|
|
|
【原创】破解图章制作系统
' N$ h# |/ }% R1 I. F3 R日期：2005年5月15日 破解人：yijun[PYG]' d* o0 ]" q- e2 J! W" N
———————————————————————————————————————————. S" {6 ?5 ^. N
【软件名称】：图章制作系统 软件版本：1.0) r/ g6 ]4 `; \8 G6 V
【软件大小】： 252KB
7 [/ o$ @( V K. s8 i m【软件简介】：制作各种图章1 [" X! B* w4 u
【软件限制】：NAG
- p+ Q4 M. k- m* ?& z【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
: g9 c" H0 m, b; J5 i! K7 \【破解工具】：OD,PEID$ @& ?( ^* j5 ], a$ [: ~- a
———————————————————————————————————————————
- W# u& I b" U$ } 6 V7 J2 {, v x( B7 s5 V8 a: |% W
【破解过程】：5 J( W$ @" C# l
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
9 w1 ^0 d. F7 x0 X' HOD载入，通过字符串查找很容易来到这里：
( Y$ v$ e# ?; ~5 E* a9 |" v( h2 H0046ADAC 55 push ebp //在此下断
& ?3 x5 x4 F2 k1 C8 T# m" g0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
w' d/ k( R1 V0046ADB2 64:FF30 push dword ptr fs:[eax]" r/ S- W9 S5 g: r8 m4 A, K
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
- z/ C4 k0 U# U0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8], M- e$ Z; t1 ~
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
8 ~. B6 x/ ]: S) V0046ADC1 8BC6 mov eax,esi
& G- e, O, ?5 D; N+ t& |0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
8 ~. }3 H* t" d7 ^; p! m8 _5 r0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX5 o# R+ N4 }% H# t5 e
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]& `+ r4 W: E* r1 |5 m" X5 U5 L7 {1 Y6 X
0046ADCE E8 45D9F9FF call Unpacked.00408718
" z+ j$ e) u: e A9 W8 y3 F, i0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX' [1 ?% n3 d' M3 V8 m( \
0046ADD6 8BC6 mov eax,esi8 S2 g) Y& g) S- _- m& Y1 y
0046ADD8 E8 3359FDFF call Unpacked.00440710% G9 d' U- d" y; h) h w
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]( i, |. D( N: ]& G2 J
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
0 V0 U: ~$ S1 @% d0046ADE6 E8 F558FDFF call Unpacked.004406E0 f/ R4 G# e( T: [) O
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空$ @$ J; g7 u8 @( e3 Y% T% j9 d7 X
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
9 {! d& F2 [- G" G9 u( g0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX) c2 B$ I8 v# U2 O
0046ADFA B2 01 mov dl,1 ; DL置1
! x' l& V( k) F3 z; B b0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]9 ]- r% _# ~6 K" T
0046AE01 E8 B2AFFFFF call Unpacked.00465DB86 t: ^/ ^+ W7 s8 E' L; e& M" n" ?
0046AE06 8BF0 mov esi,eax8 a5 i# H& `6 Z3 K. U G; Q# L, ~
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
. Q2 \, r( o9 `4 R$ ~0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]( m: r5 Y+ w: H* m" \2 `2 v4 v
0046AE11 E8 CA58FDFF call Unpacked.004406E05 p' w! e5 G, _' C, g8 i O0 s g
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX& t' n# _9 p9 W
0046AE19 50 push eax# V0 ?$ k0 L2 b& x7 U6 }
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
3 }2 j6 f% ~7 x* |9 C+ f5 P2 x0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]4 }. b/ j( y1 k: J) E, Z/ ^3 z) a
0046AE25 8BC6 mov eax,esi
/ a$ d9 R% d& m! k" p1 b; E0046AE27 8B38 mov edi,dword ptr ds:[eax]
3 q5 R: a- Q' f/ q% v0 I: E0046AE29 FF57 04 call dword ptr ds:[edi+4]
7 _- C4 F2 A1 w. O. x1 o0046AE2C 8BC6 mov eax,esi
; Y; V4 U% ]# d3 u6 K# _0046AE2E E8 4587F9FF call Unpacked.00403578- F2 z" t5 S8 K8 A! y4 f9 D. r
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
: ~. }9 t" A$ y3 E0 y0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
/ Z C% H7 E/ Y5 d: Q k* _( K0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）! y) \( ?, R) A
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
