|
|
|
【原创】破解Quick Screen Recorder
8 n- u# n5 y4 V' P2 r. P【破解作者】 yijun0 x8 e3 {: Y7 U, Z* p0 p
【作者邮箱】 [email protected]
' K o& V; h6 G【使用工具】 OD,PEID1 X. c% ^0 V, }3 N8 U8 k* O/ K( S
【破解平台】 WinXP# i' v) ?/ w* p0 B2 D1 r
【软件名称】 Quick Screen Recorder
4 y3 l7 `, D$ O. b `# @【下载地址】 天空+ T% V! x0 s I2 l; I+ O
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
. s$ u4 @6 Y. B7 D【软件大小】 540K
# x6 N0 `& N7 T【加壳方式】 无
9 K# i6 N( c K q【破解声明】 我是一只小菜鸟,偶得一点心得,愿与大家分享:) h* ^; ]) K6 ]1 M
--------------------------------------------------------------------------------7 X& m# m% c$ P
【破解内容】
3 |- l8 {# j8 V6 m- s: O- C% i6 V PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方:: {- A) ?0 V! c9 X5 y
00404C69 55 push ebp //在此下断
! E& v5 @& ?; x6 F8 c P# Y; ^00404C6A 56 push esi
0 K7 c1 Q) D# E1 C4 X00404C6B 57 push edi
4 f |) _' N3 w' m. D" E00404C6C 8BE9 mov ebp,ecx A$ B, y* K, e) S+ ~2 l
00404C6E 6A 01 push 1
: `5 D9 r% n- k) g6 H00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名. [8 g" u% A4 I) L1 W, C
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
2 J" _. U3 p! Q- D6 ]2 n1 P00404C78 8BCF mov ecx,edi* G7 f$ g7 Z9 I4 W6 U
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码9 v ^: s# d. K, N* @5 Y
00404C7F 8BCF mov ecx,edi
9 g0 W! T) Y( J00404C81 E8 A73E0200 call qsr.00428B2D
- [% I- [% L0 v. G4 M+ A. s5 p8 d00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
, a1 {# U }# v; N. N ^00404C89 8BCE mov ecx,esi
; y. ], ` S: s O00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX1 O* W/ y5 s8 t0 O5 m$ a
00404C90 8BCE mov ecx,esi
! |- u8 B' v, F; k, }00404C92 E8 963E0200 call qsr.00428B2D
# f9 a4 K( r8 O3 g. g0 P; u: a6 m00404C97 8B06 mov eax,dword ptr ds:[esi], b) E# K$ Z4 K5 w7 Y
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2( U5 C' R0 F+ G- C2 y# c& `
00404C9D 7D 26 jge short qsr.00404CC5 Y5 B* U- x! R1 _0 X$ A
00404C9F 6A 40 push 40
" R' p5 |* V/ S$ O00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"5 |, @# f2 X6 I8 ]
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."9 G- v) ]* ?# g+ V+ | {) `+ v' O5 h
00404CAB 8BCD mov ecx,ebp$ a. z4 X1 ^' ]+ X$ L0 B
00404CAD E8 C3840200 call qsr.0042D175* r; H) u8 y$ K# i
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]: a* i# n. ]4 D/ i0 S+ j! R7 p" t+ b
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx4 x/ X7 g0 B7 z/ c
00404CBD 5F pop edi
& @' N1 d8 _' a- [& H1 B$ F00404CBE 5E pop esi
. e/ z- {8 k: A4 p( k" q00404CBF 5D pop ebp
u* X1 N6 Z3 \+ \+ t00404CC0 5B pop ebx
+ `/ R2 R( L2 j00404CC1 83C4 18 add esp,18! U' m3 ~( p0 q, S
00404CC4 C3 retn
2 p7 }0 q3 M3 t- G$ l00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
9 c) @3 |4 Y/ N: p00404CC8 84C0 test al,al- B: O# C7 ]' F% Z4 U
00404CCA 0F85 1C010000 jnz qsr.00404DEC
4 i9 v! Z3 G7 D S. F00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
/ _8 }3 `- _8 f" r& F00404CD4 E8 87E3FFFF call qsr.00403060+ w" G$ t# Z! J" c7 K
00404CD9 51 push ecx0 ]/ J1 T) u7 O
00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0( \0 W& M. q9 t4 z
00404CE2 8BCC mov ecx,esp1 `; y/ Y; b$ j. j6 w
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
! v. F+ R$ e3 S+ r+ F0 C) m00404CE8 56 push esi$ |2 S6 G/ H( ]) K) T
00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是09 w8 g# L/ c( c7 o& p
00404CEE 51 push ecx
& m% G; U8 U' Q00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
% Z+ Y$ p r* H3 ]7 K h$ {" y- K00404CF4 8BCC mov ecx,esp
0 O7 p! G% t+ Y) [00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
