|
|
|
【原创】破解Quick Screen Recorder
- _) W' v3 f" T# s【破解作者】 yijun+ M! j r: `& I- a8 |$ N, P( q
【作者邮箱】 [email protected]
u. k; d# U0 z0 o【使用工具】 OD,PEID
' f' z$ [" q3 b3 d3 T8 @【破解平台】 WinXP
8 A) e2 p) K9 s# t8 J1 Z3 {【软件名称】 Quick Screen Recorder
7 S0 |# v; H2 Y) L! ?【下载地址】 天空1 y: X1 x; M0 Y+ V0 O: v
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on. # s o4 `9 k. ^2 ?, {5 r6 m" }4 ?
【软件大小】 540K" G s; `. k! } Z% m7 j: q) W& w
【加壳方式】 无4 q' l9 \3 i3 [, D" [0 u
【破解声明】 我是一只小菜鸟,偶得一点心得,愿与大家分享:)# V! X5 [4 H# T) p" l
--------------------------------------------------------------------------------
+ m5 N. x/ E7 N( |【破解内容】
/ ?$ b" P# o% ] PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方:
; o7 s/ M2 O9 z4 p+ [( y2 b00404C69 55 push ebp //在此下断- B: Z. |! s. l. f: o
00404C6A 56 push esi
5 {! b% j& K3 o* h. W+ r5 C00404C6B 57 push edi2 c( Z! I/ r* x" F' ~/ p' h x
00404C6C 8BE9 mov ebp,ecx9 ^) w" |" [' M' U
00404C6E 6A 01 push 1) d5 u! M# W) q9 D5 d- v9 R
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名, `* D0 n1 Q& `7 L' O& _% V" N
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
$ Z9 U5 n% P. Z. R1 D00404C78 8BCF mov ecx,edi
( f6 N" v n( a. x00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码
2 o" Q J; i; j, \, ]; H00404C7F 8BCF mov ecx,edi! S3 V9 M2 x6 S. \& b; d8 L
00404C81 E8 A73E0200 call qsr.00428B2D
8 b7 b% I0 o. c M# P8 k5 x) v+ [00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]4 }* }4 z% M3 v# @& k; L4 Y+ S
00404C89 8BCE mov ecx,esi/ l5 J; e8 A& \1 E& p6 I5 d
00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX+ N: N4 w; N( h
00404C90 8BCE mov ecx,esi: O+ t$ [* J$ c) w. T; @2 l
00404C92 E8 963E0200 call qsr.00428B2D
7 W& O6 s7 I$ i3 q- c00404C97 8B06 mov eax,dword ptr ds:[esi], U1 a! n4 V) D- U( I6 x
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2$ `0 P# a- E4 C& n/ Q# ^$ K
00404C9D 7D 26 jge short qsr.00404CC5' U& S$ W: U" H9 y! R
00404C9F 6A 40 push 40
" y9 O' v; Q' V: A6 g& `00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder" S4 R/ r$ ?8 U: l- p Z' r( i5 ~
00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
7 t( j! H0 L: C00404CAB 8BCD mov ecx,ebp
" T! f2 z* i& L6 h00404CAD E8 C3840200 call qsr.0042D175" K1 ~0 c5 T; g# f, y
00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
. M2 Z0 {0 R" ?! S: y00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
. ^) n7 C& K7 P( G" ]: l; G. V00404CBD 5F pop edi
9 ~- S8 |; N! |- \ c; ]00404CBE 5E pop esi
2 f- F/ r5 `+ L* J- S00404CBF 5D pop ebp
+ s5 s( {) u# z00404CC0 5B pop ebx0 i4 f- Y& H3 ]9 [3 M8 p R N
00404CC1 83C4 18 add esp,18
. G7 s$ a7 F3 g/ A7 ^2 j00404CC4 C3 retn
/ k3 g0 `9 B: }00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]
4 I- u5 s; o7 I; J+ Z* f7 ~2 j00404CC8 84C0 test al,al
# w% K2 ^! ^! }# K q3 g+ e+ s00404CCA 0F85 1C010000 jnz qsr.00404DEC' n! h6 O0 Q( h' V6 W
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
$ n- D. {! b3 _& A D7 k9 q& G& r00404CD4 E8 87E3FFFF call qsr.00403060) G4 E1 [1 ]2 G6 H- z7 u1 D5 P' ?' P8 r
00404CD9 51 push ecx
+ [9 L$ O/ I" b% d00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0
& K8 p2 l6 D5 b" C% E' n% t# U8 b00404CE2 8BCC mov ecx,esp: A- p# F4 |- O# t4 N4 I