1 }' K T7 E# {2 `& {" P0046AE42 6A 00 push 00 Q# ~1 x# Q* `+ }4 r
0046AE44 68 D8AE4600 push Unpacked.0046AED8
: \: G' L, j# \0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
, U: Y; F" `4 p# d( t! G0046AE4E 8BC3 mov eax,ebx/ f+ B: {& I3 \ R( ], M
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8& b8 u& a# @ ?4 t
0046AE55 50 push eax
# `: e0 ~7 F$ I$ D7 ~0046AE56 E8 DDC2F9FF call
3 K! Q( }& Y- i# z0046AE5B EB 20 jmp short Unpacked.0046AE7D6 p! y. L. ?3 n- h; w" E: g
0046AE5D 6A 00 push 04 j. s# e3 [& v6 d. \4 G9 I
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
$ M* S& A' o; E& F" S7 u K0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
" ^* m" x% g5 J; G0046AE69 8BC3 mov eax,ebx4 R; S( r p$ E: C
0046AE6B E8 88BFFDFF call Unpacked.00446DF8# b; r: g1 E/ `9 ?% E9 C$ H
0046AE70 50 push eax& O+ Z& j4 A3 e; H3 K
0046AE71 E8 C2C2F9FF call o3 S( q3 t! Q: D* L1 u
0046AE76 8BC3 mov eax,ebx
- T' e, _/ M( v: T* q* j- X0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
7 t# {8 H* N- v0046AE7D 33C0 xor eax,eax" N! o# H) k# _8 c6 W
0046AE7F 5A pop edx v' ~, e& ~" [8 C/ I% q
0046AE80 59 pop ecx; p7 c" l% @8 A( G
0046AE81 59 pop ecx
! h# O9 U3 M3 x) F0046AE82 64:8910 mov dword ptr fs:[eax],edx
( L$ J0 t D! W" R; ]7 z9 }0046AE85 68 A7AE4600 push Unpacked.0046AEA7
# |' X3 }$ L; ~ T. o0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
' M0 X0 b" L0 J( j0046AE8D BA 03000000 mov edx,37 t( S. m" ~% H0 ?
0046AE92 E8 F594F9FF call Unpacked.0040438C$ W6 [- \! J# C' E" W
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
; E5 J8 T( P( R* y0046AE9A E8 C994F9FF call Unpacked.00404368& O/ }& |& u5 L' j6 ?
0046AE9F C3 retn& Q9 z* _5 l- w+ R; @
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C7 A' L/ m8 L2 A! z7 N
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
: O7 g4 x0 c4 e( O* ^5 a7 [****************************************************************
" J8 F" z& V& s# R' |# t5 P跟进0046AE39处CALL来到：
* ?: ~8 j1 {% W! k6 z/ n: r0046B9F4 55 push ebp
. W* T2 c! h: ?+ ]& W7 u0046B9F5 8BEC mov ebp,esp
# U7 e* z. h5 r0046B9F7 33C9 xor ecx,ecx& W, S1 \* Y/ g. `# c' y# E6 z. u
0046B9F9 51 push ecx2 X' x& q5 [7 T3 F8 c2 l) w c6 k4 b
0046B9FA 51 push ecx
3 R- b% L: h( j( t0046B9FB 51 push ecx
- y0 c7 _( ` S; \$ a0 d+ x' f& Y0046B9FC 51 push ecx' |$ t1 u5 b4 f6 |8 f o1 [
0046B9FD 51 push ecx% v0 e) ]2 ?$ ~8 [2 H5 i
0046B9FE 53 push ebx
, s' @1 ]+ L# H$ [4 f) P8 i0046B9FF 56 push esi
2 h9 c5 l3 [: r& s( M+ G0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax. m" e9 R% c, T) r1 s
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]% b: r4 E3 h9 | B z; O6 D
0046BA06 E8 FD8DF9FF call Unpacked.00404808
3 ^6 h( E6 k! H8 f& X6 m. r0046BA0B 33C0 xor eax,eax3 R+ b" K# l8 O( [6 n* Z! t4 h
0046BA0D 55 push ebp
' S. ~1 Q* |7 C8 @- m- [0046BA0E 68 91BA4600 push Unpacked.0046BA91% m1 Y* J* i5 ]" Z" G& y" j$ L2 O
0046BA13 64:FF30 push dword ptr fs:[eax]
|. r* ~5 i2 H& J& i! N( R) C0046BA16 64:8920 mov dword ptr fs:[eax],esp+ q# W: u# v: e7 }/ h0 D, E
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
7 r* d7 \# m" F+ P- l0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]' ]: {5 I: F2 V1 q( m: q
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ) U! r: {+ D0 T$ A
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]# i& U" |3 y: q0 V- D
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
$ R- W6 Z4 @/ L! K8 Q- F0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进9 ~( \/ e6 S0 Z2 n
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里4 \' k; i J- ^) ~3 f* ?
