|
|
|
【原创】破解Quick Screen Recorder5 ?; p% J2 u" A/ C0 u: L
【破解作者】 yijun6 J- r" [6 P) M% @* s
【作者邮箱】 [email protected]; ^3 Y- U- y6 t$ G; Q- {6 |
【使用工具】 OD,PEID
- W: A4 r+ ~ N* U3 h/ `& F【破解平台】 WinXP
, t5 R1 |$ u. N/ I【软件名称】 Quick Screen Recorder/ W% X0 c" g, }& w! @, l
【下载地址】 天空 [$ Y# I( t7 S* c$ b9 E4 N
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. : P& B! Q! _2 d. _
【软件大小】 540K* G) ^+ I# c6 @' N1 T o6 i! P
【加壳方式】 无
; @9 ^* ]2 }9 p7 c【破解声明】 我是一只小菜鸟，偶得一点心得，愿与大家分享：）
% j( b7 u+ ^ O" ?$ X3 L( W--------------------------------------------------------------------------------
* a+ D7 m& }, ?) m6 {* c" q. J% L【破解内容】7 x7 a) O& x9 P+ T" I# _( ^. ?
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方：- Q' T0 `5 _! J4 T
00404C69 55 push ebp //在此下断1 X' ^9 O, I0 f- w/ r) p/ {! b
00404C6A 56 push esi1 G0 k# p5 I: R9 y/ a
00404C6B 57 push edi
F* G2 ^4 _% `) @; _00404C6C 8BE9 mov ebp,ecx
- r! b) e! ^ a00404C6E 6A 01 push 1
' u* ^. `; E' j7 K8 b00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名2 Y" W- m/ a& R
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
" N6 P- p+ t' b/ `. D00404C78 8BCF mov ecx,edi* Z6 T" f( w Y( o) q, {$ V
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码0 q8 h9 M$ a' d1 p
00404C7F 8BCF mov ecx,edi
6 w/ l) T7 b" Z1 W* A00404C81 E8 A73E0200 call qsr.00428B2D
S7 r- s% l, X00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
- U, p% w4 P n, t00404C89 8BCE mov ecx,esi3 D8 d9 j. Y8 I1 T3 Z
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX) y! I8 K, x# D2 f$ \: {8 n4 {3 O
00404C90 8BCE mov ecx,esi( ] _7 b, M o6 P/ G
00404C92 E8 963E0200 call qsr.00428B2D
5 }- N% p6 C8 T00404C97 8B06 mov eax,dword ptr ds:[esi]2 I3 P6 w7 q `, U
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2# B/ d) N& y- u. _* q8 ?! C. D
00404C9D 7D 26 jge short qsr.00404CC5
& J" Z6 b4 |" W) l4 ^7 H. Z00404C9F 6A 40 push 40+ _# O( A1 C! W4 u2 O" ]
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"& [1 n: l$ V3 N7 S. ?
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
6 K8 p; t; l- \" D, d% W+ B00404CAB 8BCD mov ecx,ebp
/ i; I1 O1 V& |# A+ Q/ B+ s; r* t/ R! ~00404CAD E8 C3840200 call qsr.0042D175
$ R a" m; J& L/ {00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]7 F/ P& n/ o) H% t+ z4 J) I
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx$ O/ u# _: H3 q* M( ~
00404CBD 5F pop edi
E+ R( M( C) M6 x/ s- ~00404CBE 5E pop esi+ W; X' _8 S' K" F
00404CBF 5D pop ebp
, L2 K+ T1 q$ C- |0 r* N) ]00404CC0 5B pop ebx1 O$ {4 ]5 a" U3 H
00404CC1 83C4 18 add esp,188 V k# e" ]: h) ]
00404CC4 C3 retn ?# S/ M5 a0 P7 [# s& v9 J/ h
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
2 Y: @0 W- n, C. X: X00404CC8 84C0 test al,al
- q4 n6 ?& E% B' Q/ r9 u& V' G( _3 P0 E00404CCA 0F85 1C010000 jnz qsr.00404DEC# P6 I: [1 r5 r& w5 I1 C6 l7 w
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' ?* ~* e, ~7 M b: {. d) _00404CD4 E8 87E3FFFF call qsr.00403060
+ X" ]5 @ A( o+ n7 \00404CD9 51 push ecx2 i' v) n+ ~9 {1 A: m$ C) H: z
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0/ B6 }4 D Q8 F& v
00404CE2 8BCC mov ecx,esp
% U s/ q2 K; e6 ^5 r00404CE4 896424 14 mov dword ptr ss:[esp+14],esp6 g" n; l' {3 P0 w% K [6 z' g
00404CE8 56 push esi
0 ^/ \( l- e1 c( j( Y00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0* j4 {0 m" g1 Z5 w
00404CEE 51 push ecx5 A* l0 V& ~2 O0 k) l; _( I8 C# E
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
) s* b/ b t& O1 Q0 A9 q/ o00404CF4 8BCC mov ecx,esp
