|
【原创】破解图章制作系统, O$ u% f* l$ @( C! g, |
日期:2005年5月15日 破解人:yijun[PYG]) v2 ]; T ~# R& R
———————————————————————————————————————————; }% j- O6 Z2 p$ q' V# H2 s
【软件名称】:图章制作系统 软件版本:1.0' T8 h' c" j/ O: }9 ^
【软件大小】: 252KB M6 [, b: k/ W" N+ G) ^7 P
【软件简介】:制作各种图章
! z2 |, m( j/ K0 W【软件限制】:NAG& m* ^9 e$ ?1 p; r/ ^6 Q
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!' q( b% D2 z- B: w7 o y
【破解工具】:OD,PEID4 l1 V" Q, Y; f% j
———————————————————————————————————————————
# g4 f, X5 {+ S8 ` # O& F% Z5 p a9 S, a; s
【破解过程】:
, }2 D4 p, X! k; \) sPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
" |( B# z8 y5 JOD载入,通过字符串查找很容易来到这里:
" p# } ]. P( O$ b0046ADAC 55 push ebp //在此下断
$ Z1 o& [1 B# U( K* Y V* s) X0046ADAD 68 A0AE4600 push Unpacked.0046AEA0' |6 R( X! E+ D& \
0046ADB2 64:FF30 push dword ptr fs:[eax]
( Y0 ?7 [3 _7 ?3 o0 W0046ADB5 64:8920 mov dword ptr fs:[eax],esp
0 s7 l7 G& p- B/ Q0 N4 F0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]+ _3 D% ]' ]5 I
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]1 l+ q3 v: n8 T2 @( P
0046ADC1 8BC6 mov eax,esi
0 g' `% Z& ^* Q* k$ X0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
% g* p: |7 x3 o; T' ]5 Y3 G( P! f0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
3 V8 }4 f1 x5 f4 W$ o8 ^4 w" V0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
d1 M6 ]9 ]$ J& S; j8 V% i4 }0046ADCE E8 45D9F9FF call Unpacked.004087182 q' O1 S0 j ]- d- h
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX2 l3 a* l- c* d7 q5 z
0046ADD6 8BC6 mov eax,esi' P4 e' [% i& Y
0046ADD8 E8 3359FDFF call Unpacked.00440710
" c. ?, P6 l8 Y: V6 N0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
9 Y0 T1 V6 D: R( M2 p; y0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]. V, t* x+ V8 i! |
0046ADE6 E8 F558FDFF call Unpacked.004406E07 E& J) ^+ x) Y9 b
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
F0 M$ h* @2 V0 e6 W0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳% R& X! @, ~ U) V* l; b( _ Q4 y1 h
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
5 t3 g6 ?4 F& l% ~0046ADFA B2 01 mov dl,1 ; DL置1% ?. U$ w+ I6 ~3 e: F
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
* z6 g1 _( r" K0 Z0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
" j6 l3 _& Z/ A2 H9 |3 Z9 S! D7 V0046AE06 8BF0 mov esi,eax c. U) U' _/ t( i% E1 w8 w5 b
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10] U4 B! |, k9 v4 y c1 g, U) `/ |- t
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]" t3 m6 i; n U
0046AE11 E8 CA58FDFF call Unpacked.004406E0# ]1 N, }+ j+ r" k% Y( ~6 @% H
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
, D. M( }3 H9 ~% C6 H* b! L0046AE19 50 push eax
* {+ m M3 E, o+ \: b6 T0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
. e/ r; O; v3 A1 Z. v+ C0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]& P. K, q! O. @; k
0046AE25 8BC6 mov eax,esi
* X; _0 c2 w5 q8 f5 R: `( h0046AE27 8B38 mov edi,dword ptr ds:[eax]2 s) _5 v. r* D B8 D! T
0046AE29 FF57 04 call dword ptr ds:[edi+4]
" E' |3 l7 x& _. M0046AE2C 8BC6 mov eax,esi
8 d% E4 X- ]6 d. V) r# u0046AE2E E8 4587F9FF call Unpacked.004035786 F8 H5 Y: S0 e |
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]) l$ P$ ^% ~) a) n, `5 n
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~0 e' V" [, ]" V! S3 {" Y
0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
6 B6 i/ k) ]0 g$ I* q- o0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~( K: a# F: n: Z# h$ W* s
