|
|
|
【原创】破解Quick Screen Recorder
4 W% g* B- q3 @# i; u【破解作者】 yijun* W# u) k( W; m% X) \) H2 K- o
【作者邮箱】 [email protected]: ~0 ]4 m; h7 L+ f/ d. L
【使用工具】 OD,PEID
2 t( R2 s0 {# A' t【破解平台】 WinXP
7 B+ k4 @6 G" u3 F2 ~* ~【软件名称】 Quick Screen Recorder
! _. L9 L# N' i. c! F3 ~% h$ g+ m【下载地址】 天空3 f5 b2 _% j5 y( `8 _- J+ n& u
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. 4 B) N; p% F9 X/ _: p
【软件大小】 540K
- ]+ V; h. P+ [) m; R【加壳方式】 无* f0 l! `9 r- v1 D# k0 u
【破解声明】 我是一只小菜鸟,偶得一点心得,愿与大家分享:)9 c7 A+ j) Q2 O0 f# F% }4 G% W
--------------------------------------------------------------------------------
& T) j! y/ g+ o【破解内容】
0 {# X( R+ O" Z& u PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方:
3 r% G9 ] e a1 J2 C' \00404C69 55 push ebp //在此下断
2 q, b( P4 y$ `7 Z" x00404C6A 56 push esi/ A5 m' [& f, I( x% d
00404C6B 57 push edi/ m6 h0 H" }. C } b, E/ g
00404C6C 8BE9 mov ebp,ecx/ ?2 @8 K$ [( h P# [: l7 I# v# U4 L
00404C6E 6A 01 push 1
& t7 ?0 D6 m7 ~- I3 ]# t" I; Q00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
2 ^, X. }1 ~. B5 G00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
+ u& c% N( @$ u, b( ~" P00404C78 8BCF mov ecx,edi! V2 [3 N+ {, _/ V) X6 W$ R
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
2 M2 m5 p4 n# l. |00404C7F 8BCF mov ecx,edi3 s4 I$ b! D0 T) V8 w- {! W' s0 O
00404C81 E8 A73E0200 call qsr.00428B2D9 i" T% A( H1 _& e' A+ C
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]5 O. I5 N- D6 s7 w
00404C89 8BCE mov ecx,esi% p4 s9 ?2 ^% b, m
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
6 }* y% Z1 l9 S/ R! ~00404C90 8BCE mov ecx,esi
$ k: O5 A2 D+ I( {00404C92 E8 963E0200 call qsr.00428B2D
" H3 K, t7 v4 _/ F* c# p6 i# _00404C97 8B06 mov eax,dword ptr ds:[esi]
& C# r7 n. W7 B$ B/ ?9 g00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2/ u0 U! E2 \1 r" h- a- w' P
00404C9D 7D 26 jge short qsr.00404CC5
6 d; p' d* F9 O8 Q" A4 C# z00404C9F 6A 40 push 40
6 G! z1 ~* c, Z# Q" t6 N- Q% D d& h00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"+ X9 U% m0 p/ q0 m# p
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."+ A) D% ]7 b6 B; [( d n* ^
00404CAB 8BCD mov ecx,ebp7 G6 ~" m: V' o1 o# z
00404CAD E8 C3840200 call qsr.0042D175
; h3 c, ]: j3 F) Z {5 W00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]# o, R/ P+ m8 |5 @0 e5 W4 L
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx( w. g0 k- ~0 |) a0 K
00404CBD 5F pop edi
1 Z- n1 K8 |0 L4 E/ p! Q$ N! b00404CBE 5E pop esi0 C9 ^. @$ r0 _6 V# c% d
00404CBF 5D pop ebp
% J# s+ _6 @2 s1 v& W7 t- x00404CC0 5B pop ebx# S3 J, ~+ |+ T, k; l
00404CC1 83C4 18 add esp,183 l2 O! V) s. C: ` ~; g" B- x
00404CC4 C3 retn
9 D! [+ u8 V5 M* ^' n% c00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
! L- s4 x( d0 Z- m% u00404CC8 84C0 test al,al
4 Y' A( n$ s; }% K1 R; G6 P! a00404CCA 0F85 1C010000 jnz qsr.00404DEC
2 N, i/ p/ T4 C3 R; x0 J8 |# U g, s00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
& n& e& x U1 Q) H5 ^00404CD4 E8 87E3FFFF call qsr.00403060. Z. y R1 H7 |
00404CD9 51 push ecx
5 |% Z1 @$ _% `/ n3 T! @0 p$ x# A% v( h00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0, R! j p4 X! I0 L4 j8 I0 t
00404CE2 8BCC mov ecx,esp" m6 C3 f7 \2 k i! C* a