$ T9 }4 |6 x+ v1 e( p; A00404CF6 896424 20 mov dword ptr ss:[esp+20],esp8 p) ^2 h# h- @1 M% _5 c; V0 H
00404CFA 57 push edi/ z; ~0 u7 F! g6 ^2 Z. u
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
$ b5 f" A: X& A8 K4 h00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
6 s7 w& x. g3 ]! M( Z9 E% l) m00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
. [$ Z/ u D, ]5 P6 E( D00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL，跟进~~~~~~~~~~~
8 e* I9 J: M5 W8 a. X00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功，此时AL=1~~~8 O9 W M; K {- j% x/ Z
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~# w0 k( a- @' t* l
00404D12 6A 40 push 40$ P9 U1 G0 d+ O, K, x! ~" t4 ?2 r0 H
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"# k0 N2 i8 }$ }/ v- ~2 Q& }
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
& I0 @3 B$ D# }00404D1E 8BCD mov ecx,ebp8 O U' h5 Z- \( }
00404D20 E8 50840200 call qsr.0042D175
! T2 X8 E" l0 u5 M& t% a00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
) ?% i3 v2 q) o$ D* T2 i00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-14 C) w& {7 U" `5 `& g0 A% z9 o3 X
00404D31 E8 5AE3FFFF call qsr.00403090
; ~1 o% {( S( V$ s8 K& ]00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
; ~5 b$ z9 a. k4 p; W5 W: r( y00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx- w, W% s6 q2 E9 H
00404D41 5F pop edi8 g5 i. D" c J. K7 t2 j
00404D42 5E pop esi$ o* \. F0 w T) s1 b9 J: r
00404D43 5D pop ebp
, O# {; F9 E& ]$ i* P00404D44 5B pop ebx3 i2 l3 Q: x3 O$ v
00404D45 83C4 18 add esp,18+ z, B- P! { v+ n1 }
00404D48 C3 retn
: u; q" p' ^. n/ D4 q*********************************************************************************************************************************************************: K0 [7 J+ d9 b& j' \
跟进00404D09处CALL来到：
8 O: E4 A: P. R: P3 o6 c; E004030A0 6A FF push -1 //一路F8下去~~~~7 p6 T5 E: H5 ^# G4 h
004030A2 68 C88F4400 push qsr.00448FC8
+ {) u& D/ J' c; d" D) j( J/ w004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
$ L+ f4 @' V; k1 e# e- ~004030AD 50 push eax
0 Q& k: @$ M3 c* Q& P004030AE 64:8925 0000000>mov dword ptr fs:[0],esp$ y% C0 C+ ~ K$ ]- |
004030B5 83EC 24 sub esp,24% ^& J& ^* R/ P2 m! H
004030B8 53 push ebx
; [8 K m- w/ b# |004030B9 55 push ebp
! c* u+ y" V `( ?7 @( R% P; `004030BA 56 push esi- n, J( U& R6 X7 {6 U
004030BB 57 push edi; q+ X- \6 |" ?# k
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"/ I( [- g: ~+ Z& J
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]) X/ h! ?& }. N. {) \
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
9 Y0 \6 X! A" |1 `- R% \) ~; c) [" n/ q# g# c004030CD E8 27C40200 call qsr.0042F4F9% E* |4 h8 U$ Y, m6 @6 g: A
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
* ^% c2 r1 y2 M9 b! |) G# M' R( g004030D7 894424 2C mov dword ptr ss:[esp+2C],eax0 Y7 U) K: M, }
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( U; p" [3 F8 w, i& o004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3" p5 d0 D/ r w$ w }, S, V
004030E4 E8 905A0200 call qsr.00428B79" p1 Q( v7 H; h* N
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
* n d6 V" [ \+ B1 S004030ED E8 3B5A0200 call qsr.00428B2D3 v, |5 Q1 @; r# W. ] h
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]( k! j- C* }, W( G4 v# [6 f
004030F6 E8 7E5A0200 call qsr.00428B79
) z5 X+ G8 v3 [% G8 x4 T. G( g004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
7 z( T5 x# j0 Z5 |004030FF E8 295A0200 call qsr.00428B2D Y: P- K; u8 x% e
