|
|
【原创】破解图章制作系统- p* v% S$ g$ b9 s- G+ U6 q
日期：2005年5月15日 破解人：yijun[PYG]- \- h, y- _$ ?6 X% e
———————————————————————————————————————————7 h, \6 I; Z& W5 K1 w7 E \( m" Y
【软件名称】：图章制作系统 软件版本：1.0& I' V' r+ K) l% }9 b: T) ^
【软件大小】： 252KB
0 t n! _1 g7 S. f【软件简介】：制作各种图章
9 P% ] ^* J9 a! ]; S$ l& O) `- Q/ A【软件限制】：NAG$ P/ W% g- Z1 ~2 T" {$ C" ~
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
; z( y3 |. W1 R/ ]【破解工具】：OD,PEID
/ M! j- c. }- ]0 w———————————————————————————————————————————7 n: F; d4 e9 c4 a
5 P, l& B" e" h2 v【破解过程】：
/ j4 g0 T8 c% C3 F4 YPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
3 q8 ~& k3 Y# Q1 L2 ?, T: x2 BOD载入，通过字符串查找很容易来到这里：
) f, m1 ?) J; }4 \6 X. |- S, d( C0046ADAC 55 push ebp //在此下断: @4 v4 c/ e% i+ B; b" t
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
- C/ V4 ?7 f- E7 W& D5 a" i0046ADB2 64:FF30 push dword ptr fs:[eax]
: K* D9 N' U- q6 {, c0046ADB5 64:8920 mov dword ptr fs:[eax],esp
& q1 t6 n4 T) t5 O& b4 [0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8] |- h# d& A; D0 j9 H1 Q& j5 x) }3 ^
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
- y" M& ], o/ d9 b0046ADC1 8BC6 mov eax,esi
4 s: z9 O. k b! @0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
- H2 F9 U" o! J/ v- t0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
# J. ]3 V' Z8 M0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]$ D5 E7 `. I. H) }& ]
0046ADCE E8 45D9F9FF call Unpacked.00408718. o, V8 t. c' N, @2 l, |/ W
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
; B: f, D; m4 c9 K5 _5 E0046ADD6 8BC6 mov eax,esi% c9 _+ Q8 C0 D2 X0 v v
0046ADD8 E8 3359FDFF call Unpacked.00440710 F4 t8 x( |8 ~% L% n
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
, S4 T( |# K+ T7 b1 @5 z6 X1 \0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]' ^* d! O6 W1 V. C
0046ADE6 E8 F558FDFF call Unpacked.004406E00 \ Z' Q4 O! F- w& a1 u( R, ]
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空& W3 k( S: f; u$ s
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
. ^9 B/ ~1 p4 l0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX: |, }7 y: T/ P7 c; a/ U
0046ADFA B2 01 mov dl,1 ; DL置1/ | X! ]0 W% B4 H
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]- C7 C( c' g) D3 y
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
4 q: T" v% \) h1 v0 y4 \0046AE06 8BF0 mov esi,eax% @: F; J7 r+ ]: e) b4 e* o
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]0 ]8 P) w# z# X# {
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
1 k' c$ a/ A0 ^& h0046AE11 E8 CA58FDFF call Unpacked.004406E0
' P. S0 ^. {; n, @7 h. C0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
( `6 M. i* N4 j0 w) H% H0046AE19 50 push eax
* B9 U7 z; Z' m0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX( w. A4 v6 t; b+ K% t
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
$ I4 v- \( F$ g& j! Q0046AE25 8BC6 mov eax,esi
) v9 j- L5 N: R0046AE27 8B38 mov edi,dword ptr ds:[eax]% m; u8 b3 l) Y* a4 }0 ^7 p, ~$ D
0046AE29 FF57 04 call dword ptr ds:[edi+4]# T" w% m( m; Y) B, @& B! j& Z# [; b
0046AE2C 8BC6 mov eax,esi
4 [- E" z. [ d2 L* W9 R0046AE2E E8 4587F9FF call Unpacked.00403578
; ?8 j! ]! ?1 d9 O0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]* Z2 k" S3 u% }1 ?3 x
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~; N) k- s1 X& ]$ A; E! N
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）2 |1 a- q" z+ j7 Q$ \
