|
|
|
【原创】破解Quick Screen Recorder+ J2 r1 J4 O3 b$ |3 U' G# V: N$ r
【破解作者】 yijun
6 N1 d0 h6 C4 e ?) M9 ?【作者邮箱】 [email protected]4 Z# b5 }5 Z6 Y( M# c& E
【使用工具】 OD,PEID
0 `* {: {' ~5 N4 I1 O7 U【破解平台】 WinXP
; O0 F3 H) d' `$ A1 G3 N% ^【软件名称】 Quick Screen Recorder
! _& s1 w1 f- m$ V; d; C5 } a【下载地址】 天空2 v ~' W. A2 L! u; G4 C9 v$ }# g% u
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. " A2 L4 ]4 o5 j
【软件大小】 540K: _) i3 f) n! a: f
【加壳方式】 无
7 K1 L: o g) J+ h【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
& Z# W9 v6 p0 \, C--------------------------------------------------------------------------------! I" z a) ]& S
【破解内容】
7 f) @8 g0 u- ` PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：/ d9 ]+ ]' P( S) D$ Q/ Z: w, T
00404C69 55 push ebp //在此下断
& F, T7 S, z- x5 v; Q* E00404C6A 56 push esi
. [; R3 d1 u5 k0 N4 e+ T0 j00404C6B 57 push edi% D& F! |4 l& a2 J t% V
00404C6C 8BE9 mov ebp,ecx
$ a, W2 O" u2 J+ d: n b$ m; n/ i00404C6E 6A 01 push 17 r7 S- I. r6 ]% e+ v! w
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
/ G* p6 C y" Z3 c00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]. z+ _. e$ F0 @, B) g0 N# q# P. _7 V
00404C78 8BCF mov ecx,edi
" ~. N+ [& M3 i00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码( a2 W. @! n+ M; b7 g
00404C7F 8BCF mov ecx,edi
" M/ Z Z- |( P00404C81 E8 A73E0200 call qsr.00428B2D% ]6 c8 X W& R( a
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]0 b8 d w" A+ x4 {( j) ]
00404C89 8BCE mov ecx,esi
9 h$ W2 }: y3 a2 x+ {; h; l0 w0 j* x00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX7 M& ?, S7 l" I9 _# G; x5 p2 A2 U
00404C90 8BCE mov ecx,esi
- e. q& @9 v3 r0 R( Y1 j+ M00404C92 E8 963E0200 call qsr.00428B2D+ X% m9 H* A0 c, u+ H
00404C97 8B06 mov eax,dword ptr ds:[esi]% X+ O( v8 A( u! K( m- h3 U2 e
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
o' y8 A% T3 N3 _9 ]8 o00404C9D 7D 26 jge short qsr.00404CC5
2 x0 s/ `2 ?" x: Z4 [% O, p00404C9F 6A 40 push 40
* [/ x( z, y) D' h00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
9 m4 ?# i0 v5 o( Q4 W1 {8 ]00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
" G+ V% \9 W, \5 h6 I2 w00404CAB 8BCD mov ecx,ebp
$ T& h, S2 Z: K/ x* m* c& V0 K00404CAD E8 C3840200 call qsr.0042D1753 {& C& c C" p" p
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]0 O4 h$ J- \# ^1 J8 V" x1 |
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx# h. r5 s3 |3 u/ N- c, }
00404CBD 5F pop edi
/ l! F* p! {, k00404CBE 5E pop esi
6 t( H. }7 b6 u/ [! @4 K00404CBF 5D pop ebp
# D1 t3 U0 W U2 a00404CC0 5B pop ebx% Z% M# M- R8 C% X0 j$ d
00404CC1 83C4 18 add esp,18
% L p$ @" A: w( c6 C* ]00404CC4 C3 retn
; b9 f4 t4 w: S) y+ s00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
3 b$ p2 v7 |0 @" C6 t' z00404CC8 84C0 test al,al
- D" p! a8 c* V00404CCA 0F85 1C010000 jnz qsr.00404DEC
6 K+ z; W5 j5 Y% M3 f* \, u8 X! h# J00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]6 Z4 u) X% ], P* w) D
00404CD4 E8 87E3FFFF call qsr.00403060' k: o1 Y7 }9 ]+ ~
00404CD9 51 push ecx7 l0 C2 E, ]( y, t/ N
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
+ U8 F' e' B8 H/ k: [; S; ~00404CE2 8BCC mov ecx,esp
1 R3 u0 N0 R( g+ o) h8 U00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
# a7 G% O- @: k& ]00404CE8 56 push esi6 ~% p) I; D/ L5 y
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是06 _( ^5 p8 w& ^, w' a
00404CEE 51 push ecx4 G" X( {1 |, a, I9 C% O8 K: |
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
. ]: ?1 B6 v1 N00404CF4 8BCC mov ecx,esp! j. j! o0 u1 z5 W% r