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
: Y0 @) H4 a# Z L b00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]2 j1 K4 _: P2 t' }; m
0040310B 83F8 02 cmp eax,2( V; D8 U* \3 U" j& v
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳$ J2 Q C4 G1 r: K, a
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]0 @( D( U4 H1 k$ f H
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
; T- ^2 S! f: y3 W, \+ e8 J0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18（16进制）就跳
1 Q: G) z# t! ^$ J$ h& v5 I/ n, A# C00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
5 U! E% A1 ^, L2 O+ }" g7 s4 H! B00403126 6A 01 push 1
3 W+ J5 ^& ~0 J7 p5 l2 w00403128 50 push eax
K4 R: L$ J* z- I5 R. i1 |00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( `9 Q- s0 K/ U; b
0040312D E8 C4550200 call qsr.004286F6
7 d% O ~2 Q$ p: D00403132 8B00 mov eax,dword ptr ds:[eax]
( v! B2 W/ l6 s* \00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
% P& Z( x0 y# x00403138 50 push eax/ [$ r K& Z( G; k4 \! P0 b
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4- [8 ?% G. a$ h
0040313E E8 4D560200 call qsr.00428790
6 c6 C6 T4 a; ^3 _00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
6 U$ }6 b7 n* i$ ^( l8 J0 J1 S00403147 8BF0 mov esi,eax
+ a1 b% U# y4 O) X& H00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
/ |$ {3 [7 G5 K# U5 j0040314E E8 38C30200 call qsr.0042F48B
8 L1 w- l) _4 q) @00403153 8D46 0A lea eax,dword ptr ds:[esi+A]9 x' w( h5 M2 q& N0 D( G# D
00403156 B9 3E000000 mov ecx,3E0 D" g- ?* u# P# l. }; k
0040315B 99 cdq
+ W* Y, g1 i2 [0040315C F7F9 idiv ecx8 M L; s% F. c& L" y+ K4 ^1 z4 Z
0040315E 6A 01 push 1
! F2 |( U. p( X" `8 j2 w00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]6 K2 ^4 ~( @8 ~ _4 Y
00403164 8BF2 mov esi,edx: e1 G/ h) u' r1 {
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
+ i$ S$ ?1 }4 U" f0 I3 ~2 ^0040316A 52 push edx! j5 t. t9 s; l9 @+ @8 j' ]/ G
0040316B E8 0A550200 call qsr.0042867A6 }! v- ?" ]% y) ?$ j5 x
00403170 8B00 mov eax,dword ptr ds:[eax]
+ z0 k5 K( S0 J; g00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
/ g! {+ p+ M# m: |/ q; @$ Y00403176 50 push eax
4 Z0 R2 e* F; |8 m00403177 C64424 40 05 mov byte ptr ss:[esp+40],5# F x: v0 p* k1 U
0040317C E8 0F560200 call qsr.00428790
/ U' M: o, i) R4 P: v9 c6 }- G* E00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
. ~7 N: A9 t2 o/ `- c$ `- M2 s2 D00403185 8BF8 mov edi,eax& k+ ~5 p- Q" [7 M2 g
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],34 A- f5 `& V+ h1 p
0040318C E8 FAC20200 call qsr.0042F48B" v4 o$ I7 D _! d; S
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]) \2 s S$ W& Z( D
00403194 B9 3E000000 mov ecx,3E
?6 P$ _7 Y, G' d0 `! c- \# o00403199 99 cdq
, _5 `" S" V, r0040319A F7F9 idiv ecx
; H8 `6 m0 }/ ^0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
3 U: I" R* a+ e' i# a6 E004031A1 894424 28 mov dword ptr ss:[esp+28],eax- J7 ]* p- c0 {: j
004031A5 8BCA mov ecx,edx
J* }0 d D5 H9 W004031A7 894424 24 mov dword ptr ss:[esp+24],eax
- ~9 p9 g, J5 [1 z2 f004031AB 894424 1C mov dword ptr ss:[esp+1C],eax; C6 f# E* o4 w( x2 H$ H: @
004031AF 894424 18 mov dword ptr ss:[esp+18],eax) B% ^9 p; ~% `! o1 X
004031B3 894424 14 mov dword ptr ss:[esp+14],eax2 ^/ r0 f+ \: `+ }* s, q
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
" F8 b! G: s+ `5 J! r004031BB 8BC1 mov eax,ecx
' _5 D7 O& \8 m6 z004031BD BF 0A000000 mov edi,0A( P/ V$ l# N+ Q) @" U
004031C2 99 cdq
3 N9 {" @: H8 k( W( M/ n004031C3 F7FF idiv edi2 d" _3 V% h, W$ S; m4 U
