|
|
|
【原创】破解Quick Screen Recorder
) \. c0 D# L2 z; E0 s |6 \/ j【破解作者】 yijun8 @. j! g z; r* N6 h
【作者邮箱】 [email protected]+ H; `0 X. b1 i3 t
【使用工具】 OD,PEID
- r2 [9 q9 K L" d, U5 _! }% N& V【破解平台】 WinXP8 r6 q( u: z( g7 u- L
【软件名称】 Quick Screen Recorder* X! o2 q4 f$ Y# s' z' N
【下载地址】 天空& x, H& h# k; W F, J! I4 ?: z. n
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
4 ~ U* o! k3 s' x O4 y ]& D4 L& w【软件大小】 540K- n+ R7 i' n7 c6 o- U6 V
【加壳方式】 无0 A+ u7 j) N, z8 T& D# r3 P* |
【破解声明】 我是一只小菜鸟,偶得一点心得,愿与大家分享:)8 W3 N) {$ v9 Z# I8 @7 [+ e4 \
--------------------------------------------------------------------------------
7 {4 G6 I% v+ Y2 o/ w【破解内容】
. J5 L- o; e) u# l5 z. U PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方:
9 ]; p9 f+ C5 x. w00404C69 55 push ebp //在此下断
" b0 O1 u% V2 O2 k00404C6A 56 push esi
2 i. {0 m4 _% o% C1 o00404C6B 57 push edi
3 L' g* T8 Y, E4 F- @7 s00404C6C 8BE9 mov ebp,ecx
# @& E/ ^; V$ V+ e- [7 f00404C6E 6A 01 push 1
$ r) o2 U3 T$ }2 @! N00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名
' { w% E$ E3 _( s" G% s9 u2 j00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
8 z6 [3 i3 f7 }: |( W. B00404C78 8BCF mov ecx,edi) z& b9 n6 b' P2 W Y1 n5 d2 f: y
00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
5 r- ^" r3 U! o( g00404C7F 8BCF mov ecx,edi) B2 T0 C! S, w9 x
00404C81 E8 A73E0200 call qsr.00428B2D
7 a) R( m8 |3 O- p- m3 n3 G5 J00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
0 E) f/ @# `2 r/ k8 T/ r00404C89 8BCE mov ecx,esi. P8 b V/ Q. ~
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX0 k; S) U# y7 X3 I8 {
00404C90 8BCE mov ecx,esi* s: d7 [: |$ e( [/ q
00404C92 E8 963E0200 call qsr.00428B2D
' O4 g: X, Z6 w. n; i+ Y00404C97 8B06 mov eax,dword ptr ds:[esi]
& A+ c& c' a2 d( h% a% P00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2
9 h; G8 Z4 [: y* o S% L00404C9D 7D 26 jge short qsr.00404CC57 q. D$ r. C9 z/ K
00404C9F 6A 40 push 40
$ {( t- m$ J% d7 _& Y- p# e) J00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
7 {$ e. N9 y- E* k' ^' P00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name.": W. n, y& b2 z: a
00404CAB 8BCD mov ecx,ebp
, T4 x. D. K6 W- F6 x00404CAD E8 C3840200 call qsr.0042D175
$ N1 U" C" J" ]/ }. H00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]3 k) f# a1 `) l- v$ L3 ]) g" l
00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
- |& x% e4 W3 @4 v" h) [) [) {00404CBD 5F pop edi- t9 w! V( q8 |$ a
00404CBE 5E pop esi; f2 p4 q; U* C8 P J' h9 B
00404CBF 5D pop ebp
' Q+ y7 O$ k2 b' J$ g8 T% I00404CC0 5B pop ebx
5 l( P4 \9 ]$ f% t6 [; P( Y5 c& ~( _00404CC1 83C4 18 add esp,185 ?' t. e. w% e- E8 `
00404CC4 C3 retn! `8 v5 d4 Q: s) G. K
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
! B8 m2 ?" t. {" d+ t- F00404CC8 84C0 test al,al7 \, a* M' T8 ~& L) l
00404CCA 0F85 1C010000 jnz qsr.00404DEC
, C* n& t! G8 V9 w00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
8 n$ e8 h, I) }, i7 _00404CD4 E8 87E3FFFF call qsr.00403060
) J) ]$ l7 J$ q) X00404CD9 51 push ecx
$ F& V9 {' Q: x$ n0 y) o( l00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
# P1 k5 J8 O) t' _7 ]9 [00404CE2 8BCC mov ecx,esp
2 F+ _/ Y4 j. H$ F7 [3 k00404CE4 896424 14 mov dword ptr ss:[esp+14],esp2 E0 y' s; b" I1 V0 b; k
00404CE8 56 push esi
1 Z% Z. P1 h& ^8 G2 J$ ?% G; O0 Y# ^00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
3 @ l9 g- U% I2 c5 U: V00404CEE 51 push ecx
, N* G5 v0 s9 y. ^0 G! d: L& ]. s c00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1& U, V, W, y3 b# d1 S3 |$ V