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
, C/ C0 X9 ]- a4 K7 x* W1 w# A00404CFA 57 push edi6 j& a6 W7 k( I1 f( p, j
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
# ^9 L7 Z+ Y+ \( C00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
: c; J' ?6 g7 k00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
/ K6 i4 h6 U+ C; ]2 g( c" d6 Z: G00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
5 U2 X5 R1 h" _) |! ?00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~1 Y4 ^! a1 T& i/ p3 D
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
6 m3 x" @2 v* i- g7 H00404D12 6A 40 push 40
& y3 x, C! L) z00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
3 D4 `, I/ l- R7 l5 a5 L6 f00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
+ B* O+ P/ I/ W. m9 A' E00404D1E 8BCD mov ecx,ebp
: F) U9 i, m: V% X" F00404D20 E8 50840200 call qsr.0042D175
& d4 ?2 q* [) u, d00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]$ n% t5 p c% k& y
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1' ]% z5 j, S/ k
00404D31 E8 5AE3FFFF call qsr.00403090
2 f1 L6 f. u0 o00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]* q8 |3 {1 X" [. Z/ v/ p6 C
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx/ P0 U- H( b* A0 y/ C+ O/ F
00404D41 5F pop edi
( _8 q- K( q$ `4 i3 r00404D42 5E pop esi. S* b A3 y0 q: E. F2 ^* T
00404D43 5D pop ebp
) e$ T K. z. e7 U9 b$ x00404D44 5B pop ebx
: R9 ~( I- _: H00404D45 83C4 18 add esp,184 _( H% e) D1 Y4 r( `5 L. U+ z7 t
00404D48 C3 retn
9 h4 a, l& M1 E- E3 W! e*********************************************************************************************************************************************************
- c3 n3 N% q$ c4 c# v q0 v" x跟进00404D09处CALL来到：- s$ D# C1 [( M* y
004030A0 6A FF push -1 //一路F8下去~~~~
" P" Z% x4 C; E& W( @3 s004030A2 68 C88F4400 push qsr.00448FC8
% o- p7 ^6 e# E7 v: _1 j004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
8 j9 Y0 d' S# o2 f$ m4 g: I004030AD 50 push eax
9 |' K+ l: T9 s! ^, s: h r004030AE 64:8925 0000000>mov dword ptr fs:[0],esp, O5 C' W Q9 D6 q
004030B5 83EC 24 sub esp,24
! d, }) p2 E9 p% V9 n/ t* f/ o4 o004030B8 53 push ebx
- T" k6 {3 ?- R& F/ Q U004030B9 55 push ebp, l& g9 O) h( J9 w* L9 ]
004030BA 56 push esi
" q8 C7 O; [. [" k8 ]( s4 P004030BB 57 push edi6 Z8 V9 A/ P3 D4 H9 h
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"( r0 g) J6 n! z+ S$ O
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& Y3 n) ~+ W w: R8 r2 G- g' U004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
8 a6 d5 e6 a. w" w6 h004030CD E8 27C40200 call qsr.0042F4F9
( W8 O4 H: w& q6 u004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
" ~: P F. I5 ~% L. Z6 J2 j004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
2 {2 J9 q+ N! ]7 t/ e: M: l& i$ ?004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
* u% \6 [* R) Q2 B$ w9 U$ n3 q004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
# o2 K9 V$ t: [0 ?) ?9 f, Q& P004030E4 E8 905A0200 call qsr.00428B79' z3 i! R! W3 t3 l+ D9 w- |0 i
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]) A! z' u7 k0 D+ H5 ?6 W; K2 e4 g# D
004030ED E8 3B5A0200 call qsr.00428B2D
+ e: H% e. `* h( O004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
) B L) |/ Y( h( j6 w004030F6 E8 7E5A0200 call qsr.00428B79
2 l% e" U; w6 W; Q004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]1 k" D# ^7 Q7 w& N/ H/ Z& P+ T
004030FF E8 295A0200 call qsr.00428B2D" A+ z% z5 D2 L4 `7 H9 U( I7 ?
