|
【原创】破解图章制作系统$ ]5 ]9 c3 p" t( n+ S! W! J
日期:2005年5月15日 破解人:yijun[PYG]" D; D# V$ P0 Z! }
———————————————————————————————————————————
$ f+ T8 }" ^ {$ k5 L, j【软件名称】:图章制作系统 软件版本:1.06 ^2 c' m7 g% d
【软件大小】: 252KB
9 U( X# [4 y: T2 C& ^$ f" c: J【软件简介】:制作各种图章: S8 O* e# ?5 U* M$ k* d
【软件限制】:NAG
1 S0 F- [9 C0 e2 a |7 `【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!+ L; U% [* I9 P/ l/ d' N2 C
【破解工具】:OD,PEID! J6 Z1 L4 L" V9 _. o( j2 m; [8 t
———————————————————————————————————————————
q, l& l0 H- ?1 C# D2 V # D @9 `- G3 i$ {; T
【破解过程】:7 d7 B3 {$ o9 Z* F7 w* N
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~& X7 p" d: @3 `+ B0 U0 U1 e( c
OD载入,通过字符串查找很容易来到这里:
5 w5 {# p/ { y3 v8 y0046ADAC 55 push ebp //在此下断
' `0 k: ]% k# M/ ^( h0 a0046ADAD 68 A0AE4600 push Unpacked.0046AEA07 S; k6 X& d" [" y
0046ADB2 64:FF30 push dword ptr fs:[eax]
5 e- p( E# r# |0046ADB5 64:8920 mov dword ptr fs:[eax],esp0 N9 z/ k7 l) Y+ I
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]( n: c2 z% `1 w* S- k a; v
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
( z# Z I0 H4 j. N0046ADC1 8BC6 mov eax,esi
5 R- u8 ?# J9 ]: |0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX4 W( |% Q! ^, c% E
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
0 [9 p* d" a7 a0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]+ ~5 Q6 `% V' \- _/ Y% m- j8 y
0046ADCE E8 45D9F9FF call Unpacked.00408718& f2 o+ z, v) ]' t
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX8 B( t) m: Q8 @0 d" M
0046ADD6 8BC6 mov eax,esi
/ w/ f5 ^4 N/ A, X2 C! o0046ADD8 E8 3359FDFF call Unpacked.00440710
9 C' g* `) G$ N1 a0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C], V9 s& |, M: i$ K% S# O/ ]
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300] ^ V1 I9 [. Q* A( m! t
0046ADE6 E8 F558FDFF call Unpacked.004406E0
1 C8 Z( u! j6 X: S: u0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空- g1 ]5 ^( W: x7 B; M; \
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
1 D8 D; ?) I) [, c$ V3 d0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX6 i) T7 [4 I" ^" f* q' [
0046ADFA B2 01 mov dl,1 ; DL置1
5 e- U- ]1 N: [# s7 j0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
9 l0 v }7 p& [: H0 j+ i# a: b2 i0046AE01 E8 B2AFFFFF call Unpacked.00465DB81 @5 e( N& h+ u1 B U; ~
0046AE06 8BF0 mov esi,eax' K$ F# q& U7 q- @
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
/ {: j" h+ D" h* L- E# W* p0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
! K" L6 |+ F8 B3 q, @0046AE11 E8 CA58FDFF call Unpacked.004406E0
1 |3 u* _. E6 k% c1 N0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX3 S1 `$ | x$ P6 ] g. y7 b6 h
0046AE19 50 push eax! A6 O& Z6 s) R1 h6 B& r& B
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX% x% S) N, ~: t6 _7 I
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
2 K z) [: \: f3 K3 n$ F0046AE25 8BC6 mov eax,esi& ]2 n% D( R) g6 [% l- Q/ Z
0046AE27 8B38 mov edi,dword ptr ds:[eax]
) [- O! c2 m; {9 U/ W0046AE29 FF57 04 call dword ptr ds:[edi+4]1 J O; |& f) t/ m+ }
0046AE2C 8BC6 mov eax,esi
9 ~3 I) f+ {3 `9 F. H# \( @& n7 n0046AE2E E8 4587F9FF call Unpacked.00403578
. l U2 x8 b5 x' w2 Q, e' ]0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]) l% j8 b) E- l* h$ t \% U
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
/ S* `) b6 t" v3 R0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~); o' |! }0 S6 n% `
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~6 ]! Y5 \& f3 c" P6 A8 n9 L
0046AE42 6A 00 push 0$ n6 B8 d' T; I
