|
|
|
【原创】破解Quick Screen Recorder6 D+ [1 r4 d* s1 X( H& a
【破解作者】 yijun
- R0 H( ?5 o( {" b7 w【作者邮箱】 [email protected]
/ I u) C3 T+ B4 ^4 U- N# P: H7 T【使用工具】 OD,PEID
9 j* [& T, q3 @- }% b5 I2 ]) r" M5 @【破解平台】 WinXP# S9 F: S, M, ~! t
【软件名称】 Quick Screen Recorder
) {: e2 z, L* B+ {9 c* ?【下载地址】 天空
: \5 T2 t- M, @【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 3 w/ e* k& r2 J2 B4 V" b9 h
【软件大小】 540K
0 U+ @& l o v3 j; j2 a【加壳方式】 无
6 k& t5 r& y1 n, E% ^. c【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
" `0 q- U+ t+ `& D% h--------------------------------------------------------------------------------
# m- l' l9 B0 O+ V3 h$ d; o【破解内容】
( b! F6 t$ G! n* |3 K) a+ K8 Z PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：
4 D3 n: r' ^5 H0 q! `0 q, [00404C69 55 push ebp //在此下断
; D) {8 Q: G" y/ ?00404C6A 56 push esi" K, |& Q& I( t# q
00404C6B 57 push edi; f5 o/ n4 D2 I6 W' Z9 a, o
00404C6C 8BE9 mov ebp,ecx
1 w. ?( Z& c( z9 y7 N00404C6E 6A 01 push 1
- q# ?/ @. {/ K3 `( J8 v; O4 x00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名) w' w$ J/ d1 @- h; h# `5 D' i
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
1 ]' x4 A/ W3 a' `# O00404C78 8BCF mov ecx,edi! L5 T' j/ C# x4 I+ ~' q& T# Y/ G
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码. j' J j" @, N4 l7 @
00404C7F 8BCF mov ecx,edi% ^) g5 t$ |1 ~* U3 z
00404C81 E8 A73E0200 call qsr.00428B2D
. x' D2 A2 i: I+ c* ~* f _) r: @4 v00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
' r+ b6 E& d! W/ Y- a00404C89 8BCE mov ecx,esi
9 Q% E) ~7 r0 m9 z# h. Y00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX7 b0 g0 {, E& J7 n: K
00404C90 8BCE mov ecx,esi9 \" {1 l+ A( w, j/ {/ ]; _7 z
00404C92 E8 963E0200 call qsr.00428B2D
& {, D; w: U1 M9 M, N7 r00404C97 8B06 mov eax,dword ptr ds:[esi]( m z& J" b. k% U' j
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2. E. u7 E Y+ v( |2 a0 W% u0 E! y
00404C9D 7D 26 jge short qsr.00404CC5) g- [8 O- ^4 `, K6 B f
00404C9F 6A 40 push 40
% b9 ?- @- R* ^6 h6 p8 a3 G9 P00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
) _+ {& C/ u8 j1 y$ {+ ^8 P00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
0 ~, ~! C# W, ^: R8 X% Q00404CAB 8BCD mov ecx,ebp) Q( _, [0 o2 ~2 U
00404CAD E8 C3840200 call qsr.0042D175
5 R" B+ U5 ~7 u* Y' Q# X5 r00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]5 c2 T: z3 e) D7 _( @1 o* J2 e
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx0 X' R- B9 K; z9 P+ u
00404CBD 5F pop edi
2 s9 [+ R/ Y3 ]& m) Q00404CBE 5E pop esi1 d, ]0 O" U: a& a4 K
00404CBF 5D pop ebp. r4 L; B- \! y5 P
00404CC0 5B pop ebx
. g+ ?: `; d3 m00404CC1 83C4 18 add esp,18
1 T- c- H9 ^# ]# i% ?& I: M4 A00404CC4 C3 retn
8 W& }. W" M$ m; F- N. L00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]+ `3 n. S& i9 u9 P2 W# J2 n
00404CC8 84C0 test al,al1 b, q G3 Z. ~& K% k0 ?1 E
00404CCA 0F85 1C010000 jnz qsr.00404DEC& d" z4 U& v" w; M1 P2 W2 w2 k
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
9 _# D1 S1 U5 a! ~00404CD4 E8 87E3FFFF call qsr.00403060
; A& l; W( x) o* W5 R: v00404CD9 51 push ecx
4 b( l2 G4 j2 O- A) U) d, \5 }00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],08 u7 C) B0 q9 d& F2 e
00404CE2 8BCC mov ecx,esp
[1 |/ e6 p) E \( P1 [6 s: S00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
$ z/ g) W/ `) i6 h+ Z& p3 G00404CE8 56 push esi
# B l( V' x, l5 ]# Y1 p00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
( U" H1 z; K( @7 L00404CEE 51 push ecx