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
- ~) j2 d7 p4 f4 S0 @* c00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]' u8 Z7 P4 f' P+ x/ x$ y
0040310B 83F8 02 cmp eax,2
" a: Z. C. D: T" i0 Q# L x8 ]0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
. E/ [7 n2 F3 Z! L/ n00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]) k8 d3 v! W' I. H2 F
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
, _2 g. f1 `, x1 ~/ C" P0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳$ `0 V; S2 M9 C2 c4 G
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
$ w3 h" \' V+ I. m, P& r, j/ [00403126 6A 01 push 1
5 a' G/ X% h+ h00403128 50 push eax
( [ C% h& N }, q+ V00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]* z- r! ]1 l/ `
0040312D E8 C4550200 call qsr.004286F6
+ @. G5 ] k) A$ B00403132 8B00 mov eax,dword ptr ds:[eax]
' f$ P- i$ b' V2 }, ^. h00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
4 U4 w0 H! T l00403138 50 push eax v8 b( T" f& }0 _
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
3 e8 t a+ l9 q0 \6 C$ g0040313E E8 4D560200 call qsr.00428790
: c9 W; E! ^; h; @7 m i! p5 }) x00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]& {: s' W. U, g/ \* j! R$ i
00403147 8BF0 mov esi,eax* E$ R$ @% j2 r% u
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],32 I5 }! B& e7 v1 F! ?
0040314E E8 38C30200 call qsr.0042F48B
8 f _5 q+ p1 u6 M00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
: T; `! T7 K: J00403156 B9 3E000000 mov ecx,3E
* e6 {* c7 q. N# ]0 C' S0040315B 99 cdq! u4 r: N6 u! t- U
0040315C F7F9 idiv ecx, X: Z0 D5 n: o" W4 S/ h
0040315E 6A 01 push 1
) U: M' H2 I# e! F" _4 `: `00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]1 v7 L6 N1 `. v' x" D( B2 {
00403164 8BF2 mov esi,edx
( C% W7 b! I! I/ ?+ Y00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
8 ^8 S- @/ h4 h$ `0040316A 52 push edx
/ u0 {" ?. p' {" |0040316B E8 0A550200 call qsr.0042867A2 M+ M: k2 T1 c, n7 E2 [4 _
00403170 8B00 mov eax,dword ptr ds:[eax]
6 V6 z# e" i. y, V00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
* ]1 }4 P) ^0 R& k00403176 50 push eax
% d; U$ s& G, p, B- T; ?00403177 C64424 40 05 mov byte ptr ss:[esp+40],5& P) o, j& H, A
0040317C E8 0F560200 call qsr.00428790
0 Z7 Z; V! F( _8 r00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) O: {' v# S8 {* Q00403185 8BF8 mov edi,eax' ~) N& X% T, i1 o
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],37 L1 {4 a5 k: B
0040318C E8 FAC20200 call qsr.0042F48B; F' u, r" |2 o( W
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
$ i3 E- w% l- @$ ~' N* q00403194 B9 3E000000 mov ecx,3E
. E7 M; V4 W& ?; |00403199 99 cdq: n8 {8 F6 c5 \. n' j
0040319A F7F9 idiv ecx) ~2 V/ B" n# M3 K8 [
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
r b. d0 ]% S$ g004031A1 894424 28 mov dword ptr ss:[esp+28],eax3 _# g6 y/ b; f% f% w
004031A5 8BCA mov ecx,edx, n$ Z7 g7 _6 p% s+ `: `
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
* }/ |# e, }" k$ |004031AB 894424 1C mov dword ptr ss:[esp+1C],eax6 ]+ j @" ?* }5 u& S( k
004031AF 894424 18 mov dword ptr ss:[esp+18],eax% L9 ]8 Y' R# J- F) T
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
+ t' K. x- \+ `# G004031B7 894424 10 mov dword ptr ss:[esp+10],eax
