|
|
|
【原创】破解Quick Screen Recorder
$ m/ H4 d/ R) [/ Q' @; e: K【破解作者】 yijun
" e! D+ d# F" k% ~【作者邮箱】 [email protected]
+ E2 q4 k& d# x/ p: f" z【使用工具】 OD,PEID
$ ?5 ^4 H3 U5 k4 F1 n* w/ p# w m【破解平台】 WinXP9 a* C9 C' b: I) {: `4 ]' Y. d
【软件名称】 Quick Screen Recorder
# f; x: s/ a* C0 t' ^0 `. k【下载地址】 天空
* Y0 k9 H9 S' {, P) V【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
1 e9 O. t/ j. B3 N【软件大小】 540K
) U3 e% K, v) ~4 n+ U; r7 \& v2 [【加壳方式】 无4 t5 ?; C1 s Y- `* a- E
【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
9 f1 B! X9 o! [. s' d--------------------------------------------------------------------------------! J x- `9 _8 U, [
【破解内容】( i/ i( g8 y9 c2 L1 v
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
/ i a2 N% [+ k+ s00404C69 55 push ebp //在此下断! ` h5 T2 Y( t* q
00404C6A 56 push esi @" C: ~4 E- V3 G1 C$ S# y- K
00404C6B 57 push edi; Q' ~3 J$ Z% |$ Y% w# T4 e% t1 t0 r0 ^
00404C6C 8BE9 mov ebp,ecx: [4 I# m0 n2 i) S# D4 f* W
00404C6E 6A 01 push 1
4 x& y% h% x, E9 \2 [: r& S: B7 I0 R$ f00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
% K# C: s) ]3 E" t00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60], t7 [2 r# U) E% X' T; s
00404C78 8BCF mov ecx,edi8 m6 U9 Z o8 d$ n4 ]
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码+ P; r; f7 E$ ?3 v$ u
00404C7F 8BCF mov ecx,edi
2 y; e; y* G5 l0 D9 t4 R00404C81 E8 A73E0200 call qsr.00428B2D* Q: t3 E) x- x% O1 O
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]5 z2 Q/ Y: V3 x5 }- ^
00404C89 8BCE mov ecx,esi
* o y Y/ [( H& u* G00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX( u$ L) D9 z$ P( t
00404C90 8BCE mov ecx,esi
$ l7 n4 f- |* R$ C00404C92 E8 963E0200 call qsr.00428B2D% c V3 X2 I2 _& w0 E
00404C97 8B06 mov eax,dword ptr ds:[esi]8 f1 a7 e7 b8 W i; T) m1 O7 w( S
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
3 q4 h: D3 J2 Q0 B% M; ~" r2 a/ ^& k00404C9D 7D 26 jge short qsr.00404CC5
" r& P; t. Y; ~. m- Z. ?00404C9F 6A 40 push 40$ S, C$ s+ {) ^( F+ ]. \5 [
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"% p! b7 x) S% G2 D& D, @% [
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
( `$ |" w' M2 V* W3 i00404CAB 8BCD mov ecx,ebp$ u" Y! T0 j& ~# c
00404CAD E8 C3840200 call qsr.0042D175
$ b# T$ h) |0 W: z& b/ w. k- H00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
; b* }) Z+ d% z9 I' g5 T00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx p7 O7 v, N8 E' y; K* F, K
00404CBD 5F pop edi* `( q% N8 Z7 n9 s" w
00404CBE 5E pop esi4 `% s. y! y+ V* i0 J1 ?' o
00404CBF 5D pop ebp
9 y7 u/ {: H8 Z2 g( x; S+ c00404CC0 5B pop ebx
8 s" }: O8 m* x' e8 m$ `7 D" `" L00404CC1 83C4 18 add esp,18. Z4 ~' l) y3 D2 g* |6 V! h/ O
00404CC4 C3 retn% _! B8 L% f/ `( k% K
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]- ]& l' N2 j3 Q: V0 `2 B
00404CC8 84C0 test al,al4 o8 K* Y6 z, Q+ e0 X
00404CCA 0F85 1C010000 jnz qsr.00404DEC
! U' X L5 [9 |- u5 Y% I$ i00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]+ o- z8 O: j# Q# z+ q
00404CD4 E8 87E3FFFF call qsr.00403060
* f0 m7 \' X9 {00404CD9 51 push ecx9 k# T0 E* w) X- R- I# u9 W" x
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0- E. _# L2 d7 t; r8 l
00404CE2 8BCC mov ecx,esp4 Y) u: d0 L- p' S' k
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp% B9 t2 S$ u& h. u2 w* K8 a
00404CE8 56 push esi/ [& M, B& N% J4 R* F$ h9 a8 f
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是00 }1 I3 p0 t- ^3 t( ]
00404CEE 51 push ecx
( ?5 `) `5 e2 [+ ]9 U00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],14 p& X* B, |& U2 E' n