00404CE4 896424 14 mov dword ptr ss:[esp+14],esp
5 g C" { W* ?( W4 H2 J/ S+ [00404CE8 56 push esi
; r1 R/ a: W; k5 f7 j6 f: G2 k00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0
5 m+ v* x! u5 ~: Z7 d00404CEE 51 push ecx4 u/ t. ?; t" o+ O# ]
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
8 L0 O3 {2 q; C00404CF4 8BCC mov ecx,esp6 w6 A0 N7 z) b) ] Z
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp8 A$ c3 g: ? b! l
00404CFA 57 push edi
) z1 {/ H, h8 r* A0 f$ j2 o00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是01 h' \8 y/ g3 l. G7 `% ]
00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
* ]* G8 ~' H$ U, Q2 b4 W00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0- X6 T( X' b5 j% y9 u
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL,跟进~~~~~~~~~~~
$ `: P+ J3 A- ^0 Q( s! T00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功,此时AL=1~~~5 h$ k/ O. P: n% K; u2 }' U
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~7 k @6 }* {, I' ~* n
00404D12 6A 40 push 40! Y% n1 P. F4 W( p! @* y
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
' h. p/ D% e/ ~6 l" f00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
7 P% B; Z ]. j00404D1E 8BCD mov ecx,ebp; ?1 Z" \ T* T7 G; x
00404D20 E8 50840200 call qsr.0042D175
: D; \0 {# _, k' u+ g00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
9 _3 H* g6 n/ _00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-14 b+ e# F8 B$ x9 J- m5 w" m5 R
00404D31 E8 5AE3FFFF call qsr.00403090" S% R; g$ T q9 w8 P/ K1 n! z* `
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]+ l* H' J( b3 Y5 B0 q* r" U( _" K
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
) X9 i" m" U# Z9 C/ B00404D41 5F pop edi `8 ]7 U" ~) [/ o2 C5 z8 u+ d
00404D42 5E pop esi4 O9 p/ S" H l+ m: U
00404D43 5D pop ebp
% Y) ?3 d5 l* k% \( j9 f% S00404D44 5B pop ebx, V8 D3 ~' Y# f8 O" e
00404D45 83C4 18 add esp,18
. _5 F- J( Z+ ^0 Q4 Y00404D48 C3 retn8 L+ i6 v" \: \# }" W
*********************************************************************************************************************************************************
* O, u! A& O2 t; S8 ^# U7 Z跟进00404D09处CALL来到:
: C# i3 f% H$ D; s004030A0 6A FF push -1 //一路F8下去~~~~
! R4 m+ K# u- t: J" V004030A2 68 C88F4400 push qsr.00448FC8
- S. [7 a; n' S/ w' J' s$ n7 F* K004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]% B- S, w' B/ N- P7 ^% q+ ?6 F( v
004030AD 50 push eax
6 ^- O. ?* c& z' z D6 r: F3 q004030AE 64:8925 0000000>mov dword ptr fs:[0],esp
( M; S9 m; A- [: I3 C/ p$ T004030B5 83EC 24 sub esp,24
! ]# ~% Y; Q& |( P# v004030B8 53 push ebx
5 p: j+ L6 G- D4 k6 c, G7 w004030B9 55 push ebp* Z9 r6 ^0 E* V& w) S2 K* E
004030BA 56 push esi; W$ M( m! L3 i* _
004030BB 57 push edi6 m0 K6 a1 i* U! S
004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"9 [) i8 X; t# C; y7 g
004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]( K% Q" z1 ?' e- t' j+ k
004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1. D! A% s9 _. m# w2 ]2 O
004030CD E8 27C40200 call qsr.0042F4F95 ?% |2 }+ q* `3 e
004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]$ I8 b' _/ U0 S
