|
|
|
【原创】破解图章制作系统
" c/ D/ H f+ L- d" V. ]% h: O/ Y日期：2005年5月15日 破解人：yijun[PYG]
" Q2 F. c2 c% k7 P———————————————————————————————————————————
% f7 @0 k6 Z4 Q$ C) F% J8 R【软件名称】：图章制作系统 软件版本：1.0" ^3 q0 T- E4 R
【软件大小】： 252KB
) y+ `! i; g3 U% M( V【软件简介】：制作各种图章
2 {; h/ ~5 z3 t" q2 k4 W【软件限制】：NAG
& [! O7 y' }. {2 f【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
! ?) r: J6 h, w+ I4 p) `4 Q【破解工具】：OD,PEID0 R5 ?" q) C3 s+ W& B
———————————————————————————————————————————
: V( t6 L$ d% Y" `
: K# m3 i) p( J4 @5 D6 y【破解过程】：
; ?6 J5 L) o5 Y3 N+ u, c3 G6 UPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
' \' s+ R* a' D8 ] t5 UOD载入，通过字符串查找很容易来到这里：
- ^ Z+ s' N) m8 U. A0046ADAC 55 push ebp //在此下断0 i6 |: C, q4 b
0046ADAD 68 A0AE4600 push Unpacked.0046AEA09 g. m' X1 E/ L& `/ O; d& Q
0046ADB2 64:FF30 push dword ptr fs:[eax]$ t5 @6 M! v/ l7 m+ x
0046ADB5 64:8920 mov dword ptr fs:[eax],esp. F6 E9 u$ C0 t5 P' r
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
1 x- Q( h# y* k9 I, ?6 h. V& f3 F0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]" \5 s, _, `4 \5 Z; L& Z5 K
0046ADC1 8BC6 mov eax,esi
3 x% m2 U" i6 Y0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX0 q2 t; i- g2 l1 H
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
+ i: M' E+ v* x! c6 J& |0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]$ S4 A. F) c& y1 ~ \' t U0 M
0046ADCE E8 45D9F9FF call Unpacked.00408718
/ l$ k! R5 v4 z C0 k" n/ n0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
- ~4 _* b) [: q1 w2 Y( w7 \# P) U0046ADD6 8BC6 mov eax,esi
' z: X8 w6 M! [& ~: Z0046ADD8 E8 3359FDFF call Unpacked.004407105 E9 g" Z: _" _: ^, m
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
( m3 b, G0 u8 j1 Y v0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]$ R! W( b: b6 P8 e8 {' t7 q
0046ADE6 E8 F558FDFF call Unpacked.004406E05 e3 t0 h2 ]/ U6 k8 z/ F0 Y3 B
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
- W+ \" b2 d( W) A+ y0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳0 P' Y1 T! G2 X0 j5 h7 n6 f
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
* B9 u& T: H% z# p4 r( D! h0046ADFA B2 01 mov dl,1 ; DL置1. e; o8 a2 [8 m
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
k+ Y, s- _8 p( F8 ?. y0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
4 k9 y# o. v' L" D3 H0046AE06 8BF0 mov esi,eax
( _' E- ]& c1 b4 Q" F0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]2 D) c+ Y) R+ s1 J
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]. a8 j9 X5 a4 Z+ V! I5 a' S( Y6 Y4 R
0046AE11 E8 CA58FDFF call Unpacked.004406E0
' W+ e/ V$ Z& Y8 a% d% v0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX! \' O# o( r6 D& e9 C# O, X) x
0046AE19 50 push eax( Q' Y' u+ n/ Z& Z) c. U4 e
