|
|
|
【原创】破解Quick Screen Recorder, {: c" q: W( Z2 V6 F
【破解作者】 yijun
4 b. X# F3 d% A% W; @3 ]- |) z【作者邮箱】 [email protected]
- ?- J) q8 N" L- R* X8 I- ^2 K3 [【使用工具】 OD,PEID: m) _ R! y5 L! C2 C3 b" @2 W+ T
【破解平台】 WinXP
H8 I3 x6 l, y* B$ O3 ?0 ?% h' x【软件名称】 Quick Screen Recorder/ }7 p7 @0 P9 M$ K8 e5 U; H
【下载地址】 天空+ T& u8 [ |0 X1 R) L# U$ w
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
2 W8 \7 x0 E2 g! k【软件大小】 540K' X* M# B* E4 O0 l5 Q
【加壳方式】 无
% l/ V9 N2 N! m d7 ?% F【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）7 _7 z7 L1 |- ~, C/ q9 D! f# u" _/ O
--------------------------------------------------------------------------------; @3 c% C! \8 u! Z- S3 P
【破解内容】+ ?- R7 e4 t( M3 o7 ~& [' t# ^! h
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
) |0 S8 Y8 W' Y" P; s& i% ^00404C69 55 push ebp //在此下断. w: K* g2 X5 F* d' X2 t# {
00404C6A 56 push esi6 N# s* i+ X" A/ ^1 v- N: `
00404C6B 57 push edi
6 _' ]% C5 n. g6 m& m- Y' G00404C6C 8BE9 mov ebp,ecx
" a! y! p- x- B; [00404C6E 6A 01 push 1
( T" R& y. ?3 q( \6 ?& o f00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名- N0 J( \' T" T# [- j8 q& i
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
3 w2 F! G- q% {3 j/ H. K. O* V8 N00404C78 8BCF mov ecx,edi% }5 \: d* Z' t& V6 j1 R1 {8 H
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码* L& d% k0 s% z/ m0 y
00404C7F 8BCF mov ecx,edi% g' I) V) l5 M+ p" \" E. P7 O4 h
00404C81 E8 A73E0200 call qsr.00428B2D
- h" E8 K( M) ^8 b00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64], \/ Y' f0 f' P/ m
00404C89 8BCE mov ecx,esi
3 }9 B( H9 U% v: l- F3 [, {5 V00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
0 d/ S% `' P; Q3 L3 ]7 o00404C90 8BCE mov ecx,esi6 S6 F0 p" q/ s) V
00404C92 E8 963E0200 call qsr.00428B2D: z" r9 _9 f8 H1 O* x- Y Q' e
00404C97 8B06 mov eax,dword ptr ds:[esi]
% ]1 [9 G' v+ y- d. G+ E00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
! x$ f2 H7 Y4 A1 u. @00404C9D 7D 26 jge short qsr.00404CC5$ g, M# A- r) X
00404C9F 6A 40 push 40 R- \0 d1 \) ~0 y& V V" R; e
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"7 [$ @" @8 l% W: c7 q) H
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
: R1 Q( W; Q9 u1 y00404CAB 8BCD mov ecx,ebp. {) ?0 n0 N' Z/ {' ^0 Y6 N1 J) j& S
00404CAD E8 C3840200 call qsr.0042D1757 I9 b2 ?9 [' T3 H* K
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
4 r; c' x3 h2 M: M6 i3 z! U4 R00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
! d& L; j1 b( }, l4 w5 f00404CBD 5F pop edi3 D" x+ ?9 F. G B
00404CBE 5E pop esi5 C6 A) u% M+ o0 y: a8 f' V
00404CBF 5D pop ebp+ A- V( n% w/ Y( D: e1 c9 f8 g
00404CC0 5B pop ebx
/ |/ T }$ j" j% e' ]00404CC1 83C4 18 add esp,18) P6 x( l1 W" T. U# Q2 t+ V
00404CC4 C3 retn, c% o- I# A8 {
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
; }1 x2 D/ i+ U5 X& H7 p* x00404CC8 84C0 test al,al
2 l& t3 q0 v' G2 t00404CCA 0F85 1C010000 jnz qsr.00404DEC
$ M: r( c7 i* V: S D& m, X% K00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]5 u4 P N: a ^% g& A( W" Z
00404CD4 E8 87E3FFFF call qsr.00403060' _" G3 e" s' Y5 D
00404CD9 51 push ecx
% `7 u# F& a! D+ |9 x00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
' H6 W" K" }: }00404CE2 8BCC mov ecx,esp
