|
|
【原创】破解图章制作系统" a/ ?0 X" s" u
日期：2005年5月15日 破解人：yijun[PYG] j G7 V+ @6 i0 |
———————————————————————————————————————————
: x. l+ e5 d" Y- p3 K【软件名称】：图章制作系统 软件版本：1.0
9 e) Q, j0 j: m% ] ~7 h【软件大小】： 252KB1 }" D# Z; M% J
【软件简介】：制作各种图章3 }7 L$ } }) W6 n# V
【软件限制】：NAG/ A* r. W4 S/ n$ n8 g
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
0 ~5 O. d, P/ X3 b$ `$ ?8 g5 ^6 W【破解工具】：OD,PEID8 D2 X& Q# @, K
———————————————————————————————————————————
+ [$ }% \3 ]" p" e
* M( f+ w4 g3 E5 w9 N【破解过程】：
7 z6 }3 _ D7 [* l6 kPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~! A" S, }' ^7 B7 M$ v- e
OD载入，通过字符串查找很容易来到这里：
- e' a- p) S- V0046ADAC 55 push ebp //在此下断$ x# V! |0 ~; @& r
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0. i8 G: J0 t- s* {2 e- Z- d# y$ Z
0046ADB2 64:FF30 push dword ptr fs:[eax]
- @" D: h7 f4 A0046ADB5 64:8920 mov dword ptr fs:[eax],esp
{ b+ i- ~$ c6 y( ]9 V0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]. Z* M! C( L7 }. p {, F
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]4 a0 S8 N& x8 P( K# |- B/ [
0046ADC1 8BC6 mov eax,esi
( ^/ }. S- x& \4 L0 E0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX# u. p# N0 S' c5 U' u
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX9 D6 q3 c. P9 Z* ?
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]2 v: j2 t" }' o9 c8 E! |2 `
0046ADCE E8 45D9F9FF call Unpacked.004087183 H! v/ o! ?% {0 X9 x3 a% b4 \
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
7 O$ y- X* ?7 o+ b0046ADD6 8BC6 mov eax,esi" S, N7 d# _; Y4 V- a+ A
0046ADD8 E8 3359FDFF call Unpacked.00440710
8 q5 S" V2 y8 c0 Q/ m: p1 K0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
5 B7 a8 i4 u8 Y5 k# Z2 q0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]$ p/ P4 u' {3 f7 E
0046ADE6 E8 F558FDFF call Unpacked.004406E0
( \; g8 N& z8 H6 m$ n0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空( V- \& q+ j; T* y: P1 \) O
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
$ w( V4 o {, U% S- N T0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX0 D2 ~$ s/ Y" V7 O0 Q% i
0046ADFA B2 01 mov dl,1 ; DL置1: e7 ]8 y; x2 W( ^" J# _, F9 r
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
6 v2 J( j8 S/ v$ S% x0046AE01 E8 B2AFFFFF call Unpacked.00465DB88 K5 B, Z8 T$ D* P0 d1 D' _" n2 g
0046AE06 8BF0 mov esi,eax
! O% v% x- d8 I8 s( `5 _0 s+ ]. o* F0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
3 d! _( A8 W# F e. ?& F. o+ Y0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
( f9 \8 H7 A1 Q# Q% j8 ?* s' H6 B: B q0046AE11 E8 CA58FDFF call Unpacked.004406E0
( n# g! P- N. Y; Z0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX- P- a- `' l, V
0046AE19 50 push eax
% `7 U% y& u: _/ S2 b0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX$ e1 Z1 ~( m4 S7 e- _+ f
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
' ~1 E3 L# ^6 k1 ]+ |! A0046AE25 8BC6 mov eax,esi7 {/ D0 {5 @$ O5 X9 l' E9 A! {
0046AE27 8B38 mov edi,dword ptr ds:[eax]) L+ I' T& n8 G( K5 f+ d& E( P
0046AE29 FF57 04 call dword ptr ds:[edi+4]9 w8 Q5 S0 g, }4 R; N
0046AE2C 8BC6 mov eax,esi
h% N; W7 t0 H" d0046AE2E E8 4587F9FF call Unpacked.00403578& X- }9 Q: y/ v
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]; @* w* H3 F4 T w Q
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
4 G- ~. T) g" u0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
; Z7 H: B) f. w- [. Q0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~+ K! g, h! f( @; r7 i% l
0046AE42 6A 00 push 0/ `. z$ |6 ?+ R/ [" @( @) C
0046AE44 68 D8AE4600 push Unpacked.0046AED8