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
5 M* ]/ {! Z. h# O+ L; W: m0046AE42 6A 00 push 04 `1 z) N/ A9 j, u( c; b! Z' v! {5 E
0046AE44 68 D8AE4600 push Unpacked.0046AED87 ~) L2 s' G. ]
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误! x) Q7 R' o$ U0 a
0046AE4E 8BC3 mov eax,ebx
1 z2 } f( q4 s0046AE50 E8 A3BFFDFF call Unpacked.00446DF8+ S; N5 J0 g! d
0046AE55 50 push eax
1 W; r' S0 W% {0046AE56 E8 DDC2F9FF call
" M+ V+ Q5 V5 ~! C6 ~/ }0 ?0046AE5B EB 20 jmp short Unpacked.0046AE7D
# q8 L, _2 y/ J. w0 U0046AE5D 6A 00 push 0' [4 g1 h7 o5 Y% `7 M/ r/ o
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
3 |& T5 p/ `! c. \+ V5 ~" U3 H. W0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
1 s7 p" y* Y7 \1 d# ~/ _0046AE69 8BC3 mov eax,ebx
+ }+ H$ n# u0 S6 D$ t0046AE6B E8 88BFFDFF call Unpacked.00446DF8
& U7 [1 F$ X& m* Q0046AE70 50 push eax7 O4 K# v7 T5 I" z
0046AE71 E8 C2C2F9FF call : |& ]9 k$ U; b" g! d3 K
0046AE76 8BC3 mov eax,ebx% R2 Z9 L! @ x" n) @% [6 W! Q
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC' a: h* I7 ?# R5 U# _, W1 ~
0046AE7D 33C0 xor eax,eax
$ Y) W7 a4 H3 \' q; o4 s0046AE7F 5A pop edx4 H( P- H6 q7 x* G; L& _) O
0046AE80 59 pop ecx
# T: ^; ]3 ~2 N7 j* j2 ^" G0046AE81 59 pop ecx
/ k0 W8 X/ _( f6 l( l0046AE82 64:8910 mov dword ptr fs:[eax],edx7 s( |% l0 ^. X9 f& u
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
& a% y, P* F' H0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]/ R2 c+ x9 M {! l" W7 f
0046AE8D BA 03000000 mov edx,3: o( \) F0 I* K$ q$ r8 M @ i; H
0046AE92 E8 F594F9FF call Unpacked.0040438C
) f* u; h: Q2 @% G0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
, @$ Y- v" U* D& ^% L( b0046AE9A E8 C994F9FF call Unpacked.00404368
; M! t1 H+ ^& \) H3 F0046AE9F C3 retn
0 B8 Q6 c' [+ x. Q0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C/ z) B6 p; x' C2 G0 B E( ~
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
! R* U: S1 w2 V* Q- n5 _$ O****************************************************************+ s/ m2 D5 Y& a: T1 b9 v
跟进0046AE39处CALL来到：
& w4 f Y* h' n' t( E! R0046B9F4 55 push ebp
! S2 M2 ^- b. w! T0 X2 \0046B9F5 8BEC mov ebp,esp
# p" e8 D3 [7 y2 ~" w4 S0046B9F7 33C9 xor ecx,ecx9 y6 J* D- ~7 ]8 u9 P I0 @
0046B9F9 51 push ecx
4 n3 t. k1 d5 l6 X8 Q8 c. ^0046B9FA 51 push ecx+ @0 w$ |6 b' ~! K& E) n
0046B9FB 51 push ecx2 z! D: B: k( K, y+ d! @
0046B9FC 51 push ecx+ h3 S" E* [: {+ h( U
0046B9FD 51 push ecx" a; a9 I. t( e( B" b, R0 n( a9 B* _
0046B9FE 53 push ebx4 r" W$ Q/ Q" F$ v
0046B9FF 56 push esi
; ?/ J! g: A1 A4 _+ d0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
6 G! c+ e" s6 x0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
) k8 \7 ~. `4 c; |0046BA06 E8 FD8DF9FF call Unpacked.00404808
; |: L3 T0 s+ C% W4 p7 }& A* J; n6 h7 C1 U0046BA0B 33C0 xor eax,eax
4 Y; t# ]- I8 W- c0046BA0D 55 push ebp
% c. W$ [9 G2 T% s0046BA0E 68 91BA4600 push Unpacked.0046BA91
+ `; A r, y( P% l' T5 a9 y. V8 g- j0046BA13 64:FF30 push dword ptr fs:[eax] `$ m! ]! u$ [
0046BA16 64:8920 mov dword ptr fs:[eax],esp, f% Q* o& o4 ]: Y. D2 N
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]/ u" |6 x V& X0 U7 `8 H; p% W: r3 f
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]. D( N! V6 k# o2 g
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ' ?. u1 r9 W2 h
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]# @ W7 D+ T9 |* {: ?
