|
【原创】破解Quick Screen Recorder
+ R, P$ N$ A5 Q; W【破解作者】 yijun
1 B& F: [ B' u* w【作者邮箱】 [email protected]/ \0 _: T$ p, W; d
【使用工具】 OD,PEID2 I& D# O4 p, J3 K
【破解平台】 WinXP" s$ R& J: z& U+ R* t
【软件名称】 Quick Screen Recorder
* J. e' T! @9 \0 r# r【下载地址】 天空+ B: C: K& ^4 |% M
【软件简介】 Etrusoft Quick Screen Recorder is a tool used for recording screen activity into standard AVI video files. If you move the cursor, launch a new program, type some text, click a few buttons, or select some menus -- anything that you see on your screen -- Quick Screen Recorder will be able to record all these and allow you to play them back later on.
1 o3 F% w' f& R4 _' i' R【软件大小】 540K
- ?* y9 m0 K. U. ~* _; I: z/ _【加壳方式】 无3 N3 A+ ]) ]" z" \
【破解声明】 我是一只小菜鸟,偶得一点心得,愿与大家分享:)* Y; e" A4 o; P$ T3 n+ O1 g& \
--------------------------------------------------------------------------------
5 s1 ^- b5 F2 ^3 R. R0 t9 A, b, r F【破解内容】: t+ N/ T# A6 h0 E5 G- f# q2 i
PEID查壳知该软件无壳Microsoft Visual C++ 6.0编写。OD载入很容易来到以下地方:/ L% ^3 O' d9 z) Z' r- V- L1 h
00404C69 55 push ebp //在此下断& i5 W) |: H) g6 K5 o! M
00404C6A 56 push esi4 [: s# K( `% Y( d8 d
00404C6B 57 push edi7 f' J, j6 b* `6 A7 I# b o" v6 I: h
00404C6C 8BE9 mov ebp,ecx. |6 J$ _; P4 U6 V/ B3 Y
00404C6E 6A 01 push 1# x1 }+ h5 a( a
00404C70 E8 7C910200 call qsr.0042DDF1 ; 取用户名7 ^) R) v0 u" ]* Q' ?/ U4 K$ F% u# ?
00404C75 8D7D 60 lea edi,dword ptr ss:[ebp+60]
/ m' T7 w, d. U* {* W* V00404C78 8BCF mov ecx,edi
8 t) R# _# L: r7 n. s* x7 q5 C00404C7A E8 FA3E0200 call qsr.00428B79 ; 取注册码0 v) v1 w" D; c @; S" d
00404C7F 8BCF mov ecx,edi- J% d# A( t1 _' G$ k
00404C81 E8 A73E0200 call qsr.00428B2D& b4 D6 @& k! r. K
00404C86 8D75 64 lea esi,dword ptr ss:[ebp+64]
# Z c$ e4 |1 e4 L: H K* g8 o00404C89 8BCE mov ecx,esi
5 q* S6 z/ k0 L& @8 B- \00404C8B E8 E93E0200 call qsr.00428B79 ; 用户名送EAX
/ H+ \+ X' p+ h ~9 S; F00404C90 8BCE mov ecx,esi3 G7 o1 f' l& }1 L9 P$ p' y% K
00404C92 E8 963E0200 call qsr.00428B2D
8 N: Y5 j4 \- Q0 L) C8 ] z7 v00404C97 8B06 mov eax,dword ptr ds:[esi]2 @4 j1 k+ b8 c
00404C99 8378 F8 02 cmp dword ptr ds:[eax-8],2! y; r) t! o* }6 `6 W5 E6 U6 K+ n! W
00404C9D 7D 26 jge short qsr.00404CC58 d d& Q% j# p* e, D
00404C9F 6A 40 push 40; C0 j+ L& y: Q% o
00404CA1 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
* d# M# o5 J8 k) s00404CA6 68 24E54500 push qsr.0045E524 ; ASCII "Please input your name."
, u2 |2 a f8 j* C00404CAB 8BCD mov ecx,ebp
! O! I7 y5 T5 b( V# U% K00404CAD E8 C3840200 call qsr.0042D175
$ G7 M* x& t" r00404CB2 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
- G& g3 ^+ i6 Z5 j/ P/ v00404CB6 64:890D 0000000>mov dword ptr fs:[0],ecx
0 w0 x% @/ ?/ \. @00404CBD 5F pop edi
) z4 {4 v% @, e2 a* G5 j00404CBE 5E pop esi
0 r. k1 E/ e$ w$ q q* ~00404CBF 5D pop ebp
- ^, B7 `! `7 K00404CC0 5B pop ebx7 i" @& Y0 a" q7 [. h4 Q
00404CC1 83C4 18 add esp,18
, r# e3 T0 e4 e6 O00404CC4 C3 retn6 V5 X4 T; m- J* l, P* {
00404CC5 8A45 5C mov al,byte ptr ss:[ebp+5C]" j6 n* I; L; z
00404CC8 84C0 test al,al
3 J/ d. ] v; [8 l! Z A$ R: F00404CCA 0F85 1C010000 jnz qsr.00404DEC& {9 c9 T$ j/ t2 E' [/ @8 @
00404CD0 8D4C24 14 lea ecx,dword ptr ss:[esp+14]: m) {' j8 a$ F& R& O1 p
00404CD4 E8 87E3FFFF call qsr.00403060$ m1 u) \+ b1 h- r. n& Q
00404CD9 51 push ecx
0 k& M4 p* T. b! Z5 S3 E% ^00404CDA C74424 28 00000>mov dword ptr ss:[esp+28],0 w( L+ o/ D% F6 K+ O C. R
00404CE2 8BCC mov ecx,esp
5 [2 [- O4 e3 S8 R( y* y. Q5 a00404CE4 896424 14 mov dword ptr ss:[esp+14],esp1 q2 c, c! ]! F$ T" \0 p. Z+ j
00404CE8 56 push esi
" n. G5 }+ Z' M- O2 q" m00404CE9 E8 12A50200 call qsr.0042F200 ; 测试用户名是否是0. S' T9 H0 ]$ B+ V
00404CEE 51 push ecx8 y Q: g" z* T! \
00404CEF C64424 2C 01 mov byte ptr ss:[esp+2C],1
/ O* _; A& o7 V3 g% h( Q8 [. }00404CF4 8BCC mov ecx,esp9 J+ |' z3 S, u" ^; ?