' s. n, t1 }; ^' @; z' h00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
; w7 ^1 z0 p7 L. g# j00404CE8 56 push esi, @4 e: T5 a( J( I1 c$ d: U: A
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
5 \8 Q( _( }& I4 l00404CEE 51 push ecx% j( M% X0 ?8 X4 m% a2 o) E
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],14 h! S* \+ ]# M+ F' F+ f/ r: @
00404CF4 8BCC mov ecx,esp2 m& `" o z$ [6 R
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
( z! C5 |$ B& P; @6 U00404CFA 57 push edi
! t! k1 [4 ?! q( U* r4 i1 A6 w00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是06 b D# J2 ^( M2 s
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) R1 C% _* J2 E) @00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
& X: [. R# P$ r( g4 N: z) X+ i00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
7 H: w Q8 |2 y7 a ]00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
R/ L1 q: u, z# H00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
# S, X+ N+ S' n d" G* D00404D12 6A 40 push 400 A; [2 P" r& z7 n: [
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"5 l9 s0 J2 ?0 A2 q, S8 p
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
0 }4 r4 W j' H* o00404D1E 8BCD mov ecx,ebp
6 }0 o5 v% J+ {( M8 G) @! ?) g00404D20 E8 50840200 call qsr.0042D175
9 w% M& S9 [" Z% R) e5 L: ]00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]1 D6 O' B1 w5 i6 C& m
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-13 o5 Y* s. w; ~0 J* A# G$ F* m* Z0 w+ B
00404D31 E8 5AE3FFFF call qsr.004030902 C0 @, H' q: _4 s$ k9 E: E
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
3 p3 ` i* z9 E. `0 P2 W00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx* l/ o' ?' w6 a; r
00404D41 5F pop edi/ Y$ K7 j! l) s3 \6 V& n1 \
00404D42 5E pop esi0 U8 J; x1 a( Y1 T/ F/ A; L
00404D43 5D pop ebp& G/ }7 y' i9 h5 g$ M
00404D44 5B pop ebx
- c, D+ j. u; G- ^1 A7 A00404D45 83C4 18 add esp,18
- A) b$ b# }* h00404D48 C3 retn4 u; n) J9 f: H; m8 Z& b; F. z- r! D
*********************************************************************************************************************************************************
( s# F& A9 J/ g) i# Y' b; L' g跟进00404D09处CALL来到：
1 x0 f& ^4 H6 H" K. [' n004030A0 6A FF push -1 //一路F8下去~~~~
, U; d& y5 }- N4 I* [- w2 Q+ l004030A2 68 C88F4400 push qsr.00448FC8
4 _; V' m Q( I9 k6 o' Z* B' V9 _004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]! K- ]. h, D- I
004030AD 50 push eax0 o9 w7 C& `3 k7 {( u
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp7 I6 H" H p( v4 Q( m
004030B5 83EC 24 sub esp,24) d% r! t$ i5 M2 H) I
004030B8 53 push ebx
5 D- f9 K6 t/ t) M+ E( U9 |004030B9 55 push ebp
& V V! z9 l: U" h8 Q9 x* R0 u004030BA 56 push esi& b, T9 ?4 r8 U
004030BB 57 push edi" U7 ~/ i& G% T. F E. G
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
& x" k& [5 v( Z004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
1 U# [% s+ D. K# x004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
0 d) m! p+ I5 Y004030CD E8 27C40200 call qsr.0042F4F9+ q, L4 [6 a1 B7 [( V
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438] T9 O) N. Y( z7 \: Q/ U5 x
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax" e9 X. Z& v1 D( X' p+ n
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