0 v( ]* ]# P6 c( l5 |3 h* e004031BB 8BC1 mov eax,ecx$ e8 e( {7 |3 f; z/ a3 B4 i1 X4 j
004031BD BF 0A000000 mov edi,0A
8 I% L7 q; n/ L9 V004031C2 99 cdq; c5 `, X2 R, x+ {& N
004031C3 F7FF idiv edi! T1 x3 J+ w! d
004031C5 8BC1 mov eax,ecx5 d, ^! K; W1 v
004031C7 B3 0B mov bl,0B/ Z& R+ n% K8 U2 |- b' f
004031C9 0FAFC1 imul eax,ecx
6 i9 J! z, T- u9 `004031CC 8BCF mov ecx,edi
_! z% v- t' h( k004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl. s& D" p2 k& _
004031D2 52 push edx
, k( i: z) {3 J004031D3 99 cdq+ ~* a% Q# k* B# D
004031D4 F7F9 idiv ecx7 F1 @; O% i/ K. A9 d4 k8 j
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]; j' `) d* R3 U8 D" n9 x: Z
004031DD 2BC6 sub eax,esi
1 k( B2 V l6 i( _004031DF 52 push edx9 a! r1 F+ }4 C; Q# `1 g! _
004031E0 99 cdq
) y0 J- r, |, P$ X" ^! L1 o+ T+ _004031E1 F7F9 idiv ecx" f3 x2 y' J8 Y; s3 E
004031E3 8BC6 mov eax,esi5 D8 |5 T' e3 |/ a& z& r
004031E5 52 push edx) ^: A4 V* \/ F( C# B
004031E6 99 cdq6 B, p6 A% O, w/ N$ L
004031E7 F7F9 idiv ecx: }) x( |+ S( B3 n
004031E9 52 push edx( u5 P: M$ p& m! _
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
# \8 y3 q; r9 n2 ^& {004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
* q: g' C: Z3 P* Q. ?004031F3 52 push edx
- x- w( b+ ^5 f' c8 Q) }! O004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893, J8 V- C5 @6 J' D3 }; `$ h5 p
004031F9 83C4 18 add esp,18
7 u: Z D; w% I! i! ]" Y! ?004031FC 6A 04 push 46 q, I0 {8 F" r. f
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
. R) o. O2 b: U- z) S% ]- q00403202 6A 00 push 0
' b8 m4 { O, |9 @00403204 50 push eax
, U3 x+ U3 z1 g6 d) X- K$ `( |8 b00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" ?" W' y! F/ ~& [
00403209 E8 D6530200 call qsr.004285E4
1 p/ f/ n. i) `: I' f( ~5 K0040320E 50 push eax+ D' S8 i1 @1 C( I. h/ A' ]
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]' F. {( m0 E: P& \; G2 A
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C1 O+ @3 u$ c" c# ]9 b3 u5 N3 n
00403218 E8 A7C30200 call qsr.0042F5C4
. c% O' Y% X" P# Q# R% W0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( @% q( F5 z1 Q( R
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl( D% B% R; d/ m! y4 X/ w* _* b0 B
00403225 E8 61C20200 call qsr.0042F48B. D' X8 }, i, x8 S$ `& r" |
0040322A 6A 04 push 4
9 L0 S0 `/ y2 R# ?; p. U% g0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
) @/ t! E5 V9 l00403230 6A 05 push 5
# [9 D" a; x! _: ?00403232 51 push ecx
8 d0 b7 M! \: k& _00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
7 v' o4 J- {) Y4 P: c; o0 H00403237 E8 A8530200 call qsr.004285E4
# i A! k- g3 Z# r6 j& ?5 H) A0040323C 50 push eax
) ?5 t6 H# V( E0 N) Z6 }0 c& O0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
3 }/ R1 x t @6 p2 u% g4 D. ]00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D" G9 j$ l: Z. h& _( ^4 ?9 _: ^/ I
00403246 E8 79C30200 call qsr.0042F5C4
" {. i! z" B8 F) n* z' m0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ R" G+ U8 g! }3 _; t
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
9 M w' u- \! g" C00403253 E8 33C20200 call qsr.0042F48B" y# E9 W% ~# o4 ?; H
00403258 6A 04 push 4+ z# y4 H& I( g4 c: `9 L7 q
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
7 K, T ^& E2 ?" R5 ]" P0040325E 57 push edi7 A, B: A7 \ V$ w* |