) d; p5 {! D4 O. h) Y2 |4 J1 j! t00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1& J( F4 P2 G/ E3 T
00404CF4 8BCC mov ecx,esp
1 k! w6 M, E: }# A# w00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
2 i! s! z* d' F00404CFA 57 push edi; A! g, G; [$ C E
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0( J6 C) J+ K& ~* }" [
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], c4 F$ s4 k7 z3 {# f, T
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
) J4 \" v+ O0 s5 {8 ? `3 {/ U00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~1 v. ? S9 j$ c' z
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~
3 Z+ k- z- t2 b4 }/ [00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~9 P. }3 O6 }7 D/ i. h) w3 l: ?
00404D12 6A 40 push 400 q, A; A9 D4 [8 }3 x
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
t2 ~& Z4 a7 ?* Y- ~00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
6 e- y' b& N# t- O* P) I00404D1E 8BCD mov ecx,ebp
# H0 r; [* [* ]3 B' c8 p7 M00404D20 E8 50840200 call qsr.0042D175% q/ }( ^8 M! ^6 r: c; R5 b7 S+ X- [
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]5 p5 n+ K- [7 i
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
7 h l* I' T$ V00404D31 E8 5AE3FFFF call qsr.00403090" w! n/ M- V) |. D% p
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
# g/ p* V' n$ D00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
/ l9 V1 ^6 c( r8 p: h) v& j+ v( J) {00404D41 5F pop edi! I% [; A5 z* _' p& p- @
00404D42 5E pop esi' r' m, E% C2 a" T+ E) \
00404D43 5D pop ebp
0 V9 h7 I. h3 G! B9 e0 K00404D44 5B pop ebx' a0 [7 v1 L) w2 [4 W
00404D45 83C4 18 add esp,18, W3 b I) s2 G* Z: F/ X& ]
00404D48 C3 retn0 {8 k) W+ @- j* F/ {0 t {8 G
*********************************************************************************************************************************************************
' K8 k3 d: C' U& D. o% T8 x跟进00404D09处CALL来到：
/ q i# N7 U! q% c5 ^6 p2 }004030A0 6A FF push -1 //一路F8下去~~~~4 \% n, l8 F; `! a
004030A2 68 C88F4400 push qsr.00448FC8
) m) I! Q0 }" }; A. L! S004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]5 L9 i* v# L4 B% @- G! {4 X
004030AD 50 push eax' B( M9 S- S, t K6 O! h, J
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
. v9 B( l: w5 ^/ [7 L1 p004030B5 83EC 24 sub esp,24' r) u# @0 o8 R; P7 x) e
004030B8 53 push ebx: _' q; o; @% T9 ?" U7 A& n
004030B9 55 push ebp
% L* I/ o9 i+ g! T/ M, d004030BA 56 push esi; l1 a$ u9 K& O& \
004030BB 57 push edi6 q- v" O' O6 l' E
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"$ H9 ]. ]- y6 k8 p8 P0 G8 m
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
" m. K% @, K# ^; k" F( v004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1- J) _7 k: y9 j5 ^4 F
004030CD E8 27C40200 call qsr.0042F4F9
" G$ u+ S, Q4 ]1 p/ `, P004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
~, k& E# [$ X0 q- J) c3 p004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
; X& i* E0 e$ }5 N7 k004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
& S4 ~. m7 b8 r E0 Y4 h* y8 S y) }004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
7 s7 F$ M0 [# Q* b004030E4 E8 905A0200 call qsr.00428B793 F( O$ E) J7 W3 d& C
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( X( u/ t0 I9 x% S8 T004030ED E8 3B5A0200 call qsr.00428B2D A" n# A/ ?7 I! T+ O& b
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
# T& R% }8 \ L5 N; }004030F6 E8 7E5A0200 call qsr.00428B793 B( `8 f1 e3 o6 J- z) Z( } V
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