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
! g$ P# t1 \2 t' I. \00404CE8 56 push esi
0 R. U# S$ {3 A8 Y( T, {3 r8 H00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
3 ^+ L0 `9 x) Q% a1 m0 A00404CEE 51 push ecx
3 i- |0 U$ _5 r, S) b: ?00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1' Z: @5 I' S2 z" @
00404CF4 8BCC mov ecx,esp+ ~" l6 }5 j, d4 N9 l& |
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp! x" [0 s5 h [
00404CFA 57 push edi
# n l3 V, p* r' e6 R00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
9 a. i% F! l3 N$ w/ k00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
; k" y* H0 X) r7 L R% |00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
3 W* T" {6 U# L+ P8 u, K0 J00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL,跟进~~~~~~~~~~~( U Q9 p( t! @4 A8 \
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功,此时AL=1~~~8 k7 K3 ^" Q" c: {
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~8 N" n( H) y) T$ d% g
00404D12 6A 40 push 40
2 y/ k3 T5 {- \. }& F00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"3 h& G% { T* Z7 A$ L! ]
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
( [( q/ \$ H8 W9 w: k00404D1E 8BCD mov ecx,ebp' C5 E7 f$ c! F* J* u% Y) X. d
00404D20 E8 50840200 call qsr.0042D175
' U& \$ _1 ]" d0 _00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]% n( o& }; Y5 A( t; q$ P
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
8 w; o* J6 e8 |: I' y00404D31 E8 5AE3FFFF call qsr.00403090
- U- h8 r, U! f8 I% {4 T# R00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
4 Y: {9 x; j2 i+ u00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
# S3 @( Y$ N4 a P: A2 B4 x8 L00404D41 5F pop edi8 P; v7 i* G0 c" h' h' L, D* \- q
00404D42 5E pop esi
1 L) N3 F8 o8 h2 I; `) T6 P! V00404D43 5D pop ebp8 N( D. ]4 Q0 C& f) u/ a
00404D44 5B pop ebx4 r# D9 J D5 q* S" n6 p* B
00404D45 83C4 18 add esp,18
! ~: e3 M9 I1 l# {00404D48 C3 retn
( D9 E! v: @8 Z$ A) \7 t*********************************************************************************************************************************************************+ P, @6 a8 o% [; V' v
跟进00404D09处CALL来到:% K# I9 g7 z2 Y, z; t' R
004030A0 6A FF push -1 //一路F8下去~~~~. m' J, R( F7 V2 y. @& ^: L% B
004030A2 68 C88F4400 push qsr.00448FC8; ]! ?: p& \0 x% T
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]4 {$ H% } o s0 k- ^' m/ V
004030AD 50 push eax7 M" c" y# c$ \/ O: E
004030AE 64:8925 0000000>mov dword ptr fs:[0],esp2 v$ Z% U1 c. g+ T
004030B5 83EC 24 sub esp,24; m8 [# K* D2 ?4 z( L y
004030B8 53 push ebx
* y( |7 x$ B7 g: b% l6 ~6 _" a004030B9 55 push ebp
# M9 |. m4 r. s# j" \; U004030BA 56 push esi
1 A' m( e z# K' O( `004030BB 57 push edi0 C6 D) i" n' w: f: k" H
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"( O. z9 f, f8 t( Q1 }7 m1 p
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
: s. c+ c3 f' Q& _) D/ X1 i004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1% C# ^2 I) e8 }* `- u! X! o, E; P
004030CD E8 27C40200 call qsr.0042F4F9
2 s7 f+ ~7 i. Y004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]3 O8 @; t% m/ Y- y- C* M9 e
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax: c: z. y' o: N