/ B( I6 ], l! L4 y& _00404CFA 57 push edi7 \6 A7 L" t( T9 ^( m
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0 u# A* e# `& P% e4 n
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]; z4 q- K6 `; W& m0 ~
00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0) F2 k& ] q6 ^
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL,跟进~~~~~~~~~~~, O; A: u: F! `8 I9 |+ e/ p
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功,此时AL=1~~~
8 P0 q8 N6 n- p' y) i) Y% f00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~5 A! g+ l6 k* Z/ A# K! L0 I1 v
00404D12 6A 40 push 40
/ u% f" S0 N5 M! w5 z. }00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"5 K# w* c4 U& h. V8 D4 C7 {& [
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
/ `; a" v9 U2 G! t: E9 c u00404D1E 8BCD mov ecx,ebp0 `1 [$ d4 R4 ?; Z
00404D20 E8 50840200 call qsr.0042D175
' S: G" @8 W1 y i' i00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]: S8 E& \0 `: W
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
: `6 j, d+ v; a* O8 I00404D31 E8 5AE3FFFF call qsr.00403090
! ?( B8 s/ o6 T, j00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
* {1 g0 K! f, c) C9 ^00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
6 P7 | }0 P: T% Y* i00404D41 5F pop edi
. ] u0 [- |, ]2 f) U# Y00404D42 5E pop esi9 _6 O4 q4 {3 C7 N+ ]
00404D43 5D pop ebp- S- H* w; G% h
00404D44 5B pop ebx
) `2 C* P" O) A# K; p! ~* B00404D45 83C4 18 add esp,18) C) i+ A2 E6 R* I, c
00404D48 C3 retn
# A/ C+ O: j1 O! G*********************************************************************************************************************************************************
& w, c. L6 G) B! K1 z* ]; K跟进00404D09处CALL来到:
$ f" u5 r6 b: V) G4 M. q004030A0 6A FF push -1 //一路F8下去~~~~
1 T3 i2 e' q6 p0 K004030A2 68 C88F4400 push qsr.00448FC88 j9 }1 B" B! }2 B( n+ u& N, A
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]8 K. u- \9 F d" A4 s5 h
004030AD 50 push eax2 I9 i5 x& f8 T3 M3 N
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp# a2 w7 L8 T/ R/ r K6 d' B
004030B5 83EC 24 sub esp,24
7 R; w! g$ A: j6 k0 L: M004030B8 53 push ebx* d* \( T2 E ]6 b
004030B9 55 push ebp1 J* P$ q: U1 L8 B2 K" l
004030BA 56 push esi
: I" G. h4 _* C004030BB 57 push edi; D; H3 X, E1 T8 s: v
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
4 n- o5 ^# j& g8 {3 N004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
7 w. Z/ q4 n* ]6 j! S! D004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
0 W+ ?2 D6 y$ I! ^004030CD E8 27C40200 call qsr.0042F4F9
1 C1 _+ t* d! @; I6 H004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]$ t$ e( D; Q% H |
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax
9 f; b1 ~0 j+ O4 h004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]' R8 O, c: g2 L
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
# `' z; ?' A+ b: N004030E4 E8 905A0200 call qsr.00428B79
) `; f' M- a1 p7 n% J004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
, C. ]7 v0 J% J+ _1 ?004030ED E8 3B5A0200 call qsr.00428B2D
3 J. H, p7 z9 w. w004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
% H( o6 T1 l' `! r004030F6 E8 7E5A0200 call qsr.00428B79
G( @5 s& F! g" G* g9 ]3 s004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
' t0 @; m4 _: |- y! S3 h1 F004030FF E8 295A0200 call qsr.00428B2D
6 _) d6 E, }/ s7 a! n b' j00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48], s. G4 r: \8 P8 b; |: V9 Y
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