2 F6 }9 @0 C( F$ C004030FF E8 295A0200 call qsr.00428B2D
1 y3 U5 d; z; |2 b8 L1 |$ t" ~3 ~00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]+ b0 @- k9 Z; u2 c9 j) v; r
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
8 m$ B: P% S ^5 I' _% K5 z+ `" q0040310B 83F8 02 cmp eax,2; y8 O) b7 _1 O" c g
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳$ K0 G6 S) W. X
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
4 C& j' N: d% V1 A- [00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
, \* Y& h [" }2 x' j! r5 T3 X0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
' m0 [7 @8 }+ C1 T: M00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]1 \; z2 y0 T5 u1 l, p
00403126 6A 01 push 1
' f) {1 d* a- t6 t- s; r3 T' ^00403128 50 push eax
/ T1 ?1 o- H3 ^( P& D& n( j00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ P: o% }" M; o) I& |* i* Z& l
0040312D E8 C4550200 call qsr.004286F6
$ b f4 k* u$ t00403132 8B00 mov eax,dword ptr ds:[eax]+ ]6 ]3 \' ~3 I' }5 g
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]: G3 S+ P2 q8 L) H
00403138 50 push eax. [1 h& m) W B! f6 f) m
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
. E8 Y& x' Q+ k/ L. x0040313E E8 4D560200 call qsr.00428790
- y6 F9 p" b* H9 z w00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
- y/ i, a/ {, h& y# b/ C6 {00403147 8BF0 mov esi,eax
- Z8 l8 Z" y3 s' V1 C0 w00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3! p. V! {, j% B4 S' q
0040314E E8 38C30200 call qsr.0042F48B
; z! c$ N# t: z w) w+ W' h00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
3 |1 d+ b, E7 |( |! M00403156 B9 3E000000 mov ecx,3E
) Y0 o/ j( y- {$ W. i- z0040315B 99 cdq
: S/ m* P h+ u8 X- r' m# F0040315C F7F9 idiv ecx
( }" `, X7 N( @2 a7 k, w V0040315E 6A 01 push 1" _. D) E5 s8 X" E
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
, b6 w2 Q' S. J) c0 b00403164 8BF2 mov esi,edx
- g" Q0 H" s! N9 ]& t) F( G00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
4 P! _0 o' e: E) P' x0040316A 52 push edx
* U" n( ^( E" G3 E! T. }+ t0040316B E8 0A550200 call qsr.0042867A
4 W, K3 W2 `9 X' o, M00403170 8B00 mov eax,dword ptr ds:[eax]
9 n$ F; [# Q1 L00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]& X0 y: ?2 r/ y4 K$ i2 d( G3 j
00403176 50 push eax
. S! B9 @2 c9 u6 T2 _00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
' u0 Q' R9 n3 J) t3 F: W0040317C E8 0F560200 call qsr.004287902 I4 K2 I# U+ g/ R
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
# ]6 [/ W4 f5 N' A+ L, f00403185 8BF8 mov edi,eax
- c3 n4 y3 M$ n6 p00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3( Z) [# W+ z: k5 [7 l1 ~# g
0040318C E8 FAC20200 call qsr.0042F48B
, G" O! a- ], n* c+ O% ^00403191 8D47 0A lea eax,dword ptr ds:[edi+A]" @+ K' ~5 x+ c: o
00403194 B9 3E000000 mov ecx,3E! @: r4 b- a: N
00403199 99 cdq
! M) E2 m/ ~) K5 L+ t0040319A F7F9 idiv ecx
. P8 o8 O' x3 F& u( Q0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
; T0 }! o c* _9 J! N P6 D3 i% @- R004031A1 894424 28 mov dword ptr ss:[esp+28],eax
/ D- G4 C# k, W/ P6 J5 _: O8 e004031A5 8BCA mov ecx,edx% F9 B6 z8 }; d" L) l
004031A7 894424 24 mov dword ptr ss:[esp+24],eax$ p- u: M% {8 @9 O; K
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax
; D2 W$ x) l1 b( b1 g1 _; X/ i004031AF 894424 18 mov dword ptr ss:[esp+18],eax
# U3 v$ r) t8 C; `- e004031B3 894424 14 mov dword ptr ss:[esp+14],eax& z; s4 J# @5 k. g
004031B7 894424 10 mov dword ptr ss:[esp+10],eax/ J7 v4 C r) u7 V7 f. [( P