0046AE42 6A 00 push 0# t& A3 g3 u: l9 k
0046AE44 68 D8AE4600 push Unpacked.0046AED8 w$ k4 r9 ^4 J0 p `- L+ o
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误0 C/ a9 l! t) p S/ X+ J+ P
0046AE4E 8BC3 mov eax,ebx
' P6 R; p# l$ A0 @% ?0046AE50 E8 A3BFFDFF call Unpacked.00446DF8: ^3 P& ?, k- ]6 T9 T4 X+ D
0046AE55 50 push eax& g0 I5 X6 F+ D F
0046AE56 E8 DDC2F9FF call 4 O+ d. o& u1 o5 b2 w
0046AE5B EB 20 jmp short Unpacked.0046AE7D# y( L$ a- g( [) }6 X, o
0046AE5D 6A 00 push 0( v A) W- @- \8 z# d; M, ]- i
0046AE5F 68 F8AE4600 push Unpacked.0046AEF83 @: j0 i; h* I2 N8 I( g$ G0 W
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
6 }5 x P) b. c3 p- r0046AE69 8BC3 mov eax,ebx$ e! [/ j" }5 U' P. _! k% E
0046AE6B E8 88BFFDFF call Unpacked.00446DF8$ f0 \1 G7 t! A3 j t' a
0046AE70 50 push eax* {' Y0 W' B! w* ?2 r
0046AE71 E8 C2C2F9FF call
! h. ?8 M* T- e/ A4 l& z0046AE76 8BC3 mov eax,ebx) }) I( y6 K5 r0 X
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
8 P; e) t$ y. }# `9 d: \0046AE7D 33C0 xor eax,eax, P2 ]4 l W. m& T
0046AE7F 5A pop edx& y& L% s$ B. S' g' A
0046AE80 59 pop ecx
3 P+ B' U! K2 U5 j1 E+ P% L1 `0046AE81 59 pop ecx
" M/ E" j8 J0 ?. @; s4 b9 t: w0046AE82 64:8910 mov dword ptr fs:[eax],edx' l1 D9 |3 M' }. M9 |
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
; v0 W' x1 z) _0 u7 u% [% ~, ?0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10], e' Y5 a \5 F/ D: \
0046AE8D BA 03000000 mov edx,31 c( k& O; D# q; v& ~
0046AE92 E8 F594F9FF call Unpacked.0040438C' _3 l% |+ {! P' a! _
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]0 g9 j) k) S' O
0046AE9A E8 C994F9FF call Unpacked.00404368
. v. x+ b) v3 V0 O& W" T0 @7 P0046AE9F C3 retn* W% F# P* D& ]8 c/ w- ^2 ?
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
. Z! f! \5 ^) M, o9 Z R! i- j# g0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A3 {/ Q* j4 M8 m; Y h8 |
****************************************************************
; b2 F, M Z3 E- n: L跟进0046AE39处CALL来到:4 d. i$ m: e1 U6 n* T
0046B9F4 55 push ebp5 i6 l' I( V+ p/ t- n* \1 `
0046B9F5 8BEC mov ebp,esp2 o& _. O7 K6 b) H
0046B9F7 33C9 xor ecx,ecx2 }: o* u" ] ]3 f. t- l8 V
0046B9F9 51 push ecx/ L; z% M, F/ e/ J& l
0046B9FA 51 push ecx
9 S+ U! ~! E. r# v& O' t+ Q0046B9FB 51 push ecx5 k, y5 u% C& _5 g% e! x) D) _
0046B9FC 51 push ecx# k( Q6 a4 T! P0 f6 q
0046B9FD 51 push ecx
# V! ?3 o5 ~$ F0046B9FE 53 push ebx) X- U, I& r L% O" h; i
0046B9FF 56 push esi& ~2 ^3 o% m7 M, m- n4 [4 ]* ~
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax3 K' J/ F! e+ A0 ^6 s" H
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
( e6 F0 ?8 y! m) d7 o7 b. y0046BA06 E8 FD8DF9FF call Unpacked.00404808: R. F6 g W0 P) Y( X/ T( e
0046BA0B 33C0 xor eax,eax; H: S0 {- C0 U& D
0046BA0D 55 push ebp
" \! k+ [ e1 A( |: M: B |3 P5 u0046BA0E 68 91BA4600 push Unpacked.0046BA91+ `4 u$ n, K0 y* y, Y
0046BA13 64:FF30 push dword ptr fs:[eax]
; s2 A: L0 q+ S& y0046BA16 64:8920 mov dword ptr fs:[eax],esp
6 l& k1 ^( U: [$ ^2 `0 C3 Q0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]+ L8 g: o5 _6 w' t* T/ q
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
" p, M$ w' E& ^! P9 z+ k: m. N0046BA1F E8 DCFDFFFF call Unpacked.0046B800
+ k! H, w0 I* G# \0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
9 j; |, ]0 W$ a7 n0 i( A4 K/ I2 }1 M0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
) V2 |! a+ Z' R$ e2 ^" l5 Y. \ W5 R0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