004030D7 894424 2C mov dword ptr ss:[esp+2C],eax% T% B; w; C& x6 `' c
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
6 W# K8 w& k# M. I2 o. O004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
& q% |! x' p5 _" J004030E4 E8 905A0200 call qsr.00428B79# H! L. l+ _3 b8 f
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]1 ~" f& r# ^2 F6 _5 F. x
004030ED E8 3B5A0200 call qsr.00428B2D
7 ?4 ]- Q" ]3 p+ A004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
/ N h4 n* \- {+ b4 t7 |004030F6 E8 7E5A0200 call qsr.00428B79# j5 N0 }* C3 C2 ]
004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]1 L! R4 b+ V, `- f9 Z; |$ M
004030FF E8 295A0200 call qsr.00428B2D, j4 e/ {5 a" G/ L* D
00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
+ v+ P$ U0 I8 B( J00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
0 C1 A5 B9 D, d' N$ n% j% R% A0040310B 83F8 02 cmp eax,2& @+ K0 x* s+ d: a6 @
0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳- v! s# ~5 }$ J8 {
00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]' ^, g: O" Q8 X! A# y7 V# s
00403118 837A F8 18 cmp dword ptr ds:[edx-8],18% N- V4 C; _9 a
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18(16进制)就跳
' H+ Y8 `! v" s8 t+ w00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]( u! s# h) D/ p+ h
00403126 6A 01 push 1
" A# b& \5 e8 s `8 h3 N6 |( f) z00403128 50 push eax
& N0 ~& q8 B$ w4 H; A- z* h2 J00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50] [; D* c4 c7 K, v/ ]; @
0040312D E8 C4550200 call qsr.004286F6
% n; s1 K7 R- K& ^7 e8 e00403132 8B00 mov eax,dword ptr ds:[eax]
2 Y; V/ J o1 V) R00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
$ B4 _+ X7 a( y: R @+ [. H00403138 50 push eax7 z+ m I# D( ]! K. B2 w" @* V
00403139 C64424 40 04 mov byte ptr ss:[esp+40],42 l2 L" k: j8 [, Z6 j
0040313E E8 4D560200 call qsr.00428790
& X$ V* X# a- `00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
9 W2 I& A+ M* h, g00403147 8BF0 mov esi,eax, B7 o& p, v0 t; J" p
00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
6 ^* p5 Z/ f4 o2 V0040314E E8 38C30200 call qsr.0042F48B, g: ], U0 X# i: u& j' N, I+ O; n
00403153 8D46 0A lea eax,dword ptr ds:[esi+A]
! w0 W7 d" d2 k7 [9 U00403156 B9 3E000000 mov ecx,3E* p J H. I* g+ Q
0040315B 99 cdq3 b( Y. h A, p A6 [, i! V0 Z
0040315C F7F9 idiv ecx
O! C) l9 @0 \: V! ]: i) N0040315E 6A 01 push 1% n7 o1 o5 {6 I2 B
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
/ e4 @: ]( q7 a- ^+ Y% v00403164 8BF2 mov esi,edx4 B& D; \4 n2 [# k5 f
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]. k, I# ^ b" }4 ~2 I9 K
0040316A 52 push edx" I6 w4 R1 z7 d* P: ^9 R
0040316B E8 0A550200 call qsr.0042867A
; B/ B) v) u* N* k: m* c00403170 8B00 mov eax,dword ptr ds:[eax]
& X+ ^ b1 v; ?2 }, Z% z7 m1 A4 v00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]2 W( y. ?4 g4 o! R9 i$ M0 d
00403176 50 push eax
6 T7 o3 p; Q$ ?, u* x; A* o00403177 C64424 40 05 mov byte ptr ss:[esp+40],5# S0 Q0 }/ [' J/ Y4 Y- @4 ]
0040317C E8 0F560200 call qsr.00428790& d1 v( t% J( _( E
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
( O& d" F( ^* K2 g: Q, Q) M00403185 8BF8 mov edi,eax$ j4 O% k$ H- K- e4 `% X/ ?
