|
【原创】破解图章制作系统7 g$ m+ [# _& p9 z5 b
日期:2005年5月15日 破解人:yijun[PYG]
' g/ x; W1 ]( D+ |( W' W# q———————————————————————————————————————————
' g- c; _" T3 r8 o【软件名称】:图章制作系统 软件版本:1.0 x j/ J5 F, C' T- }% \
【软件大小】: 252KB2 X% H4 G: d# w: B. y; z
【软件简介】:制作各种图章. Q. } j2 ^* K, J
【软件限制】:NAG$ r8 M, _6 v/ h1 t
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
0 t& F. n. ^9 K1 A5 X【破解工具】:OD,PEID
* d& Y. o, {+ C* \& q% U———————————————————————————————————————————8 }: m) {9 B7 Z& u
$ C3 U$ M3 G% b: R% A/ @8 [$ K: e【破解过程】:8 h/ D6 K2 {9 ~7 z/ d; |; q6 O
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
- A1 |6 y$ o' R" J; a9 mOD载入,通过字符串查找很容易来到这里:9 V4 h, ~+ o, X" M# Y
0046ADAC 55 push ebp //在此下断% |! L4 D* e' _+ H
0046ADAD 68 A0AE4600 push Unpacked.0046AEA00 s$ i+ B" a- h' U6 V
0046ADB2 64:FF30 push dword ptr fs:[eax]$ V, ?1 M: j, }, x2 S) B
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
1 r( R$ \5 B2 x A, U0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
1 l" W, n8 J- r0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
( R8 t& F1 f3 {0046ADC1 8BC6 mov eax,esi0 J2 J" J. O, P+ h3 Q# ~ T
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
9 _; {6 ^1 ?6 d+ |7 n0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
S8 ^; c/ j; U5 k0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
- r4 q7 @+ X9 U0046ADCE E8 45D9F9FF call Unpacked.00408718
; S" s4 K, c8 \; c3 x! a4 s0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX7 j7 `& v* m8 ?& N y/ v1 J
0046ADD6 8BC6 mov eax,esi$ o# D! x2 g7 d4 ?
0046ADD8 E8 3359FDFF call Unpacked.00440710
5 Q. V* R2 |( A' _0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
) @& n8 I j8 u, w' }/ G0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]: ~4 C7 q9 P5 A- f; n
0046ADE6 E8 F558FDFF call Unpacked.004406E0; z9 j. V, w, l
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空' ]' X8 G G$ K; y; }) [1 L* A
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
# s; `, y5 K3 }3 ~0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
: f# B/ `) D: n4 @0046ADFA B2 01 mov dl,1 ; DL置1; l# j# | V0 p
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]3 |& Z0 C2 D9 J- C0 h0 U4 l3 L3 E) P
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8: Y& N& A w( X0 @. g
0046AE06 8BF0 mov esi,eax9 Z/ m/ Z: Q& H" Y
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10], W A) C) k H, ^0 }, L9 h9 ?