00404CF4 8BCC mov ecx,esp2 i. H" _# }/ F
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp
4 X" {+ p9 a1 l( u; N) v00404CFA 57 push edi
$ E( s+ L3 s) x% Q) ]1 o( H1 l* X00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
. u! D4 V4 Y0 c( c2 F00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
. A% c( v+ ]. B$ l00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0
' h; N+ F/ o/ M) x( I! G00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL,跟进~~~~~~~~~~~" n! U; C, e+ d9 x0 }8 \
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功,此时AL=1~~~
$ _" F9 k8 c! F; c2 q( F4 S; h" S00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~
! k& @/ B. w9 y1 V$ B: G9 Y1 X/ V00404D12 6A 40 push 40! `: s8 x, U0 |) E) B
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"1 w, Q1 m, S! \9 [# q, D9 a4 `
00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."/ }7 D% h1 p0 H7 A* W+ }) ?
00404D1E 8BCD mov ecx,ebp2 g* ]9 @3 [ G7 K% F5 L
00404D20 E8 50840200 call qsr.0042D175
4 a* U- z2 h0 n1 W* c7 h) P00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]8 R8 w) k T3 J* T4 F) M
00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1" \; Y+ ?: S; \3 }' x# S [4 M
00404D31 E8 5AE3FFFF call qsr.00403090
/ r. ^" F+ k$ L! f& z% y. Q00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
7 M. z @2 `7 U00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx7 v' \$ S( j; \. V6 y [& v
00404D41 5F pop edi# U5 a5 h) o- n+ a
00404D42 5E pop esi
0 Y) y8 g/ A# h' L. a00404D43 5D pop ebp( D+ X% p/ z. ~2 e+ A
00404D44 5B pop ebx4 X& g, e$ @$ K/ t; B, P4 H
00404D45 83C4 18 add esp,18
# q3 H9 S0 o, Z6 r00404D48 C3 retn
2 G7 A" z3 t" R- T" u) e*********************************************************************************************************************************************************$ G: q5 t; g$ [2 j4 y! O, I: y
跟进00404D09处CALL来到:
J: q8 b7 o9 G6 G7 X, d% w004030A0 6A FF push -1 //一路F8下去~~~~+ k9 z. t% @# X; S# x
004030A2 68 C88F4400 push qsr.00448FC8: ^$ {8 ^1 z" S; w% i: M" ]
004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]- l" j3 s5 Z) }% r9 k' K/ m
004030AD 50 push eax
: Y, ~ H G- {( k* a4 \004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
z* [9 g ^8 d. A, M004030B5 83EC 24 sub esp,24' c7 [7 e# Y6 L- A1 d, A
004030B8 53 push ebx' g+ V$ z' z; Z
004030B9 55 push ebp8 [6 y9 n/ j" H0 Y+ F
004030BA 56 push esi0 U/ X1 t( D* ~
004030BB 57 push edi
7 J% v8 Q4 }& @- l2 g+ h9 N9 w2 L) {004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
/ d. D: _# e" `6 u004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, ?! t: f" a' s7 y004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
9 `; l) W8 B y5 ]6 T. s004030CD E8 27C40200 call qsr.0042F4F90 b d7 S4 g8 Q2 p8 d; g
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]4 ]" m# O0 d" C
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax' ]. T0 H8 k+ y( `" W# `5 [
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]1 I8 r6 _' y4 C0 |8 i
004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],35 s( i# Q( N9 B; Y* _
004030E4 E8 905A0200 call qsr.00428B795 O7 s) X J w+ ^3 i' u- u( R
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
7 e+ ]( n# v7 c% r' A9 V# Z- S004030ED E8 3B5A0200 call qsr.00428B2D
+ t; x5 o N' l4 Q4 a0 B004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]6 d& w4 A9 ^1 K" i( R
004030F6 E8 7E5A0200 call qsr.00428B79
/ N& O9 W. `: |004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
, r4 N( H7 f: K- J; _6 L* Q# m& T- `004030FF E8 295A0200 call qsr.00428B2D