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX- S: q# r0 t4 l. _- j
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]2 g7 M9 n& `2 ?( K) q. j
0046AE25 8BC6 mov eax,esi1 U- K" q+ N) Q, @- @/ e6 {
0046AE27 8B38 mov edi,dword ptr ds:[eax]1 O! D7 s" \8 j% z4 `
0046AE29 FF57 04 call dword ptr ds:[edi+4]6 C' {; L$ I; z& ?4 |5 B9 x
0046AE2C 8BC6 mov eax,esi
o7 ~$ m' u: Q; Z9 x, w0046AE2E E8 4587F9FF call Unpacked.004035785 G9 i7 y: }% E( J# g
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310] N( a) u" l. W6 ^
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~+ {+ y/ `7 Z8 [. N1 I, Q
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）: u0 K) Z7 c H0 X* B% M
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~9 A1 Q7 z6 n6 n" Y
0046AE42 6A 00 push 0
3 T) o) F3 x, }" L3 g+ n- N: Y0046AE44 68 D8AE4600 push Unpacked.0046AED8/ i9 ~( n* m, f' u! c
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
* m- K5 f" g, Y* f6 Y x8 c0046AE4E 8BC3 mov eax,ebx0 H5 n0 K5 N: \& w p B5 A
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8% k8 R9 k, [# d4 n+ R) g& t
0046AE55 50 push eax S: {. B' x. A
0046AE56 E8 DDC2F9FF call 4 N- \) J( s$ N/ q0 x! |3 G
0046AE5B EB 20 jmp short Unpacked.0046AE7D
1 z! E6 M' ~. `$ ` K: U' }0046AE5D 6A 00 push 0
& G z( }* W9 v0 l$ w) W0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
/ t4 ?* z1 S5 K0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功! A( r3 O7 D% O* X7 `9 }$ t
0046AE69 8BC3 mov eax,ebx$ `% G# o& E y
0046AE6B E8 88BFFDFF call Unpacked.00446DF8. i0 i& O R. j5 }8 O+ [
0046AE70 50 push eax7 K0 W; Q$ D2 J& h
0046AE71 E8 C2C2F9FF call
7 p# e* r; t7 c0 E0046AE76 8BC3 mov eax,ebx
1 U3 B( Q! _4 r9 b0046AE78 E8 7F21FFFF call Unpacked.0045CFFC- _6 y" _! v8 v/ u
0046AE7D 33C0 xor eax,eax6 Y: ^# E5 l: M% G
0046AE7F 5A pop edx
/ _% K8 ~& ^; c* J( S3 ]0046AE80 59 pop ecx" W/ Y. r4 B! E! d" s# f
0046AE81 59 pop ecx
% J: J% s, C1 Y! _+ L0046AE82 64:8910 mov dword ptr fs:[eax],edx4 \; M6 Z; ]' i
0046AE85 68 A7AE4600 push Unpacked.0046AEA7; R2 X5 d5 P. B
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
5 r! Z& G9 u& O v' V/ r0046AE8D BA 03000000 mov edx,3$ f% u" m2 f2 J
0046AE92 E8 F594F9FF call Unpacked.0040438C
( L. Z, x& d$ o' G4 X4 f0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]4 V1 M' e0 f7 } r' m
0046AE9A E8 C994F9FF call Unpacked.00404368- n7 B0 h4 l6 o( A) K2 o# }9 R# C
0046AE9F C3 retn* {/ `( |2 a5 M& i: z
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
+ ~1 l2 r* x2 a+ `5 n& E0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A" q* a, w$ o0 V; }5 Y+ ?# `% g
**************************************************************** _' b, x. V! l# h# \# p
跟进0046AE39处CALL来到：6 n8 L1 D& o6 i2 R$ j