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
. m( B# ^5 v- ^3 o- r004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3+ {1 J* }6 ]- B8 F" Q1 q9 r4 n- U
004030E4 E8 905A0200 call qsr.00428B79% U5 l" P# d7 K, V
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]0 O/ F; S. z0 \( p' W3 K* l9 _
004030ED E8 3B5A0200 call qsr.00428B2D
. T4 P& Z( H0 K004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
. U3 t' ~4 I% w0 F004030F6 E8 7E5A0200 call qsr.00428B79
f9 t+ p& P) @" M; @/ t w& ^004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]/ V; z2 s- `) A" S
004030FF E8 295A0200 call qsr.00428B2D! g' g5 v, V3 a( {( g1 b
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48], V( v9 T( x) \# U, u8 Z
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]- t4 l# u/ w$ b/ ]
0040310B 83F8 02 cmp eax,2
& R( p1 {3 E9 o9 K6 l2 H0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳" V4 Q3 p! F) F( v0 B5 a1 O
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
& a9 Z6 d( W- t) }$ `9 B00403118 837A F8 18 cmp dword ptr ds:[edx-8],185 A4 n2 n$ V5 i2 N y1 @
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18(16进制)就跳; t5 h# n+ ~, P2 M' P" a3 i, {5 D
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
' c1 ~; F+ f0 F/ |! r! D00403126 6A 01 push 1
% q+ V- K* ~! m V" C9 b: t7 ^* B00403128 50 push eax4 h- I- D. j5 i
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 i6 f' T+ o! l2 V7 \) p" M. @3 R8 G
0040312D E8 C4550200 call qsr.004286F6! l8 A5 h: }6 F- L: Z
00403132 8B00 mov eax,dword ptr ds:[eax]
* c# l5 L( Y) v1 {; K0 l00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
4 N8 R t% |' o) q" f$ @00403138 50 push eax* a2 M9 Z1 m8 @
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4+ S. w- A# @' @8 a% _& q' Y& j/ }' W
0040313E E8 4D560200 call qsr.00428790: R2 I0 @0 ^' O+ r" N
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]% D$ g- b% O' B" M
00403147 8BF0 mov esi,eax+ g: s! ]3 H1 w, [4 ~
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
% U" Y( a0 F$ s+ m) `4 v2 k0040314E E8 38C30200 call qsr.0042F48B
: w8 r' @7 K- P& h00403153 8D46 0A lea eax,dword ptr ds:[esi+A] O" s3 s1 ^5 M- r0 Q, }
00403156 B9 3E000000 mov ecx,3E$ |; i* H+ V G7 G# H1 q9 h
0040315B 99 cdq% A8 J& M2 S. X) K K
0040315C F7F9 idiv ecx
: H- _0 f5 A' v5 x8 B0040315E 6A 01 push 1$ X$ n# v( ]7 W; `
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]9 z$ j& o4 D2 u, I5 L
00403164 8BF2 mov esi,edx. l; E5 e8 x: ?3 z. u5 V; Y
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]5 S7 [+ p! r' m2 ]: ?
0040316A 52 push edx% [9 Q0 S& {2 e* g% _5 G- \$ T
0040316B E8 0A550200 call qsr.0042867A7 K6 T* l3 b' }' |/ A6 O3 C% a/ A
00403170 8B00 mov eax,dword ptr ds:[eax]) M) ]% d; T& X( r# r
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]4 q& a! b1 T' x
00403176 50 push eax" P" L/ J) w8 k- f
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5+ Z! _2 d: |5 @: R2 `2 U3 u+ A+ I
0040317C E8 0F560200 call qsr.00428790
% ? W# X; p- A0 ]/ N; Z00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& P7 Y+ c3 t3 ^00403185 8BF8 mov edi,eax
6 }9 X( p/ l8 f# \3 p* q; t00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3! l) X% D8 z g& X