00404CF4 8BCC mov ecx,esp
% u# Y' M* |+ ^7 V00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
9 b9 h9 R. z# l7 r ]4 ^$ @00404CFA 57 push edi! O+ ?3 `* @2 H* Q
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0- b7 N0 k$ q' N
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]" Q- J# S' [1 @4 H( x# S
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],04 ~+ ?# }6 o- @7 J) `+ a
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
0 m3 g! x; ?4 r- E7 T. ?00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~) e9 o7 b1 \* L7 n3 q, S: }$ H
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~/ V) L; @8 }2 I" K e# N' E/ y* f2 t( s
00404D12 6A 40 push 40
4 I6 K$ U: B- Y00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder": z0 C$ V0 O- ^4 P3 K
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
4 }0 T! ]0 B& |. u$ L' O8 O00404D1E 8BCD mov ecx,ebp
9 Y& v. {' q* _1 {. j. p8 {00404D20 E8 50840200 call qsr.0042D175. C: H6 S: U1 G- P- @. C7 s
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 ^2 G& o4 k A! G# z8 j% m# z' a; z00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1/ N9 O5 \ I4 N1 `
00404D31 E8 5AE3FFFF call qsr.00403090 r, m7 ]; G8 \# S1 b5 z
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
3 c; g2 P) \% P5 F4 z9 z2 n00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx8 Y/ m" P$ d. R4 y
00404D41 5F pop edi
( D5 h' @. t; I00404D42 5E pop esi. c- F, n* b2 Y9 Q2 N
00404D43 5D pop ebp
5 y2 G% m/ n. A9 e00404D44 5B pop ebx
$ q7 D5 e. ?4 }9 v) P8 }$ k" i00404D45 83C4 18 add esp,180 z) G8 K* V( C/ n+ W* r" ` c/ n1 s
00404D48 C3 retn0 o: [8 x4 i& M* V" W3 W1 T
*********************************************************************************************************************************************************
3 J! o/ [6 F4 ^+ G* o/ B跟进00404D09处CALL来到：
& j3 r$ i5 k0 v5 V004030A0 6A FF push -1 //一路F8下去~~~~
4 E6 _1 }6 b+ g3 D1 @004030A2 68 C88F4400 push qsr.00448FC8
w! Z3 o: n4 U0 O9 z: W5 b/ r004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
4 G3 }9 f# ^1 \! X004030AD 50 push eax' R+ i+ D) o4 |
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp- b% W1 K3 r2 C3 @
004030B5 83EC 24 sub esp,24
: B* a2 u7 |8 E9 `9 i004030B8 53 push ebx
, h W$ i- o5 l3 m" x% E7 {004030B9 55 push ebp
: n. s Q$ u. O* J% {, F004030BA 56 push esi
; V- ^( V( Z& |) x4 A004030BB 57 push edi
5 D5 p" j" G# \$ _ r1 I004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"( ?* V* }: f6 F& b% i |* c
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
! v! N- N% H; f004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],19 p0 U9 v# o/ S. @
004030CD E8 27C40200 call qsr.0042F4F9: X# R- S& [* h" e" ^/ B- E
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]2 I) ]$ M* r& v8 O Z
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax+ s( q _9 _% `/ K. d/ H
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 o; e) m9 X) `9 \* D: s2 }
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
: y$ s% _! w' T8 `! R004030E4 E8 905A0200 call qsr.00428B79; s, @% W. \' J- J7 Y; M
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]! i* p9 Q$ o6 o3 r1 X) F
004030ED E8 3B5A0200 call qsr.00428B2D/ P2 [$ b6 f) G+ p
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
; {$ n$ l2 O6 d% Z8 p004030F6 E8 7E5A0200 call qsr.00428B79
! O8 R( O% Z& h: L# N( b6 f004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
: T2 c; S' [0 d! U, }8 J004030FF E8 295A0200 call qsr.00428B2D
0 v, K5 _$ d$ ^5 H00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
