|
|
|
【原创】破解Quick Screen Recorder2 ~8 ]. s. @6 {* l G
【破解作者】 yijun/ E3 x; @! [2 ~
【作者邮箱】 [email protected]! F$ M) f+ A: W! @, F- p' C1 |" j' t
【使用工具】 OD,PEID2 J+ o' E; y) h6 B$ S
【破解平台】 WinXP
+ n( L% _5 M6 t$ G3 g【软件名称】 Quick Screen Recorder
+ C2 {1 v" Y) R& [2 x9 S【下载地址】 天空# c9 A5 G$ |- z9 X5 a( N
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
/ [9 A1 l$ M o S9 w" Q4 @【软件大小】 540K
{: ^2 z6 y3 m; S+ `【加壳方式】 无$ _& E8 D% Z7 l; ?$ l
【破解声明】 我是一只小菜鸟,偶得一点心得,愿与大家分享:)
* @' s% Z, o8 v, {--------------------------------------------------------------------------------8 E# W6 x0 d/ k$ a, {+ T7 x9 c/ P F
【破解内容】
; \% l& N2 C& C PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方:
5 U) `. n2 v' ^; N1 p( x00404C69 55 push ebp //在此下断
& I/ E% x1 d! S8 \00404C6A 56 push esi
4 `1 d& v# a7 L+ j) A& |00404C6B 57 push edi
6 T) l2 p! d( R4 g' }00404C6C 8BE9 mov ebp,ecx
1 }8 m# q7 U6 |1 ^) t00404C6E 6A 01 push 1
2 h7 D) k, { M1 v( B00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
% F. ]. y" o: [$ I00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]: C4 T& _3 x3 e) { d
00404C78 8BCF mov ecx,edi
- x8 o. R7 J0 i Z9 [, H00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
) G6 J" g B E6 i, V& R/ M7 }00404C7F 8BCF mov ecx,edi, W. p$ S% S% p5 b" s
00404C81 E8 A73E0200 call qsr.00428B2D
! E7 `" D7 j4 t) N3 M00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]5 w y' E$ Q5 d! P
00404C89 8BCE mov ecx,esi
3 c3 I& F5 m, c00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX& ]7 z- |& m) x) ]6 J6 |1 I9 o
00404C90 8BCE mov ecx,esi
) B! [: a& n5 ~: @/ ^00404C92 E8 963E0200 call qsr.00428B2D
8 E6 r5 m7 j! H, G00404C97 8B06 mov eax,dword ptr ds:[esi]
+ P. s4 Q1 u( y; B6 b9 J00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
7 J! g: G8 X6 ]* d00404C9D 7D 26 jge short qsr.00404CC50 a0 |6 B1 i- g% ?1 ?6 _
00404C9F 6A 40 push 40$ a0 Q3 Y* G8 Q4 d9 [; ]: i
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
, F6 Q4 ^1 `: F00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name.", _. A* `, a$ {1 P, s
00404CAB 8BCD mov ecx,ebp
3 W( q* y/ w1 N7 b' \( r2 _, O00404CAD E8 C3840200 call qsr.0042D175( L; h; ~0 \: e. p5 @: i5 y
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]1 E( g/ o/ a8 `9 M
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx I9 H& u Y9 Z. L1 o
00404CBD 5F pop edi
6 c; a# E0 X+ M' v4 _2 h& {00404CBE 5E pop esi
( ]6 W/ c( W6 p M8 a00404CBF 5D pop ebp
# f m% K/ L# S00404CC0 5B pop ebx
. z& d3 i; x) J5 a" ?! y7 A00404CC1 83C4 18 add esp,18% m3 q4 t/ ]# o
00404CC4 C3 retn
; e. c8 G8 \: k0 J00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]0 t' \, I; q' a
00404CC8 84C0 test al,al& _7 F" w4 m* m3 r# o/ o
00404CCA 0F85 1C010000 jnz qsr.00404DEC
( G% d. j" N3 g. S. X; j/ \. m00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
% W! U; [2 J: z, H00404CD4 E8 87E3FFFF call qsr.00403060
2 b7 e+ I0 G. |4 S, o00404CD9 51 push ecx