004031BB 8BC1 mov eax,ecx
4 j H1 V! ]; b004031BD BF 0A000000 mov edi,0A2 B# H* k" F& J4 T" s' K6 {% F
004031C2 99 cdq3 M* W+ H" w" r* f0 E4 V2 U! y; U
004031C3 F7FF idiv edi
. g2 _8 {( M! ^$ c7 M004031C5 8BC1 mov eax,ecx0 Q$ U7 G5 Z% W% e1 u
004031C7 B3 0B mov bl,0B
& r' ^1 W4 s$ e7 w004031C9 0FAFC1 imul eax,ecx
8 z+ v8 j8 `7 [004031CC 8BCF mov ecx,edi
/ l* m' p, `7 \8 w7 w004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
8 b& J2 g0 \5 x- o* `9 u004031D2 52 push edx: Z; A8 F, _5 N# L1 d1 i
004031D3 99 cdq
0 r9 Z/ P! G" \004031D4 F7F9 idiv ecx7 W% [! B( [# V' i
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
- z$ `4 G% w2 q0 a& `004031DD 2BC6 sub eax,esi
/ ` N5 ]9 T& H004031DF 52 push edx
4 K7 y' P& h4 |1 h7 l; U004031E0 99 cdq
. y2 G- ]( }# u9 n004031E1 F7F9 idiv ecx
# H% h- N( A, ]" t9 g1 ^5 Q% L. q9 [- y004031E3 8BC6 mov eax,esi( Q( e4 D- f- ?1 d) } X
004031E5 52 push edx# z7 j' u @5 i ~( N
004031E6 99 cdq2 l7 f7 E' ^% ^9 {
004031E7 F7F9 idiv ecx
! z' h% o0 b0 p5 j# M004031E9 52 push edx
9 g* k1 b, b7 `004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]$ \7 h. T% P7 e* f7 w! U; T% i
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
( F; L2 L( f b) X004031F3 52 push edx$ R: m) o) Q$ \& P2 v0 H/ I
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是4893
; j, s! f8 s) q1 e1 t004031F9 83C4 18 add esp,18
4 |# S( f9 b% a+ G4 T) E004031FC 6A 04 push 4
% }; F6 i N( ?& l004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]& |5 ?: H$ L3 K5 K
00403202 6A 00 push 0; {. ?: _* G* @' H
00403204 50 push eax/ n6 I7 K H, E- f( g
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 I: { a2 m" e2 G' S7 I00403209 E8 D6530200 call qsr.004285E4
; o; L% q& Y- U! [/ ^$ @9 {0040320E 50 push eax
5 }, Q9 R3 ~* S0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
( K" G. A& N2 v, B00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
! T, A, m# N" Q! O0 y f00403218 E8 A7C30200 call qsr.0042F5C4
# K: J9 Q$ f& _7 X# D0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ @$ R+ [' y J2 Y3 W; q
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl4 }. b d) ]4 v0 f- n" I
00403225 E8 61C20200 call qsr.0042F48B; r9 J! M: l" l# ~% H* j. i
0040322A 6A 04 push 4
$ X; D* A) V# \! y6 J1 `& G0 h0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
# y2 j# u! `7 Z* A+ N4 T7 R+ I5 n00403230 6A 05 push 57 I8 N7 W2 K- J8 q* J
00403232 51 push ecx$ i' Z& W1 s) `6 W: g5 D6 A
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]5 v& ]7 }1 `/ J$ X# [ R, o6 J) X
00403237 E8 A8530200 call qsr.004285E4
5 W% i# R1 I4 J0040323C 50 push eax
* K8 F3 I9 K% K+ L0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]- R" M9 M3 n* h9 F; \( O+ T: f
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
# x8 x1 ?6 ]- ]3 w- P- I8 {00403246 E8 79C30200 call qsr.0042F5C4
: d) h$ f# m! n( H4 o) U4 \0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]( h& k" |- C$ E* p
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl$ {7 t9 L' V' c4 w4 F1 B
00403253 E8 33C20200 call qsr.0042F48B, P; _. V: T: S& t) \) q1 V2 J2 B
00403258 6A 04 push 4
% z& m" j/ B* S8 N0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
4 q& Y. f7 l7 w% _0040325E 57 push edi
! ^5 D# M3 p* ?/ _0040325F 52 push edx2 | O' U$ c( s
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
+ y& e8 f, K- j9 h( Z1 @8 \00403264 E8 7B530200 call qsr.004285E4* H9 X0 R3 G/ y0 ^6 p
00403269 50 push eax( W& t, K; Y; g5 d& V0 D, w9 n
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