00404CF6 896424 20 mov dword ptr ss:[esp+20],esp- K3 i5 i* @) Y$ S4 G
00404CFA 57 push edi
1 P0 x- Y, j3 H; K8 s00404CFB E8 00A50200 call qsr.0042F200 ; 测试注册码是否是0
) Z1 m6 O2 G( Z) H" [4 r: k00404D00 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
~/ z& s4 s3 {. r00404D04 C64424 2C 00 mov byte ptr ss:[esp+2C],0- Z' j0 Y( E- L7 \0 q
00404D09 E8 92E3FFFF call qsr.004030A0 ; 关键CALL,跟进~~~~~~~~~~~0 e- P2 t2 {0 s; \) U2 Z7 M* m0 c* b
00404D0E 84C0 test al,al ; 刚才那两处都等就注册成功,此时AL=1~~~1 R" G8 C' ~5 H. T; W7 Y& q/ Q
00404D10 75 37 jnz short qsr.00404D49 ; AL=1就注册成功~~~~' w0 |& V$ N& S H, z8 n
00404D12 6A 40 push 404 w! m: l% f- F- Z
00404D14 68 3CE54500 push qsr.0045E53C ; ASCII "Quick Screen Recorder"
$ s- t" J- U3 d1 Q00404D19 68 DCE44500 push qsr.0045E4DC ; ASCII "Sorry, your registration key is wrong. Please check it and try again."
5 ^) W) D) d& A8 D0 Z0 i9 ^+ G8 E2 x& A00404D1E 8BCD mov ecx,ebp
" d5 F, t7 M( c) r1 ] ]00404D20 E8 50840200 call qsr.0042D175* j5 Z7 p! a- M" h
00404D25 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
0 K2 J. I t+ h) F- v00404D29 C74424 24 FFFFF>mov dword ptr ss:[esp+24],-1
- c: `1 C% t& d' O) Z00404D31 E8 5AE3FFFF call qsr.00403090! G/ U G, {- |% k
00404D36 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]4 B$ I& E1 G' y8 R! k) ^
00404D3A 64:890D 0000000>mov dword ptr fs:[0],ecx
( W% x* a+ c: ?2 N00404D41 5F pop edi
* G6 l% p, D) Y2 R00404D42 5E pop esi
1 C7 P Y7 A) M/ L* ~9 r00404D43 5D pop ebp
' T* l& h O) b8 I+ w- O00404D44 5B pop ebx2 z: S. j5 v+ ?3 k7 a7 u8 |' M/ Y
00404D45 83C4 18 add esp,18
8 G# I. F9 _ P$ J- N00404D48 C3 retn& q' R3 Q: W& {4 s& ^- S
*********************************************************************************************************************************************************
' _5 z& d b: b* b跟进00404D09处CALL来到:+ t9 R+ @3 A0 w7 }4 ~# U, `
004030A0 6A FF push -1 //一路F8下去~~~~
`. \" t& T% X$ r/ E. X2 h3 y004030A2 68 C88F4400 push qsr.00448FC8
1 p3 L0 e9 ~8 v ]* E) \004030A7 64:A1 00000000 mov eax,dword ptr fs:[0]
) U, U @ L. C% v9 u" S% O/ C004030AD 50 push eax
, w( ` s) _1 G3 m. X% d$ F004030AE 64:8925 0000000>mov dword ptr fs:[0],esp# I' Z+ ?6 m# U) H
004030B5 83EC 24 sub esp,24/ H" d+ Z- _: d7 h9 _- u! m" c0 G
004030B8 53 push ebx
6 u( n. i s9 X' g# ^! ^004030B9 55 push ebp0 }* {' ]2 H, j/ k* G ?' B
004030BA 56 push esi
3 B+ m0 m$ B! s004030BB 57 push edi
7 j0 g4 G" M! U7 ]" t004030BC 68 28E24500 push qsr.0045E228 ; ASCII "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
7 W7 F6 Q A$ A' u |5 P$ q/ Y: T- d004030C1 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
& k: |5 x: {* b' U" s. A) m004030C5 C74424 40 01000>mov dword ptr ss:[esp+40],1
: u6 ]' c3 C' F* n004030CD E8 27C40200 call qsr.0042F4F9
( ]9 a& S3 c% a& Y! S. s8 {0 J004030D2 A1 38F44500 mov eax,dword ptr ds:[45F438]
2 `4 v/ V" }- r7 R9 F. k) N004030D7 894424 2C mov dword ptr ss:[esp+2C],eax% H! a$ D6 Q2 L5 ?$ M
004030DB 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
; ?8 Z) C& Y" q% r004030DF C64424 3C 03 mov byte ptr ss:[esp+3C],3
4 g" C. X' B5 }* h1 ]004030E4 E8 905A0200 call qsr.00428B798 H/ L4 ?; |$ y1 {! M8 ]. b# q6 \
004030E9 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