# z" J) K- T. f4 Z3 x7 A6 z00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
# y+ `& v/ Q t$ D* I6 o00404CE2 8BCC mov ecx,esp& U0 @- g4 K' O1 _ n
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp( f4 r4 z- q) d C; N
00404CE8 56 push esi
$ ~6 U5 [' {2 ]5 u9 D5 n00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
) W% q& P8 |9 N- m& @5 i00404CEE 51 push ecx5 r+ _1 A- ~! n- C
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
& {1 Q5 O. t' t* _00404CF4 8BCC mov ecx,esp
1 K+ D' L1 Y& b1 J& v1 f. F00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
. f- [. \2 p e2 O/ a8 T6 l7 r00404CFA 57 push edi+ X8 C h/ v9 o" ?+ P
00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0$ `- F& k2 B3 n% y
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
& C9 ~. x) B! g9 Y5 P! A00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],09 s( ^0 z) q7 Z" n
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL,跟进~~~~~~~~~~~
, c, j* @/ d- ^2 _5 Q6 Q00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功,此时AL=1~~~, s/ R; C# h( k; @
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
$ Y7 r, h9 O: v( l& `00404D12 6A 40 push 406 S; C/ [0 X' |7 ~4 S7 p
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"1 y# F) R; i! x; Y+ t0 ^: ~0 Q
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
5 V# _" X+ F2 M- f00404D1E 8BCD mov ecx,ebp
( m( ~# ^; d" L& b00404D20 E8 50840200 call qsr.0042D175 ]/ a8 f+ f) Q; X! W" [3 f7 q% B
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
4 U& h& t2 t9 X9 R* }! Z00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
# q" B$ v6 K7 p+ k. B) |( H3 [00404D31 E8 5AE3FFFF call qsr.004030906 z* u( o: {, x) f' \$ p
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]) e0 O' e3 f% d) ?
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
& ` L( ~0 I+ {8 y00404D41 5F pop edi
5 m1 @/ ?. s' i5 ?9 o- L00404D42 5E pop esi/ A. ~7 s* ~' O( y
00404D43 5D pop ebp
3 G: W6 H) N( z* s) o% g00404D44 5B pop ebx
9 H& D. f% `4 ]7 V00404D45 83C4 18 add esp,18
; V4 u0 h. e* b. l2 q9 v00404D48 C3 retn: g2 X9 w1 r. M+ v
*********************************************************************************************************************************************************
! {6 D- P; v5 T6 ~, A) U% A跟进00404D09处CALL来到:( y' W, A3 e% D% {' n# v
004030A0 6A FF push -1 //一路F8下去~~~~
C2 V3 d, R' b' w* d004030A2 68 C88F4400 push qsr.00448FC8
4 J0 g" l# h z1 [3 W004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
$ N/ i1 M4 H" _7 _: c2 U G8 q004030AD 50 push eax
2 d% j$ {. r; l$ M2 P G004030AE 64:8925 0000000>mov dword ptr fs:[0],esp0 l) @+ w5 V- i# \! Q
004030B5 83EC 24 sub esp,24
& n) d( z z- w7 c004030B8 53 push ebx
# |: R9 n9 ^, m& D004030B9 55 push ebp
8 p$ R' c- F& u1 l7 f004030BA 56 push esi
. k1 k( |" j$ u& A _2 d) x004030BB 57 push edi, \* m& P3 |9 D l2 {: H1 C
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
: k+ Q# U8 g' D: d* b& g* J004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
