|
【原创】破解图章制作系统
G# b! X) U" u; M. I/ u& V日期:2005年5月15日 破解人:yijun[PYG]4 o9 M. x) V" e( m+ q1 w8 o4 D
———————————————————————————————————————————
& a0 R# o8 Q% C【软件名称】:图章制作系统 软件版本:1.07 Q0 f- I& e8 x0 @7 u
【软件大小】: 252KB
) ]# I! G% r+ p" J! f2 e4 }7 ^【软件简介】:制作各种图章
$ J5 L6 f5 l! N! z$ O. k; p- _【软件限制】:NAG2 D4 p5 _( @: J% B
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
# g. L* v8 v8 l6 Z9 N【破解工具】:OD,PEID3 D8 m5 ]$ \8 |: r4 P
———————————————————————————————————————————
# a' D% U' r c ; Q# m3 t# K% }- B
【破解过程】:
% z ~" [7 i. t# s+ LPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
5 I7 J* j" K5 B/ X5 j5 u! b# hOD载入,通过字符串查找很容易来到这里:
: G1 L5 i% A6 e# B, r) M0046ADAC 55 push ebp //在此下断
7 L3 |- ^; L& h; w [' u0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
% K9 p/ ]$ ~- ]. ?% c5 D0046ADB2 64:FF30 push dword ptr fs:[eax]( Z& u2 m( a! ~2 n! @; O1 a( F
0046ADB5 64:8920 mov dword ptr fs:[eax],esp: C6 p& {9 v4 E) ]0 L' H
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
) q8 p8 H" W% q6 i, L% A0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]1 i1 I# X: `2 \% K! q. w
0046ADC1 8BC6 mov eax,esi; o8 ~: _$ T! C
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
7 R" |) F @2 A$ |6 H7 Y d) s0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX* n; [5 E( p M: E! U* y' y
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
1 `* |/ g( B" {+ ?; `: c L3 n0046ADCE E8 45D9F9FF call Unpacked.00408718
4 p7 ?/ O! r& h6 t0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX2 K( ~' D7 Q* s: I ~ @, |
0046ADD6 8BC6 mov eax,esi
# {/ x0 Z" m, r3 V0046ADD8 E8 3359FDFF call Unpacked.00440710
8 c* N! v1 G2 n o) p0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]) y5 f6 ?. A6 R, i+ N( M% B) M
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
d o* S( c; J1 {( A+ s. [: F1 d$ N0046ADE6 E8 F558FDFF call Unpacked.004406E0
9 k8 C f) z+ O `. t8 f0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
9 m. P& N8 N$ S2 ^& V0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳/ A# X9 q$ ], S( F# _* }
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
6 H' k, P5 O' e" [; C' L7 z" z0046ADFA B2 01 mov dl,1 ; DL置1( F5 R. `" i( v
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
$ S; E% A X4 r) B0046AE01 E8 B2AFFFFF call Unpacked.00465DB8, t. [4 g" S& N3 R$ x, ^* r8 d9 Y
0046AE06 8BF0 mov esi,eax
5 X( O8 ]+ t" y; q2 F0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]4 g; _0 N( R/ [
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
8 ~" U" i1 e7 X- h9 j$ |; [6 Q0046AE11 E8 CA58FDFF call Unpacked.004406E0# j& `6 ?, u' i* ^5 Q5 ~- S
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX) d# g4 L3 g3 A4 A
0046AE19 50 push eax4 M& q6 w. X/ O# \: U" h
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX& K7 l( {$ B' h% z4 l* Q. A