9 c2 v0 T6 P/ A* m0040310B 83F8 02 cmp eax,2
; r; I9 B6 L2 \+ `+ i# ^: e: ?' t0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
) m* V; G* C. `5 f4 E2 G8 t+ ~00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
! J6 N! f! Y0 @2 l' f+ Z# q2 m: G00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
0 \+ {3 l- i' } z8 F0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18(16进制)就跳
& H( Q( t1 V T% d0 h: T00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
4 g9 g% Q. W; ]5 k% f00403126 6A 01 push 15 l$ I N- o. ]7 n) J1 n& E: p
00403128 50 push eax
! [. }( o# F. s5 g3 {% S00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 p! _1 [7 U) z/ y Z7 E7 L0040312D E8 C4550200 call qsr.004286F69 [( s! S0 f7 u
00403132 8B00 mov eax,dword ptr ds:[eax]
- i" n% |5 V. U* h V00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]* Z! |# I, C8 T$ a2 Y7 o
00403138 50 push eax1 E" x) ?3 f& E1 f' x6 L
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
2 j) U0 i" _+ |+ e* y. |0040313E E8 4D560200 call qsr.004287904 p6 u7 v5 \1 z+ W" k7 w
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* v8 [& w& C6 L; N
00403147 8BF0 mov esi,eax7 {: V1 a$ G$ n5 v" x0 H/ i
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
- s" q# M) E3 B/ }4 y8 d' C4 Z0040314E E8 38C30200 call qsr.0042F48B6 J& g ~# F1 U) i
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
[; n6 V1 Z6 {' c" K$ z0 R$ R7 a00403156 B9 3E000000 mov ecx,3E
0 a g, l! S6 l1 W9 {0040315B 99 cdq
8 j# u/ E) W; `7 `: l0040315C F7F9 idiv ecx
" N* [' g- ]* d) j' a* j; T0040315E 6A 01 push 1! m5 @7 I% b8 o1 W! k, l4 p+ V
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
# i$ O% K0 e5 c) c5 p; D l00403164 8BF2 mov esi,edx
4 u' q- }( u+ H- L00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]3 t3 a" g! c$ Y" l
0040316A 52 push edx+ {$ b, Y' C9 ]
0040316B E8 0A550200 call qsr.0042867A5 ^& N5 U e+ {) F
00403170 8B00 mov eax,dword ptr ds:[eax]
1 u4 ], o- e ?$ s- G% I3 `00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
1 a+ d% Y, `8 n# n9 U/ ]00403176 50 push eax2 a% y/ Q+ i' G2 [- P3 l* C
00403177 C64424 40 05 mov byte ptr ss:[esp+40],55 @! c3 K5 F' m; @. g, e% c
0040317C E8 0F560200 call qsr.00428790
# |: Y R: {* y7 e# i9 g00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]+ b. X! \. A* e7 p
00403185 8BF8 mov edi,eax
# v6 D% A- D# ?00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
! @3 w2 `: G( L( \0040318C E8 FAC20200 call qsr.0042F48B
- t! u+ T, X. e& N! O% A00403191 8D47 0A lea eax,dword ptr ds:[edi+A]4 @: |' z) D, i/ U
00403194 B9 3E000000 mov ecx,3E
3 l; _% J" R3 ]4 @6 K" W00403199 99 cdq
# k$ ~: C$ _! ~) `. O0040319A F7F9 idiv ecx2 @4 O9 U" e2 W/ Z G+ }
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]
# w+ E9 O& V4 D% [5 Q004031A1 894424 28 mov dword ptr ss:[esp+28],eax
; A6 E8 g5 E+ `: N, L2 @) N$ v. E004031A5 8BCA mov ecx,edx! c6 Q' A/ {/ d' n7 o' u
004031A7 894424 24 mov dword ptr ss:[esp+24],eax& a) w: [. ^0 N, `# [, o
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax( {, i3 P6 p2 L' }! w( G6 }0 ^
004031AF 894424 18 mov dword ptr ss:[esp+18],eax2 Y0 M! c" z- w; O
004031B3 894424 14 mov dword ptr ss:[esp+14],eax0 Q3 j- v9 m# ]3 G. V
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
. M+ I3 ]; J5 g! m2 `9 n004031BB 8BC1 mov eax,ecx& a6 p- u9 R$ ^) G8 _4 ~
004031BD BF 0A000000 mov edi,0A
0 i& w9 F( ]; c& E) `- }004031C2 99 cdq
2 Q: x) ]2 Q+ {8 O6 v1 T004031C3 F7FF idiv edi( t0 p! g, o# j: c6 {& O
004031C5 8BC1 mov eax,ecx