5 r o. Y! ?# F# Q- s004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1" b* D& |8 ]- q
004030CD E8 27C40200 call qsr.0042F4F9 G+ k8 C9 `& M& k
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
6 {2 o/ `) H h! O/ p4 `% A& H004030D7 894424 2C mov dword ptr ss:[esp+2C],eax! |. l8 T/ V3 A" u$ N) H' [% o
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48], z. s4 S. {+ u- q" R4 z: v8 P3 O
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
8 I* K1 `2 r0 ~5 n9 i8 R8 ^- f- X004030E4 E8 905A0200 call qsr.00428B79
T8 B. G8 B$ p" v! D* J004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
1 H8 Y( A" c# K o6 ?9 `$ K& u# L004030ED E8 3B5A0200 call qsr.00428B2D! [% o: U0 Q4 d. A5 `
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
2 F' d6 v* c. e3 [ n3 i004030F6 E8 7E5A0200 call qsr.00428B79
H+ m, z: u2 w9 [" `% S' @004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! d2 Y5 n% R5 Y2 j# J% n* R5 V( e! t) ^004030FF E8 295A0200 call qsr.00428B2D! x- `/ M$ |" a/ V0 a: U
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
. q2 R, S4 g( t1 s. c00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]- y" |) X M( t% s; X& f
0040310B 83F8 02 cmp eax,20 w/ L: A. X" }0 W6 ^' Y
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
1 g# [& ^; M/ q00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]& n9 r: [- m/ l
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18
`2 q9 @/ \" T) l* |0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18(16进制)就跳3 m0 I* Q! {2 Y2 C' Q* k# R# j$ M
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
6 w! E# j7 Z) F' X( `# g00403126 6A 01 push 1
( v" l: v1 Y% U! l00403128 50 push eax7 ^- A6 a3 y( V! `% S
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]2 [5 z5 v; z+ P" N* V6 m- Z
0040312D E8 C4550200 call qsr.004286F64 l" B3 k; u7 I0 b' j
00403132 8B00 mov eax,dword ptr ds:[eax]5 P) |1 |: a) ]1 L
00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]# Z S) U& N- b9 b0 S3 X
00403138 50 push eax
3 i4 k* k+ b, p; x% ^00403139 C64424 40 04 mov byte ptr ss:[esp+40],46 g6 N5 ?/ w7 l' O
0040313E E8 4D560200 call qsr.00428790
* P' a% q, q; t- A00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 p/ U" G3 s# f( h
00403147 8BF0 mov esi,eax6 b6 g7 _ Z7 I5 ?* A, i' N
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3+ g9 m& A5 s" U7 y
0040314E E8 38C30200 call qsr.0042F48B( Y. j# j" K% x/ Z, B3 h
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]: v+ P" i# j* G
00403156 B9 3E000000 mov ecx,3E/ h; v* S7 w% |% f+ w
0040315B 99 cdq
* k' P4 Q! G! K! C2 y! P4 ^$ g0040315C F7F9 idiv ecx2 z7 X- x- h) ~' W
0040315E 6A 01 push 1) ]' L% }+ P, z2 u* N
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]; t2 R+ P5 q( F
00403164 8BF2 mov esi,edx9 n; Y R6 \2 e, Z' O8 i
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]& r, b! ~' _3 r/ j/ v' _2 c7 b
0040316A 52 push edx
; ~5 S7 x! y8 e* ?- d! b0040316B E8 0A550200 call qsr.0042867A, M0 V6 ~# M; ~ l- r4 w2 ?