0040318C E8 FAC20200 call qsr.0042F48B% m+ L$ R/ O9 R6 X0 x$ t! c8 w
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]* L' w+ d" P9 S6 y& J2 `- ^, f
00403194 B9 3E000000 mov ecx,3E
! _/ p. R& f. P) x3 {00403199 99 cdq
9 f8 p* j- G8 c! A9 t2 ?0040319A F7F9 idiv ecx# ~2 C6 _6 j$ d7 @$ a! M
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]( d6 m/ n+ e/ ?- q
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
0 B5 |9 s+ V3 n9 k004031A5 8BCA mov ecx,edx4 x0 d7 n9 C+ i7 L" U- Z) B& N: s
004031A7 894424 24 mov dword ptr ss:[esp+24],eax/ ^9 W& D1 p, v" [( l7 D6 N& \7 S
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax3 h. w2 r% {' Q6 I6 ?1 z3 s$ O8 x
004031AF 894424 18 mov dword ptr ss:[esp+18],eax: i/ g X" d) d6 p; j
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
$ n) _* V5 [* Y( i004031B7 894424 10 mov dword ptr ss:[esp+10],eax
- K/ |. G! N$ _004031BB 8BC1 mov eax,ecx! h# `$ {/ r' R" B h0 \/ H3 g
004031BD BF 0A000000 mov edi,0A) z' c+ U, {4 X R9 t
004031C2 99 cdq! w) [$ K: N; d8 o8 h% U4 {( W& F
004031C3 F7FF idiv edi3 h1 z+ L! a; T \0 a. ]
004031C5 8BC1 mov eax,ecx$ @! c* O, W) ^3 G7 J9 X
004031C7 B3 0B mov bl,0B
2 G" ^. i& E, Y8 W$ x3 h004031C9 0FAFC1 imul eax,ecx* N6 y* F) K3 N' x% @
004031CC 8BCF mov ecx,edi
6 \$ Y) c, g$ E$ ?6 P. E* f R# M004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
3 T6 D" D+ | P004031D2 52 push edx4 ]' Q7 [, F# S- P% v- L+ q; G% m
004031D3 99 cdq
* t( H7 s* L0 b* t* N; A0 m004031D4 F7F9 idiv ecx* }2 D. g1 V& Z
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
! `+ B! ?$ Y' d U- G, J004031DD 2BC6 sub eax,esi
4 l5 g' Q0 {1 ~2 ^( V: e$ |004031DF 52 push edx+ g% G( n* x! @' J: o
004031E0 99 cdq
- F% _$ h" U. G/ i7 G004031E1 F7F9 idiv ecx
+ d2 ~; I2 G% ?; h' I4 u0 m004031E3 8BC6 mov eax,esi
; m4 k+ w1 Y5 {$ i; V004031E5 52 push edx& x* Z9 q# r2 E
004031E6 99 cdq7 w! z7 W) W4 o2 K1 t( l5 o3 Q/ T
004031E7 F7F9 idiv ecx
/ P1 e L1 W1 Q; P004031E9 52 push edx
e/ U5 o* l2 `2 Q004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
$ E0 C) b/ U, h' p8 c004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"; }0 h1 ~4 T" q3 p
004031F3 52 push edx
: U% t, U4 V" p004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数,我的是4893
: j2 | g6 I5 R5 z, R8 k2 n* w3 k: A004031F9 83C4 18 add esp,18: K) _4 l8 Y) P7 {! U9 r. k+ R- y
004031FC 6A 04 push 4/ S; p$ l0 i7 _
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
0 Z9 a) E9 J: G) [2 I00403202 6A 00 push 0
0 f- ?4 N0 ` V" o# S00403204 50 push eax
4 p6 E+ P- z% R3 d+ T+ t1 K" e0 c9 n00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]/ m" S2 K1 a. N* b1 \: Y
00403209 E8 D6530200 call qsr.004285E41 p0 Y v: l4 C; i
0040320E 50 push eax
8 a% X4 V, M4 N3 m0 ] s8 m0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
: Y6 [0 l6 B( H" m4 n00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
! R2 P* D! u- F; B2 `3 O/ Z00403218 E8 A7C30200 call qsr.0042F5C4
H7 i4 p& w! F9 u' c p0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 Z+ ^6 A! G- x1 l: T0 A5 E+ A8 D00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
& ~0 {+ x" U, c' h2 V00403225 E8 61C20200 call qsr.0042F48B
/ w+ h8 ?4 [! e0040322A 6A 04 push 4: t9 ^% o' M) }! o$ }1 O, ?