0046BA34 B2 01 mov dl,1 ; DL置1
2 l4 M/ U6 ^# g. L# n0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08] L. b0 b C* {) J `
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
. ?) m$ b, J0 J0046BA40 8BD8 mov ebx,eax
5 {" f0 |) \5 I7 H+ S0046BA42 6A 00 push 0
' g/ b9 I3 f$ S0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]7 C7 G3 n, ~& l6 I3 a9 y
0046BA47 50 push eax0 l; l" r- X* Y" B) t+ G7 T9 j7 y
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
4 f, J4 s' G6 P' F7 Y# n' K; o+ U0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]1 E4 }# g, u6 f* E
0046BA50 8BC3 mov eax,ebx% w7 i& A( ?# @# D
0046BA52 8B30 mov esi,dword ptr ds:[eax]
) }6 K+ |" [$ M6 `- ]0 U2 w; Y0046BA54 FF16 call dword ptr ds:[esi]7 r+ R' B% Y& o9 ] {5 a1 {5 c
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
" V; K; l7 N9 A7 z0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]3 H6 H5 _+ q0 V3 L9 c- V# g' m
0046BA5C E8 B7CCF9FF call Unpacked.00408718) S |" ?! Y5 W% E4 ]
0046BA61 8BC3 mov eax,ebx/ F) O+ J$ ^, O" D5 c1 z+ E; H
0046BA63 E8 107BF9FF call Unpacked.00403578
# D6 F+ i7 l. B1 ~& G A* g0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
' t Q& e# L& Z3 n1 g; R* g. D' Z- ^0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX% W1 k# p/ ?* B ?# Z' k% B
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~2 O. p" M' o" r( j5 f
0046BA73 0F94C3 sete bl ; 置BL值
4 ?$ t9 d* F0 f- o p: H4 r0046BA76 33C0 xor eax,eax( ?' m9 R. D6 b }) ]! @' a6 p% _
0046BA78 5A pop edx
' E& r7 F! f% b! x7 g6 a ^0046BA79 59 pop ecx* i0 |; U. m" r' ?( ?
0046BA7A 59 pop ecx6 b! F) k1 v- t# S( H* ]- D7 n
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
) \3 i( s3 m) K! \6 j# F0046BA7E 68 98BA4600 push Unpacked.0046BA988 z6 W- w0 v4 W6 Q4 V( z; I8 v
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14] M8 B5 }9 C; G1 y
0046BA86 BA 05000000 mov edx,5
% Y: k1 |- Z) i$ x& }6 u0046BA8B E8 FC88F9FF call Unpacked.0040438C" N' S) h! C, t+ J
0046BA90 C3 retn: Y. i+ G5 E9 w4 J1 F+ q( G
****************************************************************" Y6 g+ e0 B0 W1 J0 d9 t+ M" I) [
跟进0046BA2A处CALL来到：. q/ ~' B: Y2 c( S3 V$ \+ P$ Y
0046B908 55 push ebp
, v* Q' l7 E3 u1 k& I0046B909 8BEC mov ebp,esp; l3 ]( P! ^: C& A% A+ d
0046B90B 83C4 DC add esp,-24
% w. O* ]! J4 T% M0046B90E 53 push ebx
1 \! \' _. h* P/ Z `0046B90F 56 push esi5 O- ?1 ~9 L( g; a
0046B910 33C9 xor ecx,ecx+ L' y+ ^' j7 A, y0 H( j2 W
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
: a6 r) _6 {7 o7 e0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
1 n+ c% N. G- i8 S; H0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx5 p2 A, F8 V! {6 N5 p L6 _
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx' W0 D& P8 M9 P3 N8 C8 X
0046B91E 8BF2 mov esi,edx
0 s) S: q) u* |+ L1 w' G2 u$ S% R0046B920 8945 FC mov dword ptr ss:[ebp-4],eax: c$ ]/ y0 p' [7 [, D6 T
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
. r$ O0 \1 V$ W. y8 c. F0046B926 E8 DD8EF9FF call Unpacked.00404808* ~% F% `2 |% \3 ~
0046B92B 33C0 xor eax,eax
. e& g) p! z4 V) u5 a0046B92D 55 push ebp
% @) N! I% e. @" F0046B92E 68 CEB94600 push Unpacked.0046B9CE
% }: {4 X, @. `" p4 O* H5 m0046B933 64:FF30 push dword ptr fs:[eax]
& K7 w6 P/ A: Q% I! `, ?0 Q0046B936 64:8920 mov dword ptr fs:[eax],esp
8 G# x( ?2 k$ c- x3 W' k4 A5 T0046B939 8BC6 mov eax,esi
: a8 Y; z9 [1 |( y3 B0046B93B E8 288AF9FF call Unpacked.00404368. {$ g5 R% U& l% X! q2 o
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