00403170 8B00 mov eax,dword ptr ds:[eax]. p6 _4 t" h1 k& J" Q
00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]+ l. R% r% l2 V5 Q
00403176 50 push eax/ d, X ^- k W9 [' g/ E" e6 b, }
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5
, W1 Y: E* l2 G- `3 p! I! k0040317C E8 0F560200 call qsr.00428790
3 F# F/ Z( Q" Z! A00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]* h& f- z3 A% ]& N( X; ]7 j2 w% ?
00403185 8BF8 mov edi,eax9 n8 M; v7 C; E
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3
7 X6 d' L/ U/ k% s" M0040318C E8 FAC20200 call qsr.0042F48B& g3 e% O. I+ }2 Q7 e) K
00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
& l# j1 ^+ J4 {6 k4 F& S% K+ x% \00403194 B9 3E000000 mov ecx,3E
: @- G0 C4 e) J, e8 V00403199 99 cdq! l$ u2 d$ F& r3 J- U0 m" W
0040319A F7F9 idiv ecx0 c3 R( r: s& G4 ~* c: g3 b: w
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]8 d6 ~7 ~4 b- A4 H
004031A1 894424 28 mov dword ptr ss:[esp+28],eax$ ?! @. u d9 p3 c6 B+ s
004031A5 8BCA mov ecx,edx
2 b8 m# R- p$ s3 t, I004031A7 894424 24 mov dword ptr ss:[esp+24],eax8 J5 g2 o. o3 _* [% A
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax$ G4 h- [7 g: m9 O* A4 A
004031AF 894424 18 mov dword ptr ss:[esp+18],eax6 D! p1 g) w: h% X
004031B3 894424 14 mov dword ptr ss:[esp+14],eax/ [( T* I5 }( E$ R, i+ z
004031B7 894424 10 mov dword ptr ss:[esp+10],eax
; j: e0 H) X' u$ a6 v$ g+ f004031BB 8BC1 mov eax,ecx
2 g9 J( a8 X2 Z5 b004031BD BF 0A000000 mov edi,0A
( r c J. o- `3 V7 z2 g6 g004031C2 99 cdq6 u5 P" ]( U/ ~% c8 N& b& K/ X
004031C3 F7FF idiv edi
, [3 Z$ i, v F( T; I004031C5 8BC1 mov eax,ecx
3 L1 l. ^# D& p$ ^. q! `004031C7 B3 0B mov bl,0B
/ R3 n0 {, Y0 Z. `004031C9 0FAFC1 imul eax,ecx
) G o U, t- E1 X, ^# e004031CC 8BCF mov ecx,edi
) k* Z. k5 A& G# z004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
! d( q: p1 f% ]5 v7 ~004031D2 52 push edx3 ^% [+ `5 S/ W- q. K% t% J: h
004031D3 99 cdq
9 q5 ]6 R+ w+ D* l7 O4 X004031D4 F7F9 idiv ecx
: E1 K# f. |8 P" m6 R U; \* M, A004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
6 f0 _# T- p6 q8 y$ y004031DD 2BC6 sub eax,esi
; e. P4 I$ `2 J' A6 y* F2 d004031DF 52 push edx
4 U e: `2 k- m: C004031E0 99 cdq. s- _. a! h" f. o& I' i
004031E1 F7F9 idiv ecx* d6 o) F8 R3 c- X- s
004031E3 8BC6 mov eax,esi8 w8 f. S) Y3 s
004031E5 52 push edx
9 l8 b- ]0 C5 Q/ \004031E6 99 cdq
; T4 f' U1 F8 q- P1 {004031E7 F7F9 idiv ecx
7 ^6 R T6 E0 J/ h+ Z004031E9 52 push edx" P8 q" z. _& @1 l$ U
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]! k2 f8 X1 Q( P7 h W$ W
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
- S3 G1 t1 _2 D8 w( T& ?6 j004031F3 52 push edx
4 @* J- R& G& e, C* P: F004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数,我的是4893
6 b/ N" ~- G# b& u6 I. @: D! C8 ]004031F9 83C4 18 add esp,18
+ \2 O. j# M# i7 o0 {004031FC 6A 04 push 41 a& w9 {4 J" m& c* P9 F- k' T, |
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
8 s2 u+ V @6 P4 Y' y+ \00403202 6A 00 push 0
4 d6 S2 g+ Q2 H: x. Z' T00403204 50 push eax" B+ s& S; D2 p$ }" M$ b. l
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]1 Y( U' f; v+ c b# |; U* m) I) `
00403209 E8 D6530200 call qsr.004285E4) {0 O2 [# t2 c" ]8 R7 q
0040320E 50 push eax
0 J/ R& w% h+ ~* e: ~: c0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]7 Q$ i4 V- ]! P8 ?( r8 h+ ]8 Q! o
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C7 ~) {, R8 H% C% J
00403218 E8 A7C30200 call qsr.0042F5C4
0 u" c5 Y* [) M6 Z0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
]" o) m9 ]& P' w5 K00403221 885C24 3C mov byte ptr ss:[esp+3C],bl( U6 O; }; e: |6 A J ]
00403225 E8 61C20200 call qsr.0042F48B
4 `" c$ W9 t% e" [/ k5 D. H5 E0040322A 6A 04 push 4
, d4 u% r8 A' r; {" n* G0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]* |9 D" O& S9 |: f