004031C5 8BC1 mov eax,ecx
) X9 P! x( O, U004031C7 B3 0B mov bl,0B
* u4 D: F9 Q' g! b) \, T5 k004031C9 0FAFC1 imul eax,ecx
' T) G2 x' B; T004031CC 8BCF mov ecx,edi
9 A$ Z9 l* \5 v- n- i7 A g004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl7 {- b3 x! ]1 e) @: u
004031D2 52 push edx
6 i, C( f0 z5 t$ t( F1 ^- m004031D3 99 cdq( i4 J7 \7 j9 _8 l3 y" r
004031D4 F7F9 idiv ecx
, b( q2 L9 D2 J! ?2 o004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
2 W' L* U4 `9 S, Y% K2 v2 D004031DD 2BC6 sub eax,esi
$ k( O- V% a' p( y' }004031DF 52 push edx4 g8 M6 v/ G! X; V% J1 w
004031E0 99 cdq, f1 M" `' a( w$ k3 i
004031E1 F7F9 idiv ecx& j+ f7 Y; ]* |$ F6 z5 c. q
004031E3 8BC6 mov eax,esi
+ P6 H+ ^, _5 b" A6 u1 Q# E004031E5 52 push edx
) r9 t2 V( u: t+ N5 E004031E6 99 cdq% k3 e" F( w5 z8 N' k( X
004031E7 F7F9 idiv ecx
9 P2 t. y- n9 |9 n. v( @& J004031E9 52 push edx
! z5 w, ^/ p x$ {+ ^/ q004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]: S- T& T+ y! d \, K
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
. H4 D+ Q& g6 D004031F3 52 push edx3 o' w; p, E% x3 v9 b0 l
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数，我的是48938 B/ k. c; m2 q0 z0 k
004031F9 83C4 18 add esp,189 P1 W; I- C) @. [ A
004031FC 6A 04 push 4; }+ g, A: f% ]+ `
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
3 d% O- o6 @$ p4 I7 a( w00403202 6A 00 push 0
; O9 U" Q. t S7 s- {; u00403204 50 push eax: n1 \* z# @' i8 u+ G
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
7 P8 ?1 r# \) a7 u% u00403209 E8 D6530200 call qsr.004285E4
, T( `( |+ `7 v2 d" I- `0040320E 50 push eax/ q1 R) P$ P! X% B
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]" T; u6 x) }5 m4 b& \ k& D; L
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C, v+ f: s' e2 D- `
00403218 E8 A7C30200 call qsr.0042F5C4% g5 N0 N! W5 ^- d; z
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ T" ?& F' H5 I' K' e" ?1 X
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
5 D8 J9 Q+ d2 g0 h: m4 ]3 r" H00403225 E8 61C20200 call qsr.0042F48B
2 h1 [8 s) v; f4 B F0040322A 6A 04 push 4+ B. [8 G+ {9 P: u+ |! G; U
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]7 s5 {. Q( ^* f3 n5 _' x a
00403230 6A 05 push 5# |9 o0 P9 Z) z4 [6 c' F+ R
00403232 51 push ecx! h3 L; v7 `$ V8 Z/ W
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" F* V! r3 F6 p' l& N
00403237 E8 A8530200 call qsr.004285E4
0 V( [( U; J/ v. t0040323C 50 push eax
, H/ @0 |/ D; k0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]; D. w$ R5 P, {4 Q; G3 {0 o$ p
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
3 l( T0 l* }; N2 [( n2 Q$ {00403246 E8 79C30200 call qsr.0042F5C4
% r1 S4 ]" _4 ]: ~' w0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ M% F( K! ~( g. z0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
4 I0 W2 d! g" h6 x+ l: w00403253 E8 33C20200 call qsr.0042F48B
# S; R% ^4 h& n' c00403258 6A 04 push 4
% R3 f" Q& l0 ]& L: h1 \0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]. J* n% G) j ]& ]. p% Z
0040325E 57 push edi
9 n% a5 J' q" B( S; M0040325F 52 push edx2 ~. f4 H" f7 W' B
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
! C1 O5 S; n$ `2 e7 p00403264 E8 7B530200 call qsr.004285E4
& G; k' U0 F# n$ |3 F00403269 50 push eax2 m: @3 B9 o% ]
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
$ ?( h( r0 y. j( J7 Q* H F0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E, s; C( o: y) I3 i5 k
00403273 E8 4CC30200 call qsr.0042F5C4