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]4 l* F8 W8 _+ _; r3 K
0046AE25 8BC6 mov eax,esi# X n5 b' }% b p6 o% p4 \
0046AE27 8B38 mov edi,dword ptr ds:[eax]
7 p! W5 f1 x4 T, l G! T9 a0046AE29 FF57 04 call dword ptr ds:[edi+4]
, l* E) f- ?9 A0046AE2C 8BC6 mov eax,esi
/ e& E* G+ B' c% g. R' E8 D+ U0046AE2E E8 4587F9FF call Unpacked.00403578, R" k7 x( I0 J# |7 C
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]% ^# `' R" K) E! }. Q) j+ X
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
( G2 K7 \+ H- S7 [/ B0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
& G7 P& _' i/ Y M0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~2 q8 C" B- k" A% B! E7 Y# j1 X
0046AE42 6A 00 push 06 ?" X1 H P+ Z
0046AE44 68 D8AE4600 push Unpacked.0046AED8
9 T: Y9 C) h9 a8 f! c4 z) {0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误* u+ o& \: `4 L. ~: v. `
0046AE4E 8BC3 mov eax,ebx
* X, ~4 m1 H3 y: V- Y3 G0046AE50 E8 A3BFFDFF call Unpacked.00446DF8% \5 R U [% Q4 H
0046AE55 50 push eax
" V4 f6 o3 t" l* X! H z0046AE56 E8 DDC2F9FF call / [9 r, q. I# l( s1 N- j
0046AE5B EB 20 jmp short Unpacked.0046AE7D
2 k1 m/ C& Y; o" ]8 v, L2 o0046AE5D 6A 00 push 0: u/ i9 |8 h0 n! @7 s4 i, Y0 q) [
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
- M5 N2 T; k: f+ m0 G0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
2 A" i2 ]/ W) D" f0046AE69 8BC3 mov eax,ebx
) a7 C/ U1 p9 @. H6 j0046AE6B E8 88BFFDFF call Unpacked.00446DF8' U- g) |/ V( V. b
0046AE70 50 push eax1 m/ b. a. e2 e* Q& y# P
0046AE71 E8 C2C2F9FF call
* c- R( u' T7 P" N4 ]0046AE76 8BC3 mov eax,ebx, Z3 o" s+ h6 \+ A2 s6 O; w
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC. {8 a4 I; ]$ n4 o
0046AE7D 33C0 xor eax,eax
8 }4 F3 y" @/ o4 b# ?0046AE7F 5A pop edx
, r" ^$ u: A- y9 a/ n0046AE80 59 pop ecx" |$ w( |9 p9 H# _1 j& _
0046AE81 59 pop ecx
% [+ w: L, y5 i7 s7 e3 V0046AE82 64:8910 mov dword ptr fs:[eax],edx
0 K4 A/ W, v0 W. ~ Q. W0046AE85 68 A7AE4600 push Unpacked.0046AEA7, n. j$ d4 h" K2 r2 w' k0 e. }& y
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
1 m, D2 D" Q; j% ?0046AE8D BA 03000000 mov edx,3" r6 `8 ~. E/ Y( H( @( s$ K
0046AE92 E8 F594F9FF call Unpacked.0040438C
/ `- d0 L4 p8 h" a& V; v( N' ^/ [0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]8 `) e M8 `- F( o; B# S7 w ?8 r! T
0046AE9A E8 C994F9FF call Unpacked.004043687 `* o j3 ]. z
0046AE9F C3 retn- |% g' T1 B. \8 ^7 U: G
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
( m( ?' L: R6 u) {% M0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
. }9 v1 f5 i, G7 d/ A8 B( @4 Q****************************************************************
B3 I( I4 `/ ^* x0 ^跟进0046AE39处CALL来到:! p* }( \8 t' T: ?+ {2 _
0046B9F4 55 push ebp0 n3 G+ B: M1 a" |9 Z5 ]; k5 F8 [
0046B9F5 8BEC mov ebp,esp