0040325F 52 push edx
" |" ~% b) @+ Q) F- V7 L3 {4 R& A m00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]' J' Q2 j, E! Y4 I+ k0 s
00403264 E8 7B530200 call qsr.004285E4
/ b5 l# o9 z8 ^00403269 50 push eax% _7 d! E- B0 z% ?% Z# Z6 J
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]* ?+ T2 Y; O) i+ J" n0 M3 i _0 F
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
& _! c: {9 Q8 W" F4 j5 d4 \00403273 E8 4CC30200 call qsr.0042F5C4& H7 B- Z% Q; w n/ ~2 H
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* k" R+ U/ H) J' y! J- Z- t
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl! [: O) }* u" |" Y$ W/ |; T
00403280 E8 06C20200 call qsr.0042F48B3 n* j/ [3 S! N% p
00403285 6A 04 push 44 v: M/ B9 _6 v
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
! z0 V2 f+ a E! d0040328B 6A 0F push 0F
& F4 B) c$ q8 e' f0040328D 50 push eax
8 j4 K s1 G" ~% `0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; P: V( m: ~+ Y, h0 |) y
00403292 E8 4D530200 call qsr.004285E4, H( L# a y5 I$ u
00403297 50 push eax
8 |+ v/ M- n# C. n0 M00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]! v( D; R$ Z- S. V& G
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
! G6 ?4 Y" T/ u5 l" D) _004032A1 E8 1EC30200 call qsr.0042F5C4- Z" q+ U% T$ a0 u
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) g, f F; w' M# e' G
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl. _) F" O8 v9 Y$ ]5 [
004032AE E8 D8C10200 call qsr.0042F48B, P; M, Q @, K, ^8 ~4 e7 k
004032B3 6A 04 push 4; c' O7 k' d8 m; l% q9 d7 S
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
) _0 |# {' R7 e! B: ?0 l004032B9 6A 14 push 149 z+ V/ _4 t( {! U) g0 E0 ?- L
004032BB 51 push ecx
/ X6 J! p1 s& ^3 T2 H2 O( S# Q004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
, @; X: ]- I3 V" ?: H, e: Y( W004032C0 E8 1F530200 call qsr.004285E4$ q: U. {' W$ ~- n" k! O
004032C5 50 push eax+ E z2 J3 N( r. \- v: ]
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]; X' p' b' S# W* Z
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
* ~; |# M4 m) U# c9 Y. y004032CF E8 F0C20200 call qsr.0042F5C4
2 O7 J/ [, a: C9 b5 ]004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]1 f+ s' T1 }( e
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
/ ~. l7 w% ?; V8 O2 M+ D, }004032DC E8 AAC10200 call qsr.0042F48B" V$ K1 V: E n' ]4 P
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI7 H, x3 B, s' H* \- G* Z, y
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX, [" o' Q. L' ?+ D9 I
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL; E$ M, |3 F( F8 G/ r- n0 p4 P/ r
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
1 B* C- o0 w& w# g! @. h U004032ED 8ACA mov cl,dl ; DL送CL% @# q0 ^& ?2 y" p
004032EF 3AD3 cmp dl,bl ; DL和BL比较
0 l. q+ X) _" c. E; [$ Z6 J4 w& C1 C004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）; |+ c8 N4 \' Z
004032F3 84C9 test cl,cl6 S9 S0 }! F1 J) v# @% d
004032F5 74 16 je short qsr.0040330D1 q' |7 D! C$ o' I
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL9 D) W: K+ L2 w+ ^6 t( M% @- y
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL5 Q7 _5 c/ G! a
004032FD 8ACA mov cl,dl D& E6 N. S# h) }0 l
004032FF 3AD3 cmp dl,bl ; DL和BL比较, U2 F4 w' I) P& y% o, W