1 R) _; q- X9 h3 I1 ]/ Y4 S0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX6 h$ x; j$ |; h+ \" J1 l8 U
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
+ ^ z& w; X8 g( p/ ?0046B94B E8 1C8DF9FF call Unpacked.0040466C" b+ U- {, q/ _0 ^1 u! v
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
8 Z, |! O }5 G0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
" I; d5 s/ \4 @0046B956 E8 EDBCFFFF call Unpacked.00467648, W1 ]" I: m# v# ?) D5 B
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]) Z8 P$ A) R+ K4 I" A& {3 i
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]3 @5 {' I# n) b7 [
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
! V' N# E, t6 i* {; o( ^# U0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
! W0 K! B' \) p& x, ]0 s0046B969 E8 FA89F9FF call Unpacked.00404368
8 i6 l+ Y5 q7 f# [. T0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX- G/ k) j3 B% }! E. i
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
& l2 Q0 Y, U: J. ?+ `! b0046B976 8BD8 mov ebx,eax ; EAX送EBX- Z! o( o" Q# V5 a' D
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
' _2 U4 g$ n& U# v6 F& _( r0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳 {: l4 w, P: u5 {; v" u
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
g7 t7 v0 e& r9 Q; q# g0 [0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
- ]7 B6 {2 X5 K+ @( \8 O- ~2 R, e" L0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL- l% N/ w% b* C+ J p4 k! e R
0046B987 E8 BC8BF9FF call Unpacked.00404548! b; f! w N% e$ Y: a. |
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]# S% F/ e' M. A3 w6 F9 j9 _7 ^( I
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
& e9 ?, e2 Y8 E& X: K: l0046B992 E8 918CF9FF call Unpacked.00404628 f! ?! H$ \, @: E6 K
0046B997 4B dec ebx ; EBX减一% v j& H% ~! C; M A+ W
0046B998 85DB test ebx,ebx ; 是否为0
" D% \! Z5 o* i0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。/ P: K* v( T2 v5 f) R
0046B99C 8BC6 mov eax,esi. ~0 ]7 ^$ p* B( \- V; ]
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
M7 l0 U9 ]5 \% n T4 @0046B9A1 E8 168AF9FF call Unpacked.004043BC! I" M1 r& f/ }
0046B9A6 33C0 xor eax,eax! V$ a/ G( \) v( S( E3 ]. c/ \
0046B9A8 5A pop edx
7 Y% \) q0 G: g) d/ e( \: \0046B9A9 59 pop ecx
% D( D$ W" j9 j: T9 M/ N0046B9AA 59 pop ecx- q7 _4 w/ d+ N
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
1 ]1 v {/ d$ Q6 Z$ W9 K0046B9AE 68 D5B94600 push Unpacked.0046B9D5
( [6 z& K& t* P" J7 t6 ]. P0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]$ @, O. m# F# u# l+ p% Q
0046B9B6 BA 02000000 mov edx,2
' J) B2 T) [! z0 ]2 ~, Z0046B9BB E8 CC89F9FF call Unpacked.0040438C. a6 [0 s3 Z) [# B* [6 K
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
4 r ~6 i# q, J$ o! q0046B9C3 BA 03000000 mov edx,3
8 g' ?2 X% o& Z5 h0046B9C8 E8 BF89F9FF call Unpacked.0040438C
) y( E( x( w3 [0 ~ |0 N0046B9CD C3 retn3 z) h6 A+ K( q& H; w+ l7 y
****************************************************************
z: Z* G2 y7 `+ s跟进0046B961处CALL来到：! e& t' n. U8 u9 a5 |4 J' a. B' j$ _
004676BC 55 push ebp
8 P. a! q( Q: Q. ?004676BD 8BEC mov ebp,esp
. w) l* q8 u: u' J- m) n) `004676BF 83C4 E8 add esp,-18/ U# m8 q1 [: ~+ J4 s) Y0 x
004676C2 53 push ebx! U1 B6 K; ?. m; z" a0 Y- v5 L" P
004676C3 56 push esi% ^6 S" m5 f' ]2 B) X
004676C4 57 push edi5 t2 @7 Z- Y9 X2 d5 s4 j# _
004676C5 33C9 xor ecx,ecx0 l9 }- Z5 v' |; L' F4 I' m
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx+ X, ~ I/ ?& Q2 W