: X; V6 C4 h! h3 c00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]$ z; G( P" S9 F: a& G
00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]+ P1 e5 L, F; Z$ z
0040310B 83F8 02 cmp eax,22 M% k% n4 ~+ k
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳) n$ t' ]- d9 S/ M' l$ Z
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]8 b/ i) T8 q: ?$ e
00403118 837A F8 18 cmp dword ptr ds:[edx-8],188 k/ n& K) G: M; o: l
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18(16进制)就跳+ N7 m7 X# ?3 H1 x, X2 v& t2 D& D
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]
# R `8 F0 | }( `; y) s( V00403126 6A 01 push 1" j7 G9 L5 `7 G1 z) ]# W4 Y
00403128 50 push eax* f% c; r( Y3 x; t
00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( q; G: M; C3 T# G' p- V% G. L
0040312D E8 C4550200 call qsr.004286F6
* |. l5 ]: `2 l, L00403132 8B00 mov eax,dword ptr ds:[eax]
' w+ o* Q% k" s! d0 Z8 ~00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
. Q( f- }3 }7 f' S. ~00403138 50 push eax
6 R4 R6 R- T- _( X00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
) a1 ^& U, h7 M7 Q' _6 r9 o0040313E E8 4D560200 call qsr.00428790
) I; w9 B) o5 U" h9 o00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
/ C# g/ N1 c4 J5 F6 S2 m; h3 _00403147 8BF0 mov esi,eax
6 n8 M, F) W- Z5 N00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
2 J [* e) d I' T' B# R$ [ j0 V. x0040314E E8 38C30200 call qsr.0042F48B& j4 d& z! M( q, Y, G" X0 N
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
9 E) G( _2 e( f O00403156 B9 3E000000 mov ecx,3E
J+ W! x. k7 e* S. C+ q; G0040315B 99 cdq% T% k* D8 Q1 J! r, m
0040315C F7F9 idiv ecx
- n0 r* F8 _7 Y7 C5 k! p+ B0040315E 6A 01 push 1
+ g# |1 n6 e ]8 \; z9 E3 a6 M3 Q00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]3 R' E6 W. Y' U& j B( D7 |3 t! ?( \
00403164 8BF2 mov esi,edx
$ E' c* X% i. K2 n6 D0 l4 H# }00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
/ R( Z' ], p( c! u) U$ Y0040316A 52 push edx
+ Q7 G( D$ D# k0040316B E8 0A550200 call qsr.0042867A
( ~9 H: T8 M, D& d1 `2 J00403170 8B00 mov eax,dword ptr ds:[eax]
/ z* e- }6 X& I/ ^* m3 j00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]$ s" Z' P* ^: w- V( `
00403176 50 push eax9 [+ e" [" Y4 L6 v$ Y2 g% \" H
00403177 C64424 40 05 mov byte ptr ss:[esp+40],5. w0 ` ?1 B' a1 w% z+ f8 m4 l
0040317C E8 0F560200 call qsr.00428790
2 [8 ?/ m0 U, M4 {0 U00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# C) m/ O" y4 y* @4 o5 U
00403185 8BF8 mov edi,eax
5 k: m3 y* v& {6 V& I" ?+ A1 h00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],3* J4 s- e, @% i! I- e \ i
0040318C E8 FAC20200 call qsr.0042F48B
' e5 U; Z0 v9 ?( Z00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
4 u4 F4 [. J4 Z, }* d, I- N2 c00403194 B9 3E000000 mov ecx,3E5 N( d" O: r Q* s8 B& z2 H
00403199 99 cdq
2 q4 y6 X7 @5 C0040319A F7F9 idiv ecx$ _/ f, w0 |$ z X% x
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]% L T( o& U3 ]- p/ I
004031A1 894424 28 mov dword ptr ss:[esp+28],eax8 E3 O$ t+ ~% z% a& B t
004031A5 8BCA mov ecx,edx3 n6 p( e, h2 T+ J
004031A7 894424 24 mov dword ptr ss:[esp+24],eax9 ]+ h7 `. C! E' G3 Q: B( J
004031AB 894424 1C mov dword ptr ss:[esp+1C],eax1 K" G2 E! P5 W* z) `$ Y s
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
+ [3 p9 @* p% Z7 @2 v0 i004031B3 894424 14 mov dword ptr ss:[esp+14],eax, M0 e% i X% X+ ?: o- v
004031B7 894424 10 mov dword ptr ss:[esp+10],eax8 t. p, \; X. U. X2 u
004031BB 8BC1 mov eax,ecx! u2 f4 n1 C+ N4 Q9 v, g