3 v9 S: p! ?3 F/ f6 b0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误3 l7 e3 D1 h0 ~, @1 j
0046AE4E 8BC3 mov eax,ebx. [3 v/ i1 Y# o$ x
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
7 m% C$ r$ o% t! W3 O7 h! m7 P* n/ t0046AE55 50 push eax' f- K$ r$ j: ^2 h* M$ g- L
0046AE56 E8 DDC2F9FF call ! L7 u E6 P2 q" N- r6 U1 Q
0046AE5B EB 20 jmp short Unpacked.0046AE7D" @- \% ]3 d3 r @8 T
0046AE5D 6A 00 push 0
) `- M( `) N9 Q1 T5 e4 j/ L. X( p8 W* I0046AE5F 68 F8AE4600 push Unpacked.0046AEF8 v' m! n0 o; q: x2 ~
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功8 @( E d: u2 Y0 V. {4 R! f$ R$ P
0046AE69 8BC3 mov eax,ebx- o: e. {/ F* Z, C) j5 u
0046AE6B E8 88BFFDFF call Unpacked.00446DF84 {$ H+ z7 F0 O# z4 e2 G
0046AE70 50 push eax, O/ O5 o2 Y3 p) a1 p! J
0046AE71 E8 C2C2F9FF call
# M" U! d4 T3 ^) M9 ]: e3 ~0046AE76 8BC3 mov eax,ebx
$ E$ E8 ]4 j7 z% [* P' X" ]' h0046AE78 E8 7F21FFFF call Unpacked.0045CFFC ?" z) ?3 i; ^+ ]. u. h1 ?# ]$ m
0046AE7D 33C0 xor eax,eax- J; y( g; ]+ n
0046AE7F 5A pop edx) ] f! ^: \/ H4 U1 T: d
0046AE80 59 pop ecx- Q4 `$ U: M% K* y# V
0046AE81 59 pop ecx
# Z/ C. Z, s! y0046AE82 64:8910 mov dword ptr fs:[eax],edx+ a' Y; n x4 ]+ U. }+ k8 F
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
* z" g3 d _* o0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
, J6 r, X$ D3 t$ t8 U3 Y y6 v+ b0046AE8D BA 03000000 mov edx,3
. L" d" s$ i' ]/ s8 C0 b0046AE92 E8 F594F9FF call Unpacked.0040438C# o% G8 }" v/ ]7 ?5 ?
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
6 R1 R3 x" ?, c" S# J0046AE9A E8 C994F9FF call Unpacked.004043681 n7 o9 G' j% y& D# E, I
0046AE9F C3 retn
' \* Z+ o8 W* T! u( h, r0 _0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C! g" o$ R( }4 _/ W$ c7 T& F
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A* | M2 Y+ {/ F9 f
****************************************************************
* G& p! M1 ]: {7 h& f跟进0046AE39处CALL来到：
1 C1 G1 Q3 b/ i6 N0046B9F4 55 push ebp
5 l, h1 T) N5 U. ?0046B9F5 8BEC mov ebp,esp i( R7 p- y9 {; H
0046B9F7 33C9 xor ecx,ecx$ u5 `8 n' W( w0 o) l, b% u0 n4 b
0046B9F9 51 push ecx9 D% ^$ R3 M+ n2 t
0046B9FA 51 push ecx
( `& G2 n* }5 y7 I0046B9FB 51 push ecx" N4 V; E. W- R" H2 @* X
0046B9FC 51 push ecx \; c$ Y+ x+ I7 x$ y. F
0046B9FD 51 push ecx
7 C/ j4 f* F4 p2 g- Q% R( V0046B9FE 53 push ebx
4 p+ T- ^. B1 C+ P0046B9FF 56 push esi
( a# g9 [" h, b! q% P9 d' o0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
! Y) Q0 _7 d5 t, z, O* Y0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
9 D: F1 x, c* N; Q2 C0046BA06 E8 FD8DF9FF call Unpacked.00404808
, N/ h& }1 U0 ~# r0046BA0B 33C0 xor eax,eax
" e* q3 M- x5 N1 P0046BA0D 55 push ebp
) g4 S& G+ I/ L# J* }$ `) S0046BA0E 68 91BA4600 push Unpacked.0046BA91
1 l; `! k, ~/ _0046BA13 64:FF30 push dword ptr fs:[eax]
2 ]8 A2 m5 [4 R3 ^, m0046BA16 64:8920 mov dword ptr fs:[eax],esp5 _, I; m l! u
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]1 w9 Q H9 x; L
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
4 l7 S- J. e3 L& f, A! i8 |0046BA1F E8 DCFDFFFF call Unpacked.0046B800
4 d: o2 P% W8 p* I- H3 B; {" `0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
# h" E' v: K& w- S/ o0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
$ ~( h s$ h( n' d8 ?0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
: ^( k8 L9 c% v: `0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
# h- v0 [# N9 g @1 S0046BA34 B2 01 mov dl,1 ; DL置1
. R4 ?1 k8 V+ q0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]6 K. G7 m) ?' y; g
0046BA3B E8 78A3FFFF call Unpacked.00465DB87 I4 r( c9 ~8 I/ P) Q9 ?