/ u. v+ O# M$ Y0 U* {7 b* A00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]- J" C2 `! v0 G, T7 a5 v
0040310B 83F8 02 cmp eax,2: B4 W2 @# L2 h2 Z: T
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳: B9 T, f. E4 h4 I: C7 i
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]6 L3 n+ T. |* X" C
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18+ \5 z, m& V- ?5 }3 S
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳; U6 ?4 ?/ o$ L0 d
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
, E0 z3 p9 [3 K4 t8 p/ t8 k) h00403126 6A 01 push 1: k/ S8 a+ ~7 e% B
00403128 50 push eax6 ]: R& A% A; o0 A4 R9 M
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' _: F' N& q8 H/ S0 z
0040312D E8 C4550200 call qsr.004286F6
9 b5 f6 o, f" @/ E8 Z$ Y00403132 8B00 mov eax,dword ptr ds:[eax]
* C5 ?8 ^" T+ {. o) l00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
' g8 r5 \" y( Z/ \8 N) P; P00403138 50 push eax
- g) n. j8 V5 B% O00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
4 x8 R9 b7 ?/ Q9 i/ @7 l0040313E E8 4D560200 call qsr.004287901 N- u% |& G4 z4 p' F7 ?
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ K+ ^: ?; f7 C; Y* t4 `: O
00403147 8BF0 mov esi,eax
' \$ q5 t1 H& a+ R6 `00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
0 e; ]1 F( r) @ m6 h) }3 W0040314E E8 38C30200 call qsr.0042F48B
3 x1 T4 M# V% p2 f$ T! m# N00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
; t) k: Q: F: E$ j9 z- n: B00403156 B9 3E000000 mov ecx,3E+ d5 n1 ^" b& M6 y6 t
0040315B 99 cdq
( u s9 U- ?3 i& C! }, D3 q8 ^0040315C F7F9 idiv ecx
6 S& M2 f% d' _& ~' e1 W- ]0040315E 6A 01 push 13 a$ ?5 G' E/ q0 ]0 ^
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C], M7 G" C$ |5 a5 W
00403164 8BF2 mov esi,edx
7 u. ]" `; P% v# B& I00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
3 X$ K3 e6 N6 p. q; Z; P0040316A 52 push edx3 m+ ]9 u0 i$ v
0040316B E8 0A550200 call qsr.0042867A
+ J) p- |& C n m00403170 8B00 mov eax,dword ptr ds:[eax]; w$ v) P( K( a
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* t7 X0 \3 I) M6 y, T) N |! c
00403176 50 push eax0 r6 h" n X/ f7 H
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5) p& O( h% B1 f& o
0040317C E8 0F560200 call qsr.004287908 O7 [# n4 _+ l% R0 r
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 w5 Y# f( n! F) p+ @00403185 8BF8 mov edi,eax
" o2 S5 ~! M4 r5 n( E00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3) h9 F( u8 L8 t5 v
0040318C E8 FAC20200 call qsr.0042F48B2 a5 R9 y7 @" S" V
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
( P% B# r0 M$ W* l2 f5 h) K1 E( R6 P O00403194 B9 3E000000 mov ecx,3E
" I' w; x- X" C) ~00403199 99 cdq5 ~; }/ n! s. Q% U+ q
0040319A F7F9 idiv ecx) x1 n: T" m( ]
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]4 i2 v) ^( V6 H' x5 V/ m
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
9 V+ B3 b. W0 m6 U" o( \004031A5 8BCA mov ecx,edx* V* |5 Q6 f9 L+ [# l# y
004031A7 894424 24 mov dword ptr ss:[esp+24],eax) }3 P! D7 m5 a. Z
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax0 X8 o1 j6 j9 S4 g, R7 Y1 B6 Z
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
$ T" K$ H- D9 e. e' ]; t004031B3 894424 14 mov dword ptr ss:[esp+14],eax/ p( r4 S q1 L1 @7 n
004031B7 894424 10 mov dword ptr ss:[esp+10],eax6 a" d+ b3 K; h4 O$ X
004031BB 8BC1 mov eax,ecx" g- l' _! G( Q6 [
004031BD BF 0A000000 mov edi,0A
" V( d' N/ W& d9 J( G004031C2 99 cdq2 ^3 r9 e0 z% V! b8 V9 [5 D
004031C3 F7FF idiv edi
. [. W+ L% T% g5 s! L; S3 m004031C5 8BC1 mov eax,ecx0 @" i3 N; }$ D9 N4 @4 a; U# P- ?