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
6 N( ?5 L. T. \ i6 h7 ^$ q0046AE11 E8 CA58FDFF call Unpacked.004406E0
8 W5 d# w9 m0 H9 @0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
1 Q& M- _$ V" m8 I0046AE19 50 push eax
0 e8 J+ _0 F) R& s0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
& x3 u: g! f3 Z, H% w+ ]0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
$ Y9 Z* Y8 `' d3 |0046AE25 8BC6 mov eax,esi
H3 K. W6 C8 ?+ X* y0046AE27 8B38 mov edi,dword ptr ds:[eax]
0 h& N! n9 W! z( t9 ]0046AE29 FF57 04 call dword ptr ds:[edi+4]
% b5 ^! r+ r: O: a0046AE2C 8BC6 mov eax,esi
' Y- _. }4 x* c" R8 ?5 Q8 G0046AE2E E8 4587F9FF call Unpacked.004035780 k: n- @3 S. l0 x
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]: u Y7 z$ d3 Z& m4 |: W$ O
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~2 P" p8 A1 \8 T) P) l) s
0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
+ ~* A! ^" G, \7 J+ D O7 T% u6 P/ Z0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
. Y8 F, c2 ?9 T2 X$ W0046AE42 6A 00 push 0
5 [! s4 i1 s* d& a4 P% W. C0046AE44 68 D8AE4600 push Unpacked.0046AED8
, {! r. v8 I* m% } b0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
4 S) k. }6 E% @) e- J4 f7 ]0046AE4E 8BC3 mov eax,ebx. {& V, c K* H& x' G4 ]# L3 o: S
0046AE50 E8 A3BFFDFF call Unpacked.00446DF85 i* \, F6 o4 `1 L
0046AE55 50 push eax
/ X4 a2 C* ]2 ~: T# o# e4 W0046AE56 E8 DDC2F9FF call 1 U+ m5 O& n" L7 H
0046AE5B EB 20 jmp short Unpacked.0046AE7D
7 R2 k4 v: k9 K" Z" K0 [! J6 U0046AE5D 6A 00 push 0
( T# j; X* K" N" k% s3 l3 |! f6 X0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
( z' }& G( H, v4 r0 A9 P0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
- {: H2 |2 C$ A5 n/ V/ r# a( e0046AE69 8BC3 mov eax,ebx
, X8 p$ L4 {5 `) K K# h0046AE6B E8 88BFFDFF call Unpacked.00446DF8
, s$ e! e6 L( m2 w! G; |2 {! x6 H0046AE70 50 push eax
) @! L3 Y, \6 Z% n: y0046AE71 E8 C2C2F9FF call & x. q% |# L, ]. `0 K
0046AE76 8BC3 mov eax,ebx1 H0 a6 B: o. o1 t+ ?4 O. W% X
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC O" [- x) u& i+ B
0046AE7D 33C0 xor eax,eax" q! ~% E* u. S& G' {
0046AE7F 5A pop edx( f8 ]/ D% q! I5 N. j% E5 M
0046AE80 59 pop ecx
" o$ s2 m7 q9 I8 R6 R- r9 T, |' x; P# m0046AE81 59 pop ecx
. ?7 x' e u- a! K* @0 S0046AE82 64:8910 mov dword ptr fs:[eax],edx% x& h7 a3 B7 M: E9 C4 X: {
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
M7 h, ?& y1 {) F8 J0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]2 K/ p3 x, k( x0 `: _. n
0046AE8D BA 03000000 mov edx,3
* b, a' |4 D) Z' f; Y0046AE92 E8 F594F9FF call Unpacked.0040438C
8 u2 e9 G8 |0 z/ D5 E6 u0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
- Z/ {8 |4 H1 s6 p% B% j. c. ?# r0046AE9A E8 C994F9FF call Unpacked.004043683 H, J/ r& H9 w, q+ q5 m+ G( z
0046AE9F C3 retn
# [" h: ~8 P9 X$ i/ [( Y0 m0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
5 } w4 X7 Y1 D$ a. P0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A% f. r6 Z1 A$ {' z