00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
/ N6 e0 K' w, j' X; J0 @% @00403303 83C0 02 add eax,2 ; EAX加2+ T3 Q% }* c) ?" |" b! F
00403306 83C6 02 add esi,2 ; ESI加2! T2 ~4 `# j- ^& T# \4 L+ l$ q5 Q
00403309 84C9 test cl,cl4 E" }" ^" @: f1 g' v; J
0040330B ^ 75 DC jnz short qsr.004032E96 z3 B8 {- e: W$ [7 e
0040330D 33C0 xor eax,eax- q7 i9 R3 a: h* [: w/ z; C& t
0040330F EB 05 jmp short qsr.00403316
7 B m2 |2 x5 v# I2 f9 s" @ J' t8 O00403311 1BC0 sbb eax,eax
) {( Y0 @' K* [! h0 c. t00403313 83D8 FF sbb eax,-1
& H4 H5 O- S9 d3 A) y. v1 g- \00403316 85C0 test eax,eax
: h; a) i' l3 H" ?7 H: r00403318 74 0E je short qsr.00403328
) e- e) H! q/ _1 Z3 P' Z! R0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A3 W2 }1 C6 z3 F$ X* M8 K$ H9 Z
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
4 a8 x3 I; z; W0 t9 Z6 C00403323 E9 F0000000 jmp qsr.00403418
; ]) q3 L9 ~2 O1 r2 i00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
; w0 g: m9 p' W! v$ J! X) S0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
$ p5 q, ^: W$ D; X: M: O00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]) N% D, X- } L" Q9 m2 {3 }( }
00403333 50 push eax
% I2 l- d" ~9 }7 e3 X3 {00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
3 h7 Z8 e8 g4 Q5 |8 B00403339 50 push eax
0 w( z! m9 L8 U2 I" x. o0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX/ K% j% k/ f5 e9 @- {3 }/ W! c
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX, I4 A/ r# a: A7 x+ k: B
00403343 83C4 04 add esp,40 O; w# T) n; h5 j7 }+ h& F5 L
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI' `; u6 L7 c! D. h& {/ p$ E$ P
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
" N5 c' `* a/ I/ I0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]# s% N/ T% e9 D* w6 z: R1 Q
0040334F 50 push eax% c Q4 x) T: N& G0 P9 G
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
+ O& ]& l/ x* G" A" w0 |; v00403355 50 push eax
1 w+ F4 Q, ? i6 ~8 \. q6 L00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX9 s: F8 v$ s8 F8 m5 _% ~
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
8 o$ l. `5 g/ b5 I2 h1 _! K0040335F 83C4 04 add esp,4
" A x3 x, V2 x6 w! I7 k' P00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
7 G5 l M( x. S+ P00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
6 x. A# [) b. b3 A+ d5 `( r% q00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
7 c! h- a [$ h* M0040336B 50 push eax H" F- A3 s. F- x0 f- }' u
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX5 \; R) L, F. R* } x M
00403371 50 push eax& C; L1 B7 f3 F4 P+ b5 k
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
r( ^9 g! w; _8 D( d' Q! f00403377 8BD8 mov ebx,eax ; EAX送EBX4 y5 O, Y1 p$ w2 c; @
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
; g5 F% ^' P1 V+ t3 d, r0040337D 83C4 04 add esp,4
! i: ` D% z/ m" c `# t, j00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
0 m$ ] \, X- z8 e, g, y00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
, F, { I7 p* S6 s1 j00403387 50 push eax" G4 p! L8 |5 ~
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
7 r4 Q" M0 `9 r6 s5 O7 J0040338D 50 push eax& s, q# w$ W& P8 t
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX+ ]; Z' ^) F' W
00403393 83C4 04 add esp,4" n) l( B. F n