3 x3 v. v' p0 d% i004030ED E8 3B5A0200 call qsr.00428B2D: r. r& L) O3 {# _/ p, a6 y
004030F2 8D4C24 44 lea ecx,dword ptr ss:[esp+44]" L" s0 s' P# I, V, ?/ S$ Z
004030F6 E8 7E5A0200 call qsr.00428B79
8 n0 p- H# r& E" U( N004030FB 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
Y1 ^' W6 S5 k. E7 \7 a* O3 a004030FF E8 295A0200 call qsr.00428B2D
! T4 R% E& T t00403104 8B4C24 48 mov ecx,dword ptr ss:[esp+48]
8 ~7 Y, x0 C6 G00403108 8B41 F8 mov eax,dword ptr ds:[ecx-8]
3 i' y6 {( s. \0040310B 83F8 02 cmp eax,2
- B2 t0 ]3 a/ W" a+ ^& z0040310E 0F8C 4F030000 jl qsr.00403463 ; 用户名小于2就跳
1 a) a9 e4 H# o' a4 u00403114 8B5424 44 mov edx,dword ptr ss:[esp+44]
' t* [; S2 E% y8 d00403118 837A F8 18 cmp dword ptr ds:[edx-8],18+ o# L& K: @7 K: w
0040311C 0F85 41030000 jnz qsr.00403463 ; 注册码不等于18(16进制)就跳. k' M2 D$ S, D5 y3 w
00403122 8D4424 30 lea eax,dword ptr ss:[esp+30]: m) D1 c& m# D# [. B+ g0 Y
00403126 6A 01 push 1& w p; P7 H' z
00403128 50 push eax
3 L4 e2 Y; F- v. a/ ~" Q00403129 8D4C24 50 lea ecx,dword ptr ss:[esp+50]/ n- h; G5 R3 f2 d, {' B
0040312D E8 C4550200 call qsr.004286F63 n) w) g, s; j6 c _
00403132 8B00 mov eax,dword ptr ds:[eax]
. D4 L7 a& p- u, l5 A" @; Q/ K8 b) t00403134 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
. b5 I9 {1 y( b' f; o00403138 50 push eax2 `+ L/ X9 L. B s& V
00403139 C64424 40 04 mov byte ptr ss:[esp+40],4
$ r" }) o4 J" @0040313E E8 4D560200 call qsr.00428790- x# f: m; T% H4 Y* z, Z2 ]
00403143 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
z+ _/ `2 {9 u, C1 J& S, [9 {- l00403147 8BF0 mov esi,eax
' i6 B7 u, T# o6 s( y- p00403149 C64424 3C 03 mov byte ptr ss:[esp+3C],3
) n8 U! c$ M' x0 J0 r$ | D0040314E E8 38C30200 call qsr.0042F48B
9 M+ _& i: N" j9 o8 Y00403153 8D46 0A lea eax,dword ptr ds:[esi+A]% z% S' K. E0 @9 {: E
00403156 B9 3E000000 mov ecx,3E
& o2 O- a! P7 C5 e1 f2 Y% N0040315B 99 cdq
* N& E5 ]# A _' w3 m) f0040315C F7F9 idiv ecx# a. w# }3 z4 f0 S
0040315E 6A 01 push 1; q' _/ b3 L1 u9 x( d2 J
00403160 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]- V* @& e% D! T! V' z. Q
00403164 8BF2 mov esi,edx u- Z d% W, J$ g
00403166 8D5424 34 lea edx,dword ptr ss:[esp+34]
; ]. T! G8 M* t& v" N0 u0040316A 52 push edx
& k/ j8 k M8 q0 h/ B8 X T' e0040316B E8 0A550200 call qsr.0042867A( E5 K7 i1 X+ }+ B
00403170 8B00 mov eax,dword ptr ds:[eax]
! Z% y& [/ c/ E; C Y: j: H& b [! S/ r00403172 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
( I+ }$ [: X$ K5 q3 `7 i/ G00403176 50 push eax
+ d: A* j2 p' S# K2 M00403177 C64424 40 05 mov byte ptr ss:[esp+40],5+ b( c3 c8 P3 h, E4 i
0040317C E8 0F560200 call qsr.00428790, ?/ J4 x0 u& l- t) F
00403181 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
7 |- g' D8 G+ o& m6 b3 ~00403185 8BF8 mov edi,eax
0 V6 f# c( W/ J$ G2 c+ l, x00403187 C64424 3C 03 mov byte ptr ss:[esp+3C],30 f% p2 w6 a/ Q+ {8 e/ J7 j' q1 i
0040318C E8 FAC20200 call qsr.0042F48B
! N) ~$ O9 L4 W( f00403191 8D47 0A lea eax,dword ptr ds:[edi+A]
: S! D: s: p. a00403194 B9 3E000000 mov ecx,3E8 W$ D5 @5 z( z L( c* ?5 a
00403199 99 cdq: j) v9 O% |4 @" O- l
0040319A F7F9 idiv ecx p0 K; t- D& i6 l9 e9 f" F
0040319C A1 38F44500 mov eax,dword ptr ds:[45F438]5 e3 H: u" C2 ]% M* _7 y