d& x( Q; i4 K- k+ P; l N0 {0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E0 K. f7 Z5 ~5 N5 k
00403273 E8 4CC30200 call qsr.0042F5C4
0 Z& D2 J9 c5 R' y5 @00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]0 U% F& A( S( I% X4 p$ s1 M
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
+ R- C+ G$ I& Z# n00403280 E8 06C20200 call qsr.0042F48B& N% R) F0 M" w9 \, f% a, M
00403285 6A 04 push 4* Z& [6 R! ^4 l* n
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]$ u- I5 t6 k% k" y$ } O
0040328B 6A 0F push 0F
8 {/ C6 g; g5 P% D5 m( z% n0040328D 50 push eax0 @# C x. k9 ]$ C+ o
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# C' W" X* i) [6 w1 `' t$ M& Q
00403292 E8 4D530200 call qsr.004285E4* s4 ?3 q% e* x) [% D
00403297 50 push eax7 A5 y! r4 Y! q1 t
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]" g+ i" L. j# v5 k
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F1 l& W1 C5 T; d$ B y+ b0 t
004032A1 E8 1EC30200 call qsr.0042F5C4* |2 D+ w, V0 C& X6 a* Y
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]; a$ j. q% b. q' \* U% ]" M
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl ^+ N5 Y6 Q4 D! n: }6 e z8 s
004032AE E8 D8C10200 call qsr.0042F48B" B6 w' {- E, i8 b% ] q
004032B3 6A 04 push 4
" B( R" }4 H, \- h, W% d/ f004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
5 l7 k) Y- J4 |/ y" R/ o004032B9 6A 14 push 14: [) J0 |2 |4 q4 b0 z% T% B
004032BB 51 push ecx3 z3 L: f: {' o/ U; \) t2 M h' }
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- x8 Q/ A4 U5 E3 z5 C" \004032C0 E8 1F530200 call qsr.004285E4; e% U2 u" p9 }( \$ G
004032C5 50 push eax
: g+ a4 K8 q7 _+ | c# M004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
5 w' R; P/ ~" \4 e4 F. s004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
( j! r# h5 Z9 T( \2 ]' M004032CF E8 F0C20200 call qsr.0042F5C4
' k9 i6 ~" Z# \" b: i$ {" R c004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) L" g, P: O$ d! O
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl4 i: Y; G4 `1 [8 c
004032DC E8 AAC10200 call qsr.0042F48B
{' o1 h! x% i004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI; P2 x& v6 m; x) S
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX% d! Z7 Y2 T, m p( h2 z! [
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL% {2 @) @+ P# B1 Y- b* b
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
( Q& X! {8 P O, [. {004032ED 8ACA mov cl,dl ; DL送CL' Y5 O1 R, D6 D9 r, K- {
004032EF 3AD3 cmp dl,bl ; DL和BL比较4 I9 U8 [/ r6 [4 A- V
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）
4 J+ I7 P* g" e$ q- N1 P004032F3 84C9 test cl,cl6 Q- _( f) }$ G2 c9 F. u5 v, l; n
004032F5 74 16 je short qsr.0040330D$ X4 T4 k4 [0 ~7 s
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
: ^/ y6 S. a1 |+ |& s- I# z( o004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL6 B% u$ a- [" ^9 G9 q
004032FD 8ACA mov cl,dl1 q( }4 W9 ~9 w, x( s
004032FF 3AD3 cmp dl,bl ; DL和BL比较
' m8 B5 n+ b$ o& _% \3 |0 M00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）
! L2 C" K. [( b V00403303 83C0 02 add eax,2 ; EAX加2
$ e( H3 B4 j. S7 K00403306 83C6 02 add esi,2 ; ESI加2
" j) r1 \- f( N) f; i+ V00403309 84C9 test cl,cl% A. u2 n: E5 `7 K* C% ~6 S, M9 A: S
0040330B ^ 75 DC jnz short qsr.004032E9; t0 q/ Q* D9 \8 `* a; `* c
0040330D 33C0 xor eax,eax) M. H, A/ g, C/ V f
0040330F EB 05 jmp short qsr.00403316, O+ R% \/ Y* \* Z
00403311 1BC0 sbb eax,eax8 q% t2 A0 V) Z5 w: v
00403313 83D8 FF sbb eax,-14 M$ {' u/ G( P `& S7 U