. B, w6 W' M& @( f/ X3 J& T004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3) M2 f+ p$ d" Q
004030E4 E8 905A0200 call qsr.00428B79
& ^) I- J2 Z: v: F3 F4 h004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]' b% S+ K+ h& ~0 c% k
004030ED E8 3B5A0200 call qsr.00428B2D+ p8 q6 [% X( H2 H! j+ h
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
( B' k) i& o. ?! Y8 j- Q4 {004030F6 E8 7E5A0200 call qsr.00428B79
/ p: O/ m ~4 P& e; V+ T, @: Q# {004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]) U a6 [1 {! _& i
004030FF E8 295A0200 call qsr.00428B2D' g" P2 h/ B) h9 m" m
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
. L9 r2 N, b' J" e00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]. i1 b3 u/ D" v0 S4 s
0040310B 83F8 02 cmp eax,2
: M. t* M! e. ^" v% S0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳* }- T2 T4 n/ i6 E& x; p7 A
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]( x0 O, u; q( M" j; V/ C3 y5 Z
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18" M- S6 C) u9 L# O
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
$ N, B. a8 S: c3 i) L2 r5 {- {7 u; R00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]/ ~5 n! p6 F+ c
00403126 6A 01 push 1
0 b/ f/ [9 j' n! `6 }( K# g# b: `1 i00403128 50 push eax/ f" A) d" k' u4 }
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
7 j. j, N9 \7 ` I0040312D E8 C4550200 call qsr.004286F62 S" E* j) z1 T$ b8 Q
00403132 8B00 mov eax,dword ptr ds:[eax]
6 |6 V* D3 i9 Z" u% e& \00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
' r3 V" _* d4 `$ K ]6 P- H( m0 x00403138 50 push eax
* `7 ~0 W3 A: ~9 l" A00403139 C64424 40 04 mov byte ptr ss:[esp+40],42 c3 |& Y8 P5 h5 {; u2 y" O
0040313E E8 4D560200 call qsr.004287903 `2 i8 F* R+ R! L- o, |. Y
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
" G' A/ f7 E9 O1 h% b00403147 8BF0 mov esi,eax& h$ s: y- {- H
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
7 ^: }1 f0 O: e) m" E0040314E E8 38C30200 call qsr.0042F48B/ g1 n0 G, F9 M2 H
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
% Q n3 o/ W4 {8 y( r$ O3 r, X00403156 B9 3E000000 mov ecx,3E
$ ]; o1 c3 A& x7 [0040315B 99 cdq
$ o% y* `9 I' v3 v. ?0 v0040315C F7F9 idiv ecx- F2 W9 x& Q* V* z7 T# C+ ]1 `
0040315E 6A 01 push 1
: u' u1 d* V$ L: E$ j. }: x- `& S00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]! r1 g. c9 p( H0 z+ m7 }
00403164 8BF2 mov esi,edx
- `. g, R% X& ?* l+ v00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]4 ]3 T9 ^+ W( N9 K9 s2 P- z" i/ ~
0040316A 52 push edx
% C" w' ?2 \/ Q+ i$ B) k6 O* b0040316B E8 0A550200 call qsr.0042867A6 o8 a, ]1 l% b) n! J# o8 P
00403170 8B00 mov eax,dword ptr ds:[eax]$ T6 J* I+ }6 z; e+ q( W
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
+ [4 z& u, X+ a% `; u2 H00403176 50 push eax* |- Q* Y& r- h {, K
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5) n m) l# \7 l0 h+ R
0040317C E8 0F560200 call qsr.004287901 _# B3 N* r/ O3 ?; j1 W& h
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ P7 L; G: G1 _5 {( Y \00403185 8BF8 mov edi,eax5 M6 _; c- H' {* e
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],31 w/ a) K$ { ^4 W. W6 S
0040318C E8 FAC20200 call qsr.0042F48B