- n1 l4 D! ~& H0046B9F7 33C9 xor ecx,ecx
/ s! L' F+ N( S, w0046B9F9 51 push ecx7 ~+ b; B( O% g
0046B9FA 51 push ecx( t7 r% ~" F0 U
0046B9FB 51 push ecx
1 x W4 f) o6 O- z! D0046B9FC 51 push ecx4 r! `( Y6 s3 V3 R, p% _
0046B9FD 51 push ecx
" P* ^" D4 S+ _# r9 ]0046B9FE 53 push ebx" c4 j7 K0 j: [2 E& S
0046B9FF 56 push esi" ?8 O8 F, d# A+ V
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax: [6 ~& B" s0 _6 b4 Z
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
+ h+ C; P3 S# n, f0046BA06 E8 FD8DF9FF call Unpacked.004048084 Z! E2 z: I. O Q
0046BA0B 33C0 xor eax,eax. X1 ^( a+ G+ g2 b. m! F# Q1 K
0046BA0D 55 push ebp
0 Y$ |- h, ?+ E( a6 F* @5 F2 p( U0046BA0E 68 91BA4600 push Unpacked.0046BA91
) j6 w$ b. l4 N" H6 k! V0046BA13 64:FF30 push dword ptr fs:[eax]; s7 B; a& s( y P$ @1 V0 [
0046BA16 64:8920 mov dword ptr fs:[eax],esp4 M" D# Y, {4 i- I
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]! F8 y* k) W: U% l& w; s
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
/ ~0 k% ~7 o0 Z# Z% z: P( l0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ! A7 m+ x E @/ z8 Q! r, C0 d
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]5 f8 z( T7 {6 q) @* |
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
$ M4 F% _/ w5 a( w0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进; H( b5 M; P, l: x5 d ?
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
. `0 U5 w- Y8 v/ l' i3 A0046BA34 B2 01 mov dl,1 ; DL置1. E# r; D4 K% k2 H0 _1 g
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]4 e) C" g* G0 o+ M! R% {/ ^8 A
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
M7 U+ d1 U6 L9 s2 r( p2 O) P+ Q0 | ]% y0046BA40 8BD8 mov ebx,eax* |# ~1 s' s) k2 ~$ C* X3 g# z: Z
0046BA42 6A 00 push 0
+ b- s' \ b# y0 H0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]+ w7 ?5 `7 g" P# i
0046BA47 50 push eax* x$ m8 y) u. H: I; u: i
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
- j' t0 r$ _) {$ {4 U, c, K8 K- e. t, q' q0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
3 Y/ x7 y3 b) B9 p7 t0046BA50 8BC3 mov eax,ebx
) h+ q& z% ^4 E( ~5 M0046BA52 8B30 mov esi,dword ptr ds:[eax]
3 g) \8 u% d4 {$ ~& V5 v0046BA54 FF16 call dword ptr ds:[esi]% z, ?. F f8 r. b8 S3 c
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX4 u( L0 N k9 h" Z, c
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
2 O" C4 M, B2 |7 h4 `; L0046BA5C E8 B7CCF9FF call Unpacked.004087186 m) A2 r0 B9 I3 f
0046BA61 8BC3 mov eax,ebx) L- E% J( Q x. B$ z
0046BA63 E8 107BF9FF call Unpacked.00403578
; W1 ]- Z% ^1 \8 x8 r! Q0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX3 a- [& }* v+ `2 Q3 y( G
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX3 {! A& v$ n9 q0 {( _% p
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
