 |' f: Y7 Y. P0 G' @7 F
00403177 C64424 40 05 mov byte ptr ss:[esp+40],50 S5 R4 ]; E5 Q& j$ w! C9 c
0040317C E8 0F560200 call qsr.00428790
0 \; P+ o6 E8 f8 S" L- v00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( `4 ^/ l3 T9 i4 j' t* c
00403185 8BF8 mov edi,eax+ B s' c5 q( O
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3' e7 P3 I7 f/ Q, m* h5 e
0040318C E8 FAC20200 call qsr.0042F48B
( H/ O6 h/ C# \ G00403191 8D47 0A lea eax,dword ptr ds:[edi+A]! [8 b5 c/ C: V
00403194 B9 3E000000 mov ecx,3E
2 T2 A g, P7 J5 D( ~& E7 s+ {00403199 99 cdq
" o) ]2 G5 ~1 \( T4 v9 @- x0040319A F7F9 idiv ecx
3 |# e& M+ Q# Z9 h' a0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]! ]3 B1 y0 _' b% }2 n9 r
004031A1 894424 28 mov dword ptr ss:[esp+28],eax2 x; t' s* M y8 ]
004031A5 8BCA mov ecx,edx
( |& v( u2 C I& |" r004031A7 894424 24 mov dword ptr ss:[esp+24],eax
0 ~4 Z% U8 E0 e0 c" ^004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
1 u# a6 r( u; j# o1 H1 L0 Y004031AF 894424 18 mov dword ptr ss:[esp+18],eax( B$ R, Q& x/ E% h
004031B3 894424 14 mov dword ptr ss:[esp+14],eax) A1 A' B) f! z. |% g; A
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
! e9 l+ G6 w5 i3 R- X( q' `004031BB 8BC1 mov eax,ecx4 L7 M: T! t: U% K
004031BD BF 0A000000 mov edi,0A
* L8 a0 U: h: Z. |( j M1 u5 `( m! \004031C2 99 cdq
% X/ D9 @! `: G( q' J6 q% B004031C3 F7FF idiv edi
" b/ ?; z2 f/ [: ]004031C5 8BC1 mov eax,ecx
; a. K' o$ X# o004031C7 B3 0B mov bl,0B
8 }" }" `: i Z6 S! `004031C9 0FAFC1 imul eax,ecx
6 Q8 {- O N: A( i) G7 w004031CC 8BCF mov ecx,edi
4 C H/ L* F6 p2 h004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
. T; G) c9 z- J8 k004031D2 52 push edx- ^ J4 b3 \; t3 d8 Y, U7 I! A
004031D3 99 cdq
* Z, A2 F, C v5 L' P004031D4 F7F9 idiv ecx4 z1 L. H+ L$ V8 @
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]7 T. R; t& j' c' b& f) D% F$ _
004031DD 2BC6 sub eax,esi
) i& z7 F5 z2 m1 U% x004031DF 52 push edx
. Y7 t( F. A% s3 K" H# Z* R9 R004031E0 99 cdq
' C6 W, A' Z: t+ \004031E1 F7F9 idiv ecx+ y4 Y6 Q; h/ |6 U/ g/ r
004031E3 8BC6 mov eax,esi1 }8 V7 f% F7 c' v. w0 H
004031E5 52 push edx0 }! p' [& z5 c6 g
004031E6 99 cdq
4 {& W: z9 T& V: H7 Q004031E7 F7F9 idiv ecx" ~. C. h+ N B" g3 B9 R4 c
004031E9 52 push edx) f; b: W9 G3 k, K" k$ p/ ^! `
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]5 x( `$ k8 f& y" L+ |8 r/ m# }
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
" m$ v+ r" E+ s+ a6 z/ c* E004031F3 52 push edx2 q& Y" Y3 e' w
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
1 k. D( K7 y* A3 M4 O004031F9 83C4 18 add esp,18
/ u/ w* h7 c0 P7 S7 N3 h! A5 C9 u004031FC 6A 04 push 4
/ V' _# S1 @$ A2 t- z004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
" H5 X0 C& P2 B& c00403202 6A 00 push 0% U- f& x2 a$ X3 B M
00403204 50 push eax. {& j; ?( y' u1 g
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 E9 p0 B: N, y& b3 v- R00403209 E8 D6530200 call qsr.004285E4
* |. v+ L3 ? f% s# V0040320E 50 push eax" u2 {; h" G: k$ S
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]( e3 p7 S3 n1 O3 _& m# s
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
" n# ~. \6 y) S7 p7 ?* i( ~00403218 E8 A7C30200 call qsr.0042F5C41 _ e- F v' C9 m: [+ a- l- |
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' \+ m+ d/ q+ A- J5 L# N( N4 Q6 C00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
; u& T7 O, L& r/ `00403225 E8 61C20200 call qsr.0042F48B
& t. D6 ?: S" |0040322A 6A 04 push 4* r7 x: H* A( u
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
7 }# C) F) F# p/ F/ H; a1 a00403230 6A 05 push 5- d: {5 B; _8 N' @1 h/ X1 f