0046B9F4 55 push ebp
3 e# C- D+ @5 _6 X# G7 I( b1 ]# P0046B9F5 8BEC mov ebp,esp1 C( W4 x/ |: h; k; Y7 o& }* x
0046B9F7 33C9 xor ecx,ecx
; `5 {9 _- M1 Y6 g N8 m0046B9F9 51 push ecx [/ M; `( q- S) b
0046B9FA 51 push ecx5 ]) M3 u: L$ d1 O3 H: y9 s1 ^1 j
0046B9FB 51 push ecx3 U+ U6 L2 R8 `
0046B9FC 51 push ecx
0 Z# ?- ]1 L/ h' f1 V7 g0046B9FD 51 push ecx+ h" A$ \ V0 F* _8 Z! n. i
0046B9FE 53 push ebx% z3 I9 U, F, f/ c
0046B9FF 56 push esi
! H0 u4 k# S2 r7 A; e* @0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
3 I3 P# l" t+ \3 b' m: u' H0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
t9 L; @7 j9 I# H E" m6 V0 n0046BA06 E8 FD8DF9FF call Unpacked.004048084 i) M* P& q) J) V8 _7 e
0046BA0B 33C0 xor eax,eax
; ]9 G' l. `7 U/ r+ z0046BA0D 55 push ebp! b2 D6 b( ^3 T( b" b2 i8 ~6 t6 M
0046BA0E 68 91BA4600 push Unpacked.0046BA91
8 f6 }) \( x# |, I0046BA13 64:FF30 push dword ptr fs:[eax]4 _, o" _0 L$ u; ^, f5 d6 ^8 Q
0046BA16 64:8920 mov dword ptr fs:[eax],esp
& D5 s1 t( j; N+ a) I3 B/ }( y0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]- C- A7 H# e9 M/ j0 K0 R) Y9 W" s( j
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
& U1 Z! d* |% O0046BA1F E8 DCFDFFFF call Unpacked.0046B800
) e H( R* E4 K8 t' {" _0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
; d! [- N6 S# `: C: k, i0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX4 H0 h5 W9 B: [- z/ j8 n
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
6 _0 {$ ?8 [; W0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
2 X6 Y) R a$ y+ ?, B Y2 N R0046BA34 B2 01 mov dl,1 ; DL置1
! z& q) J3 u, q- }! q# X0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
" Q6 S+ ^7 I5 A0046BA3B E8 78A3FFFF call Unpacked.00465DB8
/ n0 u$ D+ I5 r4 N9 d9 q7 L0046BA40 8BD8 mov ebx,eax
' R0 o5 c/ m a! M9 B0046BA42 6A 00 push 0
6 j) ~; @* E! L0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
$ V" ~) \5 Z( X3 N0046BA47 50 push eax% } Z! H# G2 e. |, I D
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
6 Y; F, Z+ k# l* X9 ^0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
0 E/ _% h* x. Z0046BA50 8BC3 mov eax,ebx
i# f$ A2 N% m0046BA52 8B30 mov esi,dword ptr ds:[eax]8 x3 W; K- O* \& a# O* ~
0046BA54 FF16 call dword ptr ds:[esi]0 H- o0 g8 [7 s
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
" p7 n4 p! a/ `" B3 E0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]$ I" ^6 M9 m0 Q* K2 u6 Y O6 P
0046BA5C E8 B7CCF9FF call Unpacked.00408718
. R/ _" G9 | w& p0046BA61 8BC3 mov eax,ebx& r- L& }' `5 r) @; ?
0046BA63 E8 107BF9FF call Unpacked.00403578
) ~* M5 j r$ K: k5 O% n8 }0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX% J7 T1 R: y' s
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX5 Y" t9 I- u/ D3 M' ?