3 {" e: ^! u; [( N$ a00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
5 j; z$ {/ |" @8 }* c! w) Z% N0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
% Z& O5 q' t4 b3 j& H0 s9 j00403280 E8 06C20200 call qsr.0042F48B4 l( U/ J N: w
00403285 6A 04 push 4: ]2 F& B0 M' T* O7 x& H
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]5 z. f8 } P3 z5 ?# C
0040328B 6A 0F push 0F
$ z' _* y/ O' a8 w* u3 z0040328D 50 push eax* l9 G/ b) I' C1 H
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
0 C" Z6 A$ I9 P# H, |: p00403292 E8 4D530200 call qsr.004285E4
! o2 m) X( K4 c8 v00403297 50 push eax
9 x7 X2 ] D L00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
5 o& Z9 `( s; L; s8 w$ K0 I [0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
/ U# d6 H9 p. t004032A1 E8 1EC30200 call qsr.0042F5C4
0 _# y4 w' ~; k8 e( C7 b004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]. M& N7 c' E: i. S
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl8 T% d4 s! l% _! D
004032AE E8 D8C10200 call qsr.0042F48B
, ~, B4 l/ B/ ~7 ?: J/ }004032B3 6A 04 push 4
; s2 V/ M- c3 g004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
0 V2 L' J, H3 x+ [004032B9 6A 14 push 14
* h' O0 Q$ t I, ]" ?3 t. }$ Q004032BB 51 push ecx& ]0 Q* K, o* n+ b6 l }$ B5 U
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
) r/ G+ o) x! O: G' A+ b' |004032C0 E8 1F530200 call qsr.004285E4
6 k8 K$ m! \ I7 Y. W, A/ C$ W004032C5 50 push eax2 l( K9 i# T% @: J- [% g
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]5 @0 I0 n% _; H! E+ ]5 k
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
# B @) k8 Z7 `3 V1 v4 ]004032CF E8 F0C20200 call qsr.0042F5C4
& u- r! \, S, ^/ m) o2 c- c8 `004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
* \' K/ s5 _5 A, H f! d0 A004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl$ I9 U( A# L: o/ R' n, ]' A
004032DC E8 AAC10200 call qsr.0042F48B
! ~4 m! v, D( ]4 ~. _. c004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI3 h( ~, [0 G8 D
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
, b2 c% X9 y5 P& L" Q1 N/ D/ m' i004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL' t' G! y9 Z3 ]5 A- h% ~# D( E9 |
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
, t* o! w; p0 L% l004032ED 8ACA mov cl,dl ; DL送CL
$ s0 X6 g; U( l; `004032EF 3AD3 cmp dl,bl ; DL和BL比较
$ e2 {/ N) [/ t2 y. s004032F1 75 1E jnz short qsr.00403311 ; 不等就跳（不能跳）# w9 H1 @$ z) @8 d* k, @5 U5 ]0 I
004032F3 84C9 test cl,cl9 W! A5 F E+ |- G& B# n' ^1 k
004032F5 74 16 je short qsr.0040330D6 j% j3 Y6 A, } j
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL& I! j* n* x' E
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL9 J F- j4 y% c* g
004032FD 8ACA mov cl,dl
- M) t; `* O7 V004032FF 3AD3 cmp dl,bl ; DL和BL比较
8 i( L( b( p7 c1 _) n$ G5 b' h00403301 75 0E jnz short qsr.00403311 ; 不等就跳（不能跳）2 `; g! D9 D" e4 n7 E1 {4 j
00403303 83C0 02 add eax,2 ; EAX加2" D( |# n& i4 Y# J
00403306 83C6 02 add esi,2 ; ESI加2
$ O6 E9 O q3 s! Q, q- X( ]00403309 84C9 test cl,cl
) U5 K2 B$ `* o P$ }( e$ ~$ u0040330B ^ 75 DC jnz short qsr.004032E9$ @" I; Y5 [( _2 w
0040330D 33C0 xor eax,eax
4 |. i$ m1 J2 q P9 X7 ]0040330F EB 05 jmp short qsr.00403316 I' w3 l4 b1 V6 e1 C% u3 N
00403311 1BC0 sbb eax,eax
3 R2 ]8 b2 p8 u: z4 I* D00403313 83D8 FF sbb eax,-18 `, E2 A6 G+ }1 i3 w( v
00403316 85C0 test eax,eax# b, L$ c s9 N$ ?# ]. c2 x
00403318 74 0E je short qsr.00403328
8 F7 k' f# r& t/ u# f6 e" \" D0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