004031BD BF 0A000000 mov edi,0A6 e8 H+ v& _0 T0 l3 ^; T* y
004031C2 99 cdq) c% v9 X1 G- ]; m% M: A
004031C3 F7FF idiv edi5 k2 E- j) O) s3 N+ Q5 Y- F
004031C5 8BC1 mov eax,ecx, H3 D0 Y& |2 y( t
004031C7 B3 0B mov bl,0B
* c; l" ]3 J1 s7 j( s, D004031C9 0FAFC1 imul eax,ecx& d3 A# O! i, A. b W6 x
004031CC 8BCF mov ecx,edi: X/ e! s) u2 Q: b; O. n# x
004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl: r2 v4 {2 n5 s
004031D2 52 push edx. d" |8 X6 Q) p# U
004031D3 99 cdq( p5 l: | ^, P' o7 @9 l" L/ [
004031D4 F7F9 idiv ecx2 S3 h+ V' \1 X* H. C, S$ B- F
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
B. ~( S9 ]) F) F y/ n! P004031DD 2BC6 sub eax,esi
- R; G0 `- m' Z9 s; }$ \; l004031DF 52 push edx% _8 @% K L' Z0 e" k. h# t: C# @
004031E0 99 cdq
; R/ K8 o, ^' C$ U7 K; D004031E1 F7F9 idiv ecx: i( B+ J5 L0 | n: c4 L
004031E3 8BC6 mov eax,esi- J3 j& c% S' ?2 `, K- ?- |
004031E5 52 push edx8 |; Y6 L" F. B. ^; t$ {: h
004031E6 99 cdq3 Q* F' q/ k$ y1 w0 H
004031E7 F7F9 idiv ecx
* I. n6 ~! [( W: l+ X p004031E9 52 push edx
, P D+ C4 o, V2 }+ q$ X3 J004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]" l5 _: F, |$ w5 I7 r8 [% f
004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"
9 C0 [( [. d4 a5 _3 ~- ^004031F3 52 push edx" T5 W' O, [3 t8 R0 e$ ^+ `$ k: G% z
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数,我的是4893- L$ g* Y, J. i, z! d
004031F9 83C4 18 add esp,188 a0 t7 u" H8 | E+ X5 D0 M
004031FC 6A 04 push 4) H, a7 ?/ g3 o& ?3 U1 H9 A6 T
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]1 {9 a# q, H8 p% T. J" T
00403202 6A 00 push 0- F# O0 h+ G& y0 ?) C4 o# R' h
00403204 50 push eax8 I j( O- b8 }) n8 [
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
1 |# N9 R- o4 o' R5 h00403209 E8 D6530200 call qsr.004285E4
! \# T4 N: a- C. G9 T- e9 y0 U% \% T0040320E 50 push eax
; o4 C% I9 M: [4 M0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
: D* D9 Z$ |: R& ]+ D00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C
8 [, D* F+ ~; P* v1 S5 ~ o$ p0 t4 v5 g00403218 E8 A7C30200 call qsr.0042F5C47 X2 J! b6 h( P
0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
) t" H9 Z6 K7 a* x# V$ T$ i00403221 885C24 3C mov byte ptr ss:[esp+3C],bl9 W5 G9 F& i" D" q! x
00403225 E8 61C20200 call qsr.0042F48B s, d( N! Z; H* ]3 }
0040322A 6A 04 push 4
0 c% K% P7 V$ Y! E& P0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34] H; K* J4 p1 m4 T- E
00403230 6A 05 push 52 g2 l* {+ X8 \
00403232 51 push ecx
4 B# I5 h# f, y7 d* _6 R, x00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]+ V6 W$ }3 N) m$ P
00403237 E8 A8530200 call qsr.004285E4, v/ r+ L# D( p- e
0040323C 50 push eax" V" D$ D2 [5 Q
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 H3 z0 S' f$ ]& Y: K: t; d
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D2 u2 C( F! h( F# B
00403246 E8 79C30200 call qsr.0042F5C4
+ m) I3 D0 v+ Y" y- ?0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
& J, {3 w6 F& U+ R0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl3 I$ A- a8 I+ z* ~1 J" I
00403253 E8 33C20200 call qsr.0042F48B
( j9 z6 D7 l x00403258 6A 04 push 46 n% d) s' V4 z& e \! ^6 Z9 O% L
0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
$ s. U( Y! _: B$ q: t0040325E 57 push edi
$ k q* n W6 m0040325F 52 push edx8 ]/ k. o) K, }& s* j7 |
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]# ?' u) N% `: z2 \$ n
00403264 E8 7B530200 call qsr.004285E4
' s% i' |9 e. k5 `00403269 50 push eax0 G# K% \' a$ E
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
