|
|
|
【原创】破解图章制作系统
, p+ w! l# r8 Y/ x/ b0 O日期：2005年5月15日 破解人：yijun[PYG]5 }7 L' o. R6 P9 p2 Q# n
———————————————————————————————————————————* @+ T6 p" H" L d- b* K# C
【软件名称】：图章制作系统 软件版本：1.0- ^9 k, Z& T: `/ ^1 N$ {
【软件大小】： 252KB
/ P2 p9 j" J& D! j5 Y3 F, ^【软件简介】：制作各种图章6 }" @6 a$ M7 O6 k9 |2 P
【软件限制】：NAG2 @4 S& u$ E1 F6 K* c/ O
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！9 G# h2 x: J- q: o, W: T8 u+ x
【破解工具】：OD,PEID# ]# A+ J9 B; X
———————————————————————————————————————————
" t+ N8 f/ M( e3 s Z6 V
, |8 C0 k' I$ ]* n2 Q【破解过程】：% c! Z+ m. o2 a/ l+ w- L% N+ Y
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
: }/ \" X. h' bOD载入，通过字符串查找很容易来到这里：
3 V' n5 Q; v, p; c7 P) |$ V9 n( o9 m1 l% _0046ADAC 55 push ebp //在此下断. B' L8 R0 p7 _- T" `5 P; K% b Z
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
6 s$ l1 L& O* u, P5 C$ J9 [0046ADB2 64:FF30 push dword ptr fs:[eax]
! W* F- D5 y) p+ x, H0046ADB5 64:8920 mov dword ptr fs:[eax],esp
6 V- ? d' o$ [$ q$ B) N0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]9 D- I) f1 Y) b. _
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]8 c* L2 E2 [! X8 [: u
0046ADC1 8BC6 mov eax,esi
* \& ^2 b) t4 i, C5 j0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
5 B$ _1 Y" d6 D* l t8 h* [0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX) X: E' \* O$ w- \$ |( x
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]8 L* {: e1 G% B+ d$ | d- ~& N
0046ADCE E8 45D9F9FF call Unpacked.00408718
, z: w, x# g, A! ^0 u& F! Y0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX' x9 T1 F" D H) c& ^8 G9 O
0046ADD6 8BC6 mov eax,esi
; y7 F% E2 a5 b0046ADD8 E8 3359FDFF call Unpacked.00440710/ [- v# Y& h7 }$ W$ N4 p; M& B! L
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
- W" {+ W4 P3 E7 _' ^9 P8 _0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]6 \" S; L5 f2 O- ^) V
0046ADE6 E8 F558FDFF call Unpacked.004406E0
" _" t, b8 J( ]5 b# ~+ o. R* g2 {/ @0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
0 a& i7 f& T! W0 l: n$ p0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳9 l% S- Y6 d, \% ^, Z
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX2 |! H# F3 p1 w$ y; Z/ p! I
0046ADFA B2 01 mov dl,1 ; DL置15 b8 C( i5 |# ~$ c6 F) ^8 [
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
" x% C# {6 G- A0046AE01 E8 B2AFFFFF call Unpacked.00465DB8$ t7 a+ n) h" Z+ u! ~; e( _* y
0046AE06 8BF0 mov esi,eax
. ^. j" y. Y/ j. ]0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
* V3 y9 b/ l6 | S0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]8 o0 a9 r. d* I2 r$ Y& f( @
0046AE11 E8 CA58FDFF call Unpacked.004406E0
7 q' d: G2 h7 i! i0 ]$ O5 S0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
& c7 J1 a3 ~: m1 ~' v( u9 P0046AE19 50 push eax