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX1 D7 C' F1 @7 I3 ]. g3 P, c
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进/ F- f& Y# i" \: M
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
/ T9 ~6 W# `$ P9 h4 X: y( Y" n3 @( W0 ?0046BA34 B2 01 mov dl,1 ; DL置1$ j/ y- {- P( t- t
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]) T5 ]9 ^; L; _
0046BA3B E8 78A3FFFF call Unpacked.00465DB8; u" c# v# C" r* ^! ~" h
0046BA40 8BD8 mov ebx,eax
5 T6 |4 j9 Y$ J* U4 k0046BA42 6A 00 push 0: j; X' z& C6 |6 {8 @
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]7 A# |( o: k5 A( _* P+ K4 I
0046BA47 50 push eax. W+ W+ I% d( W2 @0 \1 m. K
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
4 I7 \ D6 x0 J3 s& T' X9 N& @0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]" j+ T- l2 @, a$ K8 w
0046BA50 8BC3 mov eax,ebx9 ?' w/ `6 V9 ?. g6 `3 F3 M7 `
0046BA52 8B30 mov esi,dword ptr ds:[eax]
! f( {4 I( Q9 P+ o5 o0046BA54 FF16 call dword ptr ds:[esi]$ j2 C2 n, H) r' C* O/ G0 b
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX3 z: C, k- Z9 t
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]1 L1 f( {( L, Z! a
0046BA5C E8 B7CCF9FF call Unpacked.004087188 F7 t- {; i/ o3 \1 A5 C) @
0046BA61 8BC3 mov eax,ebx
( S) j" [4 k0 I# Z0046BA63 E8 107BF9FF call Unpacked.00403578
- b. \0 U( h) h8 p) }0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
6 b! F) C+ R; E8 h @( q0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX! D( E' B9 Q7 l
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
, r6 m! r m0 }8 F0046BA73 0F94C3 sete bl ; 置BL值, g' `* g ^; }7 Y/ s% A' V
0046BA76 33C0 xor eax,eax
" F" R4 L; h% S1 _) W! J- U. }0046BA78 5A pop edx
, O9 ?( A( J. X4 P; i' Y0046BA79 59 pop ecx+ n2 {( H/ q: M
0046BA7A 59 pop ecx
, i" W. P2 Z, E0 z; O% g' m0046BA7B 64:8910 mov dword ptr fs:[eax],edx
7 D; I9 V) {; X& f! Z0046BA7E 68 98BA4600 push Unpacked.0046BA98
; {* W W1 e, n0 @2 L8 L3 W0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
7 z3 r: K/ g4 T0046BA86 BA 05000000 mov edx,5
' I) h1 w7 t" F& T0046BA8B E8 FC88F9FF call Unpacked.0040438C$ C- f5 [' I0 W0 Y" }1 n
0046BA90 C3 retn
4 m( L. T* z4 I+ ^6 \& ~# P****************************************************************
/ L; \% N# D: Q5 z1 A跟进0046BA2A处CALL来到：
4 ]1 Q- K- o# H5 S$ h( _6 v8 i0046B908 55 push ebp
# t" Q4 H: }% l5 S% e. H3 l0046B909 8BEC mov ebp,esp
/ K, {( g: U; T, i0046B90B 83C4 DC add esp,-24
, R7 n5 Y& q$ K# w3 J' ~/ I* F+ b7 \0046B90E 53 push ebx
6 }+ u$ }' A. J0046B90F 56 push esi
4 p$ {3 t# m" J7 B% r0 T0046B910 33C9 xor ecx,ecx
0 a5 ^, U f k+ d& r4 M0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
$ ^% R! q" j/ x7 w& z: g6 M0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx9 V) t" W6 O8 }0 B
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
" y# G. p9 f7 C& P9 t, M/ s7 [9 P0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
3 k6 ^' l5 L0 x7 P/ b4 g( [: n0046B91E 8BF2 mov esi,edx
: Q% N1 L7 _7 L! O6 o w0046B920 8945 FC mov dword ptr ss:[ebp-4],eax. L; h& O5 _& B" g
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]* M! q6 f, B2 l' c! U6 }5 D
0046B926 E8 DD8EF9FF call Unpacked.004048088 Y( M/ n; j) V, {6 K( f
0046B92B 33C0 xor eax,eax. y' ]$ r7 r( G5 k- n. m
0046B92D 55 push ebp$ H5 X+ N7 R3 s
0046B92E 68 CEB94600 push Unpacked.0046B9CE
' D4 T5 Q9 Y0 V; L7 M! K0046B933 64:FF30 push dword ptr fs:[eax]/ P! o! `; u7 r- I4 w
0046B936 64:8920 mov dword ptr fs:[eax],esp
5 Q9 X L: K$ u5 H, T0046B939 8BC6 mov eax,esi8 p7 K' Y. b4 }% X: `