004031C7 B3 0B mov bl,0B% s0 Y+ w: F( y# ]! r6 z
004031C9 0FAFC1 imul eax,ecx
8 ~9 ~$ F9 s, N) e& ~+ A' ]% ~! |004031CC 8BCF mov ecx,edi
1 w9 x0 a9 {5 W004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
9 U6 }& q- t" ? Y004031D2 52 push edx
5 `+ ^2 K, ?" B# b( n( C004031D3 99 cdq$ I" T& A) x- E* W, l
004031D4 F7F9 idiv ecx
9 c" j# d/ R8 F9 [004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
8 H5 _/ S& c. x- |/ s3 J8 W- i004031DD 2BC6 sub eax,esi. V3 F4 s0 f% {) @# X
004031DF 52 push edx6 C% |% {6 K! x3 _/ e
004031E0 99 cdq& }1 |5 X7 d, W7 t$ V6 Q* J( K% M
004031E1 F7F9 idiv ecx
5 A0 H2 G: T0 a2 h; y004031E3 8BC6 mov eax,esi' ]4 x+ d7 v1 n+ U+ I
004031E5 52 push edx2 m! Y2 n- R; O6 k
004031E6 99 cdq
. i/ N; A# B$ E7 F" J004031E7 F7F9 idiv ecx
8 X6 |- k5 |5 y5 u004031E9 52 push edx
8 |. W) ?' y5 M& R5 `+ s9 S004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]0 d4 O! u* D) W+ t, x
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d") `. V/ g; v4 x1 E
004031F3 52 push edx
1 V! q9 Y* o7 I- z" H' v004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
! N$ z0 g- o0 }, ~8 i* k( b004031F9 83C4 18 add esp,188 |4 J5 v1 w, B' h
004031FC 6A 04 push 41 b o$ n# }- @( f
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
" _! k0 {7 ^- T% y- b, D5 Y00403202 6A 00 push 07 Z7 j2 e& A9 W7 |2 J
00403204 50 push eax
5 R5 C, u, R2 C/ x00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
" \# h$ V4 R9 s* |. q% E00403209 E8 D6530200 call qsr.004285E40 \2 J- O# V' J" e: ^$ U" e2 q
0040320E 50 push eax/ c) ?! D9 U( O! z* p
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
( _: g, l& y0 \* }1 a00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C- S; T* H: B( F* b E# m! ?