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~3 k) g# K D: q
0046BA73 0F94C3 sete bl ; 置BL值
: _4 b9 X6 }- K0046BA76 33C0 xor eax,eax
2 h3 ?+ n5 [3 v$ ]! |0 H" F2 [0046BA78 5A pop edx, E- w& i+ j" J( ^
0046BA79 59 pop ecx
1 F1 b8 |/ \' F3 W0046BA7A 59 pop ecx
3 ]6 B. @+ C3 Y3 j0046BA7B 64:8910 mov dword ptr fs:[eax],edx
- B7 H, P$ a3 O3 [3 \/ ^ H1 t0046BA7E 68 98BA4600 push Unpacked.0046BA98% O1 O( @. Y) }2 B
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
1 h1 C; e: ?9 W' C! K5 H! K0046BA86 BA 05000000 mov edx,5
& W8 X% R5 s$ a0046BA8B E8 FC88F9FF call Unpacked.0040438C9 H5 V% G2 Q8 b! B5 \5 a
0046BA90 C3 retn: Q0 v7 n+ {4 c( u
****************************************************************
" j% o F: a( b! K& U; Y5 R; m7 W |跟进0046BA2A处CALL来到：( V/ A+ T/ l v ]- M k3 h
0046B908 55 push ebp' K; h* `6 X! T$ L3 {, X
0046B909 8BEC mov ebp,esp
1 F9 ~& i" t+ u$ K8 [0046B90B 83C4 DC add esp,-24
( d: K- t0 s. e* B6 G! ]3 Y0046B90E 53 push ebx$ p% ^1 R, ?2 K0 y( K6 ]
0046B90F 56 push esi) B) C4 Y0 q4 l- o5 G" {+ q7 d
0046B910 33C9 xor ecx,ecx
! U" Q# K* q1 ?, L, h W0 q0046B912 894D DC mov dword ptr ss:[ebp-24],ecx2 x7 q: a- K, L. T3 q
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
/ n: d2 G# I5 {! F, N) H; d5 { J0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
% F( L0 H/ z7 w+ G/ @1 F0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
; z, E( ~. ]/ G) d8 l& _) a0046B91E 8BF2 mov esi,edx
9 g, [6 [4 K% P0046B920 8945 FC mov dword ptr ss:[ebp-4],eax5 i) q4 X9 |! P p) f
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
- M- i6 d2 k" Z X0046B926 E8 DD8EF9FF call Unpacked.00404808
& L( ]% l; ^1 d9 x% r( J t! \8 Y0046B92B 33C0 xor eax,eax# ^2 V6 Z* Q! c4 G4 b/ V9 V4 m: F
0046B92D 55 push ebp C& M9 Q+ x3 ?/ v2 c
0046B92E 68 CEB94600 push Unpacked.0046B9CE
% E, {" a! j ^, L0046B933 64:FF30 push dword ptr fs:[eax]0 e2 ?5 u/ [1 }/ E& n* M; x: K
0046B936 64:8920 mov dword ptr fs:[eax],esp
4 c; |2 d9 m) ?4 h, u6 O. Z8 }0046B939 8BC6 mov eax,esi3 s8 q- G% K- W! \; h: F/ Y9 i
0046B93B E8 288AF9FF call Unpacked.00404368* Y" U$ G& u) R U3 ~
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]6 \+ n2 N- B% L% Y
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX& `$ {/ h9 d2 E2 @9 o# J3 q, ~
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4& `; Q b8 r. V: p" ^; p* H
0046B94B E8 1C8DF9FF call Unpacked.0040466C
: u" M3 q1 U4 E! ^3 p$ c0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
6 b1 m" G# c7 O0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]3 s8 ?+ V: G, R, @
0046B956 E8 EDBCFFFF call Unpacked.00467648( }( i9 {' ^: q) T4 T" f, J
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]5 ~. t, T4 c2 B3 x5 D
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
, H0 I& F/ ]) @/ P: i0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e1 ^& ~% i, r0 O; \
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
% |: D9 {: o1 L0046B969 E8 FA89F9FF call Unpacked.00404368
1 ]2 s7 n+ m6 r7 M" p0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
8 m$ g' |: P) Z# b0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX5 M% O* {6 E* J5 A
0046B976 8BD8 mov ebx,eax ; EAX送EBX
2 y; h+ `! x* A& C) ^0 n8 X9 y0046B978 83FB 01 cmp ebx,1 ; EBX和1比较5 C4 I. @2 G( j/ H% T* z
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
8 m. H- t# L6 H) {* j0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
, C* X% N J8 s# F$ w9 J- K# R0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX3 D$ ]) o# K* }* u- f: r
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
- s0 [, _; v$ d4 X- _5 `* x0046B987 E8 BC8BF9FF call Unpacked.00404548/ p1 \& j, e, o4 a2 C) R
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
0 `2 Q, L* L4 e0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX. ~6 \, T4 @/ |: ?/ q
0046B992 E8 918CF9FF call Unpacked.00404628
! H) @( I) S% H" H/ k3 p0046B997 4B dec ebx ; EBX减一
8 k3 [& i1 m# W# p! @0 j( n* a0046B998 85DB test ebx,ebx ; 是否为0: K; V6 R# g" M
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。( @' k! |: i& A0 i
0046B99C 8BC6 mov eax,esi( l2 z* w; d) v+ B' C
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX0 {: n; I# n, r" @( }% ~
0046B9A1 E8 168AF9FF call Unpacked.004043BC. K2 I' \6 i7 F2 ?