* [* ?) K& \: t0 N2 @0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]. o/ I* I9 \ }* i# `3 b
00403323 E9 F0000000 jmp qsr.00403418
" k7 u6 d- Z- ]8 S o00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX# h; I* `' Z1 q
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
0 D3 ~. r$ _7 H+ ^, A00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]$ o- X8 t( o: Z8 q7 L
00403333 50 push eax, l2 X) Y: U! L- k4 j6 ~' A, `* i
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
8 W8 c; I0 }9 |+ Z6 ~! G' i% I8 R: Y00403339 50 push eax
( z K* x: M' M# o: q, p* @0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX
: b t9 i% F! X6 p6 b% \0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
- J0 }# S6 n; I# }6 S5 h% c00403343 83C4 04 add esp,4
: {# I, W: y" F7 m: D$ h" w7 }+ o00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
+ n: N( G& k8 m+ D2 F00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
) |- c9 K- v3 o( D0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]: a+ W4 J9 ]: I4 A3 a; ]/ p8 d
0040334F 50 push eax
( f* N0 n: M+ Y' W- L00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
) k- c4 W: D; p2 g7 C# a00403355 50 push eax- Z4 S) l$ Z4 ]: Y
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX2 A+ Q; W4 [! m
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX' k4 x: J c1 J6 I
0040335F 83C4 04 add esp,4; F! k3 @ h) i
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
$ o8 T* d0 n/ s# Z9 z1 {* l00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
) d0 j8 s* T0 Z4 V00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
% i! }& _2 h! B9 F$ `6 L, `( M& V0040336B 50 push eax3 x1 b: r8 {4 |( `! X
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX( A4 {" F& S* L) ~7 [! ^% n8 t
00403371 50 push eax
, }% R! H; w( S- T$ `3 t00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
3 ]' u) V6 n+ l3 W% ]00403377 8BD8 mov ebx,eax ; EAX送EBX: E7 U4 r! Q+ U- D7 F
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX9 D2 `0 `) h) [6 x) D
0040337D 83C4 04 add esp,4
- f3 U8 R/ d# j: ^. B7 t) h00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
3 G7 s, b2 ^+ _, |4 R. `00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]. l4 V2 G5 R; o9 K" f) H. t) K
00403387 50 push eax0 E7 ~+ Y6 } K/ F# L8 [' M
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
. P9 y0 S+ q- w3 x3 H0040338D 50 push eax
' X+ I o! H' E, w5 q0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
& b( n% w+ u7 o2 s `8 q O00403393 83C4 04 add esp,4
" t) j0 L* ~4 D" l" P2 }00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]7 E0 _0 Q7 M' u) d( J. n2 z( ]
0040339A 8BE8 mov ebp,eax ; EAX送EBP
6 I9 `/ ^- c+ [7 A+ q0040339C 6A FF push -1
! o# E! I3 C) ~0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX，长度送EAX, i9 M5 o. [: A9 c4 d9 d
004033A3 6A FF push -1
4 `9 o0 @# H& [% L- T& U% {004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX6 a7 k5 F( {6 F+ [; K
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX，长度送EAX
, q! V8 r3 R& z- S- Z, O004033AE 6A FF push -1
* b% L1 ~% w4 |& K004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX; `' M! l. a0 s# X6 Q6 `. V# a
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX，长度送EAX1 A, e% f V+ t: {
004033B9 6A FF push -13 z6 x e; ~& y e
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
2 |; Q6 @+ X* H; r8 P/ z004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX，长度送EAX
# R% G4 V+ ~; A5 s004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX( |# p2 R9 P+ @% u1 W: j
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX. Q. {1 t2 P/ C" c* p7 R1 _$ B