00403230 6A 05 push 5
, L( T# r( W/ U3 m/ R00403232 51 push ecx
" q/ d& D# M" @0 H$ I# d7 E00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
% }8 ], ?. ~7 N9 u00403237 E8 A8530200 call qsr.004285E4
9 ]# u. G l4 M' u$ |# x/ w1 P0040323C 50 push eax1 U9 J C% {) D4 E1 V
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]4 L1 D: F" s9 \. p) E5 G
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D; D+ O( B! B5 E& g( Q
00403246 E8 79C30200 call qsr.0042F5C4
5 c/ M+ _+ j& k0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]) L% z( [% A# ] s% {* P
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl" }" V7 T5 ~: `9 }
00403253 E8 33C20200 call qsr.0042F48B
( ^$ z: z$ y) u e+ g; C5 `00403258 6A 04 push 4+ C+ J, k x! d
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]" J: |: M1 F8 X- [+ U
0040325E 57 push edi
4 Y8 ?2 Z* r- T' g" c/ j$ e0040325F 52 push edx3 T6 T+ z% E2 u) u' ^7 {$ D/ t; a' b" j2 a
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; l, r' F" \) V- _( Q: R3 V
00403264 E8 7B530200 call qsr.004285E4
- P6 s( ?- D) w2 T$ T" r7 j00403269 50 push eax+ ]/ A$ h9 g$ P7 c
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
5 t* p9 k5 {% p! X9 ~6 C0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E
3 W1 @5 b b/ w) c% h00403273 E8 4CC30200 call qsr.0042F5C4! b9 b2 D* h! ]9 y. O8 \' N
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
2 d5 z- W0 v% }. b, a1 i0 g0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
& T$ J4 X8 v# e+ ]6 }* g/ S2 |00403280 E8 06C20200 call qsr.0042F48B
1 [$ Q3 j* G; N' v9 d00403285 6A 04 push 4
" z% a* S; x/ w, G' D00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
) Q, X% d1 K1 ^2 |4 k/ ?0040328B 6A 0F push 0F# P" D4 w% ^5 x
0040328D 50 push eax; V; ]# v- l& t1 t3 k/ M
0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
! n f( X; x( {0 w- {00403292 E8 4D530200 call qsr.004285E4
5 X# d8 _4 T; v+ @00403297 50 push eax8 p n! g7 ^5 ~
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
7 j7 e8 `7 Q1 Y, i2 B+ ]- j0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F
: c& v% E3 ~# p004032A1 E8 1EC30200 call qsr.0042F5C4! q) t' n- I, m% @5 E/ c( A
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 g, i% ?$ ~9 p1 W
004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
3 u% z8 r, c w* D004032AE E8 D8C10200 call qsr.0042F48B
y9 m/ d9 r/ k& N& e8 Z004032B3 6A 04 push 4
# f! w4 W) _2 ^" v5 V7 }004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
) V% \9 |; v( i* g' N- S004032B9 6A 14 push 14
0 m* m* ^+ y& G4 d4 D( R004032BB 51 push ecx
F4 v H/ n/ z" K j004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]: x+ e* T- q5 ~9 a3 N, ]; h
004032C0 E8 1F530200 call qsr.004285E40 g1 C# r9 C! E/ x/ t+ m
004032C5 50 push eax
3 K, B$ P7 @8 X4 Y004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
. m c- I0 O* i* l004032CA C64424 40 10 mov byte ptr ss:[esp+40],10. m. o+ H% I V* L5 V/ c
004032CF E8 F0C20200 call qsr.0042F5C4" w! f( O) C. {9 L% f$ U. z
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
% y G. m4 v% t+ K# }004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl# C* N ~. F1 S8 _: A
004032DC E8 AAC10200 call qsr.0042F48B
, x3 S+ {" \$ q& i; B$ h9 a2 f6 H( \004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
0 k1 ?1 ^2 @9 T: X# |' e004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
; O5 w7 \9 C3 k" T" T004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
; k' I" s# T5 i1 e3 K* t004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
# G0 K- ] p7 ?0 q/ `# o004032ED 8ACA mov cl,dl ; DL送CL
0 V" w( s# Z! e# o) S004032EF 3AD3 cmp dl,bl ; DL和BL比较
& T# V! N( O& e) M2 i! S004032F1 75 1E jnz short qsr.00403311 ; 不等就跳(不能跳)$ }4 P9 H! I0 \8 Y
004032F3 84C9 test cl,cl& o# j: L2 Z1 M5 P( s+ Q0 o
004032F5 74 16 je short qsr.0040330D