. v7 h$ j9 u A. ?, b% W h0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX0 Z% j8 k' ]7 b$ D6 I
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]9 N* n" U9 E/ j! G
0046AE25 8BC6 mov eax,esi
" v( v4 J7 ~1 V+ t# S4 b6 e/ A/ m4 `0046AE27 8B38 mov edi,dword ptr ds:[eax]0 N4 T' |" x* n! ]0 ?7 O4 ^/ {3 U
0046AE29 FF57 04 call dword ptr ds:[edi+4]
; q+ |, | J6 d, m% i; q3 F* m0046AE2C 8BC6 mov eax,esi
5 P/ B, r% p( y2 [" d0046AE2E E8 4587F9FF call Unpacked.00403578
2 F% t; N4 U: P! V2 E0 c0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]" U" J! S e2 l$ w
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
6 y! g/ F" V0 k4 y& n1 e0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
. }0 p6 ~) O* Y) ?& w0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
; Z1 [& W, b& q3 }* v% l t0046AE42 6A 00 push 0! M' z# L! [. Z% {$ A
0046AE44 68 D8AE4600 push Unpacked.0046AED8
8 K% a9 p+ g, S' @9 P0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
5 T0 ?/ g; G0 S9 E0046AE4E 8BC3 mov eax,ebx; L% c* N' W1 b' `
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8 \3 H$ ^) ~2 U( _8 k" I
0046AE55 50 push eax
/ O& A( H4 K/ @0046AE56 E8 DDC2F9FF call
% _. _: v" J; ~1 n. k2 B0046AE5B EB 20 jmp short Unpacked.0046AE7D
% g/ z( ?) G" T/ k/ f% C0046AE5D 6A 00 push 0, n5 C s1 Q; N8 o5 P! k% Y( x
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
5 A9 ^6 q ]5 U: q+ O/ B+ J0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
2 l7 Q/ L* ]3 a. f, f- m" j0046AE69 8BC3 mov eax,ebx8 d$ R- ?9 Z. C# u, A' B4 R4 D v
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
+ e& @" L/ y7 O4 h* p# y5 g3 |( _0046AE70 50 push eax" s# _# S* s" O) @. T
0046AE71 E8 C2C2F9FF call
. [+ S% b7 d6 k0 Q t2 M% o8 S+ V0046AE76 8BC3 mov eax,ebx
8 S! _& V, d. u0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
1 h1 S( m3 B6 @9 C; ~0046AE7D 33C0 xor eax,eax% u4 B8 J* d5 X* E, K! B* k! L! L
0046AE7F 5A pop edx: L8 e( j- }: X L
0046AE80 59 pop ecx8 ] r* A" {8 J" x
0046AE81 59 pop ecx
# |6 c+ R0 b! s( ~9 U. t2 S2 o2 ~8 X0046AE82 64:8910 mov dword ptr fs:[eax],edx& d( T3 S, U- \- ]! f. G+ n
0046AE85 68 A7AE4600 push Unpacked.0046AEA74 c4 c: e! F' j" d* z, G
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
9 `1 }6 C, N# ?3 i% H; `+ O; @# g0046AE8D BA 03000000 mov edx,31 Q; G3 g; I f
0046AE92 E8 F594F9FF call Unpacked.0040438C
. y- e3 s; l6 j& i0 b0 ?) ?: P0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]! S8 Q* h7 G/ k9 j6 Q, [+ H% N
0046AE9A E8 C994F9FF call Unpacked.00404368& _- H o% o+ b' `3 x
0046AE9F C3 retn
" M: }/ R( I/ J& D; A; j4 ~! z0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C L# l4 q2 Q* T3 C: c+ @
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
4 A# Z2 t' _, {, a' G****************************************************************' D9 X4 v2 ]9 `; T% t& X