004031A1 894424 28 mov dword ptr ss:[esp+28],eax6 a( j2 l4 g+ O1 r4 G& C/ Q2 H8 d. e
004031A5 8BCA mov ecx,edx" S; r6 |$ _1 m' w, W, m' w
004031A7 894424 24 mov dword ptr ss:[esp+24],eax
& K2 y/ |/ D# P# e- ^, x004031AB 894424 1C mov dword ptr ss:[esp+1C],eax5 n" A9 B [5 a1 a. e6 b' n
004031AF 894424 18 mov dword ptr ss:[esp+18],eax' M7 b/ k1 s% b3 Z Z$ w
004031B3 894424 14 mov dword ptr ss:[esp+14],eax
: w) G2 u d; w" J. U004031B7 894424 10 mov dword ptr ss:[esp+10],eax ~6 U6 J& k/ A. A& O, K& B
004031BB 8BC1 mov eax,ecx
) G" v( Q. @+ B; w) l004031BD BF 0A000000 mov edi,0A
5 A4 d% {( n& t004031C2 99 cdq& D: \7 M) c4 f( d, P; B3 f, a7 a
004031C3 F7FF idiv edi
/ y# ^; K; g0 o( o. W5 ^/ P004031C5 8BC1 mov eax,ecx/ ^: b' x* B( b: F% D8 H& g5 |
004031C7 B3 0B mov bl,0B' {9 f( u5 \4 C* D3 E I
004031C9 0FAFC1 imul eax,ecx: @7 ], f/ A+ n( t) b! x- @" H
004031CC 8BCF mov ecx,edi
7 ?- A0 J l8 V# s5 X, B004031CE 885C24 3C mov byte ptr ss:[esp+3C],bl
0 N* m; q0 S% j2 l! E4 y' j$ l2 [1 P004031D2 52 push edx
: U: j# X- M5 b2 T, a& x6 Z004031D3 99 cdq
2 p2 |! `2 c! `2 v004031D4 F7F9 idiv ecx' |) {9 I/ `) E W' Y! C
004031D6 8D04F5 00000000 lea eax,dword ptr ds:[esi*8]0 q: k1 n6 T4 N# h; N
004031DD 2BC6 sub eax,esi7 w# Y- ~8 ^! I9 B
004031DF 52 push edx
- P0 I6 w5 F) e. M! ?0 C2 v0 U: b) A004031E0 99 cdq
$ p/ G' H( K- M/ p! I004031E1 F7F9 idiv ecx
|: V! a% J7 T% F2 E9 s: S3 ^004031E3 8BC6 mov eax,esi
7 r) B& n% {6 G6 E- v- u004031E5 52 push edx
0 {: Z% Q+ [5 @" M; d5 R/ Y! p004031E6 99 cdq! B& m1 ]% ~( c. }2 d0 \- B
004031E7 F7F9 idiv ecx2 u k) J0 r! Q }$ g5 X5 U) t
004031E9 52 push edx: B: W( ^: X& t# M1 U
004031EA 8D5424 38 lea edx,dword ptr ss:[esp+38]
' S f3 j" u0 a% \( d) v" s1 j, \004031EE 68 1CE24500 push qsr.0045E21C ; ASCII "%d%d%d%d"6 Y4 p' S4 R( | [, S
004031F3 52 push edx$ R: y, `, [4 z9 k' y: V( E
004031F4 E8 D8580200 call qsr.00428AD1 //由我们的用户名得到一个4位数,我的是48935 }2 I3 Y% U: Y W( U2 Y/ S
004031F9 83C4 18 add esp,18( A6 Z/ D2 L) [1 [2 [
004031FC 6A 04 push 46 T7 A8 v, _( \2 N; @; x f
004031FE 8D4424 34 lea eax,dword ptr ss:[esp+34]
2 |8 w3 a, ^8 y, I00403202 6A 00 push 0
+ Y6 T5 u" Z5 h2 {, u# I00403204 50 push eax- j7 N; e+ |8 k1 Y7 m) J1 t
00403205 8D4C24 50 lea ecx,dword ptr ss:[esp+50], O# G+ B" d! D% R( s7 d
00403209 E8 D6530200 call qsr.004285E47 ?% {6 i( M7 Z9 Q$ e& Q' J
0040320E 50 push eax
( R, h! H" q v7 f9 _0040320F 8D4C24 28 lea ecx,dword ptr ss:[esp+28]( C8 e' q6 B9 K' }: \
00403213 C64424 40 0C mov byte ptr ss:[esp+40],0C' E4 c( z; W9 r$ u/ ?. R/ ]/ t
00403218 E8 A7C30200 call qsr.0042F5C4
: b4 {+ _4 B/ R6 K7 I/ Z$ H3 T5 X* ]0040321D 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' l c, |% v) k' z0 ]2 T5 j) I6 ^
00403221 885C24 3C mov byte ptr ss:[esp+3C],bl. r8 g' S. E4 k
00403225 E8 61C20200 call qsr.0042F48B
* A) u# p) a2 X) N1 \7 \0040322A 6A 04 push 4
0 `# G6 i) ~* r& ]5 l s" V0040322C 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
5 m V. V4 r( O* z3 J00403230 6A 05 push 5
0 ^4 f: B4 r) `/ D- T" _8 O00403232 51 push ecx! M! M& M4 F" `- r/ F
00403233 8D4C24 50 lea ecx,dword ptr ss:[esp+50]- z& _; P6 K3 O; v9 P$ c4 @
00403237 E8 A8530200 call qsr.004285E42 v% [ l0 Z6 G7 @ [4 K" V
0040323C 50 push eax" p" O+ r7 W q6 z6 _! @! C ?