00403232 51 push ecx
) O6 U }# l( J) p$ ]00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" E: b7 O5 Z3 Y% c& W7 W00403237 E8 A8530200 call qsr.004285E4
6 Q$ R7 i# S' H& A9 r4 O- p0040323C 50 push eax$ A8 T+ c4 e& V; d" p
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 Y5 z3 F. @/ M+ F/ l
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D$ ]% \5 x1 F( O( c1 Y3 p
00403246 E8 79C30200 call qsr.0042F5C4) J, `. n" V+ Y% B6 g) |- v5 o: `
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* D& V5 }, j. t5 Y0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
3 r8 h3 c q9 h" m$ u/ v& x+ T; ]00403253 E8 33C20200 call qsr.0042F48B! `, P$ O7 L A- A( q; N' c
00403258 6A 04 push 41 B* }5 _! h& u, w, {/ u+ G
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]( H& M/ ^* W: b! x2 c4 h
0040325E 57 push edi7 A+ y& L5 {5 y/ q) W& I+ }
0040325F 52 push edx( @4 g6 Q% x+ l/ F
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]4 m* X7 a0 c5 n; N! n3 s
00403264 E8 7B530200 call qsr.004285E4
* b) Q; a. V5 U& K8 Q00403269 50 push eax1 u- J1 h+ A+ e m, h9 P
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& D: v) ]4 D' S: l, e) y# h0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E. N3 _9 G0 @; A; Q' u; K
00403273 E8 4CC30200 call qsr.0042F5C41 y- ^- b9 H. }" p. F1 B/ j
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* B) `4 W8 L/ W P& s2 Q: Q# Y0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
, h T. b7 E& x+ m H1 q00403280 E8 06C20200 call qsr.0042F48B$ ^/ j/ w0 k1 P0 d
00403285 6A 04 push 4
) P _! x3 l' s/ |# J* ]* P3 ?00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
" X4 X2 b [! r8 I4 [" D; p) K0040328B 6A 0F push 0F
$ a; M9 s, F! B @ L" A R" S! P& n* D: E0040328D 50 push eax; Z0 u6 T! N' ~5 y
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
8 Q$ [% ^+ a7 C. Z00403292 E8 4D530200 call qsr.004285E4( G3 _4 r, F. l" _, y' g5 [5 h
00403297 50 push eax
# K% n: {! r9 C7 S- }- e00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]0 i; o4 p& Y G9 a* a) c7 n1 Z
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F2 ^+ Q8 {3 k. B- A) j& {/ g* S( E
004032A1 E8 1EC30200 call qsr.0042F5C43 R* H% z' h" b" z7 u
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]0 T$ _! T$ I' r2 d) g/ V
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl* ~0 B$ i( H; I. @0 m% S
004032AE E8 D8C10200 call qsr.0042F48B8 k. ?0 e4 a7 R4 D: J* C4 q
004032B3 6A 04 push 4
, l' T1 O, }% }# c* z, z3 e- e' u004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
d# A6 i, y7 e004032B9 6A 14 push 14
5 _- h; E" ?( u3 F" o004032BB 51 push ecx
( \2 [3 B' U# \0 B/ Y) h004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
7 M2 Q. C/ Q3 Q1 D" Z2 b+ |% ]004032C0 E8 1F530200 call qsr.004285E4+ W! ?8 [/ d0 D$ J
004032C5 50 push eax/ N; b1 W0 L# D4 t. t$ E) [: |
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ G& r- w/ p( g004032CA C64424 40 10 mov byte ptr ss:[esp+40],10# N$ |& D7 J8 O" R. p" a
004032CF E8 F0C20200 call qsr.0042F5C4
. W1 |, m) H; c# {" y5 V0 U004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]- s/ W. A$ i. J% b
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
! Z' D) b/ W* K004032DC E8 AAC10200 call qsr.0042F48B% C9 k6 T6 w; j$ o" f' `% ~
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
7 e7 p+ G; h2 b004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX* s1 m: H/ I7 t) G; l% T5 U. N2 `4 V
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL& ]$ l7 z1 _( t
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