00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],34 Q& {! G7 g1 {, G# F. a
0040318C E8 FAC20200 call qsr.0042F48B
+ v& Z# n/ ?9 ~5 l% T# ?' N00403191 8D47 0A lea eax,dword ptr ds:[edi+A]3 o% ]& F0 r+ g8 j! p5 X
00403194 B9 3E000000 mov ecx,3E! a# u9 \( q7 V
00403199 99 cdq
0 _6 p; i0 X4 y) Z: i# L9 U( x0040319A F7F9 idiv ecx
4 J5 [, c# E7 w$ d9 u0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]% |* D) Z6 m3 {5 K, d1 x& h4 B
004031A1 894424 28 mov dword ptr ss:[esp+28],eax
0 T4 K( P& {5 ~( I' ~% `004031A5 8BCA mov ecx,edx, g% a4 y, R1 q' X: }
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
1 R0 K' Y V2 r004031AB 894424 1C mov dword ptr ss:[esp+1C],eax. r; ^1 k9 F9 T: b, P0 L, X4 m
004031AF 894424 18 mov dword ptr ss:[esp+18],eax
2 s1 K1 H' Y- @" r004031B3 894424 14 mov dword ptr ss:[esp+14],eax
: Q" t. R; m' j: V004031B7 894424 10 mov dword ptr ss:[esp+10],eax+ e1 z) M1 r; L. W- T
004031BB 8BC1 mov eax,ecx
0 l$ @2 o2 ^6 |& d( j2 U& N7 Q004031BD BF 0A000000 mov edi,0A
" N! w5 `% n0 ^4 \; s004031C2 99 cdq
6 l g0 t- J4 d: Z6 A004031C3 F7FF idiv edi Z% \7 }7 U$ O J3 B" _# c
004031C5 8BC1 mov eax,ecx
; ~& P! X. k8 |; i5 z: m004031C7 B3 0B mov bl,0B
+ _7 A x8 l3 |$ j3 k1 X004031C9 0FAFC1 imul eax,ecx e1 t" D+ N% q; J: b; X6 F
004031CC 8BCF mov ecx,edi
4 I- _- k2 m$ m3 y, R004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
1 S' v) g' c3 U8 I004031D2 52 push edx8 l: R% \+ Q( R( r" L/ l! _* L8 x* y
004031D3 99 cdq) x: z$ z d( Q1 w s+ i' O
004031D4 F7F9 idiv ecx) u7 t/ _5 ?' e( K5 k, Q# f
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]
$ _8 W) s0 b; X" w004031DD 2BC6 sub eax,esi
) _" x1 y7 m$ Z/ n$ x0 P* {004031DF 52 push edx
( l% z4 T$ x# j& i$ X3 u004031E0 99 cdq/ x x* a1 b/ O6 d+ M6 E
004031E1 F7F9 idiv ecx
# Z% ^3 j8 X, g* V004031E3 8BC6 mov eax,esi0 U5 a" W+ l Y' L. T! S( R+ L7 U
004031E5 52 push edx- |; n" a% E& y' R7 @# D/ S7 Y! H
004031E6 99 cdq
6 @9 {6 A4 u4 w004031E7 F7F9 idiv ecx
" O& l6 ^6 p" o. f* n! N% U2 l/ Q004031E9 52 push edx1 ?$ K# t: V9 E& l* E4 ^; v2 {
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
: `. z3 v; f C; e. u; A/ Z004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"1 a# w- }- s6 b& x- T/ Z' {3 g
004031F3 52 push edx
r" F7 s8 {# I* k) q004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数,我的是4893
9 F5 d8 Y/ O$ R n8 Y004031F9 83C4 18 add esp,18" g, ? R2 b4 F, ^" [! A
004031FC 6A 04 push 4
4 l3 g4 n* Q6 p( T' h/ y1 M6 E004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
' w/ [1 V+ L4 W+ c3 `; y00403202 6A 00 push 0
) r8 P) y! L- |1 p' x* c0 `2 X4 ?00403204 50 push eax5 \% x( q5 j( W3 p+ d
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50]% T5 j$ ]$ i2 @
00403209 E8 D6530200 call qsr.004285E4, i: u& X. K4 {9 p9 ], H: e
0040320E 50 push eax5 j0 p: l( n5 a/ P- B5 @: _
0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]2 m* n% `, M) _; W+ k4 H* x/ R
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C; X5 O! V& @" r5 s/ K0 Q/ z4 ?