0046AE44 68 D8AE4600 push Unpacked.0046AED8# E% Z! z o8 G4 i! \. W) r
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误) B0 a8 M# J8 Z- ]
0046AE4E 8BC3 mov eax,ebx8 P; b! C0 s' V" C6 y
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8+ `+ S# i8 ~( i! X) m1 S- t% Y3 L
0046AE55 50 push eax, c$ c6 u% d% J% E
0046AE56 E8 DDC2F9FF call
0 t% h1 x* _) D) e/ Q0046AE5B EB 20 jmp short Unpacked.0046AE7D. c7 K7 O4 k; p' z' b
0046AE5D 6A 00 push 08 u' d; ~& e; Q# q8 \, [. }* G
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
! m! t9 } E4 ]8 ]" a0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
3 S4 R% ~, v6 c& F7 v" T2 E# P# u0046AE69 8BC3 mov eax,ebx
: k! e: |7 ?2 O: A: b0046AE6B E8 88BFFDFF call Unpacked.00446DF8
# i' C \, \* H4 F! L' _8 j0046AE70 50 push eax7 b. I- v: v( K! @9 Z
0046AE71 E8 C2C2F9FF call
% O5 `# [0 H. i( F+ }$ u" r6 C0046AE76 8BC3 mov eax,ebx1 b- c1 C- c& H. G0 b% U4 S! R! k
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC; A( k1 V" m- f" k& [- w1 u
0046AE7D 33C0 xor eax,eax; t( _: C' r% x, ~' u6 ]( f: z+ }
0046AE7F 5A pop edx
9 M5 z5 w/ T6 ~( T0046AE80 59 pop ecx; J& r: f" w) f, l
0046AE81 59 pop ecx
+ y* t. x5 \7 p7 X0046AE82 64:8910 mov dword ptr fs:[eax],edx
% f5 H4 u2 I4 p# a* z \. Q0046AE85 68 A7AE4600 push Unpacked.0046AEA7# n: R) t" s& D. E) u3 G
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]! w7 u6 I/ q3 W- K
0046AE8D BA 03000000 mov edx,3
! a4 G% z9 {% {3 v/ a; O: g D) q0046AE92 E8 F594F9FF call Unpacked.0040438C5 d; s+ M+ _" Z4 m/ X) J5 D- t
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]( ` z$ V% U8 v' @ s8 v
0046AE9A E8 C994F9FF call Unpacked.004043681 C; _# t1 H$ O5 I7 V4 E: N
0046AE9F C3 retn
( W9 p* A9 z5 c3 o& r1 j }- L0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
, K& F8 |6 U6 B' t0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
! d, [/ N, [7 s2 s5 l& b& w****************************************************************
5 i8 B3 C1 h2 Y跟进0046AE39处CALL来到:
- e# U! J5 b4 `6 }0046B9F4 55 push ebp8 ]4 D5 w9 e2 S
0046B9F5 8BEC mov ebp,esp9 B6 o L5 Z0 _5 x% T$ Y, ~4 M8 p
0046B9F7 33C9 xor ecx,ecx% f: g# C! F. T: a7 `% A
0046B9F9 51 push ecx( i+ W. n1 j1 v4 `
0046B9FA 51 push ecx* T. f2 P. Q- b- S; c
0046B9FB 51 push ecx
7 `0 E7 E! \2 `9 L l, _7 @0046B9FC 51 push ecx
1 Z8 P6 A5 V5 G5 X, M- f. I0046B9FD 51 push ecx
" j, [, e1 w/ F5 p& f* K6 c6 K0046B9FE 53 push ebx, g* E" n* {. Y" e' [# @
0046B9FF 56 push esi
! J7 c, V/ k3 H( v( G0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax% }) m& ]& d+ Y, }, O0 _
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
" I5 L6 ^1 C$ f/ l0046BA06 E8 FD8DF9FF call Unpacked.00404808% l/ |5 L+ n, M( N
0046BA0B 33C0 xor eax,eax
: \/ u/ q1 p4 F0046BA0D 55 push ebp- ^2 y0 y3 G& g6 \2 `
0046BA0E 68 91BA4600 push Unpacked.0046BA91 p6 |/ Q' \' w3 _ D! i
0046BA13 64:FF30 push dword ptr fs:[eax]. h2 H( ? \$ e* s: c" T
0046BA16 64:8920 mov dword ptr fs:[eax],esp
* a& J! ^: c0 H" ]1 q1 K3 g0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]$ V: v: q2 F( S4 G3 z5 o0 s* g6 J
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]+ s* U2 H4 I) U7 z+ x
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 3 e% O, M/ |+ T. k q
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]8 |; Q, y" m) [2 r8 j) u9 U; @1 w% l
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX( R1 x1 s% }4 T+ P% Y2 V9 i
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进$ x; i \: x6 F. S! n# N