跟进0046AE39处CALL来到：
4 \, X' K' D/ H. K! I( B0046B9F4 55 push ebp8 _+ G3 a' p8 M
0046B9F5 8BEC mov ebp,esp
( a$ M: f y3 Z% k0046B9F7 33C9 xor ecx,ecx' B f" j( Q5 p, c# W
0046B9F9 51 push ecx
0 F8 [' t4 A9 C& I# o& g0046B9FA 51 push ecx
4 R& N8 P* P5 E6 r/ s. Y0046B9FB 51 push ecx" m8 |! c2 r1 K R9 @3 o- k
0046B9FC 51 push ecx# ]& _7 }, E S8 q6 x
0046B9FD 51 push ecx/ u4 }& M: Y9 p7 o0 I* o
0046B9FE 53 push ebx
* j% _! ]) A' ~0046B9FF 56 push esi' I! I* c6 o7 Z5 g) h5 l% ^! y5 m" d
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax% j/ {3 i- w% g
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]0 n$ T1 n1 I& E3 W3 I/ o+ D: W& h5 Q
0046BA06 E8 FD8DF9FF call Unpacked.00404808
1 ]2 ?& _) d; M6 \+ {5 Z0046BA0B 33C0 xor eax,eax+ @) u3 ^$ k+ ~5 \6 z1 n
0046BA0D 55 push ebp7 I9 O7 q4 {4 a G6 r. `- B
0046BA0E 68 91BA4600 push Unpacked.0046BA91. J9 t( r6 m4 b0 n6 d% R
0046BA13 64:FF30 push dword ptr fs:[eax]
" C; O( V. d3 b( W+ F( Y0046BA16 64:8920 mov dword ptr fs:[eax],esp
- K( T' u6 o! A0 [4 A5 P0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]4 P2 L# m2 ^3 i# Z
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]( G7 I; s n& C4 j
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 6 a# S* r4 ~- I7 I! e0 g2 \( X
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]5 ?4 S2 N+ N; P+ V/ k2 ?
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
/ }8 p$ Q4 b6 c8 ?6 _4 b0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进* J; u0 J! n' i1 t- p
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
; Q1 K/ @: \0 o1 k0046BA34 B2 01 mov dl,1 ; DL置1
; u' }( \ g5 h4 a, f0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
% k" K! }" }7 z- B# h' Z g0046BA3B E8 78A3FFFF call Unpacked.00465DB85 v0 W! [6 s9 b6 u
0046BA40 8BD8 mov ebx,eax
. ]. }) X) k- Q( N0046BA42 6A 00 push 0
2 y4 ?( w3 ?4 Y$ {5 @: P2 @9 j: _1 J0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
: S! I2 x3 n" [- Q& D+ n0046BA47 50 push eax6 e8 h5 g. A/ u2 U- @
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
) D+ P! ^* t/ @" [8 W6 u+ R. S0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]* O& Z9 o3 }7 I( h4 p
0046BA50 8BC3 mov eax,ebx+ F7 @6 [) }8 K3 f' M, H* U' S `7 b& V, w% i
0046BA52 8B30 mov esi,dword ptr ds:[eax]
9 I. n8 Z# S# J' y( r7 e0046BA54 FF16 call dword ptr ds:[esi]& [) ] z3 g Y1 Y3 I
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
4 [3 L/ P0 f/ R' m5 |; I$ G0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
6 g3 h0 n% B3 a8 S7 h0046BA5C E8 B7CCF9FF call Unpacked.00408718* v# }& m. H/ A5 k
0046BA61 8BC3 mov eax,ebx
2 t) P0 g8 p& w+ d+ a0 B6 n+ U$ A1 n0046BA63 E8 107BF9FF call Unpacked.00403578 * R) m( ?* b( J2 F! q1 u8 W
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX* t& x! p U& `
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