0040323D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]" l+ {+ ^/ m. ^( W1 g6 {/ h
00403241 C64424 40 0D mov byte ptr ss:[esp+40],0D- h, G; u& R/ N3 \" _9 d
00403246 E8 79C30200 call qsr.0042F5C4
$ D* o! l" u# b5 Z1 N0040324B 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
; Q4 @9 C/ u* I/ Z2 {2 q3 b5 B0040324F 885C24 3C mov byte ptr ss:[esp+3C],bl
6 b! e' p, S- W7 y% T' X00403253 E8 33C20200 call qsr.0042F48B \0 S8 Y! T: k8 k8 }5 A- K8 V
00403258 6A 04 push 4
3 T- l# U3 }/ F6 [2 ]9 T& f0040325A 8D5424 34 lea edx,dword ptr ss:[esp+34]
) Z6 C) e6 P3 q+ D1 o9 v0040325E 57 push edi
o( w8 V9 y4 _0040325F 52 push edx
! r& \. h/ b/ m( w+ G) S6 X4 ~ J00403260 8D4C24 50 lea ecx,dword ptr ss:[esp+50]
6 s3 ?) t( U, S. e( h00403264 E8 7B530200 call qsr.004285E4
) o. \4 \6 w/ Q7 M0 v! a- D00403269 50 push eax0 h! Y9 K) r% Z9 e$ V+ `
0040326A 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]2 a, \3 J! c9 L) o7 J% b
0040326E C64424 40 0E mov byte ptr ss:[esp+40],0E6 q' d! c- s9 t8 R
00403273 E8 4CC30200 call qsr.0042F5C4
, B+ b, V8 n1 m. [% l# w00403278 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
( M" t C5 J: F% V5 p0040327C 885C24 3C mov byte ptr ss:[esp+3C],bl
9 a: f( c, Q7 W* ]" M00403280 E8 06C20200 call qsr.0042F48B
4 l2 G( d$ N/ j8 R00403285 6A 04 push 4! G. m# M# m+ d) G7 N
00403287 8D4424 34 lea eax,dword ptr ss:[esp+34]
. F" S8 V5 ?) q/ v/ ]0040328B 6A 0F push 0F
" K, q0 w4 C3 _0040328D 50 push eax
" J( f% z- X7 s# v5 T [2 @/ r0040328E 8D4C24 50 lea ecx,dword ptr ss:[esp+50]" a$ [5 v# A" B2 M0 P) o
00403292 E8 4D530200 call qsr.004285E4$ Q4 i' s, f, V' o0 X
00403297 50 push eax. D2 `. t3 r) _7 S+ v
00403298 8D4C24 18 lea ecx,dword ptr ss:[esp+18]7 O* }+ d9 g) w5 W1 o/ k: Z
0040329C C64424 40 0F mov byte ptr ss:[esp+40],0F% I; `8 l2 V/ n7 l$ E8 h
004032A1 E8 1EC30200 call qsr.0042F5C49 a/ T7 G9 {7 R( V
004032A6 8D4C24 30 lea ecx,dword ptr ss:[esp+30]
1 N5 T- j/ X3 \& A: J6 _9 D8 u004032AA 885C24 3C mov byte ptr ss:[esp+3C],bl( D/ w3 [/ k6 x' C; b. ?
004032AE E8 D8C10200 call qsr.0042F48B1 I6 M: w( l: S2 q: o: Y3 ]% r6 H
004032B3 6A 04 push 4
+ c% @% g) c( X7 L004032B5 8D4C24 34 lea ecx,dword ptr ss:[esp+34]
9 l) F& H* P. L9 R004032B9 6A 14 push 14
( [+ V% g; p3 R+ c004032BB 51 push ecx
, w& O- `6 r/ A# L004032BC 8D4C24 50 lea ecx,dword ptr ss:[esp+50]( q% _! }& H' \0 g9 n
004032C0 E8 1F530200 call qsr.004285E4
, V1 a& k! x5 J7 @004032C5 50 push eax
0 Q0 d/ {7 ]# p: Y q2 J, T. \004032C6 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
+ ^& }. V0 x ?004032CA C64424 40 10 mov byte ptr ss:[esp+40],10
% @( f3 [6 U8 q3 b- D) ^: _ a F) Y004032CF E8 F0C20200 call qsr.0042F5C4/ d# r' L* t. I4 Z5 X& o
004032D4 8D4C24 30 lea ecx,dword ptr ss:[esp+30]' `+ [+ u: s1 N( S
004032D8 885C24 3C mov byte ptr ss:[esp+3C],bl
' l' K# n3 r& R$ X( Q004032DC E8 AAC10200 call qsr.0042F48B0 h) B2 |$ a! W. Y
004032E1 8B7424 24 mov esi,dword ptr ss:[esp+24] ; 注册码1到4位送ESI
5 M9 U% R- \# E( R5 X" o004032E5 8B4424 28 mov eax,dword ptr ss:[esp+28] ; 4893送EAX
3 r5 M8 l; Z% m. s004032E9 8A10 mov dl,byte ptr ds:[eax] ; [eax]送DL
, V: R0 \/ ]/ |$ k: ?004032EB 8A1E mov bl,byte ptr ds:[esi] ; [ESI]送BL
" I+ Y- D2 G# _1 f+ Y004032ED 8ACA mov cl,dl ; DL送CL$ r( B# T# S. R+ h4 U" m1 C0 X3 l
004032EF 3AD3 cmp dl,bl ; DL和BL比较
: {6 u/ l) D3 j' C4 O. J004032F1 75 1E jnz short qsr.00403311 ; 不等就跳(不能跳); k) G( _" Q: z5 Z& M
004032F3 84C9 test cl,cl9 c1 j/ _/ \5 }1 N! F! z$ o
004032F5 74 16 je short qsr.0040330D
4 ^& @+ B0 U. S. k6 j3 F6 `004032F7 8A50 01 mov dl,byte ptr ds:[eax+1] ; [eax+1]送DL
( ]1 W) A2 z9 ]( j1 ?; G) c$ g004032FA 8A5E 01 mov bl,byte ptr ds:[esi+1] ; [esi+1]送BL
, i& n2 c( X; W1 B3 w* d' N004032FD 8ACA mov cl,dl& s8 m% X& e( [- f5 s
004032FF 3AD3 cmp dl,bl ; DL和BL比较
" f0 c% y# p- n7 z5 F00403301 75 0E jnz short qsr.00403311 ; 不等就跳(不能跳)7 M9 G( p2 B7 k; X/ V1 t
00403303 83C0 02 add eax,2 ; EAX加2; U6 c- D, ?# t( L# o
00403306 83C6 02 add esi,2 ; ESI加27 F# @7 I) N0 g) }) s9 l
00403309 84C9 test cl,cl
- E% Y$ U# D% w1 N) i5 X0040330B ^ 75 DC jnz short qsr.004032E9: s* z C0 [7 L# b$ D1 z4 r
0040330D 33C0 xor eax,eax
$ ?& o( u, d1 N+ q" f0040330F EB 05 jmp short qsr.00403316- S w3 `. a S3 T; C$ k& s9 L) ?