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里* e4 s3 d3 {5 v P0 F
0046BA34 B2 01 mov dl,1 ; DL置1
, @( i7 o! [4 f) {0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
1 N9 h+ K+ v& G! u. d9 G8 j0046BA3B E8 78A3FFFF call Unpacked.00465DB81 o) F0 D6 O& \, R
0046BA40 8BD8 mov ebx,eax" ^. |1 F; B5 x- X7 Z
0046BA42 6A 00 push 0' V# D- Z! N8 O7 |
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
G* L3 V P6 C+ i& H$ z2 C) S0046BA47 50 push eax
5 T/ H& R% z+ C5 u: |. x4 o3 f0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"% o% Z; X. V1 V7 Q
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4], b% E6 Q2 B' }/ m- n ^
0046BA50 8BC3 mov eax,ebx& O! e5 H% Z9 u) u [5 b5 B0 A# d7 ]
0046BA52 8B30 mov esi,dword ptr ds:[eax]
# c3 U( [; \* D0046BA54 FF16 call dword ptr ds:[esi]
9 n3 q& @& x, h5 `0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
' C& c, `4 F0 |5 L. V) S0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]5 E; x1 c* j! ^
0046BA5C E8 B7CCF9FF call Unpacked.00408718
. x/ A7 y) B; l1 M0 q) P0046BA61 8BC3 mov eax,ebx
' w x4 d4 W4 q8 [2 |: V0046BA63 E8 107BF9FF call Unpacked.00403578
# e* `# Z, N$ ^3 R0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
+ B9 U' B" ]' @ U) E; u0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
( W2 E% u0 f! @' I0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~) x [1 W* p. i5 D+ }7 E' \* l/ A
0046BA73 0F94C3 sete bl ; 置BL值
0 Z1 h8 G' ?! k& s0046BA76 33C0 xor eax,eax) U; c! f; Y4 V8 u( n
0046BA78 5A pop edx- @# z0 A' Q5 c0 }( }
0046BA79 59 pop ecx q- @+ ~& o E v3 Y6 {
0046BA7A 59 pop ecx
8 e+ |/ `) F7 m3 C; }( B0046BA7B 64:8910 mov dword ptr fs:[eax],edx2 [& n/ J) Z" ?" d1 i; N& ?
0046BA7E 68 98BA4600 push Unpacked.0046BA98! P5 Q! i6 G9 i) L
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]+ v7 O- c2 `' N0 P" }, P
0046BA86 BA 05000000 mov edx,5$ _. }) _# M$ p% }6 q
0046BA8B E8 FC88F9FF call Unpacked.0040438C
" v- I: F; B, v1 h0046BA90 C3 retn: w- i: L1 d- K1 _" a
****************************************************************- r, U3 Q) c" i4 d; h2 X
跟进0046BA2A处CALL来到:
% s; E+ [$ \% Z7 Z# F0046B908 55 push ebp+ c9 ~9 R8 q' z6 z
0046B909 8BEC mov ebp,esp
+ t/ S% F' q# N5 }5 r8 Q( P; I5 [0046B90B 83C4 DC add esp,-24: f' M) ^5 x# T1 e) F
0046B90E 53 push ebx, I5 R, ^7 e. R& X# i' O
0046B90F 56 push esi
. k: K0 E4 H) k$ S- q0046B910 33C9 xor ecx,ecx, D% ?; w" G o( P+ z! ^0 s
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
5 F1 T) O8 A$ j0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
! c& d( U0 g3 l/ R8 K6 B ~: M0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx! z @$ |: g- K G( U
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx& k( X' n3 ]9 L# N
0046B91E 8BF2 mov esi,edx+ l1 D$ B! G2 L4 C* N" {/ B# t: e
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax7 o0 D$ f, t7 M F
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]& U' Z5 x" b4 o6 i1 B6 n
0046B926 E8 DD8EF9FF call Unpacked.00404808
) E1 v0 A% R1 e0046B92B 33C0 xor eax,eax
! a: y. r0 r' q& o0 n7 k: H' U- _0046B92D 55 push ebp
, g2 Q" o" [3 {. v" g0046B92E 68 CEB94600 push Unpacked.0046B9CE; ~- s# N3 x5 M6 ~
0046B933 64:FF30 push dword ptr fs:[eax]
& j8 U% n8 A) w0 `6 r0046B936 64:8920 mov dword ptr fs:[eax],esp
$ P" n6 d* w* {- ?! ?0046B939 8BC6 mov eax,esi* R" q2 q& y" M) |+ N
0046B93B E8 288AF9FF call Unpacked.00404368
7 k' I& J2 s: K) o1 G0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20], e1 q# O& b; t; e) V. A2 [, T