00403218 E8 A7C30200 call qsr.0042F5C4! S& b3 @; T2 ~" n9 p7 ^- T3 s
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30] H, c* z5 `" ?2 O+ E5 t2 J
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl6 Q9 f: x! H( D# {8 q
00403225 E8 61C20200 call qsr.0042F48B9 Y1 V. J7 d8 a+ k3 u1 h8 ^
0040322A 6A 04 push 4/ z/ Y0 G) ]( r7 I$ L6 k( k7 t
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]. C; ^- ~% Y0 D. s. Z$ b
00403230 6A 05 push 5
9 K. d# V" {' y7 e00403232 51 push ecx" M8 v$ W7 Z! _$ Q5 `+ q* I7 Q- R
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
$ _+ W: r/ P# l. V00403237 E8 A8530200 call qsr.004285E4
" X5 X9 x: u2 U/ c) H. S! ?0040323C 50 push eax, F7 d+ S6 f* [4 G
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20] A q! i8 S! a. Y$ r7 W x
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
M/ |3 ]* O- [% i( S }& w3 |) q00403246 E8 79C30200 call qsr.0042F5C4! l' P) R4 |; W; S% ~
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 t1 }, x( T! }' r0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl% o7 P7 ?0 t( I" a; Y/ u* m6 p6 u
00403253 E8 33C20200 call qsr.0042F48B
4 ?8 t: v* I) R& j+ n5 O2 H$ c9 `00403258 6A 04 push 4
9 i1 b% I2 o( c; F$ ?4 b) I0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
6 W. A) p- k' v6 x2 j1 u) _0040325E 57 push edi
1 F V3 M- g2 C; s6 \0040325F 52 push edx" c7 s$ i8 _" ?" v
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 y6 o7 S* k1 F6 W8 a. \6 O00403264 E8 7B530200 call qsr.004285E4
" i: R9 z* ~+ Y; v8 P00403269 50 push eax9 O3 W( I" S C- c4 L
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 W- U2 W% g- F) e4 n, {1 z( {( n
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E3 r- K4 k% Y! N' Q% _! n1 G
00403273 E8 4CC30200 call qsr.0042F5C4
7 q* p; e: M6 O: T& B00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& Y6 b1 G: W5 V( {' n9 S+ X0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl9 f- N/ M& h j( p8 M; o
00403280 E8 06C20200 call qsr.0042F48B
2 ^: D/ r/ Q+ ^# B00403285 6A 04 push 4
8 M* T7 t! J+ N' [4 p D4 W4 @9 p0 r00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]" }) U7 C5 b, O P0 F. `
0040328B 6A 0F push 0F0 |& Y. z, [( S. r) Y8 B' z+ n
0040328D 50 push eax
/ N2 p6 l7 e4 e& \0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]. d5 d1 Y: J$ J; b
00403292 E8 4D530200 call qsr.004285E4
5 Z$ @+ z# ]4 k8 K00403297 50 push eax1 H0 u# b2 k' l
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
9 }2 T+ f* d# A1 I' G0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F$ ~9 Q; ^, h T' Q" j" n3 f+ a
004032A1 E8 1EC30200 call qsr.0042F5C4
: l' l& d& Y2 W! ^004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 ]- _: F% P& c @; k% x004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl4 _# R5 s$ I% |8 F. T4 g
004032AE E8 D8C10200 call qsr.0042F48B0 Q' f& j& F. V0 u1 I' m
004032B3 6A 04 push 4: q2 x& Y5 Y! c: q) _7 T
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
0 c7 Y( [ `- S( y" K004032B9 6A 14 push 14" z' Y3 L9 u4 u$ o4 V# K
004032BB 51 push ecx/ Y2 ^4 N. L" x1 s0 L9 X7 `/ p
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]- n3 j: Q: }5 ~% D, ?
004032C0 E8 1F530200 call qsr.004285E4
7 c0 B! Y. N! P0 M0 P' v' |004032C5 50 push eax6 m+ B8 W+ K; |' W
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& i/ P: ~2 t3 n! y# k5 S% d# D
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
/ h9 X5 [& Z" @+ I X004032CF E8 F0C20200 call qsr.0042F5C4
! F; o4 C( J- S- W+ L' \& W x! Z004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ W+ {% c, P, |/ n3 V004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl: f2 S, Z# e" ^/ R$ O
004032DC E8 AAC10200 call qsr.0042F48B
+ p0 d5 |; d( Q4 X/ m9 v6 o3 O: F004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI4 c6 d6 \$ D- [- ^8 ~
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
: @: z# ^" I( W, C004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