0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]- D$ z+ O/ [; f
00403230 6A 05 push 5" }# w4 a& g: u ]2 D( r
00403232 51 push ecx! i; }2 V7 K5 D- c. H$ L
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
4 s" F2 @: X% A) x00403237 E8 A8530200 call qsr.004285E4
0 q( Y4 ]! P9 d3 y7 Q0040323C 50 push eax
" e8 k/ b; K0 O( D0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]0 V H E; _, c
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
) G( O% [! |7 H% L. o4 E00403246 E8 79C30200 call qsr.0042F5C4
4 i e# y/ ~ b: @: o# J. b0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]: v, H# M& F J) N% V1 j
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
# h, c3 h: g1 ]3 y) U3 R00403253 E8 33C20200 call qsr.0042F48B3 a1 \- g3 m8 g x
00403258 6A 04 push 4
8 L; {' Z2 q1 F0 `# b( }+ q0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
, o! `* z7 i1 C0040325E 57 push edi/ N4 [ [0 a2 P- s2 Z v
0040325F 52 push edx$ A) B) ^6 l& k8 ]" c
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
/ d2 K4 I4 ] ~8 M' C00403264 E8 7B530200 call qsr.004285E4
) A, v& X5 H: @$ }' e! k: @2 x6 t00403269 50 push eax
# y& t$ M& w' R2 ^7 i0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C], i5 I% S8 v: b0 o! u: o
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
- c* Z: b# t: @4 x# j00403273 E8 4CC30200 call qsr.0042F5C48 n$ |+ A8 F" S% U
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ H# x3 n) |; v' _
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl5 s/ L/ Z9 L. P$ j4 U; Q2 L
00403280 E8 06C20200 call qsr.0042F48B
' B4 ]( [; D# g% l) ^, f00403285 6A 04 push 4
) `8 X# i6 C9 E `00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]9 Z d- W; z7 P: U0 f6 t/ p
0040328B 6A 0F push 0F
: H# F- T; I9 t5 q6 H4 |$ z8 }' T0040328D 50 push eax
& G7 I- J" g- T# k) G0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
: o# u: y' R+ {: @00403292 E8 4D530200 call qsr.004285E4( h& H/ b ]; \6 f; B9 K! K
00403297 50 push eax9 x8 F- c4 P+ a
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
& y5 ]+ v( [3 H# @) F, P4 F0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
! I' y1 d2 N6 x, h# w% A004032A1 E8 1EC30200 call qsr.0042F5C4
T/ W1 [( o& ^" j7 B004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ G z" L, X# K2 T. V/ d5 g# V004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
" y$ E0 B9 @% D4 h* W5 P p004032AE E8 D8C10200 call qsr.0042F48B6 n \) t' u0 g. k2 r
004032B3 6A 04 push 4' \5 ~# o* O% R
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]- D: E' s; f5 W" x+ Q& K: n) E
004032B9 6A 14 push 14
5 Q" B+ I7 Z- s8 t" F8 g004032BB 51 push ecx
6 W4 n3 E8 ~& ^9 D- U004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50] P9 o$ t% o( O3 g: v: i; r1 U6 n
004032C0 E8 1F530200 call qsr.004285E4
' N8 o$ Y/ i1 u8 P! u004032C5 50 push eax- x1 O, ]% h7 ^3 N2 s. b/ P8 r
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
) b% h$ K# V+ L3 i0 M004032CA C64424 40 10 mov byte ptr ss:[esp+40],10; J0 ]$ L& U I/ M6 u m' n
004032CF E8 F0C20200 call qsr.0042F5C4
) ]9 e$ p8 X, [: s8 D7 `# q004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 @0 g6 x, U& F! M/ V004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
' i6 W9 m t( y! U004032DC E8 AAC10200 call qsr.0042F48B
. N2 D( @- G" g: h( N004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI( ]; E( y" a u' i1 J
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
' i/ ~2 `2 f9 A ^# G004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
\9 ~1 O3 [# z2 u004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
9 R6 b! \+ k1 @/ R9 V5 f004032ED 8ACA mov cl,dl ; DL送CL0 o: O. `9 Z; b! ?
004032EF 3AD3 cmp dl,bl ; DL和BL比较" D3 x5 G9 }2 b' m1 _
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳(不能跳)
1 b% w" m9 C5 m" r. C/ ?004032F3 84C9 test cl,cl& U7 r8 }$ G% u) e; {
004032F5 74 16 je short qsr.0040330D& ~. F3 q5 b6 f3 _. i6 g' Z* n
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL; I$ p9 a4 n- x( j" L3 J) D0 ?