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
# @" S( R9 D3 ^' z& D* n- s4 w) |% m0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4( o* M2 `* w7 R$ L" B
0046B94B E8 1C8DF9FF call Unpacked.0040466C9 M! v/ E: |3 y/ i
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20], B6 R% K5 z- r3 q; [# z% }
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
8 W; J* Y7 T8 i, y! K" o, U0046B956 E8 EDBCFFFF call Unpacked.00467648
5 U8 c5 s- D% D' ^4 h: g4 O0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
- n. x8 w7 N. Z& \( _1 r9 E- `2 ? b0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]( w5 B3 y: w+ T
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
5 l$ A: o( x2 z0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
5 R9 J& ^( j8 \4 f$ t" r7 r% Y0046B969 E8 FA89F9FF call Unpacked.00404368
$ N s$ `& a; t0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
2 ~8 U% X( X! g1 }- b0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX2 N1 Z/ L9 @' @4 h; z6 s, L
0046B976 8BD8 mov ebx,eax ; EAX送EBX
/ m; }2 |( F9 Q; Y2 }# V b( ~0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
' x) D" M, A V& J) V' d0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
+ R# x+ H( F) B9 r1 V0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
4 F a8 F( |0 s6 O5 L0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX. X$ F# s2 R2 r u
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
- c+ z1 R I. r+ p' c; O' c, @1 j0046B987 E8 BC8BF9FF call Unpacked.00404548
6 R% w" `6 K C0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]# I* T4 |! B; }3 \% c6 C R
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
) D7 h0 v, \& m5 E$ `( q, Q5 {; B0046B992 E8 918CF9FF call Unpacked.004046281 ^+ [9 B \+ z, g
0046B997 4B dec ebx ; EBX减一. L7 l$ ?+ W) H% Z3 S& U, A- E
0046B998 85DB test ebx,ebx ; 是否为0# P9 C; L, V2 x; [/ U" l
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。- n8 d7 O1 Z- h, S; }+ x. T
0046B99C 8BC6 mov eax,esi5 M3 N) I! b9 ]+ f: Y$ Y5 d$ K
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX6 Z ^3 [ L/ Z! `1 k. p
0046B9A1 E8 168AF9FF call Unpacked.004043BC3 L3 T1 F/ @0 k: \- p
0046B9A6 33C0 xor eax,eax3 @- Q. f& S u4 w* p
0046B9A8 5A pop edx9 N% e# x& m9 A1 p1 c& ]2 m4 c
0046B9A9 59 pop ecx
# u6 B8 E; F8 s: d: n. g0046B9AA 59 pop ecx
7 ]5 m: `0 u. }' h5 t! P0046B9AB 64:8910 mov dword ptr fs:[eax],edx4 l* m7 j! t6 K
0046B9AE 68 D5B94600 push Unpacked.0046B9D5 V) G; h& l' g
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]9 y' V) k) p8 q( B2 k, J0 z
0046B9B6 BA 02000000 mov edx,2
. g: i! C8 i( p5 s7 r5 a5 A0046B9BB E8 CC89F9FF call Unpacked.0040438C
1 \) i' h3 p5 b8 \9 d& i0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
4 n& T$ u( {! ]% p; ]0046B9C3 BA 03000000 mov edx,32 O- p+ R \/ S" q. K0 b
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
8 u. |* o! _3 b* {4 w: S9 f+ ]0046B9CD C3 retn! W: g& ~5 r* ?8 g8 `% W! W
****************************************************************
3 D9 l' [ _# G. g8 W8 [跟进0046B961处CALL来到:& ?* B" D$ P) B
004676BC 55 push ebp
4 {/ W) X7 I" J: |0 h' h004676BD 8BEC mov ebp,esp
' g3 f( X! d% e' F. a004676BF 83C4 E8 add esp,-18
( k. u% x* }: j- n; c1 z004676C2 53 push ebx
5 [0 F; o6 c g F; o004676C3 56 push esi
1 c/ U) ~2 T+ _004676C4 57 push edi
. l! @+ \& m, ~. r9 `, _ Y004676C5 33C9 xor ecx,ecx/ t" R' @2 z. i* d
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
" y1 P& \; p' T ], u3 ^ I) ^, v2 T; W004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx! @2 l0 T9 j: X6 B* b- Z' o