00403218 E8 A7C30200 call qsr.0042F5C4
7 N3 X+ J, Q- T0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' [; N& m9 s' K L' e; c2 w00403221 885C24 3C mov byte ptr ss:[esp+3C],bl
( t+ C. j9 M6 \/ B00403225 E8 61C20200 call qsr.0042F48B
6 e6 J- B/ I# j( F9 g0040322A 6A 04 push 4
, \( s2 d. I! ^5 G0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]8 l4 p- p: Z9 X; C9 t- }! [; y( m
00403230 6A 05 push 5- d! q" C6 M8 f5 h
00403232 51 push ecx
0 h: x5 C. `, S, @/ y" k4 G00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 X$ \# F1 [3 e! M3 U1 \& g00403237 E8 A8530200 call qsr.004285E4
$ l7 M. R8 K7 G" i# V& z0040323C 50 push eax. M U. l8 D/ v. _% w* Q) J- M/ D
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]6 S. V8 U, {% i: }1 L& d
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D
4 u& A/ H: A* @" ^& `00403246 E8 79C30200 call qsr.0042F5C4- x& c' W9 H6 _" }
0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]$ V& }0 b) a2 d4 F
0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl3 W. ^9 j7 z! e. T
00403253 E8 33C20200 call qsr.0042F48B$ M' m2 g3 t( d8 N
00403258 6A 04 push 4
$ @: `5 m6 v' i0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
* I; P7 Y3 y$ K o; _0 B# E$ M0040325E 57 push edi9 D2 E* Q2 v' A0 G5 V3 E/ K& }
0040325F 52 push edx. t9 `/ L' F- W \
00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
9 v: k9 ]/ k, X/ S: `3 i4 o00403264 E8 7B530200 call qsr.004285E4
- {- H/ ~7 y$ Y; n+ @" d00403269 50 push eax; q) W5 t( ~, {4 _' ?
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]3 y* A" B% V* e+ T4 A2 ?
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E" w( ]% u. @+ ]( m/ q
00403273 E8 4CC30200 call qsr.0042F5C43 v+ o% I2 L* `5 L8 W
00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]8 K0 [4 s, P# d. l3 \4 C1 ?
0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl/ x8 U/ ]+ v, `% j3 i9 I( _
00403280 E8 06C20200 call qsr.0042F48B' g* W1 a- T1 n3 Z
00403285 6A 04 push 42 v: N' f5 a# z' S4 k! ^+ t
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
4 Y# F; {" _* w4 |- x0040328B 6A 0F push 0F2 B; n6 E7 J5 p1 V7 g/ b! D
0040328D 50 push eax
9 b& u9 V# C) r% `9 G0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
- `) ]% M' E# E3 W/ K( C5 f- X00403292 E8 4D530200 call qsr.004285E4- h+ O/ J) k. o% W
00403297 50 push eax
. ?+ N; A2 d" O00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]2 A8 K) r3 g/ ~3 }: X
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F7 H- b$ _8 J, L+ Y
004032A1 E8 1EC30200 call qsr.0042F5C4
( P/ J$ y: Y9 [, n. Q004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
' S3 y1 K! G- F- ?+ b% ~# Z004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl
* C3 N+ R4 V `- k# N. i0 Y004032AE E8 D8C10200 call qsr.0042F48B* B& ], v4 z/ t/ I
004032B3 6A 04 push 4 t. @4 F( o& ^7 N1 l u& l
004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34], \+ M( R9 i6 r- q4 o
004032B9 6A 14 push 141 ]$ r: G! K5 r2 M5 k3 n
004032BB 51 push ecx
3 r* e, W% ?# w' x004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]; V2 r# T ^ p
004032C0 E8 1F530200 call qsr.004285E4
( J" v8 e7 q: _' r) V004032C5 50 push eax
' K/ X) Q% r( Q" V( x004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]8 \, e8 U+ w' v2 |
004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
# H- q7 v1 b* y9 M% z6 ^4 V @( _004032CF E8 F0C20200 call qsr.0042F5C4& f9 y! P: y, l& {* }1 ^$ H2 ~ G
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' @( S( n, s7 B2 C) d
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl5 X, l* P% ?! w( J4 A( l3 Y
004032DC E8 AAC10200 call qsr.0042F48B
* E, N% W/ B( ?" d004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI+ f1 E2 O: l- X6 G: z9 s8 H