****************************************************************5 t! J% Z0 b* p' o1 R
跟进0046AE39处CALL来到:
?% g1 g% U% r- w7 H& \/ k. [0046B9F4 55 push ebp2 w+ S) e/ }2 U2 {' `! n5 K3 |% w
0046B9F5 8BEC mov ebp,esp% d7 `7 g2 f9 [ g. u: d
0046B9F7 33C9 xor ecx,ecx
" ~5 E, E# z' o' P$ p8 b! q0046B9F9 51 push ecx; s8 n" V9 Q" F
0046B9FA 51 push ecx/ s+ d+ a' M5 r
0046B9FB 51 push ecx9 E; g9 [5 y) j: Z
0046B9FC 51 push ecx/ P; [/ a$ A' t" W% M) U6 V! z
0046B9FD 51 push ecx) l$ r- ~2 a/ Z" L$ s$ P
0046B9FE 53 push ebx1 Y/ O' n/ ^" W
0046B9FF 56 push esi
: }/ J# ^7 _8 q0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
9 M! F0 q5 _% t' C! ?6 \) Q9 O8 q0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
# z1 X) S* \6 J0 n3 L& q2 ]0046BA06 E8 FD8DF9FF call Unpacked.00404808% F4 `- z6 n7 d6 C# H
0046BA0B 33C0 xor eax,eax
7 i5 ~: T$ }" D9 L8 N( l0046BA0D 55 push ebp
* z) I! q% B" z, P8 B0046BA0E 68 91BA4600 push Unpacked.0046BA91
6 X# |( `) R2 Q+ r* t; L1 r0046BA13 64:FF30 push dword ptr fs:[eax] ]: a( ^: V7 o# J
0046BA16 64:8920 mov dword ptr fs:[eax],esp
8 e& Z5 p: b6 P) L0 k5 K" W5 t0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]) \7 d% X1 @; [1 B( T6 f
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]; h. `5 q% u1 n( \4 S- ^
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 4 q) N4 Z6 L* A7 E' H k2 b
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]6 O, b, ^7 M" b5 t" a' N
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
* X( |: j6 x# D! t2 S0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进' X9 M# p. U* w% @$ H" j
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里% f5 C$ M2 u6 k- _' U
0046BA34 B2 01 mov dl,1 ; DL置1* e2 O5 u1 u* E7 H/ | L
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
! S8 k7 ]# B3 |2 f0046BA3B E8 78A3FFFF call Unpacked.00465DB8
" O) @' U2 |- N8 L( I' {4 `1 O0046BA40 8BD8 mov ebx,eax
( V* }9 ^( u' n( m! v$ C0046BA42 6A 00 push 01 i0 l, y: v, a4 s4 |
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14] ]$ l; Z8 T# `' w/ y
0046BA47 50 push eax
+ T* M0 d2 h9 J( u u" i8 X7 `0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
8 b8 L5 D: X5 ?: t0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
! q {! M" U% G4 U3 p- u7 f: s! Z6 K0046BA50 8BC3 mov eax,ebx) M9 f7 f" ~+ N( V% f# v3 t
0046BA52 8B30 mov esi,dword ptr ds:[eax]
5 M8 b9 F' ]$ e v; `6 a8 Q0046BA54 FF16 call dword ptr ds:[esi]
# q, W+ O( y, @' Z Z" U1 P: i* \0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX# Z, A* @: [! v
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
9 R6 G) O4 B+ g2 j* F" T0046BA5C E8 B7CCF9FF call Unpacked.004087181 V/ B6 J# u$ k# r$ S
0046BA61 8BC3 mov eax,ebx! ~" h2 i9 g$ q4 [% z$ \6 t
0046BA63 E8 107BF9FF call Unpacked.00403578
: Q& @/ x! W9 q# H2 L4 n0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX& q0 F8 d& y( H: h
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX# R1 B0 y' M! G5 f& L7 y3 ?