6 v- i w2 E" |/ l9 }: s2 d) n6 A004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
, \ t* X3 f9 {6 E" v004032ED 8ACA mov cl,dl ; DL送CL6 k7 B1 P; V# Y/ R3 F% p
004032EF 3AD3 cmp dl,bl ; DL和BL比较: T& I1 a3 Q# Y4 r4 ?) ?. k; X' U1 x
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）4 A* w- y9 M; {1 N) Z; }
004032F3 84C9 test cl,cl
& `9 M' A& \; @0 R) F( p004032F5 74 16 je short qsr.0040330D6 t8 P) K, k0 ?( G
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
; U9 I% h* x z) U/ d2 K004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL, b P8 l- G! A0 Y2 V
004032FD 8ACA mov cl,dl1 H X$ c/ H+ A* k
004032FF 3AD3 cmp dl,bl ; DL和BL比较
* m4 x7 f- ]* q b! U" P& O* G00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）; T& _1 P8 q1 ~+ v/ k' s
00403303 83C0 02 add eax,2 ; EAX加2! J9 e% Q0 X% R2 s4 F% W7 b: ~4 N: N
00403306 83C6 02 add esi,2 ; ESI加2
3 _, g j/ Y8 {. F% @00403309 84C9 test cl,cl
& d# d/ j$ s/ Y2 E& ~* E, M3 o1 a0040330B ^ 75 DC jnz short qsr.004032E9 m6 A$ Z% S7 {2 t; O) `- y
0040330D 33C0 xor eax,eax
# K2 K! I' M; b0040330F EB 05 jmp short qsr.00403316
- X3 p0 y5 r! r/ j; z0 J00403311 1BC0 sbb eax,eax
; G+ ~' G" T& a/ ^ W. G2 i X00403313 83D8 FF sbb eax,-1
& X8 y/ j6 X2 m ~5 D4 {6 D00403316 85C0 test eax,eax$ K6 t6 ^) x j7 D2 J! e0 V
00403318 74 0E je short qsr.00403328
/ m- n+ f) s5 ~# l1 P0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A" \6 Z! \& _, n6 ~% _ a9 D2 {; M" R
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]8 d: j# R1 f* O5 x9 z4 N: G6 U
00403323 E9 F0000000 jmp qsr.00403418
7 T/ r. e9 J% Z m1 P+ {8 V8 g00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX7 y, n$ B# i2 d) c+ @2 \% H+ _- }
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
# a/ A4 `1 ]- l5 L; U5 y8 m; @00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
" r5 K% \% }4 e% c7 ~' ]00403333 50 push eax- c: k* y7 P! @0 ]
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
) h" P$ \; y; c/ H% a00403339 50 push eax; r6 b% s1 J m; ?( t* O6 ?, }/ X% ?
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
6 x& C, M6 E; Y; G! |4 B8 F0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
3 k5 p- c& X" k, y. a' V6 ]8 B00403343 83C4 04 add esp,4 m* B* i- p3 e. e# s
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
0 l# A& z$ v' h% X00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]- j2 I. g0 h5 t( ~
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]$ A6 A) F6 ^/ A3 ]: V
0040334F 50 push eax
& V {. |' Y$ |2 G) d00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
) U7 N& }+ I8 P* X00403355 50 push eax! F9 l( p6 a, w2 l# l2 E
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX" u' w9 R8 B* x! M
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
( a8 V5 X C! \/ B0040335F 83C4 04 add esp,4
. }( x) b; p, p5 D* T00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI# x3 p9 p0 `9 V, p4 t
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14] E( ^; p+ Q; ^8 {. Q' g
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
( M+ z% G4 k$ \1 [7 S8 ?( b0040336B 50 push eax# x- B. {5 ^9 F; Y
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
. z: c4 [" k* C0 N4 Z3 Z9 H d00403371 50 push eax1 I1 z0 |( M9 M6 s3 u
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX; |4 Z8 `: a/ y5 ^
00403377 8BD8 mov ebx,eax ; EAX送EBX
" p" G0 h) c% O! I: {; f& m8 N# n00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
7 u3 l. T9 I" ^7 K0040337D 83C4 04 add esp,4
! e6 t( ~# d _+ |4 ?00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10], \" @$ }) `5 R( I
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
4 Q( z0 q' r9 [% S* N00403387 50 push eax
* J$ t' h, u3 X00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
, K0 [* z2 W- K5 j, X0040338D 50 push eax' V! j: p4 J$ o, X" L- w* e
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX' x% C+ s: X! i" l
00403393 83C4 04 add esp,4