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
! ^- b: ?1 B3 M/ T% U+ c* ` U004032FD 8ACA mov cl,dl
# a4 a- X# G/ h8 \004032FF 3AD3 cmp dl,bl ; DL和BL比较- t+ a }; T/ w& T2 l
00403301 75 0E jnz short qsr.00403311 ; 不等就跳(不能跳)
: Z5 z2 j' o3 B9 b" h# Z4 ?6 }- q00403303 83C0 02 add eax,2 ; EAX加2
+ Z: |; z3 n" Q00403306 83C6 02 add esi,2 ; ESI加2
, {! z- ]0 h5 V$ M00403309 84C9 test cl,cl2 _7 X0 G; a. r0 B/ }
0040330B ^ 75 DC jnz short qsr.004032E9
) K2 w5 G4 @1 Q) f0040330D 33C0 xor eax,eax
9 C. L5 l+ l: m$ W$ H0040330F EB 05 jmp short qsr.00403316
7 L; o, k0 G$ c' Y" P00403311 1BC0 sbb eax,eax! a: l( Z% B( B: s* Q
00403313 83D8 FF sbb eax,-1
0 Q( j% H, [) ^4 ^& ]- A00403316 85C0 test eax,eax% B8 o& W' P8 n Y$ F
00403318 74 0E je short qsr.00403328
& N4 C* Z) Y* Q/ F0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A2 }/ t5 Q/ o! g; r: @" e& D0 q
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]; @ ?; i: S2 W8 L+ W7 @/ S2 u+ t
00403323 E9 F0000000 jmp qsr.00403418/ N, p& d+ D, u- y9 x
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX. k" U9 Z% a( N! U; H1 j o7 L8 L
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 o$ l0 w6 T# h7 P0 F3 C00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]4 R: d% F- X8 B; |
00403333 50 push eax9 s. D$ s$ [1 ?4 K0 }( M
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX, K6 c% E+ a8 ~% h; h
00403339 50 push eax( e: B8 N0 ?* @. J5 w3 Y
0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX: {: s- B3 P; }% T
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
1 ^% m7 q0 K4 q$ I7 t0 ? x q% ]( e00403343 83C4 04 add esp,4! k0 a& N8 p! ^$ a# R& v( m
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
4 s2 n7 V4 `, U' R) P- r6 i6 r00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
- K- H/ n# M, Y7 r% _% j0 j; G0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18] a8 S- ]8 Q j7 P$ d/ _0 ]
0040334F 50 push eax! \9 S$ b: ?/ g( c4 q5 T0 O r
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
" T8 I7 A% X% C) q+ ^% w c00403355 50 push eax" [8 e, }5 Y; G1 I
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
4 D- Z! p5 g6 o! B0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
3 m9 }/ D; V6 e! b0040335F 83C4 04 add esp,4" o* Z; I7 @ ^ j& j' d0 ~
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI) m- R9 }4 ?! Z/ C" c* z$ G+ K; H
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& b/ R5 i6 C7 T! @3 H+ J" J
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
) D" Q9 K. z' U; W* G0 e7 ^0040336B 50 push eax+ ]* L a" x& S: P; Q9 n
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
7 e8 S" F# p5 l. G3 u00403371 50 push eax
" a: u% F: Y2 A1 Q- j! s00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX& _( a! |7 L/ m. A& w
00403377 8BD8 mov ebx,eax ; EAX送EBX
2 s' ^% L7 b, h% e0 Q! K00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX
8 U7 v, M% e e2 Z3 |. ~5 L0040337D 83C4 04 add esp,48 W& ~, |+ g" ^$ F( Z, i$ w8 F8 |
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
9 j; ]5 r. k8 e" Q; c; _4 L00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
/ J: n5 J8 `0 Y- |+ H. A1 L00403387 50 push eax
0 D, D% W2 N. r00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
" y2 \" ~: P* E/ Y C0040338D 50 push eax
" R M% V5 {) y5 C `# |0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
9 w) H; v) e" s0 }0 p3 O) K+ E00403393 83C4 04 add esp,4( T" B$ `7 {9 s3 f ]
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 A Y* u: J, t9 X3 N
0040339A 8BE8 mov ebp,eax ; EAX送EBP
1 B9 L: M1 r5 @& r' |! D5 s0040339C 6A FF push -1
5 v- _4 l% _, E t a. ^0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX,长度送EAX
/ H. I4 [+ t9 |$ L$ f& h2 p/ }. L- W$ H004033A3 6A FF push -1. s3 @4 ^. a6 |9 j- e
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
9 D+ C% J" n- l0 ~004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX,长度送EAX
0 p) c) n+ S3 O" e" g, m/ g004033AE 6A FF push -1" @2 p( ~% f& O/ b3 |$ ^' S
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX F, s7 o, s$ M2 ^" x
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX,长度送EAX
) L& a% a/ `" P$ ~9 b004033B9 6A FF push -1' x, S1 }9 e ?: l/ z3 W7 s9 e
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX- e8 w+ @4 j6 f' U) b- z* c& h
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX,长度送EAX0 a* Q+ m* B8 z1 \( z# \- {
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
0 d b6 |5 a8 O$ g7 l004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX3 k( S+ T6 t& d; o1 ?