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~# m: j; l6 X/ I4 u9 o
0046BA73 0F94C3 sete bl ; 置BL值
- A; \! y; ^4 Q# v) L0046BA76 33C0 xor eax,eax
4 b7 \& g: N! O1 c; s% f" }0046BA78 5A pop edx
2 \* H5 K& w& V8 ?0046BA79 59 pop ecx
. M, T8 A6 r# \5 H" D: p- n0046BA7A 59 pop ecx
& v/ l( V7 w( v3 C* }0046BA7B 64:8910 mov dword ptr fs:[eax],edx
8 B9 v' d7 T8 x: `. \% C0046BA7E 68 98BA4600 push Unpacked.0046BA98
4 o+ R; P$ l, t0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
( c& `, f w, L6 D4 n6 Z0 a, o) X0046BA86 BA 05000000 mov edx,53 l. @! R4 {# ^. d/ y; `4 j
0046BA8B E8 FC88F9FF call Unpacked.0040438C$ V; ~2 h' h) I. y
0046BA90 C3 retn
: f b- L1 w0 d, i! V% q, s6 ]6 _****************************************************************/ r) r h* y2 Q, Y+ v, ]3 Y' k1 n3 Y
跟进0046BA2A处CALL来到:! C0 d1 R4 q* U4 i$ z9 t) W+ t
0046B908 55 push ebp2 n+ S* W$ o G/ X
0046B909 8BEC mov ebp,esp ?2 p @" V# Q, c% y0 C
0046B90B 83C4 DC add esp,-24
# T$ D: K, v1 n7 s$ u0 q2 R2 t0046B90E 53 push ebx
. @" H: e( C+ [# L! M8 ~0046B90F 56 push esi
# q) g) C, `, O6 M, b0 C# E0046B910 33C9 xor ecx,ecx1 v$ m2 M# p) Y$ u
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
, f8 [* n& x& W) |. x' X0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx1 U/ e; b9 z8 P
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
' [; ^& I0 U3 ~9 q5 g/ s0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx- y) L8 {& x- N+ H
0046B91E 8BF2 mov esi,edx
7 w' F8 e. B I# b9 ~# e0046B920 8945 FC mov dword ptr ss:[ebp-4],eax p$ R! |0 l0 ?6 t- \
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
9 `( l% x( A, g+ p+ ?0046B926 E8 DD8EF9FF call Unpacked.00404808
8 H, c3 u4 q+ Q: c# C9 r& g. a0046B92B 33C0 xor eax,eax! m3 c/ \: B& p. h/ z
0046B92D 55 push ebp
: }! i% r( ^) W( ~% G* j0046B92E 68 CEB94600 push Unpacked.0046B9CE
8 L* n# o, T' o$ Q6 ^3 O0046B933 64:FF30 push dword ptr fs:[eax]) ?) Q! Y% [/ d e$ `8 @
0046B936 64:8920 mov dword ptr fs:[eax],esp& `" Z+ Q- T$ F( u, h2 S
0046B939 8BC6 mov eax,esi: _' t- C+ k' C' O9 q
0046B93B E8 288AF9FF call Unpacked.00404368
/ N* g% k! N7 x8 [8 ^$ z7 f0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
, C- c* D- X! u ?; z0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX; q, A/ Q: R/ p- Y
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E44 S' {- C( q, x- H
0046B94B E8 1C8DF9FF call Unpacked.0040466C: \" y& G, R$ q h- X; {
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]- m5 w2 b9 e* K# H, X; d
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]* [* p* j9 ~0 P( `3 ~8 ^- Q
0046B956 E8 EDBCFFFF call Unpacked.00467648
" X- t5 a. S. F; P4 l, u0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
$ C( m7 a: Q9 E0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]9 m- J7 k A6 q1 Q% g/ u
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e1 B* V o8 x8 I; x# l9 c0 L
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
" B3 a7 R0 z l5 H0046B969 E8 FA89F9FF call Unpacked.00404368+ Z; m' N* }" n: u
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX$ P" }* X/ S. X4 \1 `