+ N e2 D/ g; N" ]9 x0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E. N/ W: F) d$ w( F
00403273 E8 4CC30200 call qsr.0042F5C4% a |' v8 i" q9 v
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]2 g' ]& u8 }( z" J& b7 {- W
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
1 b: Z) c$ P1 h1 x5 F% F) X8 {00403280 E8 06C20200 call qsr.0042F48B4 o( X# H! l. P2 e7 [3 d( ~
00403285 6A 04 push 4) N: W0 x/ R [
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]) F! P s# l0 p. f
0040328B 6A 0F push 0F
, j( c! `1 N; G) d0040328D 50 push eax
" T1 w' m; k i" h Y" j8 A# {0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" S; X: D' C' c
00403292 E8 4D530200 call qsr.004285E4
! j7 ^. E( V' H# o, D: `4 r$ |00403297 50 push eax" @4 l/ s1 `9 O
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]" Z s0 o- }- B4 R' w# C. ~# ~
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F* {8 o* X# i! L2 H" s2 D
004032A1 E8 1EC30200 call qsr.0042F5C4* y0 p' ^& C9 D( ^4 X
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
+ j3 Y& ^5 n. {7 b; i& F8 K004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
: {* G5 x/ P! B' P `% M8 J9 R004032AE E8 D8C10200 call qsr.0042F48B
, t9 [7 v6 l1 @* K6 `3 s8 B004032B3 6A 04 push 4
3 L2 S& s( ]! j004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]0 l( k6 ]. }8 ^: M, n4 }
004032B9 6A 14 push 14
' u& A+ i5 g/ b7 J; w' j& f( w" g004032BB 51 push ecx
3 B( I3 l$ x; s0 f4 r5 ~' X004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
; J: ?- p2 U n: Y- ]& |004032C0 E8 1F530200 call qsr.004285E4
; N0 }' J$ N" {6 c) Z2 _004032C5 50 push eax& U- o m" G# o8 f# B
004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14] S X9 [( t! ?8 ~
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
/ B& w$ L. ^ ~; h; x004032CF E8 F0C20200 call qsr.0042F5C4
, l0 r7 v0 ?& q& Q; u004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]# p3 f# }8 Q V* ]/ `4 Z, l D
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl3 n3 L4 K" _6 F c! B8 `
004032DC E8 AAC10200 call qsr.0042F48B
7 ]3 i+ [0 e6 {: A& w004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
3 y. _* D+ x6 w, J! F004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX, e: R: [8 }* k7 Q' T% p7 [
004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL1 {% s( P, M; P- E/ K4 U2 e
004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
) ~5 }# R7 s% c: g7 G004032ED 8ACA mov cl,dl ; DL送CL1 W, ?: {5 v+ k& U |
004032EF 3AD3 cmp dl,bl ; DL和BL比较
2 x( r; r; f/ _/ R! r! {. A004032F1 75 1E jnz short qsr.00403311 ; 不等就跳(不能跳)
+ G3 Y2 {8 i6 c/ N: q004032F3 84C9 test cl,cl$ [ x' i3 K6 N& n! ^, D4 ?! G
004032F5 74 16 je short qsr.0040330D' Q; _/ v5 e( |# l
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL5 J. _: m% J3 Q t
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL, ~: e. v8 |! X1 d& o# ~( M/ f% N
004032FD 8ACA mov cl,dl
5 G! ], t C6 u004032FF 3AD3 cmp dl,bl ; DL和BL比较* @! R, p) c# X [# D
00403301 75 0E jnz short qsr.00403311 ; 不等就跳(不能跳)
) q7 P0 T- U& z/ [. x00403303 83C0 02 add eax,2 ; EAX加2
9 S0 `% A9 Q y/ j' L2 Z00403306 83C6 02 add esi,2 ; ESI加2
5 a. H( s, ^7 Q* Z3 l& }0 B3 I. ^" t+ }4 U00403309 84C9 test cl,cl3 d& i7 P! j8 T- g
0040330B ^ 75 DC jnz short qsr.004032E9
' w; g3 v+ r7 y4 W! ~4 x0040330D 33C0 xor eax,eax2 {: |' g' F& n3 w! G3 n
0040330F EB 05 jmp short qsr.00403316
% ?& i; z) U: I* v! s( a00403311 1BC0 sbb eax,eax% f6 h0 E% J8 {' a; L$ g
00403313 83D8 FF sbb eax,-11 w& y& F/ `& ~8 H7 J: k
00403316 85C0 test eax,eax
" @: ] E" r. E0 l00403318 74 0E je short qsr.00403328