00403311 1BC0 sbb eax,eax
. i2 J, ]" S2 j e: J+ P$ ?00403313 83D8 FF sbb eax,-1
' b: Y6 A% W# v2 k( ^1 Q9 f00403316 85C0 test eax,eax* G) j+ X9 g4 J2 U3 h# O" s# h
00403318 74 0E je short qsr.00403328
+ |" B5 A2 y- J0 K0 c/ T/ N5 c0040331A C64424 3C 0A mov byte ptr ss:[esp+3C],0A
, |7 @# F0 E) y; Y) {" _0040331F 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
" B! n, x4 w B1 r: ~# X* \( W00403323 E9 F0000000 jmp qsr.004034186 X; b; n6 o7 @! L8 k
00403328 8B4424 1C mov eax,dword ptr ss:[esp+1C] ; 注册码6到9位送EAX. Q+ S: a1 G* Y7 H
0040332C 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
1 ?% X; V: H3 J; p. c) V \+ |00403330 8B40 F8 mov eax,dword ptr ds:[eax-8]! D. Z5 z' A7 G" V: `+ C* Y
00403333 50 push eax
/ z# A/ q0 ^ u. V00403334 E8 82C50200 call qsr.0042F8BB ; 注册码6到9位送EAX
/ D: }9 ^! U* z# w7 t6 U) ?00403339 50 push eax
/ s; s. h+ o( k0040333A E8 466D0100 call qsr.0041A085 ; 注册码6到9位转换成16进制送EAX# H9 H5 Y {" u! l/ c- u" X3 H9 e
0040333F 8B4C24 1C mov ecx,dword ptr ss:[esp+1C] ; 注册码11到14位送ECX7 {& h4 n5 W* J+ A4 I4 k3 ~
00403343 83C4 04 add esp,4
. x0 c" N9 \# @9 k5 B. Y1 w3 b1 j00403346 8BF0 mov esi,eax ; 注册码6到9位的16进制送ESI3 P3 ^: o: A3 Z# Y& i" q+ ^
00403348 8B41 F8 mov eax,dword ptr ds:[ecx-8]
7 b" m5 T: O0 N9 V& j- E0040334B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
: x/ ?4 }& b; n* Q$ P3 f0040334F 50 push eax% O+ @2 ]3 U" z, i7 u
00403350 E8 66C50200 call qsr.0042F8BB ; 注册码11到14位送ECX
1 t6 _ F, `0 C- M$ |2 @; J$ z00403355 50 push eax
& T, a. I+ [' G7 c, ]00403356 E8 2A6D0100 call qsr.0041A085 ; 注册码11到14位转换为16进制送EAX* p" W2 H$ W) P: {6 D! [
0040335B 8B5424 18 mov edx,dword ptr ss:[esp+18] ; 注册码16到19位送EDX' p9 j4 Z& s* \4 T8 V
0040335F 83C4 04 add esp,4. G( m: p1 J. s
00403362 8BF8 mov edi,eax ; 注册码11到14位的16进制送EDI: g7 O* O/ i2 G, ]) b- `
00403364 8D4C24 14 lea ecx,dword ptr ss:[esp+14]! A- G6 K8 I3 u) ]8 Y5 O5 T3 Y' W
00403368 8B42 F8 mov eax,dword ptr ds:[edx-8]
' x' |( L* d. w& i0040336B 50 push eax8 P4 C, `( ^+ E% J& B
0040336C E8 4AC50200 call qsr.0042F8BB ; 注册码16到19位送EDX; h/ U) }5 o" t8 D( b- m
00403371 50 push eax7 @- i f& w6 k. h: ]- G
00403372 E8 0E6D0100 call qsr.0041A085 ; 注册码16到19位转换成16进制送EAX3 }" w" |! \, W* q4 H
00403377 8BD8 mov ebx,eax ; EAX送EBX
: ]- x1 Z/ E/ ?00403379 8B4424 14 mov eax,dword ptr ss:[esp+14] ; 注册码21到24位送EAX6 `7 V7 }) g4 T0 V' G
0040337D 83C4 04 add esp,4
, b8 V2 ]- G; o00403380 8D4C24 10 lea ecx,dword ptr ss:[esp+10]8 v+ d" n6 @6 e2 K& v+ G
00403384 8B40 F8 mov eax,dword ptr ds:[eax-8]& u% ^3 [1 C8 z; K
00403387 50 push eax0 q# \& o. s1 C- }" @0 U" v
00403388 E8 2EC50200 call qsr.0042F8BB ; 注册码21到24位送EAX J9 f5 O0 K* U C
0040338D 50 push eax# x) K# H' \: O6 I+ A
0040338E E8 F26C0100 call qsr.0041A085 ; 注册码21到24位转换成16进制送EAX
/ { w8 T3 h8 \3 Q+ i0 {* o00403393 83C4 04 add esp,43 X2 _; P7 ^. S" C8 d- }0 a1 C
00403396 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
6 I! a7 _' q# u$ J* \0040339A 8BE8 mov ebp,eax ; EAX送EBP
J- X. s# h6 B( o0040339C 6A FF push -1
, J# W$ e- L7 Z& h5 L0040339E E8 67C50200 call qsr.0042F90A ; 注册码6到9位送ECX,长度送EAX
. D7 v! w2 O$ D8 {9 e I( {) d4 |004033A3 6A FF push -1
$ V$ G" d& Q+ J! r# g004033A5 8D4C24 1C lea ecx,dword ptr ss:[esp+1C] ; [esp+1C]送ECX
# O9 ?# s4 `( {004033A9 E8 5CC50200 call qsr.0042F90A ; 注册码11到14位送ECX,长度送EAX/ _# R4 ?# u( ^$ W
004033AE 6A FF push -1* K7 [) N _" w* Z. z% U" i( p
004033B0 8D4C24 18 lea ecx,dword ptr ss:[esp+18] ; [esp+18]送ECX9 B d+ y- v* ?) k' d$ C. a$ {
004033B4 E8 51C50200 call qsr.0042F90A ; 注册码16到19位送ECX,长度送EAX* g+ k, V1 B) k6 ~0 t! u7 J
004033B9 6A FF push -1