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
7 n) x! e( h, j; t+ A6 R0046B976 8BD8 mov ebx,eax ; EAX送EBX3 w" o; k! s9 a. l2 m9 |/ v7 l# p- I
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
# p' B. }2 p8 G3 B0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳; o m9 Q! C) O/ @7 ?" [
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
0 v& I( m# E% @- L9 O0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
( m( E- d. X; V/ L2 Q9 F0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL- D: x! k+ ^% |
0046B987 E8 BC8BF9FF call Unpacked.00404548
L ]6 K e) V1 x, k" U) b0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]/ f3 H. t0 s( z/ m" Z& g
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
8 c$ p1 W% L4 M, S1 P: H. k0046B992 E8 918CF9FF call Unpacked.004046282 _' s" b' @8 }) S6 T$ ]- {1 ]' \
0046B997 4B dec ebx ; EBX减一0 W# P5 Z+ _# q( c. c- O ]$ x
0046B998 85DB test ebx,ebx ; 是否为0' ^6 J8 U/ i6 Y/ t6 u9 {8 e
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。
' c: G% X0 S# a1 _0046B99C 8BC6 mov eax,esi8 P2 [, r- w# a5 e: C0 h3 T6 I a
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX$ b! W L0 w! \1 {/ ~
0046B9A1 E8 168AF9FF call Unpacked.004043BC
/ N; u( R6 w* D: _7 U6 Z0046B9A6 33C0 xor eax,eax0 n' E% M" ^# j1 L4 X
0046B9A8 5A pop edx$ a( H1 }0 n8 ]7 y/ u& Y6 p8 i
0046B9A9 59 pop ecx
& M) O( G* u0 i3 G+ O4 q0046B9AA 59 pop ecx
! n7 [9 M; q F% ^$ o9 {0046B9AB 64:8910 mov dword ptr fs:[eax],edx
0 I7 K( p4 w: n9 x5 F6 m0046B9AE 68 D5B94600 push Unpacked.0046B9D5
) B+ b( o- _, d: ^- p% b0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
6 S# v; z& Q% [9 O7 [$ ?3 n0046B9B6 BA 02000000 mov edx,2# v' u( ^2 l3 D
0046B9BB E8 CC89F9FF call Unpacked.0040438C
" _7 X' P, v2 M) O' W1 j0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]9 H$ H( n( k/ k) }. v
0046B9C3 BA 03000000 mov edx,3
! {" L" n9 g( w0 h! S0046B9C8 E8 BF89F9FF call Unpacked.0040438C
$ Z8 J2 ?3 F% x: s5 t8 @, }0046B9CD C3 retn- h: r% r0 q- c @( p Y! B
****************************************************************
1 z3 ]4 B& t. g* O- n' D0 Z$ T! O, |+ N跟进0046B961处CALL来到:
1 b. E! y1 }1 E; Z& S: t9 M& s/ v004676BC 55 push ebp
* A" S& ~6 Q$ C' F$ F3 U. t6 H1 N004676BD 8BEC mov ebp,esp' e f# D; ^/ O
004676BF 83C4 E8 add esp,-18
* b2 o0 z5 J4 Z- `: Y1 o- j) o004676C2 53 push ebx2 F( s/ ^ d0 l# R% Z6 i
004676C3 56 push esi
; ~5 B0 T X7 i3 R, U6 J- D' T004676C4 57 push edi0 x; `3 S# T$ C0 X+ }9 L* S
004676C5 33C9 xor ecx,ecx
/ x$ g! S: X, W* M6 R004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
* g r3 }! m8 P, _/ E2 W004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
: `$ o9 K6 X) G004676CD 8BF0 mov esi,eax: n, ?" Y M% O$ M' x
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]) M, v' \+ |. S7 O1 J
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
" ~2 p. `' j; T004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
9 E: D( q& D* a# ? f; H004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>; Q6 X, x; `; H% d1 x% m: [
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>" ^: u2 O0 Q5 }6 V, b; B( W