; j7 W1 o0 S3 b, C' w# \7 F- u( f' ~004032ED 8ACA mov cl,dl ; DL送CL7 z2 {2 F% d3 L O Z0 W
004032EF 3AD3 cmp dl,bl ; DL和BL比较- \( U3 ?, x* n5 U4 r8 t1 @
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
7 x5 U2 q' |, Z; z2 n- |, g004032F3 84C9 test cl,cl
- [) n) {0 k# M5 a0 w, L004032F5 74 16 je short qsr.0040330D. A+ l! M3 P3 i
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL- K7 A; [$ B# x' a" q8 i
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL0 C# w' ~5 J! B
004032FD 8ACA mov cl,dl+ \8 ~/ d6 q( q" M/ V5 m) W
004032FF 3AD3 cmp dl,bl ; DL和BL比较0 n- a6 G0 W. u) K. l
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）8 [# u* @6 N0 U
00403303 83C0 02 add eax,2 ; EAX加24 a9 A4 }! z* M* h
00403306 83C6 02 add esi,2 ; ESI加2
% O: L( Y% _2 x& W9 d2 ]% J00403309 84C9 test cl,cl
( |2 R& J" O; n0 P/ U5 m: Q: U0040330B ^ 75 DC jnz short qsr.004032E9
) x" s* \, k9 n0040330D 33C0 xor eax,eax5 \$ n4 \7 a7 ]- ^; D0 n; B
0040330F EB 05 jmp short qsr.00403316
" M" m1 v. _& b4 e p00403311 1BC0 sbb eax,eax
' a. S8 q6 M& H1 w* j" l00403313 83D8 FF sbb eax,-17 B/ _/ M' c; [4 V9 w0 k. b
00403316 85C0 test eax,eax
6 k4 D: f/ {0 f2 |1 n00403318 74 0E je short qsr.00403328
2 x% S, v4 W7 N" W9 S0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
8 E& G6 Z8 o1 ]3 M0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]0 S$ L/ G0 `+ n- e* O3 e M) _
00403323 E9 F0000000 jmp qsr.00403418
v; d/ ?' v3 j% x00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
9 ?& R0 @$ J3 N2 @' Q0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
0 U: ?& k. M- j7 n$ k00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
2 l) _5 i4 z( ~$ b( d00403333 50 push eax/ Z* k2 f' V) P8 \
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX0 C5 i/ ?1 I& f Y$ I. h7 L+ r
00403339 50 push eax2 ^& Q2 e0 g2 @! m2 S- q+ a
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
+ B' Z, m1 B: m& P$ D0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX l/ a6 U5 Z' n1 F2 }/ V0 o6 S' @7 \
00403343 83C4 04 add esp,4
0 A. @, N, i, `. Z- y6 N7 F00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI' W! l# }1 d) u# E
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
3 V4 Q5 C5 \3 Y x0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
6 u. O+ T( s D9 c0 `+ F- x0040334F 50 push eax0 g0 q- f! o" [$ n6 _* S
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
+ m, d0 x7 @" S# f00403355 50 push eax
7 S9 p6 f" B" l3 C0 k2 ~. W* L/ W00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
. Z) k$ W1 T* U; C0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
0 K4 V/ m: e" {) m8 W; q! j+ L0040335F 83C4 04 add esp,4
' L8 l1 {& J J+ C5 ?00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
: f h; p3 h9 z; w7 U* t5 R8 k [00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]6 S# j) m) a- C; M1 l" S/ |
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
- V3 b1 |" C$ E# t: _5 c0040336B 50 push eax
) V& A. `/ Q2 B1 ~; l6 o8 r0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
9 p, C) [ g8 z! T00403371 50 push eax
8 |( o# X2 {+ T2 O* S) M7 ]00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX/ }4 |$ K- U" q+ b
00403377 8BD8 mov ebx,eax ; EAX送EBX3 o7 |/ y: {0 k" G8 K4 @ d6 V
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX+ d$ N3 `4 e* G, V6 U' Z
0040337D 83C4 04 add esp,4
) |6 B- ^% @. m' v( G/ y00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
: z' S8 k! R2 ~+ ^; ]+ f00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]1 m* P% N B/ C- T {. @/ }+ D
00403387 50 push eax
/ o5 C9 ^- A1 C$ D4 i3 r( w00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX% }8 F* {0 I6 x' v1 A& {4 e