& d8 N( l* Y' z( z6 m% i& Z004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL1 L$ q- q0 Y' l) e7 ]5 p6 k/ D
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL: |* ?. C6 \ y/ t5 |9 S
004032FD 8ACA mov cl,dl$ I' w" u# U& Y4 t
004032FF 3AD3 cmp dl,bl ; DL和BL比较
4 Q! u1 p. P8 A2 |$ B8 I00403301 75 0E jnz short qsr.00403311 ; 不等就跳(不能跳)
+ ]4 y( W3 Y# }! Q00403303 83C0 02 add eax,2 ; EAX加2
) Y o( w _: D0 k2 y4 _6 x5 l% u00403306 83C6 02 add esi,2 ; ESI加2
2 i# q' N* C2 b7 w00403309 84C9 test cl,cl
: h* q, Q% O8 g& W3 c0040330B ^ 75 DC jnz short qsr.004032E9
# C. A' u/ f7 N, f$ \7 z0040330D 33C0 xor eax,eax
7 s. @! H: [) L8 G0040330F EB 05 jmp short qsr.004033162 ~" G; u! y0 U: ^
00403311 1BC0 sbb eax,eax
+ _9 w6 X1 C5 W7 g00403313 83D8 FF sbb eax,-1
3 m5 t7 }# I, t7 G00403316 85C0 test eax,eax2 ]+ z: v* a9 O" r" o+ g9 h2 Y
00403318 74 0E je short qsr.004033288 c+ q; |+ }* Q* O- D2 O: ?" }
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
3 A% \( ^- q: T0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]0 i- f( [+ B1 b+ N& H) |
00403323 E9 F0000000 jmp qsr.00403418! Z- ~8 v* R8 X' @$ l7 J
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX- T( t- I2 H5 s' ~- ]
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]( ~- ?7 W8 r8 L' Y3 l! g6 A
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]& h; x7 r/ s& Y) @/ I
00403333 50 push eax' H2 |4 z% ^" h' q& f
00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX) X/ D. T- }2 i, {4 W
00403339 50 push eax
8 q; R, b H6 F- o g0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX7 Y k2 K" y' h4 Q4 k* c
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
0 C( }6 ~ Q& }- O; h00403343 83C4 04 add esp,4
- A4 f4 n7 T0 Z& g) C00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI4 a/ I K3 u% n# w3 C% o
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
$ c, b# H6 `" h: u0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]0 M4 V& `1 O4 G& t
0040334F 50 push eax
1 r0 \6 r( A' U! W* r5 M1 x2 W6 J00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX2 _4 U, l- M9 m% l
00403355 50 push eax
; G, ~7 f& C! z2 H% g7 C00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX
# K5 Z: k* v- Q# a- e# l0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX
; ~, T$ s+ k& w+ z/ S( c: O% h0040335F 83C4 04 add esp,4
7 Q' [1 r5 }- \: F( s7 k; ^ I00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
: Y$ s/ J9 a& n [8 X00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]4 ^1 y- Z5 \# f1 `
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
. b4 k& I* M: J: h- d6 m0040336B 50 push eax8 } y- V' d- b( Y
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX- i8 `% L w2 C* v
00403371 50 push eax O g! e* z( h0 ?1 h/ O
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
# |9 I% C* T" a+ m; q00403377 8BD8 mov ebx,eax ; EAX送EBX& V9 R8 F. h4 R- c: {: n8 P
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX9 n7 a+ h& l& X3 u! E
0040337D 83C4 04 add esp,4; V% C: }: f' p' w4 Z
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
$ q0 `* a( o3 z* s0 q9 D00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]" v4 j3 ]* a" t/ o( a+ U$ p4 o* ?; S
00403387 50 push eax
. g( W8 e) B; {1 W00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX! g j' m7 c9 J- L4 E$ z7 m
0040338D 50 push eax
3 ?- l, C8 F" n' V0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX1 x- _! u" F0 v: J# r; f
00403393 83C4 04 add esp,4
6 A4 z/ \' t4 H00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
7 }) {1 z0 e; r; c# N7 b7 C% X% r0040339A 8BE8 mov ebp,eax ; EAX送EBP- U, ]% o+ e0 k8 P# _4 V0 E) C( e
0040339C 6A FF push -1
- P% B. y. c9 H; v+ \: b5 K0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX,长度送EAX
& o5 u8 b7 R$ ]6 E7 `7 S. |004033A3 6A FF push -1" s; o3 B6 ^9 q5 s4 o