L# Z* o; p8 w) A' i, ^+ g0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里2 `8 y. c# J* t5 Q
0046BA34 B2 01 mov dl,1 ; DL置1/ X$ z; S6 k0 l& Y" [; m# R
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
4 g2 b& o+ e5 ^% |4 s0 g0046BA3B E8 78A3FFFF call Unpacked.00465DB8- o( C* v; z5 Z0 I
0046BA40 8BD8 mov ebx,eax1 s5 {( |& p" R
0046BA42 6A 00 push 0$ O8 r; B5 ]9 _) l4 ?9 H
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]9 ?' `; H/ H" Q4 U% v% t% Q
0046BA47 50 push eax0 J' {# ?" n8 X- v: r
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code". y5 {& e" _- g4 v5 \
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]- O# P" q& E& k& m2 I
0046BA50 8BC3 mov eax,ebx
, N5 M' F/ q+ X$ Z9 r, |& K7 ^# g F0046BA52 8B30 mov esi,dword ptr ds:[eax]
% C5 h+ ]# ~' U# H2 @+ J, F0046BA54 FF16 call dword ptr ds:[esi]
4 ~8 _5 @8 U" D" N0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
8 d, [( ^4 c- ]0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
1 F/ v/ a* e, |7 o! }8 c0046BA5C E8 B7CCF9FF call Unpacked.004087180 u$ ^/ Z! f' g B: J& J* m
0046BA61 8BC3 mov eax,ebx! @9 \9 l0 o7 Z& ~5 S. Y F, y
0046BA63 E8 107BF9FF call Unpacked.00403578
/ L+ K* { d; `4 `" p0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
% `5 c7 U5 A6 i6 C- f, ]0 H0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX7 H+ d" _" E) j, | c
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~. q$ X# V8 D0 J7 o7 \
0046BA73 0F94C3 sete bl ; 置BL值
* r: d- O6 d1 z6 J) _- e0046BA76 33C0 xor eax,eax
+ B) N, U4 G* U2 T* y2 M) a5 w9 d0046BA78 5A pop edx
6 F$ B# N1 t: `0046BA79 59 pop ecx
) i# e5 E2 N0 c# W: o4 G' t0046BA7A 59 pop ecx" O% ^/ o: x3 r8 ]! o! N
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
2 w$ \2 m" g, J8 w* ?# c; L& y0046BA7E 68 98BA4600 push Unpacked.0046BA98
' ?1 r- q- X4 \6 M& E- o+ f0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
d! d- O; X/ C9 M% x0046BA86 BA 05000000 mov edx,5/ L$ g# w& D% @6 |! Y; z
0046BA8B E8 FC88F9FF call Unpacked.0040438C
8 h. }, [. |1 D' q0046BA90 C3 retn6 F5 G( {! |5 w# e
****************************************************************/ ?3 p" Q1 u7 F' M; ]( g' w
跟进0046BA2A处CALL来到:
. j' d7 s0 r% H% ~8 |0046B908 55 push ebp
5 y/ C2 m/ D/ o" _" u0046B909 8BEC mov ebp,esp
. a2 D6 E- X5 z3 v" N0046B90B 83C4 DC add esp,-24( ]9 o. l- Z; e" S; I; r _# t; d9 V
0046B90E 53 push ebx
) T# }8 U5 H; v, i) F* c0046B90F 56 push esi9 _8 i+ r) b2 l' c+ }# m
0046B910 33C9 xor ecx,ecx* @) `, V9 @* X X
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx9 x/ Q2 e- D; b, i( ]8 E/ l4 m6 J' U
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx) p/ ^: T$ @! t/ f! A; I0 s
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
6 {; I r _$ O* L6 X! `* C! }0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx+ c! x/ l$ p e( `
0046B91E 8BF2 mov esi,edx
9 {' e' F/ }& I) j! I0046B920 8945 FC mov dword ptr ss:[ebp-4],eax8 p6 k' S" b7 i8 Y
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]+ Y8 k! p, X+ f) z3 z7 S% g
0046B926 E8 DD8EF9FF call Unpacked.00404808
# I) x6 ^; \; [( t0 ^0046B92B 33C0 xor eax,eax
$ ]! t; w' Z$ E* I; D0046B92D 55 push ebp( i7 |3 S; m) m
0046B92E 68 CEB94600 push Unpacked.0046B9CE) }4 e3 c# z. _) {
0046B933 64:FF30 push dword ptr fs:[eax]
4 I8 m/ b' d, y. I+ L2 H0046B936 64:8920 mov dword ptr fs:[eax],esp
! G4 t9 v% w0 ^/ M; Y! V @( A0046B939 8BC6 mov eax,esi+ b; ]- I/ S r# y