. y: |# i$ L" [& x h& W) ~00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
# A% `0 j" l4 A2 n- p0 _00403194 B9 3E000000 mov ecx,3E
! L3 B8 r, J y; W0 g# L00403199 99 cdq. Y, l& Q; @' K9 P* }7 \8 I3 r5 R9 p
0040319A F7F9 idiv ecx! A2 l4 f" v/ {) s3 `
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]+ M: G3 `( i5 o& [
004031A1 894424 28 mov dword ptr ss:[esp+28],eax- r1 p! e$ u8 x/ p
004031A5 8BCA mov ecx,edx- s5 @' r* t, A4 ]+ |
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
$ N. o+ `; _1 y* c' R. M7 J# P" b# O5 @004031AB 894424 1C mov dword ptr ss:[esp+1C],eax% ^* ^# c# A/ x
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
( s, H" u; s, s004031B3 894424 14 mov dword ptr ss:[esp+14],eax
" o9 Q7 e; I5 J" A8 w004031B7 894424 10 mov dword ptr ss:[esp+10],eax
6 c* x9 M( n- v" T$ F4 n004031BB 8BC1 mov eax,ecx/ S# X" Q; h: e; l
004031BD BF 0A000000 mov edi,0A4 Q# J5 I4 L9 f) v
004031C2 99 cdq
* p; T) ^, ~% h8 C1 G# G7 a5 p004031C3 F7FF idiv edi b( K. Q6 A. g/ [! ~
004031C5 8BC1 mov eax,ecx
9 \* Y* x- A* ~! a004031C7 B3 0B mov bl,0B6 ]5 ^' r- E C9 {5 L0 `
004031C9 0FAFC1 imul eax,ecx
5 q, X5 h9 A5 ~004031CC 8BCF mov ecx,edi1 C6 ?* c6 O5 ^ F6 h7 A. F8 Q
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
; f' g& u& y9 D004031D2 52 push edx$ v0 @; X' \+ ]% E3 T. T
004031D3 99 cdq9 M% K; z& U5 H
004031D4 F7F9 idiv ecx: H8 C5 I e' ~- O
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
. v, I, c+ q+ I9 q; B004031DD 2BC6 sub eax,esi1 x. e# o) |4 C1 H- V w# R
004031DF 52 push edx
' g6 _$ z, }+ s- ~8 f2 S; d& }004031E0 99 cdq3 T0 \/ j8 @- w5 z
004031E1 F7F9 idiv ecx
. s- X# g* S6 `) j# g004031E3 8BC6 mov eax,esi8 _; q! U; k+ a9 F* g' Z
004031E5 52 push edx
5 h- U' T0 m( G& J% h% x004031E6 99 cdq
3 T; Y3 g" k+ Z3 C( B# j7 i3 a. b004031E7 F7F9 idiv ecx
G# W8 d6 C9 Q0 y. w004031E9 52 push edx
7 D# u1 G( {( S) i& `2 v004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]3 k# r# y2 r9 o, N
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"( r- T9 J: d) r) k0 w- q( \
004031F3 52 push edx2 {+ z S9 v* i1 y# E/ t
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
& d2 J! t0 C4 C2 {004031F9 83C4 18 add esp,18
$ \0 d7 Z7 K, e& L! _004031FC 6A 04 push 4* x, U8 J. d1 b- U* z$ X
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
8 I/ k, \/ U2 \+ Y: p7 R, L00403202 6A 00 push 0: g3 d) r5 a0 ]1 S
00403204 50 push eax
0 D0 p# u, Q* ^00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 F/ P" i/ U6 l! D8 \
00403209 E8 D6530200 call qsr.004285E4
3 K2 a, u% Q* Y$ K: Q' F3 N/ Q0040320E 50 push eax
7 H* x9 Q9 K# J" B! ]8 }0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]# u: b8 M7 j; q7 L
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C. {" s$ p0 ^/ A6 `/ B* g
00403218 E8 A7C30200 call qsr.0042F5C4
# E2 q" [7 z, p8 U5 Q0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) s4 P+ O6 T1 e) j& K& Q) H! N
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl8 c, \* {* P% V2 a8 s
00403225 E8 61C20200 call qsr.0042F48B
7 k) n0 W' I+ B: @8 u; {0040322A 6A 04 push 4
S s4 O% ^. }0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
$ ?' M" k5 ~( \" g00403230 6A 05 push 5
6 l! F1 b7 W/ m00403232 51 push ecx0 o9 Z" [) r3 R/ I" `* t