0046B93B E8 288AF9FF call Unpacked.004043681 r1 Q9 B5 {' |: z, h |
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]& o# C' ]9 a) i1 c' ^
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
% a' w* X0 w. e, c0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
( ~" h% R9 C/ D) p3 S7 E, W0046B94B E8 1C8DF9FF call Unpacked.0040466C
, d: e6 t! V6 ?8 l! A( ?3 l! C0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]1 ^! O; r0 T# h8 n7 K
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
( C: T" V9 v+ Z; T0 {0046B956 E8 EDBCFFFF call Unpacked.00467648
4 n$ _5 z8 ?( J$ }9 J( a% A3 O0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]. D) t. ?1 D6 `! M$ g! m. R
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]; K4 l; q0 G) }7 L
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e8 o3 v5 Q1 E( i5 \7 i q! b$ x' m: Z
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~( w+ _4 o& G d( Y0 Z
0046B969 E8 FA89F9FF call Unpacked.00404368% o0 z, ~' z: R/ d6 H
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
; ~8 N! u# z8 @% M! X& X% D0 o0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX. J: d7 @, S: y7 p
0046B976 8BD8 mov ebx,eax ; EAX送EBX
0 S" N, J& R$ H: j. k1 V3 x0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
. ]$ |- S/ d4 B0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
$ P: k7 i4 d: R3 a, k7 N0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
" p0 c, r* s- y0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX K3 [/ i1 ^/ B
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL Z+ j9 t9 @4 X9 [# c+ F) T
0046B987 E8 BC8BF9FF call Unpacked.00404548) p4 J! L+ ], T) p: V
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
* o; u; y: u# }& y. R0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX3 ^1 F! W0 K" H' A
0046B992 E8 918CF9FF call Unpacked.00404628# A' O9 P* i9 J' j
0046B997 4B dec ebx ; EBX减一
# O2 f+ a0 j# F' B9 V2 |# g2 D0046B998 85DB test ebx,ebx ; 是否为0
/ y$ F9 n) w- ?. `0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
6 v; Y) y9 c7 B8 C& p4 H/ L0 s0046B99C 8BC6 mov eax,esi
0 H5 e; j/ n- S/ Y; w; ?9 |0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
! m4 s" U4 K7 l( l0046B9A1 E8 168AF9FF call Unpacked.004043BC
4 a% G9 ^8 _# o; B% F4 [0046B9A6 33C0 xor eax,eax1 P' Z/ Y6 j# j4 A5 T
0046B9A8 5A pop edx
: D9 W. i8 J; c. l0046B9A9 59 pop ecx
8 G+ q. I/ G, o& ~' v' i0046B9AA 59 pop ecx* h9 e! u5 w* g- E( {- [7 T
0046B9AB 64:8910 mov dword ptr fs:[eax],edx O$ y0 p( t L- W4 z
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
1 U* I5 A9 d7 j0 `: D. s+ J0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]$ a, _. C5 h2 I; g' B* Y! C/ n9 z& w
0046B9B6 BA 02000000 mov edx,2
' o" b7 y8 X/ |- V M+ V- K/ e9 i0046B9BB E8 CC89F9FF call Unpacked.0040438C9 n& T4 V/ u# R( b8 K1 U: x
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C] `4 ?" \, l" |5 U
0046B9C3 BA 03000000 mov edx,36 c+ E' x& k, W1 H. j
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
% {+ D" k( w) v- ]' }0046B9CD C3 retn' _: G& B7 V+ ]; o7 D: Q( z- T
****************************************************************
8 I8 }7 q" S: E- H5 [( q跟进0046B961处CALL来到：
1 d* |+ S4 R+ n004676BC 55 push ebp
) j# Y$ @3 V# n/ k( t a2 V004676BD 8BEC mov ebp,esp
* N: y% I( \ q004676BF 83C4 E8 add esp,-18
* a. T' L: m4 {/ p3 N/ f& S# G004676C2 53 push ebx9 \9 x% l; G* f9 s5 J
004676C3 56 push esi x' h7 d' u1 N }
004676C4 57 push edi# N$ Z9 T9 G, |0 ]$ t; x
004676C5 33C9 xor ecx,ecx! G- N5 P6 B+ q. p8 b& G1 n
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