, I/ z4 \/ y" S& [( \- z004033BB 8D4C24 14 lea ecx,dword ptr ss:[esp+14] ; [esp+14]送ECX
- p9 f9 z3 {" h+ i% I: h004033BF E8 46C50200 call qsr.0042F90A ; 注册码21到24位送ECX,长度送EAX% _9 ~5 ~3 H/ s! J+ M$ [
004033C4 8D8CB6 04AB0000 lea ecx,dword ptr ds:[esi+esi*4+AB04] ; [esi+esi*4+AB04]送ECX; ]+ ^9 b. ~7 k9 Z5 B' x# K
004033CB 8D844E 34220000 lea eax,dword ptr ds:[esi+ecx*2+2234] ; [esi+ecx*2+2234]送EAX
/ n9 j! A" j: O+ f+ H5 e3 w004033D2 B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
9 w4 j! d& t) z$ _004033D7 D1E0 shl eax,1 ; EAX左移1位/ c" X+ b5 K+ T( \4 Z
004033D9 99 cdq ; EAX扩展- g9 W& [3 F9 Q* M) B
004033DA F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中
( i/ N2 w! R8 k0 O& O B% A) B004033DC 3BFA cmp edi,edx ; EDX和注册码11到14位的16进制比较* F$ w( `. {) @. X/ q. W) Y
004033DE 74 0B je short qsr.004033EB ; 相等就跳(必须跳)
. f/ Y! g P. n9 f) f004033E0 C64424 3C 0A mov byte ptr ss:[esp+3C],0A: D& _ b4 X# k7 P) }& Y
004033E5 8D4C24 10 lea ecx,dword ptr ss:[esp+10]
+ l$ u$ C! n* I* k2 s% z8 D* l004033E9 EB 2D jmp short qsr.00403418
; w; O& K- q' n k004033EB 8D83 CAEAFFFF lea eax,dword ptr ds:[ebx-1536] ; [ebx-1536]送EAX
: w2 t* h3 `8 W" @9 k9 v* i: C O004033F1 81C3 E2090000 add ebx,9E2 ; 16到19位注册码16进制加9E2
9 M; f8 R# W" m# r1 W004033F7 99 cdq ; EBX扩展
$ Z' s4 K6 O) D0 `" o" |' G004033F8 33C2 xor eax,edx ; EAX和EDX取异或; |. [" ~+ z& B
004033FA B9 10270000 mov ecx,2710 ; 2710(10进制的10000)送ECX
' g4 j* V* y9 L5 @) u @9 J, w004033FF 2BC2 sub eax,edx ; EAX减去EDX' @6 z$ Y) [/ h& `, x
00403401 C64424 3C 0A mov byte ptr ss:[esp+3C],0A ; 0A送[esp+3C]3 _6 k( ~+ p+ ^4 f: L. L
00403406 0FAFC3 imul eax,ebx ; EAX乘以EBX
1 q" G# O! `$ A' ~: i1 {5 W% M1 N00403409 99 cdq A6 ?0 {+ {1 N0 \$ ~
0040340A F7F9 idiv ecx ; EAX除以ECX,商在EAX中,余数在EDX中" ^/ `0 d8 Y( `& s! h% X: @
0040340C 8D4C24 10 lea ecx,dword ptr ss:[esp+10] ; [esp+10]送ECX
* z9 |% C; V, V+ [00403410 3BEA cmp ebp,edx ; 注册码最后4位和EDX比较
7 d& A3 Z( g- O# H00403412 0F84 8D000000 je qsr.004034A5 ; 等就跳(必须跳)6 ]1 R3 U1 G5 \- k% s
00403418 E8 6EC00200 call qsr.0042F48B ; 8 n# W- P j( O3 w6 k- h( X) N+ m
0040341D 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
" \' f; F& B4 Y* q' A1 I00403421 C64424 3C 09 mov byte ptr ss:[esp+3C],94 G% D* f0 L, i3 M. B0 P
00403426 E8 60C00200 call qsr.0042F48B% O) }* x: h4 ^: Y( k% F- K6 G
0040342B 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
/ W- z# ?; W/ {# k( E( y0040342F C64424 3C 08 mov byte ptr ss:[esp+3C],83 J7 _& c0 b$ J# o
00403434 E8 52C00200 call qsr.0042F48B
% {2 n6 ?5 d! y6 z6 |/ F) F00403439 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]- w1 C+ S5 s, n5 T" Q# e
0040343D C64424 3C 07 mov byte ptr ss:[esp+3C],7+ S6 P7 t S' s& p& G' _: o& m
00403442 E8 44C00200 call qsr.0042F48B
* i6 N) p$ Q2 p00403447 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
, g4 F, V+ F# n+ U0040344B C64424 3C 06 mov byte ptr ss:[esp+3C],62 q# o$ A) |& q9 W
00403450 E8 36C00200 call qsr.0042F48B0 [* }5 l4 Y: ?& e5 Y
00403455 8D4C24 28 lea ecx,dword ptr ss:[esp+28]& E1 o4 @; a; i: g- v2 ^- x5 | `
00403459 C64424 3C 03 mov byte ptr ss:[esp+3C],3
9 z; ~2 P4 c. |% i0040345E E8 28C00200 call qsr.0042F48B
( M; R% r7 b* }* M4 }; @. L" p00403463 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]
2 U6 g! {( Y% J& A+ Y00403467 C64424 3C 02 mov byte ptr ss:[esp+3C],2
3 [$ m, E6 v1 u- p, b' c0040346C E8 1AC00200 call qsr.0042F48B4 O. E G1 I- P4 G% _
00403471 8D4C24 20 lea ecx,dword ptr ss:[esp+20] Q1 V4 l v, p, V- P u s# ]2 e
00403475 C64424 3C 01 mov byte ptr ss:[esp+3C],1* {8 {" o) r' E L
0040347A E8 0CC00200 call qsr.0042F48B