0046B9A6 33C0 xor eax,eax! |4 B" c/ \/ Q2 s# u5 T$ p
0046B9A8 5A pop edx5 C! R a7 H! H f4 [: T, Q, R: J
0046B9A9 59 pop ecx0 j8 c4 [3 }2 w- F9 d" J$ c
0046B9AA 59 pop ecx5 _1 T& ~7 k9 \
0046B9AB 64:8910 mov dword ptr fs:[eax],edx( n2 [, L- h" z* v T0 _* a
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
o. V9 ? O6 B! d0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
. f6 M, z0 G) M2 W% @, P0046B9B6 BA 02000000 mov edx,2
( l) ~) B" W j3 B' H% m& f0046B9BB E8 CC89F9FF call Unpacked.0040438C
) R5 I) v; b" |* o0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
, h% Z* M" ?. Y R+ V0046B9C3 BA 03000000 mov edx,3
' q: d/ `, `9 y' T0046B9C8 E8 BF89F9FF call Unpacked.0040438C
0 K4 U9 r& [5 @0046B9CD C3 retn
/ q+ k3 ^" K6 H3 {. A****************************************************************
) n# y& V" I# }. ]( x. M& I8 i) e8 M跟进0046B961处CALL来到：
- {$ L0 H9 N/ h$ t3 t- R004676BC 55 push ebp# I7 j$ I# B* r" a/ v% g4 H: Z8 G
004676BD 8BEC mov ebp,esp- y: Y0 \/ W. A8 u1 W4 I5 j& }8 k
004676BF 83C4 E8 add esp,-186 g4 G1 L$ s3 a2 {- [
004676C2 53 push ebx
* G3 `' e& A1 r$ N9 e004676C3 56 push esi
; m8 W, b* B- w: v/ c" u1 I: s004676C4 57 push edi2 r) C& L2 s0 [+ N; N
004676C5 33C9 xor ecx,ecx
$ L1 m4 T8 s$ t$ T8 w8 H/ r& J004676C7 894D EC mov dword ptr ss:[ebp-14],ecx& e0 G$ n) l4 {6 V' u
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx/ e, O( ]4 E4 d6 \. i1 M: N
004676CD 8BF0 mov esi,eax- J1 x9 z/ J) ]2 m; c
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
' E) e1 o3 q1 Z# i. r/ z004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
9 N" x5 f C; W3 k004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
% n0 z! H; h' S0 Y7 w' h004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
8 ?: S Q/ @! }( L, a- U1 i- }# M' f004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>' X" E! z0 a% H
004676D6 8BFA mov edi,edx
: q$ A _6 |4 }7 K& g8 z004676D8 33C0 xor eax,eax
" O4 x' P9 H0 C7 c2 o2 ] W004676DA 55 push ebp) N7 T1 Y9 \5 N0 E y& \
004676DB 68 57774600 push Unpacked.00467757
2 S" v- I& M4 U3 d4 U& D) W004676E0 64:FF30 push dword ptr fs:[eax]
& l. U2 q$ `# B2 h+ l" r% J004676E3 64:8920 mov dword ptr fs:[eax],esp
( x1 S+ I4 v6 U7 E' K004676E6 8BC7 mov eax,edi; g7 d0 u- f3 k: p7 p/ P
004676E8 E8 7BCCF9FF call Unpacked.00404368& J4 m- Y. n5 U* b# {
004676ED B3 10 mov bl,10
& Z( z! T" |. W0 `0 g004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