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]% z% [* g! o% q c- e
00403237 E8 A8530200 call qsr.004285E4
/ t+ |7 x6 ^8 X/ r+ ~1 x8 ^0040323C 50 push eax; D( q& B) i& {) b8 p5 r
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
( q1 n; d& ?1 d00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
, |0 h- b- g8 ] x9 }* d" @00403246 E8 79C30200 call qsr.0042F5C4: @9 {5 H) |0 \4 @3 o
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]3 M, `) a( y: E
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
" H' r# g8 G5 T' R( U Q) E00403253 E8 33C20200 call qsr.0042F48B
$ d0 S' Q+ ]" s, f+ @0 S00403258 6A 04 push 4
$ E7 ~/ r) u6 a7 ^8 Q+ X' a0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]& j6 y! z4 \* f: y$ {# [1 |- \
0040325E 57 push edi
. V/ { M! \2 r" w0040325F 52 push edx, W! m0 T- J) t$ w* q6 D
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" ~7 z6 |3 I, Q% o- A00403264 E8 7B530200 call qsr.004285E45 R( W# K3 n" x" V0 p
00403269 50 push eax
$ ?8 f4 s6 y7 m4 i0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
2 I& p; ?2 D3 f, K/ m8 R; I1 e0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E; y4 e* t* Y( k8 x" r
00403273 E8 4CC30200 call qsr.0042F5C4
5 Q4 W# v+ [& u: T( |" B9 B00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' g# ? T+ h% h& c3 |; D0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl* u8 S5 N5 G& q2 Z" s4 u8 U
00403280 E8 06C20200 call qsr.0042F48B9 i) p4 @1 p+ x/ ~
00403285 6A 04 push 45 u0 X% {6 F) K5 G+ {
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]8 k" q/ R% z8 F, h1 U! F
0040328B 6A 0F push 0F3 A7 `$ Z' N# O5 R
0040328D 50 push eax
$ G3 Z9 d2 x1 H2 F, d. ^0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
' }9 i3 ~$ E/ f% g! B" O/ Z+ y00403292 E8 4D530200 call qsr.004285E4) _* Z P/ Z5 G9 u6 y6 T
00403297 50 push eax
. D# ]7 I% l& t! Z& l4 x00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
0 X# E8 f8 S, b$ m0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
1 Q$ G2 _9 M; Y2 N/ y004032A1 E8 1EC30200 call qsr.0042F5C4
8 m. f! N+ L( X: r- m+ Z; b7 @" A0 u1 J004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
; @; C+ u9 Y& c& _8 T004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
0 m ~: y G* A- g+ D. N+ L004032AE E8 D8C10200 call qsr.0042F48B7 r) _& X9 O% X1 f6 P! B
004032B3 6A 04 push 4
8 A/ E ]' u P4 v004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34], e7 D8 h8 L8 T4 D
004032B9 6A 14 push 145 z |) S) _- S- a! e1 L
004032BB 51 push ecx$ p- F" n' p! ?# R8 @) K
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
$ }0 _' w% A, ]: ^; u# e6 k( W004032C0 E8 1F530200 call qsr.004285E49 B4 V2 M+ x6 z% q8 T6 ~. K( j& |
004032C5 50 push eax
" z; ]9 e, b% w9 g; q5 r004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 N- d/ c" l, e6 Z004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
, b; ~% [1 e. t$ m5 m- B004032CF E8 F0C20200 call qsr.0042F5C4) |! f- \' f. ~5 w8 P) A
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]1 c8 u1 N$ q0 |# G" H& q
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
5 ^& W. x6 h/ f( ]$ ~" H004032DC E8 AAC10200 call qsr.0042F48B
3 G$ d2 C! N3 m! C% O004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI# b5 t K! j" ?3 V