004676CD 8BF0 mov esi,eax
* `: U0 V6 J4 i" J6 W6 u1 d% m! g% w004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
" u, w4 m; m/ R& e) p004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
" i8 f4 m! m, c! Z/ m# L004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>- n5 @) Y& q ^) l4 D, e5 q2 B
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
1 H7 @1 a3 H# L004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
$ w8 A; b. ^" W004676D6 8BFA mov edi,edx
( Q; |+ o1 f% m# j+ {: q004676D8 33C0 xor eax,eax
9 b% r. i% H3 h" \004676DA 55 push ebp
+ `% Y: z( ~" a: i& b6 z9 I: }5 R004676DB 68 57774600 push Unpacked.00467757
; _9 z& i2 B/ x004676E0 64:FF30 push dword ptr fs:[eax]- y" x% h5 s6 J7 x6 l5 k3 X& o( b+ M
004676E3 64:8920 mov dword ptr fs:[eax],esp
, ~* c& p9 ?$ H& j* v5 N1 g004676E6 8BC7 mov eax,edi$ x. _* \( J J9 G
004676E8 E8 7BCCF9FF call Unpacked.00404368$ U8 Z0 f- N& G/ _! K
004676ED B3 10 mov bl,10 J0 ]+ ~) q+ T) D1 |- X
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
# E- q/ x) e6 w3 S/ Y004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
. B* J" X+ A2 ^1 R" b- L004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]8 D8 p6 o( E3 u0 A# v& N* {# v$ A
004676F7 33D2 xor edx,edx
. t1 [. ^6 P0 d$ b004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
- A' C9 |9 L% q' i! ^1 p004676FB C1EA 04 shr edx,4 ; EDX右移4位
9 m$ C, h N" V# u9 {6 b+ w004676FE 83E2 0F and edx,0F ; 和0F与+ V, \" t: `3 h" g
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
/ f5 F) x( Y$ h" w% Q00467707 E8 3CCEF9FF call Unpacked.00404548! `7 n4 Z3 O6 Y- ?6 U
0046770C FF75 EC push dword ptr ss:[ebp-14]; [7 ~% ^% f: [3 N5 |3 E
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
8 j& ~1 `( D/ A7 {2 k H00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL; s' C6 H H M R7 F/ ?' _, ?
00467714 80E2 0F and dl,0F ; DL和0F与- S4 @/ x. Z( C' d
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与# A# T' J$ _7 l0 _3 h1 g7 l
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
2 T& B; x! y5 h) c00467723 E8 20CEF9FF call Unpacked.00404548
8 L4 A# I: i& G2 s00467728 FF75 E8 push dword ptr ss:[ebp-18]5 v. {! J9 K `" H; `2 E/ J# @
0046772B 8BC7 mov eax,edi ; EDI送EAX; z- _4 |. @; T) p
0046772D BA 03000000 mov edx,3
- |) w: I6 n" Q3 X00467732 E8 A9CFF9FF call Unpacked.004046E0
6 Y2 [: _% c# f+ Y, j3 e! o2 J! w00467737 46 inc esi. g) |! F4 ]4 }( ^8 Q% M& b
00467738 FECB dec bl3 `5 h% y6 D/ Z! \! P: o
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e5 P' \% s* S( H5 p, p' J1 A4 Q
0046773C 33C0 xor eax,eax; T3 ^/ Y& z8 c2 R9 M$ m
0046773E 5A pop edx9 ^7 X$ J, A1 L& y& p" ]: {
0046773F 59 pop ecx! W" E$ {, S' L2 k4 K' m
00467740 59 pop ecx" c! W( ]: |! h: y# @# G5 s
00467741 64:8910 mov dword ptr fs:[eax],edx
6 e7 y$ ]( I# W" G1 v" e+ W% Y ~00467744 68 5E774600 push Unpacked.0046775E
, f/ p+ {3 }# x' A8 w00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]# u; n, f9 _9 w3 Z2 n& m: l; X* P
0046774C BA 02000000 mov edx,2) k9 {/ O' M+ \8 L" I' K3 X7 P
00467751 E8 36CCF9FF call Unpacked.0040438C
* S- k' J9 _" M0 j00467756 C3 retn //返回
: q3 P% g. B0 g' B3 C0 b) a———————————————————————————————————————————
1 j1 m3 d- _; @1 ?/ \【Crack_总结】:
; r4 ^* h7 S& M( K将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^6 t M5 E3 c% K0 Z
机器码:bbba33de56c4cf31d9063cc074248d4b
. _6 t! Z% B5 J( Z. ?/ f注册码:e807519487d7ad4f57ad42dc87fbb191
3 o/ U: I' I4 P) H* i附件: MakeSign.rar (249 K) 下载次数:298 |
|