# h7 a, e6 n) X& z6 f4 h$ J0 o9 _0046BA73 0F94C3 sete bl ; 置BL值
3 a( b& a( ]6 x( y0046BA76 33C0 xor eax,eax% ]* V) q8 Y5 F
0046BA78 5A pop edx
3 Z( v- T, b7 W) a" N; }0 D0046BA79 59 pop ecx1 I# n& n9 Y% K0 {
0046BA7A 59 pop ecx" n8 Q& g) _/ S+ S( W; n! z
0046BA7B 64:8910 mov dword ptr fs:[eax],edx3 y# ^6 ~0 S8 z* f7 x8 z6 m
0046BA7E 68 98BA4600 push Unpacked.0046BA98$ C; @# \1 u( p
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]4 k0 U E4 {" w
0046BA86 BA 05000000 mov edx,5
0 C1 t; ]: @' m( x! j+ n' l0046BA8B E8 FC88F9FF call Unpacked.0040438C
1 j2 v9 u: e/ l; d0046BA90 C3 retn/ L) I7 V1 m$ z0 J* f3 Q% r9 Z
****************************************************************
% q W; [. G5 k. D3 `/ J# X( z跟进0046BA2A处CALL来到:+ I0 x4 H6 n' N, X' T9 ~# V. j' ]
0046B908 55 push ebp
, w6 N- y' W: ?' o6 v0046B909 8BEC mov ebp,esp5 L2 X; p6 s# c- R- s ]+ n
0046B90B 83C4 DC add esp,-24
2 v& |2 B9 H/ A( K, c$ P9 ~. w0046B90E 53 push ebx) X4 l( T+ ^" o# i
0046B90F 56 push esi4 ~; G5 } B4 o( K0 r6 c! a* A1 N
0046B910 33C9 xor ecx,ecx( p' u5 h5 n( z" B
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
% x" T3 T" m9 u# Y6 W0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
/ _% e2 u2 Z0 h/ u7 r4 F0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx$ x9 B& p* m; i& _6 J" ^' ^
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx! H1 n4 W% Q) I
0046B91E 8BF2 mov esi,edx6 K' z+ Y6 j X& O
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
5 [9 n! L* n" y9 J! D- P8 m+ E0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
8 s% V4 L8 ?" V, |3 c9 K/ b6 L! a& X5 A0046B926 E8 DD8EF9FF call Unpacked.00404808
' G* {! `3 w9 g5 }5 G, ]# ]" ]0046B92B 33C0 xor eax,eax
: E3 B0 _, M7 Z/ j1 z. Y' W0046B92D 55 push ebp
' r! @8 f- Y6 J" w4 @9 C6 z0046B92E 68 CEB94600 push Unpacked.0046B9CE, t+ j9 y2 {1 j! Z
0046B933 64:FF30 push dword ptr fs:[eax]0 Z. D2 t4 \5 y. v
0046B936 64:8920 mov dword ptr fs:[eax],esp
( }! q- a2 a0 N7 Q5 X# F+ z0046B939 8BC6 mov eax,esi
1 ]4 Q9 g m, u; g; |/ `6 |0046B93B E8 288AF9FF call Unpacked.00404368
3 R) h/ U/ o0 I) {3 b/ x0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
% R+ D7 x$ t, w% n. D' [0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
% |6 @* ]9 L3 W. f! b3 q$ j7 I0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4+ ~$ {( }. f5 _! }1 e# f* _$ C: k
0046B94B E8 1C8DF9FF call Unpacked.0040466C
5 D: Q9 v1 M% J X8 U9 U; o0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]8 m8 [/ L5 h7 l& n+ u
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]2 C1 m" N: {6 H7 b' P
0046B956 E8 EDBCFFFF call Unpacked.00467648" [7 R/ `! t" k% N7 v% Q! E
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
, J+ k" w- l5 v1 M0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]$ b9 r# f. P0 B
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