z. q6 M* }& D: i$ u' G3 l5 E004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
- p& g N1 ~7 D6 \/ b004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
$ a' \5 C: I0 z H7 l1 \0 d004676F7 33D2 xor edx,edx
1 H* g8 F5 {% p" J004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL9 n5 H E" }* V& Q
004676FB C1EA 04 shr edx,4 ; EDX右移4位
5 @# Q4 I ~: G& Z2 J. L6 p004676FE 83E2 0F and edx,0F ; 和0F与
% S( b% @: u- {4 @0 ^' _00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL8 f7 o" a/ Y# a( M: n9 g D9 D
00467707 E8 3CCEF9FF call Unpacked.00404548
& z0 W# }) z7 [( M7 k0046770C FF75 EC push dword ptr ss:[ebp-14]1 _( O$ h1 z# X
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
: d. S& T/ _6 u. J) l00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
. e }6 j0 z6 f; D: I( E- n00467714 80E2 0F and dl,0F ; DL和0F与
; W. X6 u# N" D4 _2 k' E+ Q00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与: p& V' O* I) H7 @5 w3 T v5 _
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL' U- i- E+ y1 M7 t- C
00467723 E8 20CEF9FF call Unpacked.00404548# o- G4 d0 h7 ^/ G7 w3 H- }
00467728 FF75 E8 push dword ptr ss:[ebp-18]8 S" F4 x! v8 h) |! ?
0046772B 8BC7 mov eax,edi ; EDI送EAX3 ?7 a2 L# e: n- s( L# ~0 p2 k: h' b
0046772D BA 03000000 mov edx,3! S! l/ M0 o" \1 P W$ s1 L7 e7 ?
00467732 E8 A9CFF9FF call Unpacked.004046E0
O1 T! w' H5 g+ w00467737 46 inc esi4 q n4 H) [( l( o# D& T$ _
00467738 FECB dec bl1 s q) k3 L9 O3 r9 a8 k$ c" F
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
9 z" b# m3 J" c! \ _9 I0046773C 33C0 xor eax,eax) r# x' [: L8 H3 v$ f* }
0046773E 5A pop edx
/ G1 c1 t* v$ s$ W/ r; x7 ~6 Z7 \0046773F 59 pop ecx
( L: q2 ^" f0 @00467740 59 pop ecx5 g7 b* ]% S5 n& a+ C3 L6 G8 i5 c
00467741 64:8910 mov dword ptr fs:[eax],edx+ O/ A( Z9 E3 _6 R9 ^
00467744 68 5E774600 push Unpacked.0046775E
/ p2 ^& j( ?9 g' v5 f7 F7 I00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
: d8 E4 d" A1 ^7 ?; E: [& y0 y# _0046774C BA 02000000 mov edx,2
. ^' Z$ Z* r- T" y K00467751 E8 36CCF9FF call Unpacked.0040438C# O0 y' @" |5 z
00467756 C3 retn //返回
& j t9 S7 X1 H5 o———————————————————————————————————————————
/ L% _( T% U: h/ i* D! F% ^+ E【Crack＿总结】：' v# {0 L% I) y" ]
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^& f- I7 d }) N% _
机器码：bbba33de56c4cf31d9063cc074248d4b; K. T2 l0 @; ?* W$ s
注册码：e807519487d7ad4f57ad42dc87fbb191
: ^! ` W# [' Q7 J附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