|
|
|
【原创】破解图章制作系统0 k5 Q' V3 |( n g( i
日期：2005年5月15日 破解人：yijun[PYG]
6 Q7 C+ h4 q- Y# G———————————————————————————————————————————2 G; Y7 a$ y( e" G
【软件名称】：图章制作系统 软件版本：1.0; |: B h. b- G6 X6 C& A
【软件大小】： 252KB
1 J& w1 l7 _" Q6 F【软件简介】：制作各种图章# [' V. S$ |+ @8 I/ {
【软件限制】：NAG; z. H5 W9 w, K5 J: I
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！, w7 X2 s) l5 X" r
【破解工具】：OD,PEID6 w* A1 v4 x: _; A5 g
———————————————————————————————————————————7 ~+ }/ k M* j
1 O A& B5 x1 T【破解过程】：
3 d3 M- }$ c9 n7 IPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~5 ]7 A2 W9 H! l% a
OD载入，通过字符串查找很容易来到这里：, F3 e3 w0 a8 f. ~
0046ADAC 55 push ebp //在此下断" V* X! c4 Z7 B' O- D* N
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
6 ^' x+ M' @! n- W7 ?5 c* c0046ADB2 64:FF30 push dword ptr fs:[eax] u# a- [6 j6 T( U) @( ^" V- T
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
- @- h: O1 K! @4 O7 \, }- |, s4 o0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]8 ~6 ?0 C1 X7 |+ `
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
$ H: O: h2 U) L1 a& i0046ADC1 8BC6 mov eax,esi
3 q3 ]( Q1 J' d% ~9 _" x' R0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
6 E' {9 w5 v$ |1 L( h0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
3 k# U+ K, e+ a5 c0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]; E: z3 f# ?4 X3 e/ {) F
0046ADCE E8 45D9F9FF call Unpacked.00408718( L+ T2 ]# ]# v. H9 u/ B5 }) W: a
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
+ q d( P# |+ M0 `3 W U$ h0046ADD6 8BC6 mov eax,esi
" ?1 l3 L1 p: q! Z% W* Q+ I0046ADD8 E8 3359FDFF call Unpacked.00440710, b* { ~6 N' e# Z2 `
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]# d2 b, I9 D& i. w6 Q+ N0 ^
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]9 [; w, x$ b) L& _5 n" }0 s6 A8 |
0046ADE6 E8 F558FDFF call Unpacked.004406E0
, K3 Z- e0 y0 N: D& b! h8 P0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
) W5 [: g4 ?5 E0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
* X. |& m5 I7 G, y0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX c% d8 b2 a6 i
0046ADFA B2 01 mov dl,1 ; DL置1 D# m2 a' J8 h- u# Z" ~: Y
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
% c+ w* Z% R( K0046AE01 E8 B2AFFFFF call Unpacked.00465DB8- B3 O- Z; u- e* F" ]% `+ N! p
0046AE06 8BF0 mov esi,eax
; b6 @1 k0 Q: k* J: U* |0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
( s0 V# V2 @5 ]" O* Y0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]3 j& b+ ]. W% f) ?$ Z. L/ W
0046AE11 E8 CA58FDFF call Unpacked.004406E0 I3 F5 p2 `* K2 l* Z
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
, O! x, _6 W' {. c$ o" \. k- b0046AE19 50 push eax
: {* @' I, }2 P# p: k0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
7 ^0 y1 s* l( `0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]! `1 ]* G9 M3 `) N$ }
0046AE25 8BC6 mov eax,esi/ ? X) q* w O. V
0046AE27 8B38 mov edi,dword ptr ds:[eax]2 e8 m3 e, `; s7 ?: x. X
0046AE29 FF57 04 call dword ptr ds:[edi+4]
. b Y& C3 G2 q \9 k2 v7 b U: F9 C0046AE2C 8BC6 mov eax,esi- ? M* W! d6 B+ H
0046AE2E E8 4587F9FF call Unpacked.00403578
. J! i: a2 f3 d0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
/ r7 k, {, M7 X6 ^" ?0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
* I. e8 a" _ ?) [1 ~0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）6 @6 G5 h: @) ~% ?8 D6 u7 z
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
; h) k4 c ~/ i2 V0046AE42 6A 00 push 0 n' R8 Q d7 t3 ]( L9 m! r
0046AE44 68 D8AE4600 push Unpacked.0046AED8
) k& J* \2 U& H0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
$ W% h- k, O, J8 I0046AE4E 8BC3 mov eax,ebx3 a- _' N1 a; t0 d
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
6 A1 i& u" W8 R3 p- B0 v. l7 m0046AE55 50 push eax8 n" Q6 c; b! ~) c" ?" x1 s/ g5 G
0046AE56 E8 DDC2F9FF call
) u) b0 k* a; M- f3 q0046AE5B EB 20 jmp short Unpacked.0046AE7D
n, R, \" R' J3 k t9 T3 X0046AE5D 6A 00 push 0' ~) u+ Y# {- ^9 i7 C1 o
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
1 J* g# O. M( Q& f- D# X/ w' T* v0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功& P4 z @8 T( {2 }
0046AE69 8BC3 mov eax,ebx, S: {. a* W7 ^3 Q( r$ ?* V
0046AE6B E8 88BFFDFF call Unpacked.00446DF8 o; i* S: ~0 _* n4 D
0046AE70 50 push eax6 _8 [. J* c/ y; R) `7 ?