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX- A+ t) g, s: ^0 b" l; o: ~
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL2 g- k# b+ Q$ D6 A% c' m
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL* q5 h! W& P' {6 ^( ~! Z0 W9 P
004032ED 8ACA mov cl,dl ; DL送CL/ S+ k+ `6 R, o8 T% r+ s
004032EF 3AD3 cmp dl,bl ; DL和BL比较! l+ x9 ~3 z/ q0 n
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）. j- }3 H3 E/ j v2 w8 f/ s) O
004032F3 84C9 test cl,cl
' t9 g2 Q! Y: X7 d004032F5 74 16 je short qsr.0040330D
: {* w# _( N9 Q3 T6 e004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL6 Z0 a* l, a; _! T5 f' P* [" x
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL" G3 D. \! I1 l2 a' s
004032FD 8ACA mov cl,dl
" R6 ?1 y. s$ I+ q7 L004032FF 3AD3 cmp dl,bl ; DL和BL比较
! N8 V$ H/ w2 O- h3 U5 d" |& A00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
7 S( `' @/ y9 |* K8 }/ y00403303 83C0 02 add eax,2 ; EAX加25 ~# o: d' G! D& m# v+ r' I5 _2 N# W
00403306 83C6 02 add esi,2 ; ESI加2
; ], Z0 z1 R& G& A! z7 H5 d2 y2 w00403309 84C9 test cl,cl! w% m* J. m! H4 T; p1 q$ b- f
0040330B ^ 75 DC jnz short qsr.004032E9
* l* e- _6 G5 l# X& W% b1 f0040330D 33C0 xor eax,eax; v5 ~' z8 a$ l6 g% [
0040330F EB 05 jmp short qsr.00403316
. @, |/ Y/ f g; x9 n e L& A00403311 1BC0 sbb eax,eax
# P2 Z4 q: F: F& I+ D7 L00403313 83D8 FF sbb eax,-1* ]* q6 }. G( T. h( t$ m( L1 i
00403316 85C0 test eax,eax
3 t2 I6 C3 C8 {00403318 74 0E je short qsr.00403328
$ T# @( t% v) {; M2 n4 }* K6 ^- I0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A* ^# Y0 O& _: t o
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]/ _# M& n/ E5 t T( D' ~
00403323 E9 F0000000 jmp qsr.00403418- m: N0 D, l: [1 H# v" ?
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX' y6 P- C0 K* P0 g
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
! ?7 C5 w" E& H$ L00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
2 ~' J( c9 u* f9 J00403333 50 push eax
! r7 q3 R9 M3 s3 i00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX7 x0 ]2 q& q6 M1 ~+ |" S/ j
00403339 50 push eax$ X& n1 v( s4 h, @( O/ F$ P3 I$ x
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
, b5 W0 V. p" O6 L G0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX3 |0 l3 B- O5 X" @* p. _
00403343 83C4 04 add esp,4
) A* l6 m% I& y) Q, B$ h00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
# V) z6 M- i1 z& e00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]4 g# w3 X3 _, J2 ?
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]- g2 ?! N2 L$ q
0040334F 50 push eax4 p7 N4 @1 [ Q
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX+ G6 a, ^, o) T: r+ g
00403355 50 push eax
7 f/ j; w" Q& G& z00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX* Y1 f5 f+ k; N* X! }: N( \
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX9 |( ]2 M3 O: W
0040335F 83C4 04 add esp,4( K1 A4 g5 ?$ B: s [) q
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI( q: J( J# P# M y) s% c* u
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
; W, Q6 W& q u- L5 p1 B4 P% E00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]% e8 I; ?# ?1 {
0040336B 50 push eax \6 g0 e9 @2 ]+ c4 a1 K1 A# M
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX* `9 X% D' R0 `: ?