0 b+ T3 [4 ^8 @/ g" X7 O0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
+ Z, O( P. S- Z# C: X0046B969 E8 FA89F9FF call Unpacked.00404368
3 h: g! i- G% G; d3 O0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
; a2 K( p. ~5 L7 \0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX+ E# r) U# K, V' S7 O- p. s% w b- w6 V
0046B976 8BD8 mov ebx,eax ; EAX送EBX
) i/ }, Z$ V5 V- W& c1 w" P- V0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
" F* B/ ?4 A) f/ Q0 d2 B9 W" Z- R, @0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
" l0 {0 }6 \! o0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
5 i( v! F# y' f9 [" s. v1 T+ v+ w4 a# S0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX, a+ D H. O1 d# n" C( z
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
2 G3 `! D' d; A; [' Z( M n3 f0046B987 E8 BC8BF9FF call Unpacked.00404548+ C: |! Y' W: Q+ A( @8 Q; M( { [' V5 R# S
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]- o% U! I& v# T. O+ Z5 H
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX# H4 T# i. V8 d$ N0 w1 U6 W
0046B992 E8 918CF9FF call Unpacked.00404628
- X s. G5 \1 G0046B997 4B dec ebx ; EBX减一6 u+ `: x2 Y: u2 r
0046B998 85DB test ebx,ebx ; 是否为0
) y3 w$ } }4 J0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。
1 o. M# P( `1 v) ~0046B99C 8BC6 mov eax,esi
+ X& H1 r5 A" S6 T8 d! P" N) V0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX. o" q$ G; N5 h1 Z% R
0046B9A1 E8 168AF9FF call Unpacked.004043BC+ C2 h6 E: m* A# j, K+ ], z0 q+ \
0046B9A6 33C0 xor eax,eax9 b3 J# n+ e0 v% e
0046B9A8 5A pop edx
# d8 Y3 `) a1 `; ]4 v+ Z8 @, i0046B9A9 59 pop ecx. Q5 z( v. h. Y# h+ V$ G- m
0046B9AA 59 pop ecx
" a1 B/ ?$ R& r$ a. n8 L0046B9AB 64:8910 mov dword ptr fs:[eax],edx3 m- J' S! X! W; Y) [+ d, ~ ^3 E
0046B9AE 68 D5B94600 push Unpacked.0046B9D5; @6 n: t/ N# A0 E' I. l& s
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
; }% H1 z3 f3 A: w. q8 D% ]0046B9B6 BA 02000000 mov edx,2' v. V: o( L5 F9 ]
0046B9BB E8 CC89F9FF call Unpacked.0040438C- C4 a6 m0 p& d
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]4 f* T: U7 B. |. N7 M9 V
0046B9C3 BA 03000000 mov edx,3! j r: y ? _# D( \
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
3 q! M! N i& h$ c0046B9CD C3 retn% d( e5 u5 Y/ N# ?$ u4 w
****************************************************************( {1 O+ i# \4 U8 a
跟进0046B961处CALL来到:8 r9 F0 J: B; J% p+ H( F5 D# e
004676BC 55 push ebp+ q+ L h3 C# p
004676BD 8BEC mov ebp,esp
6 V9 K8 b( ~6 M7 X004676BF 83C4 E8 add esp,-18
5 V; J4 I8 K$ F" j004676C2 53 push ebx
. Z" v! F r P, W* C1 {! y& r1 P004676C3 56 push esi
" n8 L, X' P& v# r h5 l* I004676C4 57 push edi4 v0 @) G6 A4 \2 O
004676C5 33C9 xor ecx,ecx& G$ G( A. y7 v0 V
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx _6 n2 E, W f( g4 \+ ?