- l% h; ^! ]& n. r0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
% p$ |* a6 i" p0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
- L: x$ s) N; C4 @: W00403323 E9 F0000000 jmp qsr.00403418# I: f8 h! i0 B$ }' r% r
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX! i# \# w2 A4 n7 i6 x
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 N' ]6 ]& H4 C( O1 L
00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]! O: [) O4 A) h& r O% `' U( a
00403333 50 push eax
! j6 N. v. G! ^; G) p5 E% L& Q2 W00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
" A- _) n# o# I% Y. V" z n00403339 50 push eax
8 _& Z/ _! V- l: O8 n$ r, e0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX) [/ O/ ?1 F- C8 z$ ~: y
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
, |1 e4 ^7 b0 S% M" X5 x00403343 83C4 04 add esp,4
) z+ x2 d z: t3 C3 U- s00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI
5 s, d$ `; ?! N0 X- V. w00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]! ^$ C7 X) |- v6 S$ S( b4 a5 k
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
3 }" m Z1 P" P2 Y! `4 h+ j0040334F 50 push eax" Q, I8 q. H4 N) x' H, O
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
4 I4 y6 ]6 f, M2 a+ i( x00403355 50 push eax8 F' v# G, j+ d4 k9 a
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX& ]$ I3 p0 b7 K( x
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX7 i# ?6 M( C4 K. \+ t
0040335F 83C4 04 add esp,4
8 p/ j/ M8 O: O1 M00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI+ M2 J+ [! u- s |" }
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
3 Y* K" A. P& c00403368 8B42 F8 mov eax,dword ptr ds:[edx-8] a# I9 |% s" n3 v, i1 F U1 e
0040336B 50 push eax
4 G) Q7 i/ m' I: c: a2 G3 \0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX% d; f, _3 @9 S1 d1 a% L# T
00403371 50 push eax
7 C+ R9 G& W3 c4 H9 f00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX
2 y: ?( e6 q( H' e00403377 8BD8 mov ebx,eax ; EAX送EBX/ m! j# [! M; g2 {4 L
00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX% H+ l; g+ A* c3 T& J, L o' T
0040337D 83C4 04 add esp,4/ A5 N4 S- m8 H9 _$ m* j4 p# k( D2 z
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
% ]; F0 O: [1 D& M+ `! Q4 Q00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
& W5 U: `1 H. ^ z00403387 50 push eax! U- q2 ~+ J# E; F5 S! L
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX5 S2 x1 W: x7 P4 n; f2 i& S
0040338D 50 push eax3 }! w7 P- c/ V& g
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
% W* B% y7 A- _, M00403393 83C4 04 add esp,4
4 X8 ?# C$ X0 r8 R00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]7 G% |5 o9 L, g. ~
0040339A 8BE8 mov ebp,eax ; EAX送EBP% H& e! p/ B6 p9 G) h. s/ a9 X {+ N
0040339C 6A FF push -1 P4 l& ]- c& y3 S9 w& V9 Z0 E
0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX,长度送EAX2 e& R, }: J( z( ^+ `0 N, c8 f
004033A3 6A FF push -1
2 l* S1 H1 `/ D. G9 V004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
+ v# [$ K3 H& ^* \: I004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX,长度送EAX5 h5 n4 @5 J0 @0 x+ _/ {
004033AE 6A FF push -1
$ L' l. y) C9 x8 g- y3 A004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
3 J3 Y9 P$ f0 N) a9 Z004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX,长度送EAX3 V$ j, M4 d+ \
004033B9 6A FF push -1
3 T: m; P' p( P m V$ \/ h+ k6 Q004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
: M7 x# g7 n- |004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX,长度送EAX% O1 \& ~! L9 G b9 z) _