4 h2 `: b1 ?: J: B8 V00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]7 L; u" f7 u8 t, J: P, R# V" L
0040339A 8BE8 mov ebp,eax ; EAX送EBP
( x% E7 Q3 _9 E9 s; M0040339C 6A FF push -1; r9 v8 v3 O* D& Y* _
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX2 `$ M* K U" o, V
004033A3 6A FF push -1
# u* M* r* g. f+ o4 i004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
- S0 `6 p9 H6 J9 A! w004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
9 |: r* M" ~: d: ^$ Q004033AE 6A FF push -1/ q( r$ }' b8 I% e* D/ D8 |( @2 E: J
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX9 [: N' c9 R0 x0 _8 N
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
5 H# @# ]" `$ m' P! i* U004033B9 6A FF push -1
/ m. y9 q* [9 i0 _' X004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX7 x& b1 X* }/ M$ E% n! R
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
) B. ~( C$ H) O) I8 P004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX2 _3 }4 B8 n9 a6 B; a
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
! q" P H% n% j9 J' X004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX) {& m7 s% f6 G, y3 r
004033D7 D1E0 shl eax,1 ; EAX左移1位
' h3 t6 x6 W( L' J7 v7 _; ^004033D9 99 cdq ; EAX扩展
% J g) D2 u' b4 W7 z5 x004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中! h4 I. E$ B+ e: Z+ X
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
" v9 T4 \+ \/ h( j6 r3 U/ F% N7 f5 w! F004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
4 U5 v6 w) l) f5 ^004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A" t0 w6 M3 M! g% q/ L$ O
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]1 S I8 y7 o' U9 k2 N$ a- `9 P6 g
004033E9 EB 2D jmp short qsr.00403418) v9 G, Q/ @! J- e* c
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX" }+ v( r! `$ x
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2 F& P4 z2 g4 \
004033F7 99 cdq ; EBX扩展/ h" ?/ B9 ]3 u/ g( ?. U
004033F8 33C2 xor eax,edx ; EAX和EDX取异或$ {4 N9 K5 @6 d3 ^8 |2 u
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX# S1 l9 f. S8 O: @9 V- h# I# ?: E
004033FF 2BC2 sub eax,edx ; EAX减去EDX/ o" I/ H4 e, V& j& {5 x$ B
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
: N8 |; S# l# ]5 b( a00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX2 l$ N& f" }* Z' c- d
00403409 99 cdq
/ c: Y5 r; A* @( L" Z0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
, G! ^; F! A }/ q0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
) L) W) |& o6 x; y& g00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
" i. C& c E" h+ n8 p" D' C9 z00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）/ J3 \* m D& y0 Q. g1 [1 i
00403418 E8 6EC00200 call qsr.0042F48B ; 5 w5 s6 ~+ R h& J, p, C
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 @% R* b2 Y9 o& J5 v# E00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9( M1 S- |) n. Q! c! P0 U
00403426 E8 60C00200 call qsr.0042F48B- h& R7 m9 ^* {# X: R; J p5 I
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]/ f" |; A* q* d6 G6 z% g- r
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8' k, M6 N% A, Z. [* W& l) j" I! W
00403434 E8 52C00200 call qsr.0042F48B0 K3 ^9 d5 V8 i+ R. b+ Q
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
8 @# _5 |/ Z' d% @7 w* t0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],76 R, b, E7 Y9 z8 n V" `9 R; g
00403442 E8 44C00200 call qsr.0042F48B
: ]4 O h2 ]8 W2 c3 p+ S4 g00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
/ E2 V# t7 R: T# Q: m0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
w; ~; A1 A7 H9 G, O# E6 h* M00403450 E8 36C00200 call qsr.0042F48B. M( |$ x: A) D( J8 m% b9 }- g; d
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
$ ~8 z H. D3 R00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],37 Y1 I$ T2 z; V! Q& a
0040345E E8 28C00200 call qsr.0042F48B
: x& }' K7 k- i2 a00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
6 h2 `. J% K5 Q+ {5 M1 R, I) K00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