004033D2 B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX' g- D0 K) K4 s7 [8 T& {
004033D7 D1E0 shl eax,1 ; EAX左移1位
9 u: b$ ^/ b1 ?7 J004033D9 99 cdq ; EAX扩展
4 I, c# _7 K9 l2 ] @" P3 a/ v' Q004033DA F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中6 V" i( r: `. C0 p0 V
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较6 X+ x2 o. a1 N( ?
004033DE 74 0B je short qsr.004033EB ; 相等就跳(必须跳)
% V% G0 N: ~/ W B1 I5 u8 _004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A+ r8 e) W; c m( t
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
" F9 R" ^; x0 m1 D. U. S004033E9 EB 2D jmp short qsr.00403418
' O- i2 h, ?' I8 `004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
# X r$ T u) t1 a004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
# W/ @9 d! A8 w# w6 _004033F7 99 cdq ; EBX扩展' A) M; ^0 M# b; O" [( C
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
" _# F/ f- P$ R; S3 E/ C004033FA B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
$ T' b3 h" S+ q; K004033FF 2BC2 sub eax,edx ; EAX减去EDX% d' }, N" X4 T# p; S7 l- G
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]- P; `% i6 H- H4 g8 ?. L) ^
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX* H0 [2 Y3 W8 \: J1 p9 z
00403409 99 cdq( c3 {) z: h% H, {* _4 D0 H7 U
0040340A F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中0 c; D- T s9 X7 k
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX$ Q7 T0 Q7 x. x' g; c8 j
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较, |9 @+ S$ L2 m4 p1 J0 \) Q7 v
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳(必须跳)3 j3 x; v1 h+ B8 B2 O
00403418 E8 6EC00200 call qsr.0042F48B ;
; A/ z2 M3 Y$ \; v' |% ?0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 n1 d0 r: ?/ Q5 K- q00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9/ L3 ?' A2 S I( K
00403426 E8 60C00200 call qsr.0042F48B
( ?' |7 H8 B# |* L0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]3 ^3 m: D- l( \. ^8 P* F, n3 j
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8; n* [( x8 U/ H+ ?; v4 A& M
00403434 E8 52C00200 call qsr.0042F48B
) D) X1 I( Q: }0 v" R00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]& L" {# ?; n% u/ B9 n9 o
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],74 R) q( C& z0 O; Q2 P6 l
00403442 E8 44C00200 call qsr.0042F48B; l. L# y" z' @/ D. N
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
$ _% l: [* J _& K2 L( W0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6; r D2 f: l& ^$ `* C P0 d
00403450 E8 36C00200 call qsr.0042F48B
5 a' L4 m" y: j+ \3 q4 P) r2 {4 Z2 p00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]$ V5 m8 W% _$ t L" |
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3! [& W* O8 D7 g
0040345E E8 28C00200 call qsr.0042F48B
) A$ `+ e) W6 c( {* \! `2 {00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]6 |+ ^9 }" K9 o7 |0 @8 i
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2. l2 ^" t4 m0 ?' n% m4 @8 R
0040346C E8 1AC00200 call qsr.0042F48B
- B( w0 Q/ Q5 @# @8 t" u% M4 U00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]2 R, S$ ~; b1 E( G; n* A7 x
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1- |- t- b$ `; X7 d1 d
0040347A E8 0CC00200 call qsr.0042F48B
7 B) t, @+ K: Y* F7 \+ a0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
9 x6 d( ?% j( Q$ |! \' d00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