7 I/ b) Q/ d1 y0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
% a- @9 P3 a) ^& S/ M. @/ C/ B0046BA73 0F94C3 sete bl ; 置BL值
, y( X% ^- |2 k: V& o) R0046BA76 33C0 xor eax,eax
* l7 J/ C4 |9 h9 e; w' f0046BA78 5A pop edx$ x4 g& F* ?; |4 c+ p, J. p9 d
0046BA79 59 pop ecx- x9 Z3 H- `. M# D2 W4 {$ y9 T# X8 J) ]
0046BA7A 59 pop ecx
& P# j- w/ Y' ?( F# n0 {0046BA7B 64:8910 mov dword ptr fs:[eax],edx
% T; v2 X- @! `6 F# s0046BA7E 68 98BA4600 push Unpacked.0046BA98- c: V P( b& r1 Z5 q
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
. u+ u& M) @, ]) g5 H& D' h& a/ E0046BA86 BA 05000000 mov edx,5
0 p3 m. F; g: O2 P0046BA8B E8 FC88F9FF call Unpacked.0040438C
7 t& N: a) c7 ~ o# C3 {; F, ~: K0046BA90 C3 retn
% e5 Y! i! J U" @$ c" }# l****************************************************************- |# `: V4 |$ h; i1 b1 B1 e
跟进0046BA2A处CALL来到：: U, s& p+ P4 d! |. i
0046B908 55 push ebp/ \1 O0 s8 t7 M Y" M
0046B909 8BEC mov ebp,esp8 q9 ~8 C# I$ E% c6 W( h9 T
0046B90B 83C4 DC add esp,-24
) v( k7 a* M$ h" _3 J& \0046B90E 53 push ebx
j6 F5 |7 ?& |0046B90F 56 push esi% m: w0 d) q/ o
0046B910 33C9 xor ecx,ecx
- y _# b- D' r4 w" W8 w0046B912 894D DC mov dword ptr ss:[ebp-24],ecx& R0 g5 J, o$ V- i& j+ p
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
2 s4 ~! e! K, D2 W9 X& g0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
0 }6 _, A; m/ _; ]+ S: f' Y0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx' C$ B- v# h5 m8 v1 V8 \8 I1 ?3 Y$ P- m
0046B91E 8BF2 mov esi,edx5 @( z# e- b1 r6 Y
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
) V: W3 w& J% ^* p+ K) K5 T0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]) Z7 q# M0 l% d6 z8 o" p; K, ]$ @
0046B926 E8 DD8EF9FF call Unpacked.00404808& m; y; z, Q& F' F7 V( i8 B
0046B92B 33C0 xor eax,eax8 g0 Q* C4 z$ B. F5 U$ v
0046B92D 55 push ebp- }/ ^+ {% O' P9 W2 n1 [
0046B92E 68 CEB94600 push Unpacked.0046B9CE
& Z0 i3 O; K5 a* d: @' j u) B* y0046B933 64:FF30 push dword ptr fs:[eax]1 Z' u$ t- d5 @! Z1 [9 x6 J3 G
0046B936 64:8920 mov dword ptr fs:[eax],esp/ |4 i5 o' a9 d' U" c& }
0046B939 8BC6 mov eax,esi
1 x7 L' T4 c9 ?. h3 R0046B93B E8 288AF9FF call Unpacked.00404368
y& P) _) e, b- ]: M; ~0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
9 [! a* e! N! {6 Z1 d/ Y0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
9 [6 L' L, o1 `1 _( Q& F( X, m0046B946 BA E4B94600 mov edx,Unpacked.0046B9E48 a4 Z4 c& @/ \0 m% Z# `
0046B94B E8 1C8DF9FF call Unpacked.0040466C
! X6 z1 L: P( ^ u% P1 {. ]0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
5 ]( y; C$ \- F/ }* l0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]- q- v# W- l6 ~# l# T- i" G: a1 e
0046B956 E8 EDBCFFFF call Unpacked.00467648
: D" N: V* B' v& N- p% r; M8 ^0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]+ l9 `, s/ r- ?+ v+ V& J$ h0 k