0 R2 r* @/ @- Z3 M' s9 i004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx( F/ A r8 p1 H- p q$ Z: S
004676CD 8BF0 mov esi,eax
* P% \$ d$ V& W! _# {$ b" P004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
' H+ K! d- |9 Y3 e4 e004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi> ] D: \. }, h; P' e
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>7 s2 ]- Y9 z! U0 ] s
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>! g: K+ m& M! B+ l' _
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
5 W( J6 T6 p+ [( z004676D6 8BFA mov edi,edx0 ~* q" n0 k \9 r* t, v
004676D8 33C0 xor eax,eax
0 E, M! [3 T5 [( [/ h; @! A004676DA 55 push ebp; Y1 o7 Y) |' l" _- @- b' A
004676DB 68 57774600 push Unpacked.00467757
1 u3 A1 {* S9 {/ C7 ~1 g& H) J004676E0 64:FF30 push dword ptr fs:[eax]
9 }* j+ e9 d& {" m. S* p. F. {, U004676E3 64:8920 mov dword ptr fs:[eax],esp
9 B% T$ C) n& T9 B004676E6 8BC7 mov eax,edi5 o( Q: F3 `5 t A) ?) E
004676E8 E8 7BCCF9FF call Unpacked.00404368
& X) C0 T+ i9 f2 G0 X. u6 d; [4 L004676ED B3 10 mov bl,10
, ?, N; E1 f4 z& g0 Q* o9 O004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10] J6 t* Q# h& J( [0 s
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
; {# K7 ~5 A& d9 X1 h004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]( v3 w- q. X/ k) |8 J
004676F7 33D2 xor edx,edx
) `5 Q: s: Y; X- p( ~3 y004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL: P. v7 P2 d1 ?
004676FB C1EA 04 shr edx,4 ; EDX右移4位
' l% Y- b' u& j' g2 [' s4 Q: ]004676FE 83E2 0F and edx,0F ; 和0F与( N, J) z3 y/ n8 [ T5 m4 H
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL$ g9 `7 F$ M/ B f% M
00467707 E8 3CCEF9FF call Unpacked.004045484 _9 @( Q- ]8 Q( r/ Y+ G
0046770C FF75 EC push dword ptr ss:[ebp-14]
6 g o8 O E( a! [' T$ {8 Z0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]/ X. }. X" f: W' e
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL" G6 \% y$ `# m/ L
00467714 80E2 0F and dl,0F ; DL和0F与
1 s1 V. L8 m* o6 N3 ?, {; i00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
+ k; C; Z8 P: M7 M0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
1 N6 k1 d) z$ v% r t* q00467723 E8 20CEF9FF call Unpacked.00404548
# S/ f; ^( R" O4 x8 Q1 u: X- O00467728 FF75 E8 push dword ptr ss:[ebp-18]
% ]6 m; i% K+ B0046772B 8BC7 mov eax,edi ; EDI送EAX8 O" z7 ~8 w$ u N+ g3 e
0046772D BA 03000000 mov edx,3* }+ x* \( ~; F2 U4 z% _+ i
00467732 E8 A9CFF9FF call Unpacked.004046E0
2 ~( I1 {6 p( G& o! m. M) C00467737 46 inc esi/ y1 m: f# e+ J
00467738 FECB dec bl. h5 \8 p1 p2 X" R* j' [
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e1 E& F* @% }: l7 l, S' z! ]5 s( ~
0046773C 33C0 xor eax,eax. M! ?/ N& Y" |; z. N, y8 \
0046773E 5A pop edx
L, e& Q8 F: S1 T q: C0046773F 59 pop ecx
* R, Y9 M5 m3 j5 T; i" F00467740 59 pop ecx
W( ]$ E1 y3 o4 q00467741 64:8910 mov dword ptr fs:[eax],edx
% x; A0 ~0 T9 p00467744 68 5E774600 push Unpacked.0046775E
+ \" k, E3 `' S9 _2 _5 W00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
& ]5 {3 C9 g* s5 U% j$ P0046774C BA 02000000 mov edx,2
4 T. a6 K" h" D; U2 l& e00467751 E8 36CCF9FF call Unpacked.0040438C$ s1 p3 G/ M$ J. X! D% i
00467756 C3 retn //返回1 _/ G9 L& v5 E$ E0 {- \
———————————————————————————————————————————0 |$ D% ^* l) ^' O9 J9 }9 s
【Crack＿总结】：( s4 G6 V/ M6 I! p% L8 B
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^
$ i7 K) b) U+ D9 W, w机器码：bbba33de56c4cf31d9063cc074248d4b
5 j w1 ^! c2 E4 f注册码：e807519487d7ad4f57ad42dc87fbb191
+ n. r8 n1 J* r7 X0 b. c! `附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