0046BA40 8BD8 mov ebx,eax
- G1 Y o( n, x( q# v$ J0046BA42 6A 00 push 0
" W, m q) O5 T6 N9 h8 n; E# ^0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]$ |+ k. N/ X. K7 I% X6 ?8 l2 A
0046BA47 50 push eax
* `2 B# _0 i' n$ h1 z& u/ B5 z/ H0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"5 s* U* Q# e3 @
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]! S3 {: y: K5 D$ Z
0046BA50 8BC3 mov eax,ebx% G/ h' z7 M2 ]8 _ z( W
0046BA52 8B30 mov esi,dword ptr ds:[eax]. K* |, Z+ |+ h! d7 u
0046BA54 FF16 call dword ptr ds:[esi]" t* f$ ?3 D8 N% D' b6 S$ p
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX2 t/ K0 C% T. S( J. J
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
' ~8 t* B" o+ \7 |- Q0046BA5C E8 B7CCF9FF call Unpacked.004087186 J& ^# a2 l% Q$ }( ~, j
0046BA61 8BC3 mov eax,ebx
2 l- [1 f p3 p9 P0046BA63 E8 107BF9FF call Unpacked.00403578
7 s7 j5 ~+ E5 |% T6 o0 e6 E0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX |2 A' L" P% \) z
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
; y0 ~* ^* y+ A' C0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
p6 y: G$ _( a" }3 _0046BA73 0F94C3 sete bl ; 置BL值
3 e* w; ~8 f; Q! ` N0046BA76 33C0 xor eax,eax
$ D* V$ K$ }, E* L, _* Y/ b+ V7 B0046BA78 5A pop edx$ Y% N) |0 `( {! B. @9 O- t' m
0046BA79 59 pop ecx
0 V% G! e9 M! }6 [7 j9 |: ]0046BA7A 59 pop ecx
6 B) l# S5 c8 O; H, S0046BA7B 64:8910 mov dword ptr fs:[eax],edx. X' E6 j! B& {- X& a
0046BA7E 68 98BA4600 push Unpacked.0046BA98& U7 O: f9 B4 A; |, ]
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]6 D" ]3 d6 p7 ]4 y1 W& _$ T
0046BA86 BA 05000000 mov edx,5
3 ~9 A7 B1 S" S0046BA8B E8 FC88F9FF call Unpacked.0040438C
% [# D' M' I& v1 i4 f0046BA90 C3 retn
+ y- Y, x6 D$ X* R i' m8 |- p! s****************************************************************
' ?5 X+ g) A8 U' S' a% ^9 ]- u! `9 V跟进0046BA2A处CALL来到：" A! B5 J; C5 t+ E& t
0046B908 55 push ebp
; o X0 o' {1 ^$ M9 X2 ?9 n0046B909 8BEC mov ebp,esp! M! L! A9 R. e& I, U: k' D0 c4 `
0046B90B 83C4 DC add esp,-24; @4 s7 _1 q8 y# a) L( {! J3 y
0046B90E 53 push ebx
1 _3 S- t$ k4 C2 r) T' S# t& q0046B90F 56 push esi
% }5 q, w- t/ Z4 w, j. ^0046B910 33C9 xor ecx,ecx# z' W4 S- k( \" n7 j( E
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
; N4 y# q W5 d0 A" U1 Q/ a2 H0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
2 Y0 E* M* e/ r' x/ a0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
% s) s5 a+ s& }( z9 y b: A0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
7 j+ R* ~! ]- a: U0046B91E 8BF2 mov esi,edx
2 f4 W+ g0 W! b K" Z0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
$ C9 B- n( y+ T4 C7 a0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
! t1 \9 }5 m) m! }0046B926 E8 DD8EF9FF call Unpacked.00404808/ S: i% L6 |( v5 m7 ~
0046B92B 33C0 xor eax,eax
; y" P9 w' b6 U% p0046B92D 55 push ebp& j, A" F, V" c( p0 Q
0046B92E 68 CEB94600 push Unpacked.0046B9CE) p5 S0 _ u! O; s$ G5 n( i1 P7 k& ^
0046B933 64:FF30 push dword ptr fs:[eax]
7 X F% D' F/ w+ T0046B936 64:8920 mov dword ptr fs:[eax],esp0 ]8 ?/ t' l* { r
0046B939 8BC6 mov eax,esi
' v J, Z2 J: i- h4 x4 P& K! k0 z2 L- O0046B93B E8 288AF9FF call Unpacked.00404368, J5 c! \0 g6 \1 n
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]) V! X; \% s0 l; K" ?. U
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX/ z) R; x6 R; [
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4+ J* T' I( q5 T; g( r* ?