0040338D 50 push eax
+ S4 ~) q1 G0 D- f0 M \0 v0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
; R! D. i1 q" C# n9 f, M- C00403393 83C4 04 add esp,4
, b8 P" {6 H& S+ x- O" `1 {00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]. t- F9 m& x8 A( v5 L* }% p4 I
0040339A 8BE8 mov ebp,eax ; EAX送EBP5 S5 ?' A$ M5 {8 o8 j) q
0040339C 6A FF push -1
' |( {1 D. |. G7 f( p2 z0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
4 K4 F7 Q0 Q& }+ E004033A3 6A FF push -1
. H4 K- F( j4 h, x& e7 O004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
% l! h2 d, ?0 ?8 q+ T004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX+ l1 G# p: S( `$ l
004033AE 6A FF push -1" ~% l; P0 u! S/ K3 \: y! |
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
5 Y1 Y1 L' Q8 J& \. t- [004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX. N( v! @! y& P1 R. _
004033B9 6A FF push -18 {( g, D: b1 A! C
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
& b! K$ |% a2 ^' t004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX0 w6 @! G1 C3 o* g8 t1 @
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX& c* T; p5 [; n
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX; f$ V! U1 }0 p
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX4 A* E7 b7 e% S# j) s1 d
004033D7 D1E0 shl eax,1 ; EAX左移1位2 \& [2 h" L4 {3 j9 l" F
004033D9 99 cdq ; EAX扩展2 }# x0 ?# F! e. L: e# B
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中 L7 E" A. G8 E, N5 j; x
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
/ b" y5 @# W( w/ P004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）% a8 ]$ R+ R9 O0 a2 [& T& ^* G
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A5 w8 A+ s/ G( l `6 O/ g" j
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
; l6 O; D/ d! |9 ~6 n0 }004033E9 EB 2D jmp short qsr.00403418
& a9 {; ~% g. t" T" L# g, \' b004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
$ E* r+ C- S& Y004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
% V% y8 N4 @7 @! H0 v$ C8 X' E004033F7 99 cdq ; EBX扩展9 Q- E4 x" p0 G' B
004033F8 33C2 xor eax,edx ; EAX和EDX取异或' ^+ X% j% ?6 l: f0 J
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
& ^5 L P2 J- p$ x2 F004033FF 2BC2 sub eax,edx ; EAX减去EDX3 w$ G- L& B1 X! x
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C] s5 ]* }+ c. W; x+ Q9 |! n
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
1 {& w5 n* i1 z/ z00403409 99 cdq# M ^' o7 U1 b) R' w7 _6 e$ C
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
' `8 [! c: F- T6 F; t0 s0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX. T2 k+ C! v) [& w4 O( F( Y, c
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较# m5 w1 E2 v; ]( {
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）1 A1 o, t' ^% A: c d# {
00403418 E8 6EC00200 call qsr.0042F48B ;
?( Q' B9 n8 a) w: d3 ?0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( r) z7 h. |) L: ?* k
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
: _0 X- R/ f# ?& c' }0 Z00403426 E8 60C00200 call qsr.0042F48B1 B/ t4 Y/ j ~' O
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]9 n) _: U4 _; J' X( P4 Y1 l
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8/ k) M6 Y2 `: P. U2 f
00403434 E8 52C00200 call qsr.0042F48B) I4 t: ]% \6 W' ^3 _9 @
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
' _" |/ n K- c8 N: R5 C/ k0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
8 l% i" \# u/ O8 q4 `8 X00403442 E8 44C00200 call qsr.0042F48B
5 k4 Y9 j& ^9 q00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]# Z) s7 e$ E$ ?