004033D2 B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX
$ L" c/ [: J" r- P J8 K004033D7 D1E0 shl eax,1 ; EAX左移1位" K$ F, j% C9 f' k; ]
004033D9 99 cdq ; EAX扩展
7 C) z: D8 K0 q1 j/ N$ U: z004033DA F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中
- ?- W8 `, ?: X- ~, B004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
+ T/ a8 j5 u6 Q3 |004033DE 74 0B je short qsr.004033EB ; 相等就跳（必须跳）
$ t6 i" Y! n# I( T004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
3 X% z* N0 U7 u, Z& M$ V004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]5 w/ H; A* h8 O' {& E# J d
004033E9 EB 2D jmp short qsr.00403418
7 C$ m; `. s) l7 _$ n$ ]% z$ |% H004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
) S2 h% d: l7 \ N/ C004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2. A8 \0 }# [- G# W
004033F7 99 cdq ; EBX扩展
4 x* Q5 q: D( {/ E @004033F8 33C2 xor eax,edx ; EAX和EDX取异或* o: `6 C1 ^( }, W" C* q
004033FA B9 10270000 mov ecx,2710 ; 2710（10进制的10000）送ECX: i" t3 A* | A6 o+ ]3 {4 k
004033FF 2BC2 sub eax,edx ; EAX减去EDX
8 p% ]3 }. c. X00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]
- m* l' Y& E6 J, h* J00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
4 E- \7 Z9 {. ~2 r8 X. Z2 z( N00403409 99 cdq- ]5 F5 J+ \' O
0040340A F7F9 idiv ecx ; EAX除以ECX，商在EAX中，余数在EDX中* ~2 _( D& J1 Z5 d3 n- D
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
% \1 I! D+ u! I00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
, x8 B2 D" H1 J% v6 K y00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳（必须跳）
4 W5 B) t. Q; s* o" {- o00403418 E8 6EC00200 call qsr.0042F48B ; 2 a3 Y+ i# D7 U. b# i
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
s2 k7 S- s) F# D00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
3 Q9 _$ y$ J1 a5 F* T8 k" ^) f$ {00403426 E8 60C00200 call qsr.0042F48B% B; m6 w2 B" z- `
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: x- U3 Z7 @/ U% ~0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],80 t* K& f6 I# k$ _
00403434 E8 52C00200 call qsr.0042F48B5 s% e. x& N x- f6 t2 d! {7 {
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
; A" X2 k; S1 ]5 \9 y, G4 _0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7& K0 L$ q& A9 t6 l# F" x. q- ^
00403442 E8 44C00200 call qsr.0042F48B
6 w/ Z- |0 S3 ~! H5 q! T00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
5 I" Z+ \! V/ S9 ^/ v9 G0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
0 m) n+ e+ }2 r e0 `1 z00403450 E8 36C00200 call qsr.0042F48B
1 m6 A; \+ h C! s+ z00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]1 S6 O8 i5 t1 b# A
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 ?6 g e, `8 _0040345E E8 28C00200 call qsr.0042F48B2 S( \# Z5 J/ V2 t
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
* ^, {. w; b# k' H5 L0 F00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
0 |: r9 q3 ^( m! B" D0040346C E8 1AC00200 call qsr.0042F48B# [6 L8 O+ l& o* y' F8 C
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
) w. U2 }7 H, o& F00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1" c& n1 ^ z% L% o
0040347A E8 0CC00200 call qsr.0042F48B: K- h8 f) h/ T
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: ~ |+ i7 @' B8 x
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0/ H" H% L; `- o5 I2 O/ y( Z$ s
00403488 E8 FEBF0200 call qsr.0042F48B
5 {: I, X7 _" X* E3 V4 e0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