00403316 85C0 test eax,eax3 D* I8 M$ z3 q5 T f
00403318 74 0E je short qsr.00403328
% I: [1 v/ U7 ]; f& W4 M w0 H, E0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A, P! r0 g1 r: i/ j! W7 d
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]' a; ~4 I! l. H8 E
00403323 E9 F0000000 jmp qsr.00403418* R5 T$ ^4 ?7 ?9 \" F8 b3 Y1 M- w/ b
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
' c) K/ j4 B2 D; k. V! B3 S0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
9 c2 Q. D& n( J7 D4 _9 `% a00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]' b q- k. n) _$ T; A' R
00403333 50 push eax
6 q/ W4 O; i2 _& e0 V00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX8 y0 f: q! k1 H! l/ W; o
00403339 50 push eax
0 R$ f- a9 s3 C/ Q7 z/ o0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
3 W( i, E z( v# t1 o. t7 Z8 g0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX1 | l: T% x/ Q8 Q& A
00403343 83C4 04 add esp,48 Z. a! g3 W4 T X7 F3 H4 N
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
- m' Q$ b% h8 x00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
3 I2 `) [ {7 z0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
9 M L. h* e9 j0040334F 50 push eax+ j( C+ q( D. w+ E
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
7 g. f' Y" [2 b" n$ W00403355 50 push eax
, f2 {) a3 O8 P1 |* z/ ^00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
$ F, D8 \ h9 q0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
2 Y% Z* ?$ I4 T6 d" V! b$ h- T. y0040335F 83C4 04 add esp,4
. _" U/ c3 o2 G1 c! ?00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
, J2 ?* f( y1 L: V5 V5 ]00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]0 ^& C& d3 |% j5 B: Q
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
9 G' d1 \0 S- A. X8 r; G0040336B 50 push eax
, o+ H, y- a$ p, _( v: O0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
& q q" c O' c( t; G00403371 50 push eax' k6 v: l( ^8 Y$ Q( _) V
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
, G. Q2 U! C7 G! y4 Y3 c1 E- Q00403377 8BD8 mov ebx,eax ; EAX送EBX
0 G5 b" `7 g* u% z2 c7 Z0 h# O00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX$ s( i) _& ~- t* a
0040337D 83C4 04 add esp,4: v( p9 q! M" I
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
8 m2 \" m/ U2 j, n. P, ^* m00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
) W- k- y# {* ~1 S1 t, T00403387 50 push eax
" M' }( k" h# \9 ~00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX2 R/ V$ u8 T4 B& ]% x
0040338D 50 push eax6 N! j1 O8 V+ s8 n* J& r6 a$ U
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX1 H. f0 P$ b( E+ E& x3 C7 Z) W) }
00403393 83C4 04 add esp,40 [2 E# ~5 G3 r4 S$ Q' g Y
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]4 n2 C! n# \) j& L: L3 I- X
0040339A 8BE8 mov ebp,eax ; EAX送EBP
2 K% k: d0 N$ g# h( _& W0040339C 6A FF push -1. T8 O, j0 q8 p; a2 ~9 d
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX: T* r: y6 z- j2 p5 Z! n
004033A3 6A FF push -1/ d3 j( d- F' L8 R3 s2 X, O
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX% ?3 p- y8 V6 f' I
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
4 k% [- y5 j- l( _- F004033AE 6A FF push -1 N# ^& s5 k& z1 c6 j+ I
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
/ h1 P6 k3 ?* E: B004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX
* w# {8 N2 `0 T3 v2 E- _004033B9 6A FF push -1
9 U* K1 S0 k' n1 T6 c7 X, Q004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX/ N, W0 k5 S6 m2 Q z9 @