0046AE71 E8 C2C2F9FF call
9 s1 I* [: ^0 U2 p$ s+ o0046AE76 8BC3 mov eax,ebx9 O# Y1 l7 Y8 e$ o5 H! Q
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
' ]& ]$ r& l* D% Y5 s0046AE7D 33C0 xor eax,eax
3 E- d6 o. n. ]2 ^# ~0046AE7F 5A pop edx; k3 v; n7 G( q4 d& z
0046AE80 59 pop ecx( _+ K! z# x/ w' t" R
0046AE81 59 pop ecx
6 n4 _! h8 R) V- F7 a/ p7 N7 E, A0046AE82 64:8910 mov dword ptr fs:[eax],edx6 I M r; q3 V6 w' ^% w
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
2 k! b! r+ M7 ~0 u0 G; _1 A* s0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]$ ?/ S9 R9 U( [! U; o& x
0046AE8D BA 03000000 mov edx,3
- z# T$ @' I/ w8 T; D2 S0046AE92 E8 F594F9FF call Unpacked.0040438C9 u- ]$ `$ U& x
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
. K0 y( } y" K0046AE9A E8 C994F9FF call Unpacked.00404368
( N, ^- e8 A( g9 C8 d" H! K0 ]0046AE9F C3 retn
3 o" \2 \( I- y, c& K0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C: p4 S+ m5 A5 M- D- {1 ^7 p
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A6 N, m* v) \. u) L1 k1 P
****************************************************************" M {3 B+ h$ j" Z" b5 S
跟进0046AE39处CALL来到：; h, W- W# s0 C8 p! E* W- ^2 @! m% ~' U
0046B9F4 55 push ebp7 z6 M/ I' o1 E: g
0046B9F5 8BEC mov ebp,esp
! o; l0 D; E4 o) j* _# ]1 t$ f0046B9F7 33C9 xor ecx,ecx
. g) b- S: O" F3 @4 _& q0046B9F9 51 push ecx
* p- y+ z8 `; U# x& v0046B9FA 51 push ecx2 ?% V0 w- w: C% W
0046B9FB 51 push ecx' m: h/ y; J# Q3 I" j' V
0046B9FC 51 push ecx
( t* ^7 U$ C* a# h0046B9FD 51 push ecx* q0 y: ^8 |4 a7 K7 F
0046B9FE 53 push ebx# `: r. w i a( M) p3 D' j
0046B9FF 56 push esi0 n, X d4 C$ T7 u
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax& Z& ^4 r( P( \0 C+ X: \
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]- y# j* D# J W0 r$ `
0046BA06 E8 FD8DF9FF call Unpacked.00404808& ^& P5 F) y# h' l: A4 x5 e
0046BA0B 33C0 xor eax,eax7 [# H1 f, i! w8 [$ T8 \
0046BA0D 55 push ebp
# F. E& V7 b) V: \ z* |# W0046BA0E 68 91BA4600 push Unpacked.0046BA91
$ y/ @; [4 k! v. @! i8 k0 ~' M) ]6 ?0046BA13 64:FF30 push dword ptr fs:[eax]2 d- U3 e+ j2 J; g/ `9 o& o
0046BA16 64:8920 mov dword ptr fs:[eax],esp
% K" d1 K. |8 I' |0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
: t1 [1 o/ ^" }; y8 e; n+ B& [1 T0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]* k, N# Y- r. M& ?
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
* x' n" m z* J+ B0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]. m# j: E9 O# ^3 E6 ]
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX" d) Z* V- @* d" D. ` h7 j
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
4 U; s7 b5 U7 a# u) H7 M0 w0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里% |. ~( o% X- {3 D5 s& I3 P4 c W
0046BA34 B2 01 mov dl,1 ; DL置1
! x% ~1 Z. B! p2 r# @0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]2 |; f0 _" G' P7 f% U2 _8 b
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
; V9 T; s" N% N7 k1 J& b0046BA40 8BD8 mov ebx,eax# I6 y- _) C" s$ h' ?