00403371 50 push eax; P5 s. `+ m3 h
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX/ m8 y) f1 e D. S% U
00403377 8BD8 mov ebx,eax ; EAX送EBX
' ~( q. L; Y8 |6 d/ `00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX; O+ Z. ^* k0 s
0040337D 83C4 04 add esp,4
+ k# {! v3 g5 v- W00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]5 k# I; n& Q5 \
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]4 u% m/ _' j0 r3 p# a& ^6 z4 ^
00403387 50 push eax
& U( R: M4 J% d* d' @5 x00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
3 r4 d. P! o/ w1 Y0040338D 50 push eax
- |- \7 G" a% W$ @4 ~0 E f0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
& `) e5 ?( @/ _1 u9 |. L2 @- c00403393 83C4 04 add esp,4
8 W) @2 h! W: R9 ]: q! A00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]& D" X1 \+ I; u5 w. Y1 y
0040339A 8BE8 mov ebp,eax ; EAX送EBP
5 U6 _4 Z3 M# b) \7 w2 K* D+ p0040339C 6A FF push -1
7 W+ |# G G/ C7 c0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
" R% ?$ u5 ]" d# b004033A3 6A FF push -15 m0 e) q8 Y, |* u L! G2 n5 f$ \- k
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
% C! b/ E- z( R$ q v2 n004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
! o. s8 y4 a, Y. a% V' [* ~1 q004033AE 6A FF push -1
. D/ `0 A& w, B1 v8 X4 }004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
. }) F4 I0 k; l U8 O+ m$ q; \' E2 D004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
! w( [/ i$ L& k8 y# p/ R004033B9 6A FF push -1
& H0 p% |7 [* o; _, D0 o004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
/ @# B7 m F/ K6 l; _. R' k004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
6 v5 G' x& B" P" g004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
/ m+ I! X) F$ ]. w- K0 v- N( D004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
0 c+ g9 T" t! h/ A5 i004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX1 h; z; Q* G4 @! w/ L' i6 ?
004033D7 D1E0 shl eax,1 ; EAX左移1位) T6 U9 X7 {5 O ^$ H' T
004033D9 99 cdq ; EAX扩展
; l0 J2 j/ T ~& Z9 a- `4 i004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中* z7 G2 f2 n$ v
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
' d2 k2 i$ [! L* M004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）' V1 [/ D/ N8 G- A9 Q5 F
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
* {& C: ^" K+ `7 c6 L004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]0 s9 }2 T9 H+ @2 X, n4 x& t0 l
004033E9 EB 2D jmp short qsr.004034186 D# r: }" t* \# S" C' m0 h5 _
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
- }( X) t% A7 f9 q% `004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
5 Z9 l% N/ Z2 T; }7 r. G) F004033F7 99 cdq ; EBX扩展
) V! r9 v; L: Y5 W7 d+ m004033F8 33C2 xor eax,edx ; EAX和EDX取异或
) q0 P4 f" T2 ~' z1 ^6 t& d004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX2 a2 Z5 Q5 F6 a4 E Z- ?
004033FF 2BC2 sub eax,edx ; EAX减去EDX( {" N4 t* p% z @( O* b. ~
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]# {' @8 R& H9 w! ^9 J
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
& B1 L8 E/ Q" L" `8 z) d00403409 99 cdq
5 z' M" i- n H; C+ u( T0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中: U, A9 z- Y* m% Q! S1 s: y1 k6 @
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
6 K8 ^# C5 O! S( [5 l8 U00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较' L8 Z1 K5 o) x6 g
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
; J. z+ O e7 Q/ C00403418 E8 6EC00200 call qsr.0042F48B ;
( g7 d1 s! j( B: d3 v1 a( ]& g8 l1 m0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
1 I# x% ?6 Q, C% S2 n8 R00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
, W! N6 W" T; ]/ Z00403426 E8 60C00200 call qsr.0042F48B
9 v2 E! V& r* G5 o6 R5 E9 }0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
1 x) Y% d# P- o, c8 \5 a# L! ^9 z0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
+ b2 g8 P G) @4 [6 f3 x( @00403434 E8 52C00200 call qsr.0042F48B) u7 C- m c" ?& [$ G0 }( Q
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ]4 I9 |1 P; |; ]
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
; r. ^, p6 @5 ~& Z00403442 E8 44C00200 call qsr.0042F48B; f" L3 U# D- p( _* D) B
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
6 \) }; x+ U% g0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6; @- _% A( e4 Q x' l