004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
- ^% g5 B: {. F# n004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
' X4 J" ]; d {% ?! D8 F: e4 `8 C004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
* o6 K4 q+ L5 Z; J. { B8 T, Z' s- H004032ED 8ACA mov cl,dl ; DL送CL6 Y7 ]1 W$ _* ^0 x) i" g0 w* M
004032EF 3AD3 cmp dl,bl ; DL和BL比较, N6 y2 D+ I' ~
004032F1 75 1E jnz short qsr.00403311 ; 不等就跳(不能跳)
4 ?7 N4 i! y& j004032F3 84C9 test cl,cl! n" |0 s2 z! ~. ~7 O: H
004032F5 74 16 je short qsr.0040330D- m7 s. R% g' X; V8 ?0 }, j( X
004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL! x+ F( `! I |: x) q/ r' D, f$ X
004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
; t8 K: w+ c [( Z4 `8 J- N, _004032FD 8ACA mov cl,dl
! c0 Z" o0 P- q8 J+ W+ y1 f+ g9 I004032FF 3AD3 cmp dl,bl ; DL和BL比较
3 N, B9 W/ [( v5 X8 d00403301 75 0E jnz short qsr.00403311 ; 不等就跳(不能跳). g, b. k+ T; x$ f
00403303 83C0 02 add eax,2 ; EAX加2
8 T" j! p* R$ p' \; b X00403306 83C6 02 add esi,2 ; ESI加2
% x v9 X9 ]6 _1 z, y00403309 84C9 test cl,cl4 ?: z. v3 P1 q2 F' W- G0 r4 e7 Q
0040330B ^ 75 DC jnz short qsr.004032E99 s8 i$ ] m- G$ N+ a" b$ I/ N6 D2 o
0040330D 33C0 xor eax,eax
& s5 ]$ l! h% ~* ~/ N9 q0040330F EB 05 jmp short qsr.00403316
2 ]; V$ B% f0 j( l+ ^00403311 1BC0 sbb eax,eax
6 D* h, W" o2 c5 D. y00403313 83D8 FF sbb eax,-12 v; h* ]. P' c. O
00403316 85C0 test eax,eax: y2 V7 ` ^, e0 M3 p2 B
00403318 74 0E je short qsr.00403328% s' Q) M+ K( F L# b/ _
0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A3 y2 v1 T# g' p7 K: x
0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]% j4 [: D7 ]+ b& C5 j
00403323 E9 F0000000 jmp qsr.00403418
# E3 q. W2 i- s% Q/ o! ]00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX
) N# K& C7 L! i' n' z; E/ c* m: D6 @0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
/ k8 ~( ~% H) m7 M3 t00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]
/ I; S$ O% K3 I* l00403333 50 push eax
: P. T: G- ]( ?6 `! d00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX/ Q+ t w. }* Q2 m) A5 e$ y
00403339 50 push eax
; a) Y- @6 ? p; I4 ~- Q0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX d) E: z) \/ G5 n2 L2 r
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX
* f- S$ w: Q1 w00403343 83C4 04 add esp,40 m' w* {7 D) i+ r+ [$ ^
00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI* J9 |, y/ B' g4 N8 v0 E5 I* ]
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8] F o9 m( }/ h* Y+ K4 w4 q2 L7 d
0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]0 @6 d8 A: Q. y* P8 G" q
0040334F 50 push eax5 C- y0 I! t `" |6 m1 B4 V/ y% m5 M
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
# `" \4 _/ T% x$ C' L# \00403355 50 push eax% {( _5 r/ |7 W
00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX6 R2 W4 y$ A s& P5 }1 x; N
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX0 o3 A& h# l. z( a- K# ?
0040335F 83C4 04 add esp,4
& |9 R. B- o" J+ \1 a! G00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI
- t3 U3 t- C( t9 ^0 [& h: B# b00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
# T+ a- ~$ l6 { h3 G, j* [) Z9 u00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]( G+ [; ?/ f( x0 G: a( a) i$ Y3 A
0040336B 50 push eax
, A4 c' i/ |$ W0 g8 M0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX
- s5 Y0 ~. b$ G' D. X00403371 50 push eax3 b8 T$ b0 J+ [, C2 I6 V
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX$ v' X' a b& w/ H; V6 X2 A
00403377 8BD8 mov ebx,eax ; EAX送EBX
7 i$ c) q- ]& {5 H; { U( Z: L00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX/ I: @) M) p" m6 g, o1 j( ?