( {' t; `1 Y4 H2 ]- U$ J8 P! P004031C7 B3 0B mov bl,0B# I# s4 W N) w. G7 w
004031C9 0FAFC1 imul eax,ecx
+ i; K6 o' w* j4 ]: `: |004031CC 8BCF mov ecx,edi; E7 W: d$ n3 C1 e7 g( ^
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl2 v t& H* M @% l0 k/ s
004031D2 52 push edx+ R) r* z Y, }! o! h( e
004031D3 99 cdq
$ e8 f# G: Z3 D+ o8 H004031D4 F7F9 idiv ecx! p1 W* [/ ]8 @
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
& {. }# F' `; R% ^3 l9 c7 S3 ?) z6 i7 y/ N/ z004031DD 2BC6 sub eax,esi
( K0 a2 d. Y8 S( X: U1 I004031DF 52 push edx$ e& p$ g7 W' |# C+ {
004031E0 99 cdq
* e6 j$ }$ D8 ~5 R: W* f# {004031E1 F7F9 idiv ecx
* }! F1 c3 m' ^) l2 N, q004031E3 8BC6 mov eax,esi. \/ i, f+ A* V, B, W& m0 g
004031E5 52 push edx! w& ` y2 C; L
004031E6 99 cdq
- u3 V! O- A6 H; u' c- N$ t004031E7 F7F9 idiv ecx
" ~& {- T; G6 X, e; r1 s$ j% ~$ c J004031E9 52 push edx. L* e, f$ \; ~/ z- h$ _" T
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]8 g/ v; k/ ^! H( T7 J3 M; {
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d") F3 y% @: u3 X- C! z9 B1 F
004031F3 52 push edx1 t% Q; [6 G, |8 Z5 V
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数,我的是48930 M: H- ?2 M5 y2 A; w
004031F9 83C4 18 add esp,18) f$ Y" d8 w/ ^5 @5 K
004031FC 6A 04 push 4$ X# P8 P/ ~6 @
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]- Y2 |+ d; f9 m5 }( J# S& C/ J- w
00403202 6A 00 push 0; H% p+ N; Q' l: t1 a7 ~- g
00403204 50 push eax" t2 [" K& _7 S3 s& u/ ]6 {- }
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: p( P/ c( Q" b+ l5 Y7 d00403209 E8 D6530200 call qsr.004285E4/ T+ v4 ~: ?0 J* b3 {
0040320E 50 push eax$ p/ y. Z2 J- y4 Y
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
' x7 ?2 {0 U% c! O6 u" ]00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
! S" y8 F4 m) ~3 W- ]7 _" v00403218 E8 A7C30200 call qsr.0042F5C44 W9 S8 Y- Q+ U+ \9 X% |( P. Y
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
; G7 c ~* X( j- c0 Z00403221 885C24 3C mov byte ptr ss:[esp+3C],bl+ ^0 M4 t$ U* M% Y% n
00403225 E8 61C20200 call qsr.0042F48B
% X! \7 R" X( R8 Q/ B0040322A 6A 04 push 4
2 s2 k5 L/ G: B; b" b: n9 n0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
8 R, [5 t! D2 Q+ o- e" i6 y( J00403230 6A 05 push 5
9 ~ d# q f5 d5 l7 ]00403232 51 push ecx
# X+ [$ F7 S# ]5 r/ B00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]% G9 j4 ^' O( ?' x
00403237 E8 A8530200 call qsr.004285E4! _/ p3 K9 v+ ]! o. \5 ]/ q% I
0040323C 50 push eax
9 I5 ?/ Z0 H) q& S0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
3 V% i8 G0 q6 s' `# N00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
. r' H0 b& ]3 M2 }& Y+ k00403246 E8 79C30200 call qsr.0042F5C4
n0 F8 c, f) |+ H0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) b1 l0 B, D& q/ n2 O0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl& w( }7 j3 E$ W' V7 H7 w
00403253 E8 33C20200 call qsr.0042F48B# ?2 m/ A+ E. m; }
00403258 6A 04 push 43 ~7 ]% [4 y6 h9 l0 E v! f
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]% E! `8 @+ q: B R; q" w
0040325E 57 push edi- A/ C; F5 o6 n/ D5 f5 w% j9 k
0040325F 52 push edx5 K, }/ t, |% E* c$ A: g, m5 `
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" b T$ x* N- _
00403264 E8 7B530200 call qsr.004285E4* n8 O& e- H* K( m- H- Z
00403269 50 push eax
\' \. p9 k2 y. y: [0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
; |' c3 _) U& I) j0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
& r' {4 [/ t; W3 ^1 {" e9 P) r00403273 E8 4CC30200 call qsr.0042F5C4