0046B94B E8 1C8DF9FF call Unpacked.0040466C. D4 O' ?9 h& L6 L" y5 x
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
1 d, ^! f) }+ f) t6 d7 d0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]' @; T4 K4 z9 w, G4 Q
0046B956 E8 EDBCFFFF call Unpacked.00467648/ `6 |5 u6 O* [ Z( G+ D3 `
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]' d1 h( ]4 _" u
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
6 A- |2 |, O O# J: @6 j0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
6 b3 K2 f4 p# B' W0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~' V3 V6 P1 }4 v$ j! Y, |7 p& P. ]
0046B969 E8 FA89F9FF call Unpacked.00404368' J& @8 O" E3 D& V2 Q6 ~
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
$ m: q1 a( D+ j% |0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
7 L/ r8 O1 Z4 ?" f0046B976 8BD8 mov ebx,eax ; EAX送EBX
( R1 t: u! l6 |: G0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
( Z8 l: p# \ q0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳& r |( d$ l3 @7 m$ q
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
# p9 d8 g) t- T6 D! s0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX) ]% _) D6 r j
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
, y- l" Q. I! i1 D4 @0046B987 E8 BC8BF9FF call Unpacked.00404548. O1 L" V5 D- m7 b$ e' S9 V
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
( o* e) L$ k& g/ u% C0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX6 a$ [# T& t$ P& l7 b
0046B992 E8 918CF9FF call Unpacked.00404628% g& W$ p2 @1 Y. t3 H4 M7 ?$ ~
0046B997 4B dec ebx ; EBX减一
+ a6 j P" M: V3 T" D0046B998 85DB test ebx,ebx ; 是否为0: I% j4 ^8 o3 t+ N S2 _
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。2 |; l( ]& @: h3 y0 v
0046B99C 8BC6 mov eax,esi" W5 U* E& M2 E; l
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
/ K& K" K0 {$ N8 T8 }' J0046B9A1 E8 168AF9FF call Unpacked.004043BC
& E; ^( |. v- S4 r# r0046B9A6 33C0 xor eax,eax1 m. I) x9 G6 N
0046B9A8 5A pop edx$ R$ a; z% ^, ^' W
0046B9A9 59 pop ecx
# ~3 Q4 `6 Z9 G; X* Q* l0046B9AA 59 pop ecx% Z% @' P6 V8 ^, O# L: g) P4 V6 t$ U
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
- S- H# r3 ~3 P' l0046B9AE 68 D5B94600 push Unpacked.0046B9D5: n; u2 e) y' F2 X9 |, D0 w
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
3 ?) v- ]* C5 w: U8 d2 f9 ~: s- o: q0046B9B6 BA 02000000 mov edx,25 z) J1 c' K( f9 V$ k
0046B9BB E8 CC89F9FF call Unpacked.0040438C5 |2 R; t- j& J' ^0 q5 j3 P2 Y* i
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
% |4 J# L R f9 L1 I0046B9C3 BA 03000000 mov edx,3
0 ^. l% I, k' ]1 g0046B9C8 E8 BF89F9FF call Unpacked.0040438C
9 j* k, v) {& v% |9 O0046B9CD C3 retn
) s5 y2 e' |6 c3 z4 O; X! M****************************************************************
0 k2 [2 V2 [9 P6 J0 F跟进0046B961处CALL来到：
. m2 b8 r9 C4 y- ^004676BC 55 push ebp
3 @3 z; p$ A: u1 [( s8 h004676BD 8BEC mov ebp,esp0 h+ v1 {/ w( x! J
004676BF 83C4 E8 add esp,-18" o, j% h7 H5 y% e8 {2 Z; E
004676C2 53 push ebx" O+ Z5 d- X. i
004676C3 56 push esi& K$ m: f% ~: f$ J9 U+ i. X
004676C4 57 push edi$ I" z3 D- J" C, ]9 M+ _; G/ c9 {
004676C5 33C9 xor ecx,ecx' @, l8 P3 H9 w5 l
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
% ~- o+ O7 `. S4 ^' a004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx, t+ J/ K8 I. u$ d- L
004676CD 8BF0 mov esi,eax4 {$ A- q! o4 x$ y3 i6 X