0040337D 83C4 04 add esp,4 I7 w: v$ L: X% C$ P2 w. q# K
00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
0 }9 J) w& B9 u' p& @ @& ]00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]
; ~: w1 j$ d' x; n; V* G- q0 n00403387 50 push eax& E. z) p% Q" E) ?, x. b1 i
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX
* D& r. c8 B1 h7 q; F0040338D 50 push eax. ^0 ~" Z, r& X; z2 Y0 V
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
, n) R# o) ~: S# ~2 e& J00403393 83C4 04 add esp,4
* @" M% B# e5 M1 a00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]7 K" [% N5 Q; G, a+ W- o0 K2 D
0040339A 8BE8 mov ebp,eax ; EAX送EBP" k: u! I+ }7 g8 V" `, h
0040339C 6A FF push -1
( O8 @. \+ Z" F: r, J0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX,长度送EAX: Y Q; a9 |! o' B$ k
004033A3 6A FF push -1
m5 A; ^+ f' K; D004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
K$ |* E) y% S5 R/ p004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX,长度送EAX
" F8 Q4 i) c7 q* v& d! i3 N$ \004033AE 6A FF push -1
0 f0 v7 B9 w+ @3 R8 p004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX
% I5 z' R( Q1 ~6 d- ]; n$ b004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX,长度送EAX9 w. \! Q& Q, d5 k- S
004033B9 6A FF push -1
1 M# l0 c6 s; x. B004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX2 i C" S0 y( e9 \
004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX,长度送EAX
3 J* s4 [% T4 _. W004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX* u: f( X# l$ Z8 {) `% ]4 `6 [
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
/ C$ X" g; s. m- f004033D2 B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
8 m7 v* ]& Z! Y: |/ O# C, d+ H* |" X004033D7 D1E0 shl eax,1 ; EAX左移1位
/ Q# K) T& `. t# H8 U004033D9 99 cdq ; EAX扩展
4 O& _: c& z0 |- B: Z% @004033DA F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中/ z8 A9 G9 p. h. l. m. D; i
004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较( Y) F" A+ M% M# S% E2 c8 B
004033DE 74 0B je short qsr.004033EB ; 相等就跳(必须跳)/ L6 Z% D- ]4 y) g F4 E
004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A8 G9 K6 k, ~( W; N, _6 V. X
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]3 z' f r; u- _- H% C: f' p7 Y
004033E9 EB 2D jmp short qsr.00403418
' y3 \7 ~/ R' Y1 c004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
* D9 ]1 i8 r! v7 U* }7 |; F004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
% x9 b% T# }+ d5 P! I1 T. n! Y/ u004033F7 99 cdq ; EBX扩展4 q! i! Y; f7 n( i- m5 Y; e
004033F8 33C2 xor eax,edx ; EAX和EDX取异或
. r/ l1 f; ~3 n' H: ~' [3 f( \% w! C004033FA B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX( B2 B0 s m4 q! ?* {7 U
004033FF 2BC2 sub eax,edx ; EAX减去EDX5 I) F! F- s5 w( G+ r
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]; t1 u: R4 P4 X/ |. X: t4 Z1 v
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
9 D% ?2 N7 Z% k00403409 99 cdq* X9 c @) @9 [% c5 |' \% I1 O& }
0040340A F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中. E( q1 K! \$ w. D/ \# `1 J
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
6 V8 ]$ o* V8 \3 ?00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
4 \; W9 \! x4 v: U0 ~% A00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳(必须跳)8 _0 m: v$ H8 L: u9 B! n, |
00403418 E8 6EC00200 call qsr.0042F48B ; # ^+ W* W7 t4 R1 r' K0 v
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]( I4 R8 k: E, O; l
00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],9# e; t7 X) d* P5 K/ e/ `
00403426 E8 60C00200 call qsr.0042F48B# n. m$ z; K# Y# {8 M ^. b, z4 @5 R
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18] s. i# M& r9 r, `7 S# z0 j @' V# k6 W
0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],88 M" ~$ ?& X2 `/ _. l( {
00403434 E8 52C00200 call qsr.0042F48B
7 V8 M( O. C4 q1 q }00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]8 [# e8 K: \1 B7 J5 v, \
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7
! q# A/ O+ |8 z" H# X00403442 E8 44C00200 call qsr.0042F48B5 v, b6 p0 T' _2 V- S D6 M& ^4 w
00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]# a! Z. K6 b9 C) W( I
0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],6
/ E+ Y* T$ e, f, X00403450 E8 36C00200 call qsr.0042F48B