0046BA42 6A 00 push 0; h2 n5 d' u) T8 y& m" d5 I' `
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]/ }9 A6 M0 u5 g) S
0046BA47 50 push eax( T- C) U2 u5 X1 `
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
/ L6 f& ]7 j7 |5 ^" ~1 ?( Q, {0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
- S B0 Z) }. k1 y3 O7 Z% u+ w0046BA50 8BC3 mov eax,ebx; q5 W( _9 @! q
0046BA52 8B30 mov esi,dword ptr ds:[eax]& c# A6 z' V' _
0046BA54 FF16 call dword ptr ds:[esi]; O4 [ z7 R) @% R# T
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
' [/ l/ M w0 O% `0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]' [0 Z2 U% }6 F# `% _0 ~$ x
0046BA5C E8 B7CCF9FF call Unpacked.00408718
7 ?# w, D0 E4 w: M& F3 q* C0046BA61 8BC3 mov eax,ebx4 j: i6 H5 l) ~" L
0046BA63 E8 107BF9FF call Unpacked.00403578 9 d. p) t9 ]8 l9 I( E4 Q
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX- G/ K D: G8 q! [" ], _
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
$ l" H; y+ X/ U9 ]+ \7 X0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~" f4 }" b1 Y2 s' Y5 l* a n
0046BA73 0F94C3 sete bl ; 置BL值
7 F# G# o5 p; A. m+ U5 w) B0046BA76 33C0 xor eax,eax
) ~* ]4 |# [0 b3 k" I* g U0046BA78 5A pop edx* C; ?# x e8 X% W5 \
0046BA79 59 pop ecx; o1 N& Y3 M7 R/ k
0046BA7A 59 pop ecx9 z9 z9 w" A1 A% p0 ?: c: n6 y
0046BA7B 64:8910 mov dword ptr fs:[eax],edx- I% A0 ^$ M6 d$ [" [9 D1 \
0046BA7E 68 98BA4600 push Unpacked.0046BA98' c* y% |$ N5 T5 R- w
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
0 V8 d+ @8 d5 z6 T" D$ Y! B2 M/ ? c0046BA86 BA 05000000 mov edx,5+ m- t ]9 q, E6 O
0046BA8B E8 FC88F9FF call Unpacked.0040438C# _9 @: I. ?/ ?* c" c; U: B
0046BA90 C3 retn f3 D% j, G& q5 }7 }
****************************************************************
7 [, {: V$ w3 B0 J跟进0046BA2A处CALL来到：: W6 [5 ^/ j' A+ W, `, C; Z9 F
0046B908 55 push ebp( i' b+ [0 f& T7 g3 n- L3 l
0046B909 8BEC mov ebp,esp& C7 r3 \6 ~ i5 {. v- b6 M
0046B90B 83C4 DC add esp,-24
) _; D$ Q' d2 q7 R ~/ {5 P0046B90E 53 push ebx
% c! H& Z& a9 m/ z Z& J0046B90F 56 push esi
3 z4 E* C* C( w9 P& K$ W0046B910 33C9 xor ecx,ecx5 K$ _5 h* S% e/ Y% S! S
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx1 e0 q- L Y4 ]8 j' h, T: o
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx6 Y8 ]/ B h+ r; _6 r X5 v1 C
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
" b/ ~3 n" @/ Q" F6 M E0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
: z7 e w! [; L! o" M) }( C) S% G' F0046B91E 8BF2 mov esi,edx
4 e/ e* ]% K3 u$ S' t2 R' h9 r7 O0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
& Q/ E% J& E U% l% |0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
$ U; G/ }/ M: e+ B0046B926 E8 DD8EF9FF call Unpacked.004048081 K7 |3 `1 g& K% B; O* P3 D# p
0046B92B 33C0 xor eax,eax
, l% t0 f; E+ \ \0046B92D 55 push ebp+ [7 ?5 N8 c, r* f( X
0046B92E 68 CEB94600 push Unpacked.0046B9CE
8 V6 F A2 B& ^" L" s0046B933 64:FF30 push dword ptr fs:[eax]
' o9 @1 R. G& r+ E @0046B936 64:8920 mov dword ptr fs:[eax],esp
d- c2 S o. g7 T9 N& x0046B939 8BC6 mov eax,esi$ w* m. x2 r3 H g1 Y! ]
0046B93B E8 288AF9FF call Unpacked.00404368
2 G" k# Z6 C2 n% B; r6 C1 l# n g0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]4 F2 V1 S( i: s. y0 I3 q
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
: P/ _9 }, _: D. M( F5 ~5 H5 W0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4' z: u+ @8 G* }. z- h