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]0 r/ i$ J( U: K [) w( v
0040339A 8BE8 mov ebp,eax ; EAX送EBP* b4 u- X! }' P0 q
0040339C 6A FF push -13 j$ r+ [; D% t* v; e
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX
5 a& C% o& C& x5 K& S0 a7 c' W004033A3 6A FF push -1
+ I8 L. z1 _& D6 I7 L, V004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
7 R5 i1 b( o# R+ f# i9 h0 m6 d004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX/ b& ~( L1 U8 [9 }/ C: M! B. M
004033AE 6A FF push -1
. N) e8 e, H) ^7 g$ C Z4 q004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX6 N/ g0 }3 H' }. u# ]! s2 {
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
6 H4 K6 w9 r8 i/ w2 V1 z004033B9 6A FF push -1, R! ~ E8 N9 R# ~3 {' b9 V; I3 A
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
0 S5 T0 B( r' C* h x. Q1 D8 c004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
2 r9 y* ~; A) z' o# v9 I004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX' G) z9 l& ^5 A! j0 g7 t
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
% y; E5 M1 K# n5 |004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
7 [. V& J, F& C X: o& W004033D7 D1E0 shl eax,1 ; EAX左移1位
3 W# y& ~# E7 N1 x004033D9 99 cdq ; EAX扩展
, y8 M, x3 f: O" B: [: N! ~9 \9 x004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中! H h! F7 s, b4 R5 ]2 c# [, C
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
5 Q" V' |: R: q4 Z/ i004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）3 J, e: z+ Z; m
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
+ H5 c+ V) X! t" h' F( w004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]# X9 f$ {" v+ D* B$ d) d! Q' a
004033E9 EB 2D jmp short qsr.00403418) S; e8 w5 l) R* e# Q
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX* b, p& R& T$ l1 f8 K
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2! l7 g$ u9 a6 u
004033F7 99 cdq ; EBX扩展
! s/ D) P/ ]( x f; q( I2 F004033F8 33C2 xor eax,edx ; EAX和EDX取异或
* X2 p$ Y' m$ B004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
+ S4 a+ ]$ Z3 V# e6 i004033FF 2BC2 sub eax,edx ; EAX减去EDX
/ L0 Z: }% R; s* z, }6 u+ W2 u00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
# _; y0 c7 k/ @3 k9 B( v00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
- w" M0 c% [; K4 B9 n8 o! C* j5 O00403409 99 cdq4 { V7 T/ C: o6 E" }/ P. i
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
% ~# q, W7 _; _; v. }9 m0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX4 Y6 g" I6 j" B. p( g% m/ g U
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
9 [# j9 p# L' l- n00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）8 G5 R0 F) I: K( J) y
00403418 E8 6EC00200 call qsr.0042F48B ; # {0 e/ e7 F9 c, v# x
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]6 E4 _. _8 o' C# q, {; V6 s
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
/ a2 x8 G T* F6 h7 y) i" N00403426 E8 60C00200 call qsr.0042F48B
5 |+ g, l0 D8 D' R! Y h1 a9 J0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
( R- l' m- C v- j# B6 i1 j0 i0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
6 P5 h! {) _0 z" m00403434 E8 52C00200 call qsr.0042F48B
$ p' V& g/ }! j7 r. P' p, j5 R00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]" s; u/ ~& j) R1 j7 t$ ] o& ?