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
5 h4 X& x# r( ]( v2 \# H0 x0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
) Y! M; h" q2 Z* V b0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~% n8 S$ j# f/ N# K/ E; Y" K
0046B969 E8 FA89F9FF call Unpacked.00404368; Y, ~$ _' {) O0 m: x
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX s9 P- _! j J3 l- \/ \
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
7 F* N* Q9 K) Z& I0046B976 8BD8 mov ebx,eax ; EAX送EBX
6 ], g5 k) s1 y1 e2 j( P0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
- i7 q" R, N! o5 h4 _0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
' ^) w& V" Q2 Z* k& J& S3 f; [# v* O- y8 ?0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
( j. J3 M% ^! w+ v* U0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX M. u" s1 |$ A
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
, M7 K y6 ^( E( d" } T0046B987 E8 BC8BF9FF call Unpacked.00404548
0 k$ ]8 W3 G! b( m3 h# B. S0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
. Q5 Q0 ~2 d: H8 h0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX9 k% L+ G. ~, @+ S
0046B992 E8 918CF9FF call Unpacked.00404628
. ?+ t$ h" s" E9 p8 R1 Y0046B997 4B dec ebx ; EBX减一. G$ W/ ~$ Y8 ?* l# `
0046B998 85DB test ebx,ebx ; 是否为0
5 T( |. n1 E( T0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。& \2 v7 \: w" R! R }4 K9 f
0046B99C 8BC6 mov eax,esi) k' Q3 G" U1 X. R0 {" Y" Y
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
/ F% \+ u3 _; U0 t9 |0046B9A1 E8 168AF9FF call Unpacked.004043BC+ q3 P) k( z1 \- @, Z4 S
0046B9A6 33C0 xor eax,eax+ ?) t5 i. A1 B5 H# l) T& c0 v
0046B9A8 5A pop edx
p, q4 C0 v" e0046B9A9 59 pop ecx
% I; o% ^, W* ^$ n/ H0046B9AA 59 pop ecx
1 ]& Z [& A8 O/ b, w: r% d9 J0046B9AB 64:8910 mov dword ptr fs:[eax],edx5 ~' ]$ w6 ]' ^. l
0046B9AE 68 D5B94600 push Unpacked.0046B9D5, a. G* r [7 |, m- M0 ^
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
2 p$ |) A" H5 z! \ E: D; U) C0046B9B6 BA 02000000 mov edx,2
! E* ]/ {: U: X7 M, B0046B9BB E8 CC89F9FF call Unpacked.0040438C
$ Q; D& ?# l4 z- @: R0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
9 p0 k, d/ E% b3 ]( A2 T _) q$ ~0046B9C3 BA 03000000 mov edx,3
- {; M$ ?2 ^2 ^0046B9C8 E8 BF89F9FF call Unpacked.0040438C/ [; g) {4 u. V; _* `3 L& t
0046B9CD C3 retn
; o& a: ^1 b' z% a9 B****************************************************************
g1 E6 L; z4 \* P: x/ {3 Y# d跟进0046B961处CALL来到：
5 A9 d3 _0 j) _% V: a004676BC 55 push ebp, ~: o" _2 }6 c
004676BD 8BEC mov ebp,esp+ X. J0 h0 d# ^ k- x9 f' B5 s
004676BF 83C4 E8 add esp,-18
: n5 f2 L) h; l4 V7 ~004676C2 53 push ebx
, X2 W I5 D- l1 ]004676C3 56 push esi; T! p7 a: |. s( `! j7 z2 e
004676C4 57 push edi. v* J1 t/ i: o9 w8 ?