" Y$ ~, }% L1 {0040346C E8 1AC00200 call qsr.0042F48B
$ V/ k& _. {1 y; g0 n00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
- F4 J! f y: L00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
3 K3 D# d( A7 E+ C- v9 L9 ?9 y: _0040347A E8 0CC00200 call qsr.0042F48B
! N* ^6 l$ i" v8 s% t3 i) _0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
) v- q' s' T6 _& N- V, {( f p* i00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
) e2 z6 l" P9 ~6 E8 k00403488 E8 FEBF0200 call qsr.0042F48B
. [" `2 Z# S y) [9 \3 P3 l. a0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
9 G; V* g$ k1 t9 ?2 S" q9 S# G6 W3 `2 y00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
0 e1 P2 \/ j& k& T3 M f00403499 E8 EDBF0200 call qsr.0042F48B( I& [2 M b5 u7 a
0040349E 32C0 xor al,al ; AL清0/ y0 Q( O5 }0 i: ~
004034A0 E9 88000000 jmp qsr.0040352D" o( u7 E; i7 m6 G; a6 i. C
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
; [6 ^' p3 d- t% t! O004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]5 g. h+ E% F5 X2 y
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
' W% ~) |# |2 T+ s004034B3 E8 D3BF0200 call qsr.0042F48B3 D6 J6 s0 K1 H
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
/ I* D' V0 j7 r! Y004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8( c' N0 ~, H X& p
004034C1 E8 C5BF0200 call qsr.0042F48B
( Q* v% ]9 T9 X! T& f004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 F: K* U" ^ H) D8 h
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
* s5 m8 `; d2 o, y9 {0 K004034CF E8 B7BF0200 call qsr.0042F48B, x5 Z( V& Q# S7 D8 n
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& z% I( o$ O/ E& g9 w! i$ S004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6% h9 M9 ?! s# i( h
004034DD E8 A9BF0200 call qsr.0042F48B
" I; D" z- k! S1 j# k. E004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28], T* m9 k Y9 N5 }" C- O
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
- R: |- r' Z& R5 C+ c: U/ b+ C004034EB E8 9BBF0200 call qsr.0042F48B* B/ M* G# }6 ~# T1 N
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]$ @- v: M7 r. U! q
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
7 l1 U- ^3 T3 L- V/ _004034F9 E8 8DBF0200 call qsr.0042F48B8 ]( Z1 n# i3 a/ z# [. U% a
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]5 O" h9 ^8 v$ i9 j5 [
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],10 ^% z/ ?) M3 ~5 p& ~4 O4 ~+ n+ _9 @5 j
00403507 E8 7FBF0200 call qsr.0042F48B
. g- M" L7 a+ v* K0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]( a! M5 Z- s# G
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
$ T' t) E7 T/ z! ^- }3 s00403515 E8 71BF0200 call qsr.0042F48B
/ Z) \( A+ g- O2 E6 \4 _; w0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
2 q, a% E, w+ p% q) F; a! A0 x0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
+ R. X7 H9 j& x: E% v4 n00403526 E8 60BF0200 call qsr.0042F48B
3 ~/ \7 c! Z3 | J" B! b9 u" W0040352B B0 01 mov al,1
0 W' t$ G+ w: t$ D: N0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]- ?9 D0 T% {8 ^) N! n
00403531 5F pop edi
) C( a" ]$ }) P) z9 v. J! O/ f9 a5 C00403532 5E pop esi
7 @9 T6 f* e* K9 J# @" x0 ]00403533 5D pop ebp" Y8 S, f- p( l
00403534 5B pop ebx
8 V# f: y$ _: G3 m00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
+ H+ g% }% |. D- r! @2 W0040353C 83C4 30 add esp,30* j5 q7 h# M5 [. V
0040353F C2 0800 retn 8
" [$ S2 z* w+ D* ?4 f, _/ a--------------------------------------------------------------------------------
$ ]; S8 ^% E1 e- j7 _3 L9 E' ~【破解总结】
& a. L, D/ y5 J; \ 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^' K5 [& C- M% q5 {2 D* q
用户名：yijun0 x8 k1 o8 r3 {# ^3 k& v0 u- {" M
注册码：4893*7777*3726*7777*0529. I6 Y1 C: ^, m% }( x& h* e( A
--------------------------------------------------------------------------------- b# n" k; ~( @. j0 ~! Z5 ~4 M; L
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