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]5 ~ r# P/ V/ ~3 [6 |8 K
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>. {5 L/ e1 z; X l0 z) K! L
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>- x$ @! K9 c0 Z& }1 M
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
' }3 q( m! j, d+ o( q# \004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
! J2 Q$ [. a) i9 H, a. ^8 c004676D6 8BFA mov edi,edx
$ v. S! d& P1 N1 X004676D8 33C0 xor eax,eax$ g- o& O$ ], ^9 R$ A+ {6 a4 T
004676DA 55 push ebp/ s8 h& k- O, \7 B$ R# a, l
004676DB 68 57774600 push Unpacked.00467757* w/ L* O0 i& b- U) L5 `
004676E0 64:FF30 push dword ptr fs:[eax]# a, c" i% H% M* c0 o
004676E3 64:8920 mov dword ptr fs:[eax],esp5 k) R% ]% R6 V Z
004676E6 8BC7 mov eax,edi4 }8 J2 s* N! n& n* f6 e
004676E8 E8 7BCCF9FF call Unpacked.00404368+ W' _1 ~* S9 J# m O8 _6 e
004676ED B3 10 mov bl,10, q E/ E0 X' q D; w, `
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
" E; u" Q" x4 R0 a: s! J004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
7 u& {9 K( A3 @& W( K004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
; o, h3 @7 P/ x& E004676F7 33D2 xor edx,edx
; ~$ D, v( x! n% O004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
: |$ W |0 I0 ]4 ?4 Q004676FB C1EA 04 shr edx,4 ; EDX右移4位2 s. n& w1 E1 o. d' g1 G
004676FE 83E2 0F and edx,0F ; 和0F与
' C( ?# M% n& w% p00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL1 G* x. Q5 R+ G8 J1 K7 V& Y+ s% ^) W
00467707 E8 3CCEF9FF call Unpacked.00404548
. q* f$ a% X2 M E$ N5 M0046770C FF75 EC push dword ptr ss:[ebp-14]6 M# S! N' I# E4 \
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
( R+ b& v/ \0 L4 {. ]4 m00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
1 V! @3 y1 ~: x, m1 E' M, y00467714 80E2 0F and dl,0F ; DL和0F与4 B- c) M# _( }& @' M
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与, {) n% X# b7 B( I
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
3 ?7 f7 s0 w/ |, B8 ~! t00467723 E8 20CEF9FF call Unpacked.00404548
, d# i; i# Z; L9 \4 o) {4 \00467728 FF75 E8 push dword ptr ss:[ebp-18]
1 k# F/ y" d- K0 w0046772B 8BC7 mov eax,edi ; EDI送EAX& v, ]1 M6 e/ I/ \
0046772D BA 03000000 mov edx,3
8 j" z# b! b7 k" ?; Z00467732 E8 A9CFF9FF call Unpacked.004046E0
0 ]! R. `* J0 h% F- b00467737 46 inc esi
" J0 O& v2 U: y+ m2 X" B, |00467738 FECB dec bl
@& w; i8 A! Y, J( m; p7 u1 m0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
6 {" y- ?2 T. {+ F2 U" x- r3 a0046773C 33C0 xor eax,eax
5 B6 v( V# C' Z1 R; I0046773E 5A pop edx
l$ K. k5 z" e, i* \0046773F 59 pop ecx4 D8 T0 c* y% a9 B& A
00467740 59 pop ecx
2 G8 k% H- ]" _* [& O* N& {! z% z00467741 64:8910 mov dword ptr fs:[eax],edx
1 o' i+ r* j& f00467744 68 5E774600 push Unpacked.0046775E
2 [, I, p( ?+ Y% ?" R9 T% M& |$ @' X& q' f00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]9 U( L/ ]; G- l' W7 s, P
0046774C BA 02000000 mov edx,2* P! H3 X/ F, J6 n4 B, b: n) S
00467751 E8 36CCF9FF call Unpacked.0040438C2 {7 t* _+ r& f, {* W( ?
00467756 C3 retn //返回
* E% r6 U5 R, }5 \7 Q———————————————————————————————————————————
* p1 ?2 U$ [2 w( @8 ~- U- e【Crack＿总结】：4 Q1 g8 A/ {, q$ E
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^- C3 O: G2 u1 J; Z8 W
机器码：bbba33de56c4cf31d9063cc074248d4b
; f( b3 I8 s+ {/ l注册码：e807519487d7ad4f57ad42dc87fbb191# ^( n% W+ y+ ~
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