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx/ F8 C6 k0 r# U5 g
004676CD 8BF0 mov esi,eax0 a- B0 c: `: v4 C
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]% D7 h" G8 O0 t. I
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
3 H) k. |- O1 d& {8 b004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
, B) x5 F4 q! [4 y0 A6 p0 w! y004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
' b( n1 ?1 A! c% O004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>. V3 }2 r& Z9 ]
004676D6 8BFA mov edi,edx5 J' m$ E" P, s. l6 i
004676D8 33C0 xor eax,eax
# x7 x0 y6 {2 @6 ^- \# N* R004676DA 55 push ebp8 c' Z( ?9 K) E5 Y( G) J
004676DB 68 57774600 push Unpacked.00467757
N6 Q3 {7 k1 u* ?# L9 o004676E0 64:FF30 push dword ptr fs:[eax]
( N {0 \6 V' l4 f004676E3 64:8920 mov dword ptr fs:[eax],esp
: t2 C2 ]2 v3 O004676E6 8BC7 mov eax,edi- z4 x8 Q) |! O
004676E8 E8 7BCCF9FF call Unpacked.00404368# D; I; K7 h% _8 M" c
004676ED B3 10 mov bl,10
! \1 }% Q- x) V' @004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]( w3 r1 D6 k8 o( M3 y2 g! ~. \
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
; p' x- i5 A- ^( O5 c) u3 R004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]/ Q/ q7 K/ t( I9 \ ~
004676F7 33D2 xor edx,edx9 z1 U, o) d1 x2 Z; P2 V4 J
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL g' Q1 o% Z) `! ]
004676FB C1EA 04 shr edx,4 ; EDX右移4位" E/ j5 E# ]6 ?( H- `* d: V
004676FE 83E2 0F and edx,0F ; 和0F与
( C& K5 `8 G) _00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL* y l5 O4 k# c& }' K6 o/ h9 y& e7 g
00467707 E8 3CCEF9FF call Unpacked.004045480 @/ @% ]7 M$ c- v
0046770C FF75 EC push dword ptr ss:[ebp-14]1 w7 q" N, B( ~. C2 L/ Z
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
8 s( I% d* A2 {00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL T$ i& [+ ]8 C/ G
00467714 80E2 0F and dl,0F ; DL和0F与$ m8 M8 p$ b, a9 H
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
$ y& P' ], I' ^, x6 ~/ U6 f0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
* _1 `8 r3 E' x* u! F E. D3 N00467723 E8 20CEF9FF call Unpacked.00404548
/ U9 m+ U; F4 o3 F: J3 Z00467728 FF75 E8 push dword ptr ss:[ebp-18]. R$ {- ^1 W* u0 J7 X
0046772B 8BC7 mov eax,edi ; EDI送EAX8 P! i- {- j5 w' U
0046772D BA 03000000 mov edx,3$ P' `1 | A! @% r! ~6 a( p
00467732 E8 A9CFF9FF call Unpacked.004046E0! O3 V- ]6 l+ m; Q( A
00467737 46 inc esi# I$ a! ]% c4 |8 g% L
00467738 FECB dec bl
2 y8 @) b$ s# K% R4 c0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
: G; d8 F# P% \0046773C 33C0 xor eax,eax- t1 c1 Y8 J+ ]' `+ t! ]7 z- A+ m+ X
0046773E 5A pop edx" r0 g* P0 F1 Q' t" ?, n4 p, A# r
0046773F 59 pop ecx
9 t& n V: q/ n0 F9 U00467740 59 pop ecx# r& p# X1 A! |: Y' V' M# N
00467741 64:8910 mov dword ptr fs:[eax],edx$ p( P% W0 v. G
00467744 68 5E774600 push Unpacked.0046775E$ ~1 _; [! P: l9 O7 ~
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
% p9 @" c: |+ z4 ^" ]: V8 m! S+ w0046774C BA 02000000 mov edx,2
( ?5 }$ p9 p5 q00467751 E8 36CCF9FF call Unpacked.0040438C8 T3 a( ]! F0 s( q- l7 O
00467756 C3 retn //返回7 l, {9 A( W' I" e, {& @
———————————————————————————————————————————) ^/ d7 d% N& j, k7 g
【Crack_总结】:
; n' C; \8 K5 n. X# G! Y将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
; v1 T' T# r- E4 Z- w. j机器码:bbba33de56c4cf31d9063cc074248d4b
5 d, T4 }$ ^ r3 w7 r注册码:e807519487d7ad4f57ad42dc87fbb191
& q" |# C; I; C, L& Z6 m3 h% g9 d$ m附件: MakeSign.rar (249 K) 下载次数:298 |
|