$ L2 `; @) b, g- [' K$ y/ C. X" e00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# F# R8 ?& K4 R
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
8 c+ q) d$ R' d7 I- [6 N00403280 E8 06C20200 call qsr.0042F48B# k8 q/ W0 ]* `0 n/ P5 \
00403285 6A 04 push 40 r0 @% Y' Q, F3 ^$ }& U
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]! q6 M8 B2 g8 D" f# B# z9 G2 M
0040328B 6A 0F push 0F
+ q4 h+ ~. Z, ?* [1 [ X0040328D 50 push eax# ]( ~& a" e9 {! v
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- c5 A! F3 M. {0 W: q00403292 E8 4D530200 call qsr.004285E4 @9 [) x9 B2 q! A/ P! a) C
00403297 50 push eax
0 J7 }8 Z" B7 Y Z. C9 v00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
" T$ F1 f: ^3 v1 ~: k6 d) B0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F, T* A' }; y8 S4 B8 a, J* Q
004032A1 E8 1EC30200 call qsr.0042F5C4
' y0 \" ]" ]0 ~: k" b w9 e8 O1 S004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30] a9 Y1 y7 K k+ {
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
2 ]# k! p5 R" W( }3 t5 n004032AE E8 D8C10200 call qsr.0042F48B
5 s- v% t3 @ M1 w: l0 L/ R/ W004032B3 6A 04 push 4
6 ]7 e$ d: ^, m+ ?* H9 E$ w6 a" Y004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
8 s. Z0 @1 Z( A- @' U" P004032B9 6A 14 push 14 r& K+ D. f3 _& ]
004032BB 51 push ecx! S7 m6 l/ h' w+ U1 W+ |
004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 Y' C1 j6 G3 c y4 K( E1 C5 |
004032C0 E8 1F530200 call qsr.004285E4
* g [: O$ Q2 O% G. m! h( a004032C5 50 push eax5 J' R5 X+ s) d- ~
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 t: G z% m/ G
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
9 t% e. J+ p, X: J004032CF E8 F0C20200 call qsr.0042F5C4/ m6 g8 v$ W7 J0 B) z8 t }
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
# ~: |: u. @ k004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
1 E9 F) r @# c0 K' o+ {* s# K004032DC E8 AAC10200 call qsr.0042F48B9 K! E1 R+ n7 A3 r4 E5 g v
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI; k9 y9 w- U$ k, M( t4 f( P/ R) ~
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX$ T' @) z7 W" z- G: n9 S
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL0 M5 R3 p' F/ j
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
" M/ f7 u. S9 }# [$ B6 j004032ED 8ACA mov cl,dl ; DL送CL$ u/ N% h" f/ {) j3 B" X3 m: S1 V8 f
004032EF 3AD3 cmp dl,bl ; DL和BL比较 @0 i; Y7 r( W# z5 `1 f- q, {* t
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳(不能跳)$ X$ @! \9 V7 D8 ^- u1 T
004032F3 84C9 test cl,cl9 h6 [$ I$ f' D5 T4 z
004032F5 74 16 je short qsr.0040330D* n" m4 H& R/ w" f, o4 b6 |
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
; d7 X: Q4 e9 p- e004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL* c* a, y$ H$ B2 L# u4 o& C
004032FD 8ACA mov cl,dl
; Y; x3 F; H3 F2 h004032FF 3AD3 cmp dl,bl ; DL和BL比较3 ?8 U+ [+ I/ a( M# j6 i
00403301 75 0E jnz short qsr.00403311 ; 不等就跳(不能跳); c5 b( C+ s$ m# ~/ l
00403303 83C0 02 add eax,2 ; EAX加27 r0 W$ B7 F8 i: B& q1 L; Z
00403306 83C6 02 add esi,2 ; ESI加2
! o; O$ P( _. X: W" D00403309 84C9 test cl,cl
& U/ U* r/ d" Z0040330B ^ 75 DC jnz short qsr.004032E9
6 X& J }1 K8 h1 ^. J! D" ^0040330D 33C0 xor eax,eax; ^& [5 B8 e9 X+ r; ]8 v0 @3 K" N* v
0040330F EB 05 jmp short qsr.00403316
& N5 Z5 S1 {1 }7 t( M' n00403311 1BC0 sbb eax,eax
; t5 X* ~, X2 \+ q, ]. |0 v00403313 83D8 FF sbb eax,-15 f( H% z" M+ d; o. ~) n& N! v, C
00403316 85C0 test eax,eax
# E3 S+ C1 ]1 }. c. R2 L00403318 74 0E je short qsr.00403328
$ t) |8 m/ ~# ]3 c# D1 f' ~0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