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX$ U7 P1 F, M+ l' a$ [- w
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX7 {9 C0 a) \" {$ v5 E9 a
004033D2 B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
6 C0 H9 s- A' R7 M004033D7 D1E0 shl eax,1 ; EAX左移1位
9 X; u; c/ ]* c" T3 B004033D9 99 cdq ; EAX扩展3 V0 ]) W% ^1 R# v! B
004033DA F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中
1 N2 H$ X* ?+ S; [* H; J; m004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较
5 B5 W' G3 c/ K3 f) q2 x0 q- o( v" q& ?004033DE 74 0B je short qsr.004033EB ; 相等就跳(必须跳)% G6 n- m% N4 p/ @4 E6 G7 v# M2 w
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A, r" B& j$ }9 f) I/ x
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
! K0 n" }2 C p1 a6 a! h4 y& p4 \004033E9 EB 2D jmp short qsr.00403418
9 o2 y5 l1 l z# J2 i. o) F1 {! p004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX1 r( s" I/ R* k- v9 a
004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2 w/ m0 l( R6 W) T: \" w
004033F7 99 cdq ; EBX扩展, L ]5 i/ l1 j
004033F8 33C2 xor eax,edx ; EAX和EDX取异或7 @6 X1 ]1 @3 g4 h6 M2 b4 q, Z
004033FA B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
: ^3 O5 Q: T& @5 j3 |004033FF 2BC2 sub eax,edx ; EAX减去EDX0 W: v9 v# P1 H( F- o) Q! B
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]5 l6 y+ i N, ^& i- V4 m
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX9 j: H( |- y& G
00403409 99 cdq- Z/ d* |' b' p; U5 c4 m
0040340A F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中
( O! s) ?2 O. r- E! [+ {9 C$ l0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX& c2 D# u4 y6 p7 E" i+ n: M& y x
00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较" Q3 y( D9 Z# l5 R3 K
00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳(必须跳)( B/ y& h+ y6 O) D
00403418 E8 6EC00200 call qsr.0042F48B ;
" h J* Y. _" }$ I5 ]# P; Z9 N0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]$ L9 D: R. w: K, ]9 j! Q3 z* q2 f
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9) V: L3 f! z; j% D8 c, e
00403426 E8 60C00200 call qsr.0042F48B# x# l5 [8 D8 o, U
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]6 c0 c I. }, I0 o7 I- e) c3 [
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],8
" Y4 d7 g, Z: [00403434 E8 52C00200 call qsr.0042F48B
- c: L" C [) N/ u# P4 q00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
) T1 { [# w3 [ h3 @0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
$ v( K- B8 \1 H i6 B5 ?& I00403442 E8 44C00200 call qsr.0042F48B
: L6 O" o% G; d- y/ S8 [- W) _# Q00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
3 z/ ?: C2 ~2 @" s! a. M% X' }, o' |0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],62 ?% r: n8 |! }* Q, |
00403450 E8 36C00200 call qsr.0042F48B
0 J7 P, D5 P3 u( P( @ t6 V7 I00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]: _3 X/ F9 O$ G& L: X' w3 Q
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
) e: V t# J) U0040345E E8 28C00200 call qsr.0042F48B4 z* Z/ ^# e" V Z8 p6 t( T! k) F
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]8 P2 _) _1 q1 ?8 H" V+ h+ h9 `3 _
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
, V( T- x0 o* L* k0040346C E8 1AC00200 call qsr.0042F48B
1 { ]# U ], x; w00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]0 F. g2 t9 }2 J) O* H# ~7 E
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1! D/ @7 X# O& H4 }
0040347A E8 0CC00200 call qsr.0042F48B
) u" W9 q4 i. G8 i3 d3 E) j0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