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx! C# p" u$ @3 ]4 g, l2 N" A- Y
004676CD 8BF0 mov esi,eax1 d' [- J/ N1 Q
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]0 Z8 o. P" F2 a. [0 h
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
, Q4 \ S' O- K5 k004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
5 I0 }) N5 `. K; E# N004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
- d6 q& [& L# V004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>' `' Q4 P+ U- _* {
004676D6 8BFA mov edi,edx
9 j3 V& p2 N9 ~. H+ C" x004676D8 33C0 xor eax,eax- N9 ~1 A5 B W! v
004676DA 55 push ebp$ ?4 E$ l8 H/ r9 y% e2 q
004676DB 68 57774600 push Unpacked.00467757
' n0 S* G" e* S9 y) G. c1 |004676E0 64:FF30 push dword ptr fs:[eax]' L% u8 ^" J. i+ U
004676E3 64:8920 mov dword ptr fs:[eax],esp; _* Q# O ^* D5 I
004676E6 8BC7 mov eax,edi
# \; N; f- z. ~) w004676E8 E8 7BCCF9FF call Unpacked.00404368
7 p4 ~/ c4 @7 L& w) U& E9 t004676ED B3 10 mov bl,10
# K+ j8 E- g; l8 K2 \% x1 n004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
- V b8 m( Z' c( _ S s* s4 {004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****" Q, j1 |8 s4 i: W
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
, j" x2 M$ |: Q5 G" M7 g! }004676F7 33D2 xor edx,edx
) t, c! x. t* N* F$ o% l& l v004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
5 f' C3 v3 `1 `; ?& `4 x! |004676FB C1EA 04 shr edx,4 ; EDX右移4位
o$ P# B( j! [% r5 E i" j0 j004676FE 83E2 0F and edx,0F ; 和0F与! L; [3 _$ G. S1 |. `4 U
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
0 ^9 [0 k. s0 U+ k$ x00467707 E8 3CCEF9FF call Unpacked.004045482 M$ d; J2 m4 ~/ Z
0046770C FF75 EC push dword ptr ss:[ebp-14]& ], k) u% N) U$ y/ M' N; f
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
- X7 G0 {+ g6 r1 T+ z# m00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
, e8 F3 y: v$ v- X- n- L; t% U00467714 80E2 0F and dl,0F ; DL和0F与
1 @, p( ^ v. ?! @00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
! A8 V# K+ W5 A; \ E0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
" b. G) o# v2 t! j& W00467723 E8 20CEF9FF call Unpacked.00404548
$ [( Q9 @7 {/ E6 O3 C00467728 FF75 E8 push dword ptr ss:[ebp-18]9 M. ]5 y/ t8 r& H) }+ [1 c
0046772B 8BC7 mov eax,edi ; EDI送EAX x3 L8 c# s$ \ Y
0046772D BA 03000000 mov edx,34 r4 f h7 }7 m% @: W6 S
00467732 E8 A9CFF9FF call Unpacked.004046E0; O. a J! b) c( g
00467737 46 inc esi3 P2 V( n4 c0 b( f! @; a" k
00467738 FECB dec bl
' s; ]( d% C& p& h( M0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e& k3 g8 _, G; R, y2 [
0046773C 33C0 xor eax,eax, ~$ w) _6 {& M5 M- J
0046773E 5A pop edx
7 \6 y# v+ E" {( T- T0046773F 59 pop ecx _/ P7 {$ y/ {- }- c# K1 C
00467740 59 pop ecx( w2 f: _1 C6 h
00467741 64:8910 mov dword ptr fs:[eax],edx) f6 k/ y+ \# o/ a' z" `
00467744 68 5E774600 push Unpacked.0046775E
% i: {9 w9 Z$ H$ X" w0 z% ?$ }00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
3 x& W! M: u, W8 I0 E0046774C BA 02000000 mov edx,2* s& T; U/ d& b
00467751 E8 36CCF9FF call Unpacked.0040438C
6 J" M6 s' N, b3 l7 @00467756 C3 retn //返回- L- H6 C p9 p
———————————————————————————————————————————
& v' `, K6 @' l2 m+ `7 p4 ^+ `【Crack＿总结】：
; M) M- o% u1 M9 C! I4 @5 R将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^, p) F" S' k4 Y6 R* s. A, X/ B
机器码：bbba33de56c4cf31d9063cc074248d4b
2 S! `/ V! X$ c1 Z注册码：e807519487d7ad4f57ad42dc87fbb191
# m; U! L; }; l& r附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