6 S/ [- C' V D1 }2 f; X0 ^0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]0 P& d: x k( D
00403323 E9 F0000000 jmp qsr.00403418
8 P& r: h% ]" K4 }) q. u. n00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX, b4 q9 z8 c5 M
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 G+ Z$ ]: @- b' ^7 H6 v$ h
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]+ Q# X/ _ i' {$ L
00403333 50 push eax
) L" w; s$ o8 @* V& Q1 Y00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
/ d8 t, e8 I, V+ H00403339 50 push eax! g8 V8 {2 O; _: X: r5 }/ ~3 q J9 z; f
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX% E8 B$ t. O( o' S; D) T
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
8 V& I# b' |4 v# ~5 g9 a00403343 83C4 04 add esp,49 {$ i/ M6 B7 N, e
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI0 J8 @& P2 b" b2 O8 w
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
' ^- D1 y- a* b- m% @0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]' r7 Q8 ^1 Y" W" m) \9 t/ i( Z1 B
0040334F 50 push eax
( o3 }( I5 Y {; C2 a8 k2 J00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
9 n" G8 k5 w$ ]00403355 50 push eax/ b* j. G M* M3 R& m4 d: B N
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX/ z) B" j5 k. f( H# s4 D) l, t1 _
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
$ H% T% u1 h$ B: `, `0040335F 83C4 04 add esp,41 h4 ]3 e" \; x( j3 D6 L2 H
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
* l7 n" X6 E% X5 ?: v3 P( A00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]' L; s4 t5 H3 t0 H
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]$ }8 M1 M+ s. Z4 j+ N4 D% W+ G% X: R
0040336B 50 push eax7 F( K5 k1 J4 ?: C# {/ G' w5 s0 g
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
+ Q" Z$ ]9 {3 t1 X) }00403371 50 push eax
$ ^9 C. Z; U" b+ U5 z7 n$ E00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX1 z/ O% H+ D* m* _5 D& g$ K
00403377 8BD8 mov ebx,eax ; EAX送EBX
+ X. }3 B+ n& \. v5 N0 m00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
2 v* Y9 m9 j+ F2 U/ `0040337D 83C4 04 add esp,4# w, s3 m' y9 R& }
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
. h& c+ B- B; u2 J5 o00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
1 C8 ^5 P! Y( U0 O00403387 50 push eax
0 l6 J8 w# W: y* h: w& t5 V00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX3 {6 ]- \& z, `& p p) k
0040338D 50 push eax
- w) g$ F; T ^+ {; C0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
% o. l0 a, [& t8 v, G& }$ G6 m00403393 83C4 04 add esp,49 ]% t1 W* g/ G- t1 Y2 T
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]: P* g! c0 ~% M8 {# r
0040339A 8BE8 mov ebp,eax ; EAX送EBP% I0 s& `7 }3 `
0040339C 6A FF push -1
7 x5 {. g: o- ^+ g f0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX,长度送EAX
; j6 t' `8 U* p9 Q7 J8 q0 S004033A3 6A FF push -1# r. o0 u' S" Q1 {+ ~- @8 k
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX; W0 v, ~! I) q; B, m# R/ R
004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX,长度送EAX; j% z) d& n5 k/ a% U
004033AE 6A FF push -1
. a) y4 G* V4 X9 Y; n+ j1 Z004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
- m Q$ R5 y9 z, u/ q. u004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX,长度送EAX0 F' S% D/ O# G) D# ?$ d
004033B9 6A FF push -1; Y# i# K# W- a. p* h5 \5 t7 m2 y
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX( o: k' A6 z% g0 x7 R" N' k
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX,长度送EAX