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],75 q8 N1 t) ~, ^1 K3 H
00403442 E8 44C00200 call qsr.0042F48B
0 ~5 Y8 Z+ A! E6 C- j, ^00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
1 i% s5 c4 m" U/ o1 R0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],69 P6 b+ I! q% |+ e0 `2 g
00403450 E8 36C00200 call qsr.0042F48B( L( E+ i3 R% D B) |* {
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]# u* g y2 S7 j- {0 Y
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
$ P( C+ d. q& V7 B# ?+ d7 `& k% t0040345E E8 28C00200 call qsr.0042F48B" X8 O* A: f- V) G& E1 k
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
& W2 k2 A" @7 [( \00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],23 _3 \# G! {! d3 g( d
0040346C E8 1AC00200 call qsr.0042F48B
) F$ t$ [, L1 J) @" P" l00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
( d+ C0 d! _3 i00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
( S; k# i; M. c9 }& V s! n0040347A E8 0CC00200 call qsr.0042F48B
+ l; [- H. y2 Z- n' o9 i$ Q1 w0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
. q% I: _9 U& d3 V4 t( V00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0; H9 I# W' j1 w% m+ p
00403488 E8 FEBF0200 call qsr.0042F48B( s6 N' w7 v% T4 p
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]' n) R; S( x+ V( B, n |$ t
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1# }8 j% L" y' d Q4 W
00403499 E8 EDBF0200 call qsr.0042F48B
0 E+ r& I1 z& v1 }8 Q0040349E 32C0 xor al,al ; AL清0
, V) E4 N0 Y' f9 [: S0 n004034A0 E9 88000000 jmp qsr.0040352D7 A* M( q7 R* M9 `+ J- X- T
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~2 c) u: ~/ ^( M0 Y2 k
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
Z5 B& R9 ^/ b004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9% E+ {, R7 D# S* @# o
004034B3 E8 D3BF0200 call qsr.0042F48B* d, d7 }8 b, m
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]9 z7 z& V1 t. ^2 Y! W
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
4 }9 h2 m5 F5 Y7 t& ^8 N& X004034C1 E8 C5BF0200 call qsr.0042F48B% T/ |8 Z. \* ]& l2 m
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]4 ?( X& i/ J+ k" G! Y
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7 q% ^, ?7 R/ {$ m- h. t% n+ K
004034CF E8 B7BF0200 call qsr.0042F48B) Z) ^5 Y7 r& j1 q' ] \5 i4 ^) q
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& N2 `0 v( m4 P" \4 T4 N004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6; F! h, _) H ?/ ~+ U2 o0 X4 r
004034DD E8 A9BF0200 call qsr.0042F48B4 i! s8 V1 @% ^+ W
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]3 e' o9 y5 K y- L
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
' i; G9 x: U' u" a, X' q/ A+ r004034EB E8 9BBF0200 call qsr.0042F48B% r; i6 E2 x. P0 h" Y0 m1 q5 y
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
/ `3 l8 T/ r# j2 x- C7 J1 Q! g004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
c0 h4 R! t. t) p004034F9 E8 8DBF0200 call qsr.0042F48B$ s- v) m7 `9 Y/ t0 c8 `6 ]* V9 ~
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* e, A" K" Z# ~
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1- _( x. U4 a. ^: F
00403507 E8 7FBF0200 call qsr.0042F48B
: G. h. E/ M4 ~0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]8 ^/ n8 n5 e* f& ?% n5 \
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
1 ^$ }* x# X* }% E8 E x1 _; Z00403515 E8 71BF0200 call qsr.0042F48B7 I, d T: x# U4 ?* W H- z( {9 v. y2 n
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
" T( }% `; U a3 n9 l; x B0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1) d4 G* d# _! D: \
00403526 E8 60BF0200 call qsr.0042F48B: q! q& S, {9 |% f( |& e- V4 k! H0 Y, r
0040352B B0 01 mov al,1
6 ^; w' y3 P: ^& b! V4 R% q0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]. P6 p% x4 `& g% y; [; l
00403531 5F pop edi
! a! M" y, T# C: _00403532 5E pop esi
R" ?3 H2 K2 A, E' d# `0 U9 y5 o/ W: D00403533 5D pop ebp
" F" Q4 N' u0 c5 I5 C# C00403534 5B pop ebx
0 M2 s+ x% U# j5 T4 q8 ~00403535 64:890D 0000000>mov dword ptr fs:[0],ecx0 \5 W }, S* X: R+ x
0040353C 83C4 30 add esp,30! w7 T5 u' g/ K2 f, [
0040353F C2 0800 retn 8
+ |9 u& m1 q3 ?3 ^4 E" n--------------------------------------------------------------------------------
! V* I8 D+ t' W& Y. ~" D2 F【破解总结】, X- M: D, c4 ~+ o* \# u/ _
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^+ Y% |0 W& |) \/ l7 v; Y2 \) u, k3 p
用户名：yijun0 j) ?5 Z# ` h5 A$ ^ X; \ N! ~
注册码：4893*7777*3726*7777*0529, w# w8 M/ _2 |) x
--------------------------------------------------------------------------------
( W* d- ^( K; R' i6 O' V【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