{4 t% L" Z' a7 I `& d; R5 v: P# y0040347F 8D4C24 44 lea ecx,dword ptr ss:[esp+44]# T8 w4 m5 R8 G/ E3 h: B
00403483 C64424 3C 00 mov byte ptr ss:[esp+3C],0- z8 P, K+ |+ M) }- P
00403488 E8 FEBF0200 call qsr.0042F48B
7 \ G1 V0 @. A7 a5 @! T* g0040348D 8D4C24 48 lea ecx,dword ptr ss:[esp+48]7 z2 W& F, r# Q
00403491 C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-13 d" Z) a4 K: d7 ]; n
00403499 E8 EDBF0200 call qsr.0042F48B+ [$ y8 u) q' D* C6 _% i
0040349E 32C0 xor al,al ; AL清03 d# k. R5 u ?- E% d+ [# M
004034A0 E9 88000000 jmp qsr.0040352D
8 l/ Z5 E, ?) `5 W004034A5 E8 E1BF0200 call qsr.0042F48B //以上两处均跳则来到这里,F8下去~~~~~~~~
) y0 k* S# E1 n( y: }6 m004034AA 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
( N6 f- v8 C3 u004034AE C64424 3C 09 mov byte ptr ss:[esp+3C],9: V! X0 r) j' t+ K9 h/ S; C$ {) w
004034B3 E8 D3BF0200 call qsr.0042F48B
8 O! r) K2 B# l \004034B8 8D4C24 18 lea ecx,dword ptr ss:[esp+18]( c. S& D, S0 U4 e/ O( ?1 V/ e
004034BC C64424 3C 08 mov byte ptr ss:[esp+3C],8" {) _* N+ h1 r* Z/ i( v
004034C1 E8 C5BF0200 call qsr.0042F48B7 T6 _3 J! f! e! n1 k
004034C6 8D4C24 1C lea ecx,dword ptr ss:[esp+1C]
4 o- L9 ~; U* S! i004034CA C64424 3C 07 mov byte ptr ss:[esp+3C],7
4 i& g2 j6 p% M' U2 R4 k: }: [/ o004034CF E8 B7BF0200 call qsr.0042F48B
, y: O: T- r! m5 f8 e. _004034D4 8D4C24 24 lea ecx,dword ptr ss:[esp+24]
; C( u4 z5 h; a. X004034D8 C64424 3C 06 mov byte ptr ss:[esp+3C],6, l X, z+ k4 i- ?: n/ {
004034DD E8 A9BF0200 call qsr.0042F48B5 q3 _9 F: |3 O/ U2 a
004034E2 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
& z; E& Q/ J- G+ x004034E6 C64424 3C 03 mov byte ptr ss:[esp+3C],3- b' E" d, p: U0 f, M, j; F
004034EB E8 9BBF0200 call qsr.0042F48B3 A; A# |/ M! u* W4 _. ^" |
004034F0 8D4C24 2C lea ecx,dword ptr ss:[esp+2C]) ?8 J2 }: Z; r# N9 c. U
004034F4 C64424 3C 02 mov byte ptr ss:[esp+3C],2
* \0 L( U5 M( N) j$ K004034F9 E8 8DBF0200 call qsr.0042F48B+ i( j) W0 D" l) j) h+ b$ }8 k
004034FE 8D4C24 20 lea ecx,dword ptr ss:[esp+20]7 a. E; m$ P, P' I2 `9 |2 ?
00403502 C64424 3C 01 mov byte ptr ss:[esp+3C],1
) A0 t. n4 V9 a* \4 ^$ G- V00403507 E8 7FBF0200 call qsr.0042F48B
6 V- O7 W% G1 ?$ ]' X2 z( F0040350C 8D4C24 44 lea ecx,dword ptr ss:[esp+44]
) n0 P* j2 K6 T00403510 C64424 3C 00 mov byte ptr ss:[esp+3C],0
3 ?! g% n$ G# J/ \00403515 E8 71BF0200 call qsr.0042F48B3 {% ?9 F$ X9 U) G' _, I* n1 j
0040351A 8D4C24 48 lea ecx,dword ptr ss:[esp+48]
2 } E4 S. T7 }' o7 Q7 \0040351E C74424 3C FFFFF>mov dword ptr ss:[esp+3C],-1
' }9 F- Z3 W! t1 R2 M- q* B- J00403526 E8 60BF0200 call qsr.0042F48B
# S$ b: Q3 y) n+ [' J" X% X' B0 r0 y0040352B B0 01 mov al,1+ s [& ]7 ^4 Q; @$ r$ w
0040352D 8B4C24 34 mov ecx,dword ptr ss:[esp+34]4 T5 A" [! t, B1 J( ^
00403531 5F pop edi
5 b( V& K4 w" W# }( L' U00403532 5E pop esi$ L, k* f2 L6 {+ S( X! m/ L% k
00403533 5D pop ebp/ j; z, {5 a. f2 `- z* e* F
00403534 5B pop ebx3 L' o$ {" X: A8 T8 L
00403535 64:890D 0000000>mov dword ptr fs:[0],ecx
8 p3 N( \% I; O v; [& @0040353C 83C4 30 add esp,30
' v5 }0 _; G U, ~5 i' R1 W# ~: e4 @0040353F C2 0800 retn 8
7 F/ r/ G: L* T( M3 s* q--------------------------------------------------------------------------------
; a3 n( i1 Y3 X: i0 P【破解总结】
, _/ w* l1 s3 J2 h4 ^ N3 o# { 用户名必须大于2,注册码必须为24位。注册码前4位由用户名决定,11到14位由6到9位决定,21到24由16到19位决定,5,10,15,20任意^-^8 W$ U! [. k! X3 K# [
用户名:yijun
6 t& \/ q2 Z+ y5 _- U& V6 y4 L注册码:4893*7777*3726*7777*0529
, k8 I4 I+ i/ E0 `--------------------------------------------------------------------------------" _1 H! l5 B' | Z
【版权声明】 本文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢! |
|