004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
! H$ |5 A8 r3 G6 Y004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX,长度送EAX
5 F, e2 ~8 f4 c$ R( @; B9 ^004033AE 6A FF push -17 S6 G1 n% U! s4 W$ o! v/ n- C
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX9 `( p$ Q" \7 c$ ^6 b
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX,长度送EAX
% M' V9 r8 w; t* g( A1 {4 S004033B9 6A FF push -1% Y, f( Y ~, z+ W( d
004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
2 S1 Q6 m. g4 ?% D4 E1 J8 V, X# j004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX,长度送EAX
) |! N8 v/ h+ z004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX
1 c' H# c1 V' j' J! M004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
. [) z$ A5 a; [3 {9 }004033D2 B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
2 @6 k6 z2 F- O8 r004033D7 D1E0 shl eax,1 ; EAX左移1位
# r0 h3 p3 N7 a# S* A F004033D9 99 cdq ; EAX扩展
$ ]; p7 ]% }. Q& p9 `004033DA F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中
- C$ a6 K) Z( S, y% n- |% @# S004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
" }# x$ _, v8 E004033DE 74 0B je short qsr.004033EB ; 相等就跳(必须跳)5 l4 v, T' {" x. p+ E
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A3 ?; ]' b9 Y# g8 i! ~
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ o0 B. b3 O) L' i004033E9 EB 2D jmp short qsr.00403418
! v9 X/ D" Z4 K; X1 n5 L004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
# m$ ~, X# ?/ _; x004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
9 G3 o+ ?2 G7 Q( I, `0 a004033F7 99 cdq ; EBX扩展
n% C. m/ A# m) b9 }/ R+ t+ ~3 Z8 V004033F8 33C2 xor eax,edx ; EAX和EDX取异或, v. `2 e3 s; F" B" y, ]
004033FA B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
- Y( z, n) y) ^) }; j004033FF 2BC2 sub eax,edx ; EAX减去EDX- G8 z2 D, {1 R5 f N: V
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]3 Z# Q& s( S, d" ], i
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
$ R0 w4 y( r* a6 b' X2 R1 n+ Z* a00403409 99 cdq8 D/ z$ g' B: H) T- m* o/ a) F, P9 p
0040340A F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中, v3 s- s3 v B ^$ B. c
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
5 O! d t/ W9 p) X00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较7 `! Y( c/ i$ I: `& g- N4 W, a
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳(必须跳)
2 H* e3 x- S% ^8 e6 I00403418 E8 6EC00200 call qsr.0042F48B ;
! A* o9 L) O: w8 L. s0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]& v3 E" r% n r- T, x) m1 c, V" w2 b; o l
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9
9 Z7 z9 S3 j8 o0 r7 j1 Z# r* ~4 W8 |& ]00403426 E8 60C00200 call qsr.0042F48B/ t2 J5 z# l1 N4 E3 R4 x
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
) Y9 u# g4 L( c, o+ v0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
' `; Q' t, g; ~% P7 f" f" J1 S00403434 E8 52C00200 call qsr.0042F48B
" K' Z2 T! m- h/ ?) J& c00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
$ H1 S2 j& v) q9 |$ @+ X/ M2 W0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
$ p& Y: z( k9 {00403442 E8 44C00200 call qsr.0042F48B0 p9 |, m$ [6 b6 v# T# s
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]6 t* p8 N N3 C4 T. O2 a& P9 \
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],67 L9 z+ U6 |5 r/ _
00403450 E8 36C00200 call qsr.0042F48B9 v; Y5 H: E. n5 f9 x, S2 Q
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28] ]4 [" i- x) O1 u
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
- S4 L" e: j7 s: T$ T3 |2 P3 N% L0040345E E8 28C00200 call qsr.0042F48B1 v* J0 v4 H. y5 p; }3 r4 ]8 E8 r
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
% i+ J' h+ c u+ ~9 d0 q! U9 {00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
) R7 K/ G- U5 ]4 d, M( H0040346C E8 1AC00200 call qsr.0042F48B" k- J* V9 @( B) F" `