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
% m: ~7 E* N4 U" u4 E5 n& l& n004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
6 m/ N0 n3 z( ?$ _004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
1 n: I! Y8 y& M/ `: O& X+ n004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX4 y# L3 g& O- L
004033D7 D1E0 shl eax,1 ; EAX左移1位
" b% X3 G8 i% r2 V- W004033D9 99 cdq ; EAX扩展) O) l0 f" j4 M; [$ C
004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
! B( {3 @% K6 |% }: q004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
) e' ^" e" y( b: |/ a6 |: R* q004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
3 ]* o. C* ?0 c+ \004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A! B# O2 i8 |: v
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
9 _/ I. R. H9 I! H004033E9 EB 2D jmp short qsr.004034188 n+ P% v0 I. x, N8 S2 I
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
! B# }* Y+ B3 Y3 o, F: o1 H004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2$ P7 n T* }2 h, n) K
004033F7 99 cdq ; EBX扩展! h' V* c8 m: p, x
004033F8 33C2 xor eax,edx ; EAX和EDX取异或9 }& K5 l4 t. s2 n( Y0 Q; }9 i2 P
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
6 b' a$ ^( b. h+ L) g8 `. L6 t004033FF 2BC2 sub eax,edx ; EAX减去EDX
0 n) v( V& p& }) L- b- i9 b00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
9 j& t* ?$ v& b( v00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
3 T. m3 {% m) r+ k00403409 99 cdq5 _6 n' B4 ?+ a" c. X' j9 u! `' k2 [
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中. @2 S$ C& g. k4 H$ B( n
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX% t6 O1 b( f, ^. q& R2 Y W% O; e0 j
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
4 H* {6 X$ x% K+ `00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）2 A- f$ z- x$ r& i6 j
00403418 E8 6EC00200 call qsr.0042F48B ;
7 E, g8 e q7 E* f+ |0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# N! C$ B7 _* c d6 p( j00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
* _! K# \0 _. C7 }00403426 E8 60C00200 call qsr.0042F48B
5 Q- d8 L6 k* G6 k0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]) p- Y9 v! f; @9 i V1 m1 w9 i
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],84 `" ^" e7 ]6 \6 H; \% c. `
00403434 E8 52C00200 call qsr.0042F48B# N# S! X3 m. Y2 R1 r
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: E% Z @2 V5 n$ ~* v
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7, L0 {6 u# ^% K# i2 B
00403442 E8 44C00200 call qsr.0042F48B& l5 C! C8 B ^ l7 {% L3 F C
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
# }# C' M* c: V* m0 _2 n0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],65 f9 Q( c) w5 v) w* A
00403450 E8 36C00200 call qsr.0042F48B
4 N& \$ S$ ^# h ^00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
% f9 Q! I4 F8 y: d. o00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
; c; M4 h' C$ \% [" v7 W2 p/ T0040345E E8 28C00200 call qsr.0042F48B
* r2 j& |! V% J& w00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
! r, D- q- k, K/ F# ~( I: k00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2) b$ P& z, \6 `2 q4 Q
0040346C E8 1AC00200 call qsr.0042F48B' i- {; |( V1 s
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]& d: @7 E' E" M M% c
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],19 j% B% f8 s- K
0040347A E8 0CC00200 call qsr.0042F48B
: @) M( t. D- l! W" Q2 K% y0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]% n( K+ G; I) d8 }& \