0046B94B E8 1C8DF9FF call Unpacked.0040466C
- j5 e& i; F; q5 e, Y0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]! H$ f+ ~1 u6 k$ v+ {& v
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
3 v% K7 A1 N! ^/ T& S+ B0046B956 E8 EDBCFFFF call Unpacked.00467648
' T B7 r; m$ H9 Q8 U# S0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]* v) v6 M. f1 j
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8], h2 t+ C* v& n/ ?3 k3 P
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
- [7 e/ S' b( ]- a D* r0 Q0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
7 m+ D1 I! B5 U$ a+ x$ z0046B969 E8 FA89F9FF call Unpacked.00404368
7 e0 r8 ~+ V( Y5 {! ~) a0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX0 R8 r, w0 ?: ~( K+ T4 r7 g
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
8 G$ {) K( x4 Q% v1 ^ Q% e0046B976 8BD8 mov ebx,eax ; EAX送EBX
" L# r% t" Q" s1 q0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
# o% O4 z, O) f/ `+ ^0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳5 X! w' ~: m% ^$ X2 ^6 `! ?
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算8 O' [% r3 a. O7 V) J v9 S
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
q8 [3 S/ s2 c. A e0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
' s3 m2 t; o+ y0046B987 E8 BC8BF9FF call Unpacked.00404548! S+ S$ s7 e7 S/ P& ~+ c1 V
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]1 E* V2 m. N f2 f0 |# l
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX' F% B% }/ L' ?& T& Z
0046B992 E8 918CF9FF call Unpacked.00404628$ g- h& [. S0 C) o, X. B
0046B997 4B dec ebx ; EBX减一
" H( M( ?) ?& Q6 Q) F0 z2 f0046B998 85DB test ebx,ebx ; 是否为0
8 \7 A( @( T$ N0 j0 ], c3 [5 K0 W0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。: B/ u. r \2 @* F0 p! y0 q( ~
0046B99C 8BC6 mov eax,esi, N N8 W; v4 X5 W( e
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
2 b2 a' G1 I0 e T0046B9A1 E8 168AF9FF call Unpacked.004043BC
: q0 u) J2 c+ K+ F3 `, c0046B9A6 33C0 xor eax,eax
5 M! l- A5 i# R5 t0046B9A8 5A pop edx d+ ?2 E. t, T4 w. G0 j" Y
0046B9A9 59 pop ecx
* ^) o9 A6 r5 }+ E- j$ |0046B9AA 59 pop ecx
* p, }5 M; b3 @* l) m% r/ @ m) S2 W7 d0046B9AB 64:8910 mov dword ptr fs:[eax],edx5 X' Q* L. s" \
0046B9AE 68 D5B94600 push Unpacked.0046B9D5% O7 P8 J0 e+ M( v+ S
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
+ r! a. N3 b1 B0046B9B6 BA 02000000 mov edx,2
, s5 t4 i9 c5 }. Q: e0046B9BB E8 CC89F9FF call Unpacked.0040438C4 F7 f& c; N& l- c# {* b
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
9 b9 ?. |* o( L4 }2 O8 J0046B9C3 BA 03000000 mov edx,3
$ b. @/ F& T7 E7 g1 O7 C0046B9C8 E8 BF89F9FF call Unpacked.0040438C
2 Q/ B; n# N3 ?' t2 A9 D" o0046B9CD C3 retn
- Y; S1 J4 J4 }' x1 \****************************************************************5 \4 r. X9 W) V& Y1 F
跟进0046B961处CALL来到：' Z% e) B1 j1 z6 l! {
004676BC 55 push ebp
: r) |% I1 N! C+ L5 A, P: v( C004676BD 8BEC mov ebp,esp
# K% \0 @" t# n' W' u004676BF 83C4 E8 add esp,-18
& l" y5 F8 d2 s+ ^% I004676C2 53 push ebx! y" |; ]8 U1 d, {# O( u* b
004676C3 56 push esi0 ]1 H8 N6 ^6 I
004676C4 57 push edi& ^) a3 E$ e* o3 m5 r+ A+ t
004676C5 33C9 xor ecx,ecx6 V# D4 s5 P9 [+ k0 T7 ]
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx4 Y3 M& D9 m6 G& w0 k
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx4 w+ T/ r- T: O# |
004676CD 8BF0 mov esi,eax