3 A0 W0 `8 X' `" p5 u00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
" L& c3 S" U( ]0 K! X00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3! `) ]6 I2 u4 q+ i7 G S/ F
0040345E E8 28C00200 call qsr.0042F48B7 X! U4 T" A9 p8 ~
00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]8 @3 N% G- m B
00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],25 M5 p$ B9 H+ u
0040346C E8 1AC00200 call qsr.0042F48B2 O s6 S0 k7 Z8 z7 Y- o
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
$ D! M) f5 O# A6 p( A& B00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1
, A( h" K9 ? ^: Q2 S9 H/ G0040347A E8 0CC00200 call qsr.0042F48B
+ _6 l1 A& ?/ X4 \5 w0 r0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]: U1 a9 t2 T) o. @
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],08 l$ ^) S+ {9 K- A2 u! L* n
00403488 E8 FEBF0200 call qsr.0042F48B
: t: ~2 g& z. y4 n+ \0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]- x6 G: t& ^0 |2 V- A! l5 _4 B
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1# @- A4 {' R/ R/ m; \& H
00403499 E8 EDBF0200 call qsr.0042F48B
( ]% J% g* `. y9 m1 I0040349E 32C0 xor al,al ; AL清0
0 K" y0 t' n9 x% s& j004034A0 E9 88000000 jmp qsr.0040352D
4 g5 v- X" P- S+ ^004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里,F8下去~~~~~~~~
! h* z) o) l i4 Z( O5 B004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ {, \& J, o+ e' R4 N2 w/ n004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9& b4 i6 R8 I1 e0 M
004034B3 E8 D3BF0200 call qsr.0042F48B
% N. p9 y' `* P1 k004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]! r' B3 f* H9 M8 P8 g" I
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8" u+ Q3 m9 V- i" v9 j
004034C1 E8 C5BF0200 call qsr.0042F48B
/ }9 [3 S o) a: P; x004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]9 P- p" A3 V! f; s
004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7+ |0 K* t% R# M# z
004034CF E8 B7BF0200 call qsr.0042F48B
* }( [, m5 K4 u0 q# a* ~4 Q004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]$ i4 e* g) @6 m9 O4 x
004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6# L8 q! [& m' Y1 N
004034DD E8 A9BF0200 call qsr.0042F48B
~$ h$ k! B- n4 M: }! o2 \004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]# L" H% P; X; z1 j$ O9 C* S8 Y
004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3
0 H: F" C/ W1 \" q }( o004034EB E8 9BBF0200 call qsr.0042F48B
( o9 l7 e: x0 f* g c004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]: `. b8 F2 F9 f# P
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
1 A/ U3 O* A/ O& \, c004034F9 E8 8DBF0200 call qsr.0042F48B, G' ^3 {/ q2 n# _$ L/ ]" R
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
5 y2 R/ R% R+ u: Y- U9 k; G00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1) U5 n# S* E; y
00403507 E8 7FBF0200 call qsr.0042F48B1 q- M1 R5 V% Q2 a
0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]. z& E) Y; h& ?4 Q Y
00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
; @0 [' Z# W" x& G7 [. W00403515 E8 71BF0200 call qsr.0042F48B
- d# S4 i C1 }' t% Y2 r. W0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
9 N* }$ D8 Y( l1 T1 O& ]2 L; Q) m0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-12 F' f7 l. n: N
00403526 E8 60BF0200 call qsr.0042F48B+ E+ @% \4 E# C+ Y% D9 H- j1 `3 d
0040352B B0 01 mov al,1 _( p- o. D$ h- G
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
( s' m4 z% ^- H% g00403531 5F pop edi
7 R- e8 t9 r* r00403532 5E pop esi
1 i( {- O5 \" w6 l# a3 k6 G00403533 5D pop ebp% x0 I( I5 _7 T; F: p& ^
00403534 5B pop ebx
! h4 g9 A$ z; I6 s2 `00403535 64:890D 0000000>mov dword ptr fs:[0],ecx# T: s% U7 H6 a& J% y; x8 l. F
0040353C 83C4 30 add esp,30
9 {4 E+ H, K0 _3 X9 c: ^" T0040353F C2 0800 retn 8
8 }$ l W* g2 `! |--------------------------------------------------------------------------------
6 ?8 ^9 w& t, u1 ]9 _% E【破解总结】
5 I! r' b4 L: ]( u0 U: U 用户名必须大于2,注册码必须为24位。注册码前4位由用户名决定,11到14位由6到9位决定,21到24由16到19位决定,5,10,15,20任意^-^9 y+ C0 g; I2 R( E7 ]
用户名:yijun
- @# M$ F6 z/ \/ d; Y; u; M# O注册码:4893*7777*3726*7777*0529
* r) Z0 y I& P--------------------------------------------------------------------------------7 J( I% o# d V3 W" S3 X4 A
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|