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
# X* X. w! g9 R) _2 z9 R6 y00403450 E8 36C00200 call qsr.0042F48B
) k2 c1 p/ W5 C3 P. {5 B% W5 W00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]8 S9 u# m" H* x
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3 T% z7 M5 o8 ~! A: ]
0040345E E8 28C00200 call qsr.0042F48B5 D) C+ O3 Z1 t8 \& \- Y
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]: s& }6 U3 b/ o4 a$ x s; ?6 y
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2' l# z1 h" }, G- Z5 x) n0 V& z
0040346C E8 1AC00200 call qsr.0042F48B
/ V& t9 R8 q7 |9 T: `2 t00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20], v8 l1 g8 _8 _0 d
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
( n$ B8 `) l; H- D9 M0040347A E8 0CC00200 call qsr.0042F48B
0 s# V4 h3 V4 o- y0 e9 G2 I% w( d! E0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]8 D& G& @& x. U. t# o
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0! u% d+ S9 \% d5 x5 W
00403488 E8 FEBF0200 call qsr.0042F48B N3 N* A4 l/ e, {+ q7 G' N+ }
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]) N& {$ e7 n' m* p' e
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
- O' ?/ p/ _2 c! D9 x2 I" C3 q00403499 E8 EDBF0200 call qsr.0042F48B4 p8 p0 A3 m0 r5 A) G
0040349E 32C0 xor al,al ; AL清0
4 H2 t7 D4 H2 d' o; \9 r' f004034A0 E9 88000000 jmp qsr.0040352D9 ]) ?' Q( r' m7 m2 w
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
8 K- p! P/ v0 Z4 d004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; f! }5 X& Z2 b8 M9 X
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9$ J- [1 ^2 d1 m& T
004034B3 E8 D3BF0200 call qsr.0042F48B
' d& W. ]& S% X004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]' Y$ o7 ^6 {- D) H4 R
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8* Q# {* h8 s$ C
004034C1 E8 C5BF0200 call qsr.0042F48B
7 A5 d* d- C m: ?, R/ z! b004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
: |" p, A2 J* Q: z j2 O004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],77 x8 Q0 {+ s+ D/ }8 j
004034CF E8 B7BF0200 call qsr.0042F48B' z& B6 m" W( g
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]3 y4 k1 l/ R U9 Y b R, n
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
) @9 t9 S, r; e004034DD E8 A9BF0200 call qsr.0042F48B w1 B8 o" x. q7 f- q5 J n! [
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28] L/ ` M* w% r6 q# e6 M' u
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3/ c& s5 v4 W* x/ D8 `
004034EB E8 9BBF0200 call qsr.0042F48B: z2 T X% L) j4 m g( q4 i4 Q
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
5 H7 n0 Z0 a" p$ ~004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2: ~4 _3 U, d# _ B
004034F9 E8 8DBF0200 call qsr.0042F48B# `- s' }8 O h; A P& P% {/ d
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
k3 v( n' ?: Q3 }% l00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
/ U0 v& J5 N0 w( B6 z% ?0 t00403507 E8 7FBF0200 call qsr.0042F48B* H/ a0 `' [1 U8 W/ y9 K% o' Z: q
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]) G8 {6 z; Q1 [2 [
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0' Y' F& i) O- [/ X: D9 W
00403515 E8 71BF0200 call qsr.0042F48B& s8 C8 Q8 z- z3 Z+ [
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
" b# Z& [ N9 B: G- E" Y0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1- q- p7 z! B2 `
00403526 E8 60BF0200 call qsr.0042F48B
, C, I1 e9 e4 G0 J: O- }0040352B B0 01 mov al,1
% r! O. g) I+ Q( g( g0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]) e, c! t+ F" ~* c* d6 f6 t$ c. d
00403531 5F pop edi" ?) r: V1 U# K$ H4 ]
00403532 5E pop esi
7 [) l# D) p4 u00403533 5D pop ebp4 x0 U3 f: R$ |# y" ?
00403534 5B pop ebx! @& W% q6 z" X8 N9 k6 t
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
' G9 O. I) ~/ e8 H. M0040353C 83C4 30 add esp,309 M; Q7 W6 }- {$ P$ O; Z1 B$ n
0040353F C2 0800 retn 8
" G w. K( y/ B- {* Y--------------------------------------------------------------------------------
) P" E! S" }: b4 j0 ]' u【破解总结】
! W& Z! B7 R% E9 [ 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^: Z. o8 @+ C: o- u* h2 p4 v
用户名：yijun
( K1 T- P P4 q* C注册码：4893*7777*3726*7777*0529
2 `4 Q$ H2 K. Q' V+ w% \0 \--------------------------------------------------------------------------------7 n: X4 ?" v8 ^( E) W) b
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