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]/ P" c9 e u1 E* N; C
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
" g( w" m8 G; l, {( U7 L0040347A E8 0CC00200 call qsr.0042F48B0 ]8 L' y5 V# O1 ?$ r) G7 h
0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: ` O/ g2 D6 e) f$ V( s% N; Q* u
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
# X* r2 F0 f9 P( U: J& T00403488 E8 FEBF0200 call qsr.0042F48B
: J g& |9 v! z. p& Z0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]- v" Z# D/ n+ h0 D0 g! r6 D
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1, r# ~9 Q9 b, n) R! Z2 }
00403499 E8 EDBF0200 call qsr.0042F48B
" [& R; @, t! E8 m% T0040349E 32C0 xor al,al ; AL清0
4 V9 f/ [! x9 P8 q& ]. c2 l004034A0 E9 88000000 jmp qsr.0040352D
+ Y- P9 U, M3 J& g004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里,F8下去~~~~~~~~( R( s5 T/ ], {, `+ X
004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]) C! l* ~6 G Q- V% p
004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],90 M! J. O+ c/ q! h3 J
004034B3 E8 D3BF0200 call qsr.0042F48B
3 O3 {5 K6 t: i) ?- Q004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18] `* o$ j- y; u- s+ d( L, M4 F
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8: c Y5 D7 X' i( ~4 b* ?3 n8 l
004034C1 E8 C5BF0200 call qsr.0042F48B
4 Q. f: J/ R# a P004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]6 m4 _9 R% V$ J3 H' E5 Q
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
' R/ R( f# u6 t, D, ?2 A004034CF E8 B7BF0200 call qsr.0042F48B
( C! i* x* j- G& C2 ^3 t004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]+ r w' Y; I" b% ?
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6
% D; I, m& d3 J+ \3 w004034DD E8 A9BF0200 call qsr.0042F48B
, b0 l, q" {( [1 p004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
; W/ L# o0 }; p' y004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],37 \( \7 M) o- p) {. p$ b
004034EB E8 9BBF0200 call qsr.0042F48B* P9 E7 ]) A, C" C
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C], O- B) h% O3 q2 j& e' f
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2/ k( r1 R2 V: Z* i8 R6 L
004034F9 E8 8DBF0200 call qsr.0042F48B
" R4 w9 X/ K: I. c3 G) R1 b004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 L |5 @7 w5 b9 u1 a" L7 [00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
" a% A6 G5 z2 e7 |% P! H00403507 E8 7FBF0200 call qsr.0042F48B* S4 {$ `' W5 V, v- e
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
! L. H, V( ^" [9 ^- k @00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
( H8 p' F! `$ O00403515 E8 71BF0200 call qsr.0042F48B; y# l: l; f3 D$ T* |/ q. P6 [
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
( _4 {6 s) P8 C0 |5 g7 _& X# t+ p0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-10 M, p8 _8 \% O! U# n
00403526 E8 60BF0200 call qsr.0042F48B7 `8 b4 l& y* U) w5 ?9 `
0040352B B0 01 mov al,1
9 b; u' p& G/ U- ~9 E" L0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]. C1 _/ _) b; \: _# Y- |/ \7 Y
00403531 5F pop edi
# Z$ \) h7 r7 F' E00403532 5E pop esi6 a+ M8 G0 V8 N1 t
00403533 5D pop ebp u6 L* i7 c3 l3 n; b* d; t
00403534 5B pop ebx
+ W5 I3 Z" b$ u9 v: `00403535 64:890D 0000000>mov dword ptr fs:[0],ecx& ^8 A4 w9 z/ {/ u$ Y5 j
0040353C 83C4 30 add esp,300 z, a" }' l3 i' X
0040353F C2 0800 retn 8
9 n* e/ t! |0 k8 V--------------------------------------------------------------------------------6 G/ D! i, ?" g
【破解总结】
2 K3 a+ h6 e3 v 用户名必须大于2,注册码必须为24位。注册码前4位由用户名决定,11到14位由6到9位决定,21到24由16到19位决定,5,10,15,20任意^-^* T m: U1 v; o# t, m$ k2 m9 R
用户名:yijun
7 b8 K) h @4 A; Q注册码:4893*7777*3726*7777*0529
4 n4 b* S* p) K( d--------------------------------------------------------------------------------' [- ~ Q: k( K8 P% |9 l2 T
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|