3 k2 |4 k$ D. \" p% k. S" \004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
' o9 j( H+ C$ p& e8 K) l4 E( q004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>6 X O! q/ K( B8 o* s
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>: x' G0 m# U( p
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>: ~: p3 G& V8 ~$ D/ J0 ]# |
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
d- h+ y/ C! s004676D6 8BFA mov edi,edx$ m: J. `# ~$ G4 ?3 N% A
004676D8 33C0 xor eax,eax
! m W, G X/ i004676DA 55 push ebp% W( t3 x3 C! J
004676DB 68 57774600 push Unpacked.00467757
- B& W% k2 e. g7 i3 q004676E0 64:FF30 push dword ptr fs:[eax]
" }3 w. T# G- y/ I$ r! Y; \* T5 U004676E3 64:8920 mov dword ptr fs:[eax],esp
7 g/ ]4 {, a) S0 S0 h1 v" R1 Y" P* _004676E6 8BC7 mov eax,edi
: K+ w8 a2 W& m/ x; ?5 L& r. u: r" l004676E8 E8 7BCCF9FF call Unpacked.00404368
9 ?, m6 I& _; c, c004676ED B3 10 mov bl,10
$ M* h _# O4 E: l+ ~004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]* L9 t- w8 U: [6 H3 a6 k# S/ x1 H
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****0 U* W4 O& O1 P( @) P5 }
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]% n! r& S |) [7 Z
004676F7 33D2 xor edx,edx
6 y: g& Z: _0 U! R004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
4 Z) @, d, |7 b: L5 t1 ?! T004676FB C1EA 04 shr edx,4 ; EDX右移4位
8 V: I- s. i$ m% ]: z004676FE 83E2 0F and edx,0F ; 和0F与; O, D6 q; S' x$ M) T
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL1 H' C2 F. K, {
00467707 E8 3CCEF9FF call Unpacked.00404548
, ~+ [! N: ]' s1 }3 b0046770C FF75 EC push dword ptr ss:[ebp-14]& v/ Z$ \0 S8 K% `+ T
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
9 e* H$ r, d* T) O* I; K" Y& a00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
' W* b5 l0 F- x4 m# q9 h00467714 80E2 0F and dl,0F ; DL和0F与% v$ C; S. M+ l" \( D) v3 ?4 G
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与. v- i& T' ^ G5 ^8 i* G. f
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL2 `. O# L: V0 ]3 t7 t
00467723 E8 20CEF9FF call Unpacked.004045481 z( I& O* d+ ^+ H# C& R
00467728 FF75 E8 push dword ptr ss:[ebp-18]$ B/ ~- U# I% b0 k* l
0046772B 8BC7 mov eax,edi ; EDI送EAX
5 `+ x+ I s) }. P0046772D BA 03000000 mov edx,3- P, y$ J# S8 R3 p, p
00467732 E8 A9CFF9FF call Unpacked.004046E0
2 o; Y3 f. D% i" E. i00467737 46 inc esi
, d( `. U' H7 o9 f7 K- ?5 {3 }00467738 FECB dec bl
7 I' a+ C, [8 m3 E6 J2 H0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
5 S' m2 c' C, M% x+ g0046773C 33C0 xor eax,eax
% ~5 a/ Q- X! R, H" T. P5 K/ {0046773E 5A pop edx. U! F; d1 i( {. ~
0046773F 59 pop ecx- [5 {" x: N+ C# K3 n* G/ C! ^$ [: Z
00467740 59 pop ecx
f4 q9 C; @) i$ _. i" E2 e0 x6 c' v00467741 64:8910 mov dword ptr fs:[eax],edx3 Q& t7 [$ A& G/ H( D( s
00467744 68 5E774600 push Unpacked.0046775E
% i- }. C9 U# T" D# f0 D00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
+ N s4 o; J( M! k/ K: O/ O0046774C BA 02000000 mov edx,2
: s: u$ S1 f7 y H' u$ b5 R00467751 E8 36CCF9FF call Unpacked.0040438C1 L0 t+ ^+ k5 i C, w# u
00467756 C3 retn //返回8 \7 R8 d# W9 x- S, b4 Y
———————————————————————————————————————————% @# p+ s' p4 I7 g
【Crack＿总结】：
/ e4 `, T8 k# U. \* @将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^+ w6 }, {6 Y8 H. y+ Q- X" h
机器码：bbba33de56c4cf31d9063cc074248d4b9 E c1 V! Q" }
注册码：e807519487d7ad4f57ad42dc87fbb191
( j5 S: N; s0 ]+ ~3 F9 N附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