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],08 g8 _/ t8 T& p3 d. `. i
00403488 E8 FEBF0200 call qsr.0042F48B" w7 G$ K' d" W/ V; i
0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]+ q! W3 z6 f& z* g/ g( J
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
l4 X7 P7 c5 h6 k& h' b Z00403499 E8 EDBF0200 call qsr.0042F48B
* y5 h% U* [% v0 t' v+ }0040349E 32C0 xor al,al ; AL清0
& Y+ {8 |; `9 x- Y% I& y: n$ Z004034A0 E9 88000000 jmp qsr.0040352D( z9 F* l5 b$ I
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~
8 x6 f* K1 {, n% _9 v4 [004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 s% Z/ z, z* ~( t
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
! J( V4 Y# t. r# u004034B3 E8 D3BF0200 call qsr.0042F48B( F1 e7 M5 n- K* a* A
004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]2 h! Q! b4 k# K* a1 C; K
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
( _4 @) U" O6 f# f1 d1 A: U9 b004034C1 E8 C5BF0200 call qsr.0042F48B
& ?; T: ]$ N& [004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 Z& N* b' T* {" G7 ~004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7; W/ e7 W. q9 f7 _ W2 Q6 C6 b/ }
004034CF E8 B7BF0200 call qsr.0042F48B( `% ~' J: L1 t: C k J. d+ [# k
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]% v& ^5 e$ u5 j7 ^
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6* Z0 {( z3 z* d/ H- W& C: _6 ~
004034DD E8 A9BF0200 call qsr.0042F48B: v4 a; u' `6 l5 c; [8 L
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]: |7 J H! b; U. e
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3+ Z3 S% Q2 ?2 t: p/ r/ b
004034EB E8 9BBF0200 call qsr.0042F48B& A- T( i' @$ c4 e; w' U
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]/ I4 a; T) N5 F4 G
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2. h5 |. `' ~, \+ O9 z7 V
004034F9 E8 8DBF0200 call qsr.0042F48B
7 n: V* a# i' g+ S, P1 O" V2 Z004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]$ ~% D2 v u, X7 c# j
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1 _ A7 h" r; w: `! \' M8 h
00403507 E8 7FBF0200 call qsr.0042F48B1 ?* j! Y' e+ T: u. j
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
* _7 Q$ h* A9 O: q5 W00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
& f' I" u- n- G) t00403515 E8 71BF0200 call qsr.0042F48B
& {) o+ w2 I+ J+ u3 q9 u0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]" p0 d4 A7 a( ^3 }' N4 Y! O
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-15 r( B) n# _1 G! f% v3 Z. J- |
00403526 E8 60BF0200 call qsr.0042F48B
( m, _( l! k+ a' g1 B( H' P% R$ ?0040352B B0 01 mov al,15 o0 e/ c) j; a2 Z) F0 x( k( R
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
+ H D9 C% r& d3 U4 P6 j00403531 5F pop edi
6 y2 _. g. K6 f00403532 5E pop esi& Y, g- F5 g0 [0 F
00403533 5D pop ebp
& V" Z( ~) p5 r4 k5 H/ A9 ]00403534 5B pop ebx
7 `$ K g% L9 B, r2 i6 {00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
/ K$ H, F8 H2 U% A, e5 q0040353C 83C4 30 add esp,30
& W' |1 S H- A% e3 }+ B0040353F C2 0800 retn 8
' |. U. N2 S$ m/ e--------------------------------------------------------------------------------
9 i7 m3 f" E( M【破解总结】
5 Y1 n/ R" ?( t' Q) Q" t 用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
( w, Q& }! Z" ~, p! _2 ^用户名：yijun
: S; D* m, k# D, J1 ^% y注册码：4893*7777*3726*7777*0529
; o2 f9 c6 k9 F& h" s--------------------------------------------------------------------------------
; g! e" V0 x; ?7 b【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