0 e5 A' R; \, V7 {8 r2 j00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1! w# X) |4 q! [! K9 G r
00403499 E8 EDBF0200 call qsr.0042F48B* h6 W: [' Y8 M
0040349E 32C0 xor al,al ; AL清0
2 U6 e7 S# j' K+ w4 o004034A0 E9 88000000 jmp qsr.0040352D' F( x, N3 W! r2 H; ~% z: ]! [
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里，F8下去~~~~~~~~) j" V4 s( [/ O
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
7 V9 s2 q& B: Y1 }" Y/ ?004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9' W6 e& J0 N1 `' t3 I0 ~) O' ~/ f g
004034B3 E8 D3BF0200 call qsr.0042F48B
. H; Q; D# z" g. M2 z0 g# U- t004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]0 d9 n' [- l' C+ M3 s2 t
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
- N( P# J- {+ u2 f+ l3 I* R3 {004034C1 E8 C5BF0200 call qsr.0042F48B
4 Y+ |! T4 A, ~7 [/ M004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]1 z+ [* Z7 e% y! z7 v0 t
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
, D& q; V3 G; S0 r004034CF E8 B7BF0200 call qsr.0042F48B9 b+ ~$ g% b4 X' a3 h+ V
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
. H& u9 K" Z& |3 f+ M004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
7 y& g$ b3 {7 B+ `004034DD E8 A9BF0200 call qsr.0042F48B
8 j( n( H! F8 }+ ^( c, v004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]- _" t6 y7 q4 [& s
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3! V9 M8 B0 ?$ i* w& X4 x) G
004034EB E8 9BBF0200 call qsr.0042F48B+ ?( D5 C p, W0 ]* `9 w ~ [5 S! k
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]7 K6 r$ u4 p, k& Z! T0 y
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
/ B+ ~3 J# O9 r6 E' v) Q W" `) C004034F9 E8 8DBF0200 call qsr.0042F48B0 \( j- b u4 F% r$ ~% L5 z0 O
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ Z3 R* f( n! |* }0 U( r
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
* M7 V& {/ L% o6 {$ {. q& g( e) m00403507 E8 7FBF0200 call qsr.0042F48B
9 o. A2 Q' G5 X! p0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
" c" Y% ^1 X1 U; |4 p8 E# z00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],08 e& B2 o7 s4 f) }; |# w f
00403515 E8 71BF0200 call qsr.0042F48B
. j- e1 d, Z' a3 p# ]1 A- x9 t0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 S j) w. {3 b. U9 G0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1* |: Y6 u$ l, b! |. g6 d
00403526 E8 60BF0200 call qsr.0042F48B
1 r7 A$ d3 f/ e u+ h0 J! o5 b5 W4 |6 g0040352B B0 01 mov al,1
0 B$ g0 Y2 d2 f3 m0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
* [( x' C! N, H3 w: t$ C00403531 5F pop edi7 p8 D$ }# ~) h/ R1 ^
00403532 5E pop esi
) z, |* s2 Q& l/ v$ \8 ~7 {00403533 5D pop ebp
# B' W/ F# Z) \00403534 5B pop ebx
+ o, L7 d1 w" P) @" c" B; l' i00403535 64:890D 0000000>mov dword ptr fs:[0],ecx1 V9 H, o7 n9 v# S g! x* M) B9 t1 |; ]* y
0040353C 83C4 30 add esp,30; v( T9 ?" @( d) K" h% K
0040353F C2 0800 retn 8
) P8 q+ R+ n! y+ T0 _, [--------------------------------------------------------------------------------7 T* t9 n4 p, m( r- C O- M6 f
【破解总结】' n( k6 C+ h& J& ~ s4 L- v( \4 ~
用户名必须大于2，注册码必须为24位。注册码前4位由用户名决定，11到14位由6到9位决定，21到24由16到19位决定，5，10，15，20任意^-^
( ]7 ^) E. m' `( s用户名：yijun7 X. Q; u, _/ _
注册码：4893*7777*3726*7777*0529; z, |/ ?7 o* m! o4 R% p) P4 J
--------------------------------------------------------------------------------+ ]: L' J/ ?4 G1 d# |# T
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|
狗仔卡
发表于 2006-8-28 11:03:29
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