0 z3 P2 N$ ?: z, i004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX% j' v( m, ^( D' [
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX) W! z. e2 X, |# E. G) m( }
004033D2 B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX: F p) o7 @' v% C* C! M3 w
004033D7 D1E0 shl eax,1 ; EAX左移1位
7 C1 j( T8 I# N5 s004033D9 99 cdq ; EAX扩展6 b# H& U0 H' E! C: C; S h
004033DA F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中
" V4 ?& J6 ?4 M/ I( X004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较4 p; q( u) Q, W* Y
004033DE 74 0B je short qsr.004033EB ; 相等就跳(必须跳)
& b# j( h/ p, `) m004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A
: b; R3 x5 c5 F% H# b5 ^004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10], e ]6 `0 k$ ~! Z0 ]3 u$ |
004033E9 EB 2D jmp short qsr.00403418- Z8 n' v6 C, v" ^. o
004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
* n; _0 G; S$ I! Q004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
" }, T5 T5 H+ l004033F7 99 cdq ; EBX扩展& Z' k1 C! V* e5 ~6 G# l" S
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
8 _' Y, ^3 R+ o$ ?8 s% C) Z004033FA B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX7 X d: ]" G5 H a+ d& p: M
004033FF 2BC2 sub eax,edx ; EAX减去EDX. u, t* \8 \% t3 Y; u% g% [2 A- @
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]: ]* M2 G( B' [, h% Y/ m
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
% b" K! L9 G6 S/ i7 r* F+ }) {, t$ G2 Q00403409 99 cdq
4 z$ D( G" _0 [* \7 i- l% {$ v0040340A F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中
; x& l" k6 r( t( r0 x, p' v0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
( D% z& D# I( X5 P00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较' S- W: H: d7 `
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳(必须跳)
4 V* f. Q1 l& G! ?8 ?% v00403418 E8 6EC00200 call qsr.0042F48B ;
' L' p% J; i6 Y9 W% ^0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
0 F" Y' H. h7 d00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
- ?) q6 N H# } n, h$ S- b00403426 E8 60C00200 call qsr.0042F48B/ M3 v+ t2 V0 n7 b2 Y
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
1 X4 {% L2 h' m4 m0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8: X6 ]# G0 r d$ c6 K
00403434 E8 52C00200 call qsr.0042F48B6 W5 n6 Q, _- l: I
00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
: \) G4 T# A3 F( v0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
; {, P$ R! ?/ l/ j" v00403442 E8 44C00200 call qsr.0042F48B! M& v2 J% ^! h! k; m) k
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
+ S6 f4 _" p# _# g0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6& Q7 |; O% @& R- ^1 |
00403450 E8 36C00200 call qsr.0042F48B% s. X5 c( U1 ]
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
# Z3 R/ `% Q4 y0 I; n. D00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
. p7 Z6 X5 I) V% `0040345E E8 28C00200 call qsr.0042F48B, d: K2 b1 a. L. ?0 Z# O
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C] d$ J A; e9 X$ l! Z& R# ~
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2/ H; h5 [% B) W+ u* X
0040346C E8 1AC00200 call qsr.0042F48B: z) [8 \3 e; q- z" h; Q% N3 [
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
1 o# b& u+ x- T5 Q( G2 }00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1' Y& h5 \" h5 V9 l$ Z. a
0040347A E8 0CC00200 call qsr.0042F48B- T3 s& F$ }! ^; x' ^" Q4 t4 h
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44], h% q% |. w& l8 p7 l