004676C5 33C9 xor ecx,ecx
: L6 `, ~! Z4 ]: S0 V0 y004676C7 894D EC mov dword ptr ss:[ebp-14],ecx0 t* `+ w6 ]6 J4 J" U
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx0 V$ x3 d. H" L' j
004676CD 8BF0 mov esi,eax
% D8 P z/ }" L' a# R+ E. S5 o004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
; Z, V% i$ f" S/ o1 F4 [1 A004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
! N+ D+ C. l# n9 @004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
x$ l* I" {4 m2 l' ]004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
+ f. G9 b/ k( r, W6 x3 v004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi># g [, M$ d; z7 S+ v2 A, S
004676D6 8BFA mov edi,edx9 b7 q. w3 t0 g5 p* V; [% X
004676D8 33C0 xor eax,eax9 J' n- e( s4 r- X
004676DA 55 push ebp) w% ?. D' B& I$ H$ ]9 x
004676DB 68 57774600 push Unpacked.00467757( |) R0 C5 m' g( }" i& S
004676E0 64:FF30 push dword ptr fs:[eax]/ O8 C, U2 W" y3 w) _
004676E3 64:8920 mov dword ptr fs:[eax],esp
! u+ m2 Q& j. N% O8 Y004676E6 8BC7 mov eax,edi
4 l: o# h: Q- H4 T- K/ y! z004676E8 E8 7BCCF9FF call Unpacked.00404368& b2 H" x0 x/ z/ a
004676ED B3 10 mov bl,10; n! Q. i8 I$ x& w. c# o# ~7 _
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]+ T" `. _* h' f1 _3 f0 ?+ W7 {2 {) A
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****8 I' [, s( @: b0 r
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
3 B* A |$ _" l1 p004676F7 33D2 xor edx,edx
! v, p! N/ l" j/ Q0 Y, }3 P004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
3 E3 x5 c, f* e; d) J7 a' q004676FB C1EA 04 shr edx,4 ; EDX右移4位- T* u5 P6 P' x, j0 L5 e9 U1 u
004676FE 83E2 0F and edx,0F ; 和0F与2 e- v* c) l& Q4 ^
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
3 b6 ^3 U/ m' V: q00467707 E8 3CCEF9FF call Unpacked.00404548. u( @$ c( x! x/ x
0046770C FF75 EC push dword ptr ss:[ebp-14]
- d9 @( X: t. m( P7 U+ a3 j! c0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
3 f/ ]2 G% j+ O! B00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL( ?. S3 @ k7 ]0 ?4 G/ g$ W. j
00467714 80E2 0F and dl,0F ; DL和0F与
. k' N4 x7 h' [: o6 ?00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
/ p( o* T% Q/ P4 `2 w; O0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
% J# {* ?( ^9 N7 M7 M4 \# w00467723 E8 20CEF9FF call Unpacked.00404548
) _5 w1 m+ C0 p4 j00467728 FF75 E8 push dword ptr ss:[ebp-18]1 w8 C$ Y! B) c: \4 M1 A% A% @# a
0046772B 8BC7 mov eax,edi ; EDI送EAX5 a; V4 S, m& }) C0 y7 x
0046772D BA 03000000 mov edx,3( m' B" i% u& d8 R! F! B/ c3 m Q
00467732 E8 A9CFF9FF call Unpacked.004046E0
3 v; Y6 T( p- I1 Q2 T. w2 o+ g! z Q00467737 46 inc esi
# W) X! b7 E m5 h00467738 FECB dec bl) _: r4 H) {: P, x8 I' x7 h
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e. J g- v s2 z! d& y, S3 x
0046773C 33C0 xor eax,eax
) {6 b! q. s! T0 E7 u7 }0046773E 5A pop edx
: v5 u( q6 q. j0046773F 59 pop ecx, a( L* {6 q3 r% r" N) [
00467740 59 pop ecx# }! q- R+ w/ r, K9 I2 R% ]
00467741 64:8910 mov dword ptr fs:[eax],edx
, g. N9 }+ Z8 t: U' [2 G7 @00467744 68 5E774600 push Unpacked.0046775E
5 X5 Y* v- k u, w' m d5 f. [' E00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
3 f P! r R2 U7 j0046774C BA 02000000 mov edx,20 B& [- N! Q7 i% @0 J( W: p1 S
00467751 E8 36CCF9FF call Unpacked.0040438C
3 N( s6 i# h! Z# C: N' m00467756 C3 retn //返回& v+ y2 X2 Q( ^( @/ _ `
———————————————————————————————————————————
5 Z F7 c' P& j0 Z* S1 R' n. _【Crack＿总结】：
! r; ^4 t7 {. w4 I2 F5 x4 {& z; k将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^) l9 [# b `$ o1 f; z
机器码：bbba33de56c4cf31d9063cc074248d4b
6 d+ |5 g. I/ F! B注册码：e807519487d7ad4f57ad42dc87fbb1912 q. v1 i/ ^* f2 X
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