( a# Y. N' {# D" n00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0
! `5 L. v' {0 _' \00403488 E8 FEBF0200 call qsr.0042F48B
/ H8 q# O d5 E0 x+ k0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
8 P" m! g0 p# X; |+ V00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1- p) d4 O7 m" b- C; M; L
00403499 E8 EDBF0200 call qsr.0042F48B1 ^9 Z3 {5 r5 [+ V c
0040349E 32C0 xor al,al ; AL清0
, n( q% o7 s1 ^# q004034A0 E9 88000000 jmp qsr.0040352D! p' V2 b! x. b4 i" A, L7 A
004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里,F8下去~~~~~~~~
# ~: `: ], ?* m1 [9 k004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
* }6 t0 L( Q) X004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9
; N; k- [) {8 l% K7 Y004034B3 E8 D3BF0200 call qsr.0042F48B
# ^* b' e, h0 w; \) G7 i004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]" U# T( y; y" L) ` Y
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8. X/ u" t; e9 G1 t# j2 g9 g' c! d/ N+ `8 s
004034C1 E8 C5BF0200 call qsr.0042F48B$ M+ Z P2 |' W% V2 I+ N
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
% Q8 q8 s( q# l0 P( h3 |, l004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],75 J8 S: s0 q( i6 |$ C* M
004034CF E8 B7BF0200 call qsr.0042F48B
. f: A& `2 L# M+ ^! `( w004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]' W( ?% p" [' G
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6' C' n) V! [, ^9 O+ d' W* o% H5 j
004034DD E8 A9BF0200 call qsr.0042F48B+ N, Y+ r3 n9 G7 i3 p
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
9 e4 r- G' i$ w; {004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
# @: R0 D- ]3 M' B004034EB E8 9BBF0200 call qsr.0042F48B
* z E3 |( N4 }004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
5 O5 }& O3 w( l3 c# |- N0 ~% A004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
, Z) l' A" U* G- E d+ V! w004034F9 E8 8DBF0200 call qsr.0042F48B8 C3 ^) F) B$ j' _. }3 i
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
7 O( [9 \% \9 \' r" U- ?00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
( E) u1 a2 c# b+ c! y00403507 E8 7FBF0200 call qsr.0042F48B
) [# e6 ^ o/ M% ?) b$ Q0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]1 x) A# k! i) X* I+ S9 ~$ ?
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
' u8 e, H: E2 k8 V/ ~! `00403515 E8 71BF0200 call qsr.0042F48B
. Z1 w! }3 S) b% |: D+ g; h0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48] a! J# @: e% ?! B* g/ g
0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1$ Y8 {! P$ L5 ?7 S3 P( p; l
00403526 E8 60BF0200 call qsr.0042F48B4 u, Z* \7 |; d9 _0 _( }4 F
0040352B B0 01 mov al,1
: w; L$ O$ T- }0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]7 P5 {7 P7 d* ]
00403531 5F pop edi- k/ b/ t' Q- i: v' _0 t0 D% _
00403532 5E pop esi1 e' t! x9 D3 j
00403533 5D pop ebp
0 ~- @0 h( B! f$ O9 ~* o7 W3 Y00403534 5B pop ebx6 K6 d) |3 L& Q% f
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx* G) C% {) ?) D6 d5 i, Y: n
0040353C 83C4 30 add esp,30
& j. j( M# R( u, u3 D0040353F C2 0800 retn 88 h% c( X: T5 h: j. d2 f
--------------------------------------------------------------------------------/ d$ }6 m5 Y* S3 H
【破解总结】
, ^4 K' M' P4 ^, b! u" g$ X( f; p 用户名必须大于2,注册码必须为24位。注册码前4位由用户名决定,11到14位由6到9位决定,21到24由16到19位决定,5,10,15,20任意^-^
* n) b' ?9 r9 t4 ?6 t用户名:yijun
! h; ~0 e$ k* T: y" o注册码:4893*7777*3726*7777*05298 F0 f; F# t1 j2 z. F: u3 U
--------------------------------------------------------------------------------) r0 S, s3 z" U
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|