@/ G0 o& }+ g# h g00403488 E8 FEBF0200 call qsr.0042F48B
( h7 G. N0 p2 {8 m) P* \! S. o! X6 L0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 i1 g8 ^5 v f7 S
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1* i) J8 z3 S$ m% |6 |* `
00403499 E8 EDBF0200 call qsr.0042F48B
) _4 V+ L+ `8 X0040349E 32C0 xor al,al ; AL清0
2 Z w# y. |7 a5 m004034A0 E9 88000000 jmp qsr.0040352D. P! c5 [. s4 m* a$ b' L L- v% s# ]
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里,F8下去~~~~~~~~
( m% O* z/ H% \$ J h004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
' K% W3 Y/ C6 m# ~7 {5 v004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9* R" j( r6 G5 U( L- e2 Q
004034B3 E8 D3BF0200 call qsr.0042F48B
* G3 l* i& @# w004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]9 v2 r5 X% E& m% i
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8
6 k, M* s7 ~9 V) T; d004034C1 E8 C5BF0200 call qsr.0042F48B
) u: N7 |4 h& m4 n; E004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]& [ `7 p; m0 S7 Y, a( M7 w. w
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
: V5 ? }+ Y k9 A, I0 v# o# n004034CF E8 B7BF0200 call qsr.0042F48B5 ]- M2 L" r& V1 S% o
004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
* d7 I6 F; n$ H1 y9 M004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
, H1 f/ F. A8 C5 t; P) e, \ N, }004034DD E8 A9BF0200 call qsr.0042F48B
1 u" O" B- X+ v004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
% ]1 v3 e& o+ I; h. k5 F004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],34 ~+ x! @2 U! ~
004034EB E8 9BBF0200 call qsr.0042F48B5 ]" a B) n. Q
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
' l2 U" ~! }. T% z, e004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],22 \' @% n/ a7 W \, Y# T) J5 O
004034F9 E8 8DBF0200 call qsr.0042F48B: w$ ~$ f4 L3 |1 J7 C
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]! ]0 c" r! S G% G& j8 C
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
/ F8 F1 i& q5 }00403507 E8 7FBF0200 call qsr.0042F48B8 M7 H0 D" r! h
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
2 b5 Z5 s: n& x: d( ~00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0, |' C5 n; ^' K* H3 r3 ^! r3 `) M
00403515 E8 71BF0200 call qsr.0042F48B
& @: k. k" D5 s. J" C0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
4 w4 N0 L) o) y- }# D6 p0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
& ^- b! t5 j; P00403526 E8 60BF0200 call qsr.0042F48B
- n P0 }, j# d0 I6 K# {0040352B B0 01 mov al,1
. D& b" _2 n% D) }0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
+ u8 a9 g( F- u2 V9 \+ A$ F00403531 5F pop edi5 V& a6 Y/ D& z8 F
00403532 5E pop esi
$ |! W r" h; I+ P" X$ h00403533 5D pop ebp8 ]8 o4 P0 q' \1 G1 \, V
00403534 5B pop ebx
; K( l% F v' {$ M00403535 64:890D 0000000>mov dword ptr fs:[0],ecx9 G* M/ Y! P& O; B y) y
0040353C 83C4 30 add esp,30
6 o3 b" J( F& ?9 c( c# e# u" t0040353F C2 0800 retn 8! Y9 Q+ ? P& x3 M/ G* c! M! U
--------------------------------------------------------------------------------
; r& K* k5 }1 w% c9 z【破解总结】/ T4 j! t9 e/ R) {" e
用户名必须大于2,注册码必须为24位。注册码前4位由用户名决定,11到14位由6到9位决定,21到24由16到19位决定,5,10,15,20任意^-^
3 l9 E/ h2 k( u8 o9 E, y6 F用户名:yijun
9 ~ k* L, J; t; E' I注册码:4893*7777*3726*7777*0529
& k+ c( G. c% B7 T--------------------------------------------------------------------------------: n6 Q) Y% R) z" b# f
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|