00403450 E8 36C00200 call qsr.0042F48B
/ Y* i q& l- z00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28], A) C( R. y/ M/ S" D2 \
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
) ]9 r0 Z" w" e" ?* \1 B: d+ j0040345E E8 28C00200 call qsr.0042F48B' b& x, S% I, Y' \5 ~0 L |
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
" _; J4 ^8 Y% Z00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
# ^# ^$ Y I) {+ d9 Z0040346C E8 1AC00200 call qsr.0042F48B+ O4 Z. B; a( `6 y) L
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 {) H2 Y* r7 Y00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
0 S! b- l4 N. N; t9 I0040347A E8 0CC00200 call qsr.0042F48B" @8 W/ c) Y' o" D$ U- h: D
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* Y) R8 ]8 C& `+ D3 {4 ?00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
0 |, I$ T! ^$ V d) q4 z; U- c00403488 E8 FEBF0200 call qsr.0042F48B, Y. I$ m- v3 J8 V8 O4 y
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]; a: A0 W# {- N# `3 x. k9 S
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1* ^* ~5 h! p* W6 z5 I. K
00403499 E8 EDBF0200 call qsr.0042F48B! A" D$ h3 j0 p; k
0040349E 32C0 xor al,al ; AL清0
$ M1 H! Z) l F4 B- @$ j# Y004034A0 E9 88000000 jmp qsr.0040352D1 H# O: }) ?) G4 K# B9 I& K, f8 h
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~! |$ v, d* p6 f1 A5 j
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
% B0 N+ X7 ], G2 V! |( m2 C004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],93 }+ D; @' d: n* [ ^0 C
004034B3 E8 D3BF0200 call qsr.0042F48B9 g/ v0 n3 X$ f: t9 z
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
4 ]. f7 ?% a0 V. R! @4 o. E004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8; z# |; [2 v: A' B, z5 H
004034C1 E8 C5BF0200 call qsr.0042F48B
7 q6 b4 \5 I1 x5 }; A# ]7 s$ @004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
$ Z/ x# T4 w9 ~: p; }* O- K5 ^7 }004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7% [) V# W5 S, \
004034CF E8 B7BF0200 call qsr.0042F48B
3 G0 l* X* }* B2 v( c' c004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]/ @9 p7 \& Y: M C* V$ S
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
0 }/ O3 l: K. S, x" U6 c004034DD E8 A9BF0200 call qsr.0042F48B6 X, E9 B: R/ K' E( e" X
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
1 n: H1 V# O# t5 z L" ?& ?004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3- U7 R% U" Y7 R
004034EB E8 9BBF0200 call qsr.0042F48B
$ n E/ _; w1 J1 A004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
' W9 }/ H) e/ k1 ?5 D) M004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],22 O" Y4 [8 \9 p) C+ I* R
004034F9 E8 8DBF0200 call qsr.0042F48B/ f+ _/ x$ z- I1 W
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
& `( A3 V, ^% O. }+ o00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
; ~3 V. r9 ?6 A# S& p00403507 E8 7FBF0200 call qsr.0042F48B
! T- e5 {9 [+ c7 x0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
( o' N/ B4 q* q- d) Y+ g00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0. Z; K7 `7 x% x5 y
00403515 E8 71BF0200 call qsr.0042F48B) y: X3 z7 Q' m
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
4 U$ c4 G8 |) X$ d* o, c9 y2 @0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1/ C1 r) z- h8 h) E6 k
00403526 E8 60BF0200 call qsr.0042F48B9 o5 Y; x7 j/ k4 P* z X
0040352B B0 01 mov al,1
' j" m5 a! L, ]2 i0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
@3 c5 v8 {: |( C: ]: o00403531 5F pop edi4 w2 T3 |# t- ^6 g
00403532 5E pop esi/ x J# k3 f" J V
00403533 5D pop ebp
" ]0 F, k$ H1 L) q( m& A6 R00403534 5B pop ebx
. U! r8 O3 ~: M) t0 y$ j' O00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
0 `4 A, |1 ^$ Y/ Z+ u0 A9 k0040353C 83C4 30 add esp,30( J% i8 e% W# f5 `/ }. n
0040353F C2 0800 retn 89 z" r. F& ~) @# d
--------------------------------------------------------------------------------* G: C/ A( r# t, y0 H
【破解总结】" ~: W3 g6 P. ?$ U% q. ~9 W! W4 P% q
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^% C p `! v+ d- h1 F
用户名：yijun
" D. P0 A2 C& W$ x注册码：4893*7777*3726*7777*0529
X3 J- ]; p4 E5 Y" g7 P--------------------------------------------------------------------------------/ N, Q+ H8 {9 I
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