004676D6 8BFA mov edi,edx* c2 O0 |4 i+ h0 E( d4 S) w! T
004676D8 33C0 xor eax,eax
, o: q' x w7 M f) h$ ^9 T004676DA 55 push ebp
2 R) s$ a2 g$ q; \; I* M9 b/ ^004676DB 68 57774600 push Unpacked.00467757* I# Y) d$ e1 Q9 a+ v1 \* V
004676E0 64:FF30 push dword ptr fs:[eax]1 R9 |6 U' I* u; X# e( @
004676E3 64:8920 mov dword ptr fs:[eax],esp
! I5 n4 G. F: {" S+ j% W004676E6 8BC7 mov eax,edi8 p4 a7 W B$ m) | `
004676E8 E8 7BCCF9FF call Unpacked.00404368
. E& A' \3 Z0 Z004676ED B3 10 mov bl,10
8 F$ b' w5 P( L J3 M3 c& t+ \004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
3 `( `+ }# f2 n, p8 Y' e, n004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****( O" x1 B, ~3 i7 n. ^+ c& ^
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]) ]* T9 f5 x; ]% Y0 g
004676F7 33D2 xor edx,edx
c( D0 W+ _ d0 j6 I- ~% w004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL% |) d9 z. k* ]7 |
004676FB C1EA 04 shr edx,4 ; EDX右移4位
" e" ^4 O) o) ]) A0 l- a004676FE 83E2 0F and edx,0F ; 和0F与
: m& `9 C5 V% t; Z, V A" H00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
9 q- q$ C& t8 H& U5 g( G; L00467707 E8 3CCEF9FF call Unpacked.00404548
3 X5 L; x: G5 ~7 m1 ^3 P& F# `0046770C FF75 EC push dword ptr ss:[ebp-14] S1 a* n% X2 x% G% k, s
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
2 y+ p; j r/ X00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
0 I) D- ~$ j6 E; E00467714 80E2 0F and dl,0F ; DL和0F与
) j) K+ l3 X, m7 K+ t3 ~, a00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与/ K. m6 _5 r$ v- W
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
. Z" k8 z; f6 B+ W: v& T9 U00467723 E8 20CEF9FF call Unpacked.00404548
! T3 l- J2 @. }3 N" u a7 R: e00467728 FF75 E8 push dword ptr ss:[ebp-18]# i( s V! |/ s. I$ j, p
0046772B 8BC7 mov eax,edi ; EDI送EAX
- t8 v- ^- F& d4 y9 p5 `( E0046772D BA 03000000 mov edx,3
: ?( z7 Z2 p3 F1 t$ B3 q" m00467732 E8 A9CFF9FF call Unpacked.004046E0# i6 t8 y) {- j8 ^8 I! m. D
00467737 46 inc esi3 x: n: I& h9 f% P
00467738 FECB dec bl( N8 r) [# m+ H0 c% q9 n" K" q
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
9 L1 l' ~% Y+ `0046773C 33C0 xor eax,eax
* B$ H$ H4 T$ F: H4 r' T0046773E 5A pop edx
: \6 l @6 w$ O1 s+ W0 N0046773F 59 pop ecx
, u/ d( ?# B* C" l+ v+ s4 ]5 a00467740 59 pop ecx
% J/ c) h" N" U, h' v00467741 64:8910 mov dword ptr fs:[eax],edx4 I' T: o$ }% l8 J, r
00467744 68 5E774600 push Unpacked.0046775E6 k6 E1 A! z# a1 e. E1 J6 H8 B& h
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]. w: G' j& Q, D' O7 P3 R
0046774C BA 02000000 mov edx,2# V% }' c% ?9 ^) w, }* I
00467751 E8 36CCF9FF call Unpacked.0040438C0 h; P, ~2 J/ p
00467756 C3 retn //返回/ M: Q5 F# z& k1 h2 J# ~
———————————————————————————————————————————; A! }% K* m0 E& L. G+ p, C( l
【Crack_总结】:
, T4 O5 G( ^( U; u4 ?: h+ \将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
9 p! r: v$ ]4 f+ b: J* v7 G机器码:bbba33de56c4cf31d9063cc074248d4b0 [* ~! j% }/ [9 f9 P
注册码:e807519487d7ad4f57ad42dc87fbb191
- ~# p; [/ y3 S% v附件: MakeSign.rar (249 K) 下载次数:298 |
|