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0( D, _. S( W. j& a. J4 u
00403488 E8 FEBF0200 call qsr.0042F48B
8 w- n3 J, I& v0 c1 {/ s; O0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
, D8 q/ A# ^; V; S6 b' B: h) z00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-11 K/ Z. j! V$ f
00403499 E8 EDBF0200 call qsr.0042F48B8 G; P% m' ~/ @. D2 L
0040349E 32C0 xor al,al ; AL清07 i# m# |1 P$ K# F
004034A0 E9 88000000 jmp qsr.0040352D6 v1 z% Q/ H/ I. U P
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里,F8下去~~~~~~~~
4 ]7 W" S) Z. k' p3 y- |004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]3 Z# h6 f+ B3 q2 _( x/ s
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
6 {& b9 I; u6 s; p& c* m8 G% c! f004034B3 E8 D3BF0200 call qsr.0042F48B
* f1 \ ]8 Z, N. d) Z004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
) F8 v# j5 H% C' K6 Q004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
3 ~4 Y$ _; E) C004034C1 E8 C5BF0200 call qsr.0042F48B- b' O: h3 J3 ], R( Y, e( t+ k
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
4 X/ D- G; j" P( N. r2 o1 S004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
) ?! c$ b4 g; }2 j3 z) D004034CF E8 B7BF0200 call qsr.0042F48B5 n7 |3 ^5 o, X, ]) H
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]2 } P- A1 X' q" b& q% T. V
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6* U$ I. t$ |3 O& r2 n" p" l1 y5 C
004034DD E8 A9BF0200 call qsr.0042F48B
7 z" d3 ?, _9 _004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]8 c% ]/ d% v' O/ |
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
+ K0 u5 M* u M! ]4 N9 j7 d004034EB E8 9BBF0200 call qsr.0042F48B
5 V7 |, R$ |/ J8 B$ P3 F. U( c7 T004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
8 _/ t+ t4 D/ g) F004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2& B& b1 I5 T# v }
004034F9 E8 8DBF0200 call qsr.0042F48B$ t" B1 o4 U3 L& O9 [) H4 X
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
: o+ q6 N& T2 Z8 |% \, Z9 C00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
9 {1 \( S0 J; e/ B" Q8 x/ |& \00403507 E8 7FBF0200 call qsr.0042F48B
9 _- n7 ^2 n5 Y+ B* ]+ r g3 _) E0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]. |7 B, Z7 y" H" G6 r9 _
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
/ o; i6 B8 @( ^1 [* z00403515 E8 71BF0200 call qsr.0042F48B
7 g2 l4 q. I; @/ ?, {0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
8 A! @' ]$ f8 i/ ^0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1% Q5 a+ U! V% M: O- ]
00403526 E8 60BF0200 call qsr.0042F48B! T. [# u. [9 @) Y- r% L
0040352B B0 01 mov al,19 c; v0 f- E8 v$ L( i8 M% e
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
1 i: H& i& K% R00403531 5F pop edi
, g; ~5 m. X/ R E8 k0 {00403532 5E pop esi
% _7 i, K- f9 r I, n/ |& q00403533 5D pop ebp
5 ?+ w8 p* l4 H+ E00403534 5B pop ebx
2 O. n3 _* e7 Z4 c/ M$ R00403535 64:890D 0000000>mov dword ptr fs:[0],ecx% P+ R+ ^6 @- [ C
0040353C 83C4 30 add esp,30
7 D7 F% v! Q) z& d5 ^" i0040353F C2 0800 retn 88 e/ {4 q- [% _" |, ~- W9 `3 a" D
--------------------------------------------------------------------------------, W$ d8 ~! O& D8 l& |
【破解总结】* b( q: e# T* }' U U
用户名必须大于2,注册码必须为24位。注册码前4位由用户名决定,11到14位由6到9位决定,21到24由16到19位决定,5,10,15,20任意^-^
4 i6 E. B8 t+ m用户名:yijun
% L9 P9 I5 M4 E注册码:4893*7777*3726*7777*0529$ D: ~4 I9 h; E- c1 h
--------------------------------------------------------------------------------5 y8 v3 f8 p$ O# y. e
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|