0046B93B E8 288AF9FF call Unpacked.00404368- l9 U6 Q! m+ l, v! h+ |& a
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]$ ]& ^' Y' i; Q* X$ m( t
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
3 M1 j6 [/ \* Z8 C" p0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4; f1 k1 H8 T7 l4 ], X6 I n
0046B94B E8 1C8DF9FF call Unpacked.0040466C
5 j9 |7 Y" R3 e% z3 k0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
! s2 T! T5 k. w& ]' L0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
3 Q9 k B$ D) ]1 c" U0046B956 E8 EDBCFFFF call Unpacked.00467648
D% ?/ O4 A: {8 n R% q0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]1 P- t! s4 P* m0 f
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]9 J( j- H" R/ @9 ?. W, V& w6 D
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
* ^* L0 [1 ^3 d( t2 C$ y0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~2 a- j7 A- ~6 g5 a8 ]
0046B969 E8 FA89F9FF call Unpacked.00404368
& ^; ?8 ^8 B8 o! x0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
' O6 R. F3 e* w/ C' I& y0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
8 ?& `* B: f" m, A) B8 h5 _0046B976 8BD8 mov ebx,eax ; EAX送EBX
$ q3 r& h7 r7 G) x7 |3 T8 F0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
! A$ k+ l/ c/ S1 j8 q2 `8 K( \0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳0 q( y6 w h( D" W
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算7 b! s8 L# S( V O
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
4 O G/ ^+ I! |/ y1 Q2 J0 E; k) U% }0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
1 G, m% R5 I8 ~' p8 Q0046B987 E8 BC8BF9FF call Unpacked.00404548
, z5 b% `7 @* I, S2 \0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
8 t) b- d, r* T9 p8 B' z# K0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX; A. B; d# \: b8 f' M, p( u
0046B992 E8 918CF9FF call Unpacked.00404628 E# s) m! b1 {: n) N+ w
0046B997 4B dec ebx ; EBX减一
1 h( \' ]0 X5 B4 j1 c0046B998 85DB test ebx,ebx ; 是否为0" \7 P. K) s1 r2 j2 L
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。, G- ]& r& K) }% }; G4 J
0046B99C 8BC6 mov eax,esi# h* t0 q& f1 u7 T
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
0 q" e) n' M1 ?# R4 K. _0046B9A1 E8 168AF9FF call Unpacked.004043BC
! f8 k$ \0 b9 ]; l' u$ v& C0046B9A6 33C0 xor eax,eax
8 O0 \8 h8 I! O b2 J- c0046B9A8 5A pop edx
! C( q0 v8 z$ w0046B9A9 59 pop ecx0 W# E k- N6 C8 h9 I4 I
0046B9AA 59 pop ecx/ }+ K4 X$ D3 ?1 D6 ]; u( A# N
0046B9AB 64:8910 mov dword ptr fs:[eax],edx$ Q6 }" T/ ?7 d' F
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
1 H% u: o4 q- f0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
2 q2 M% R* F# f* n8 [0 ?0046B9B6 BA 02000000 mov edx,2
1 e; r, I5 A. k( W' Q0046B9BB E8 CC89F9FF call Unpacked.0040438C
4 l! e! G# A' z* B9 U3 \7 ?5 m+ ?) W* R0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
* U: K( z/ V7 s Y' a0046B9C3 BA 03000000 mov edx,3+ L3 m+ L u5 w6 l1 z( q
0046B9C8 E8 BF89F9FF call Unpacked.0040438C& D9 p( ]7 h, s$ G
0046B9CD C3 retn* N; g3 |5 p6 ?$ X& I
****************************************************************
" B, H8 |2 a6 @ e$ x跟进0046B961处CALL来到:- [1 v6 S8 \4 I4 ^8 L
004676BC 55 push ebp
( U: w$ i+ Q) b% B# l/ ^8 I) j004676BD 8BEC mov ebp,esp5 n1 t9 D$ m& U' U
004676BF 83C4 E8 add esp,-18
|; J0 a( s* ] x B+ T004676C2 53 push ebx7 B9 @" a# Q" l- [. j
004676C3 56 push esi' R: U* C7 h. j0 Z4 w, |4 s
004676C4 57 push edi
$ \5 y4 n# ^* Q+ ^, N% t004676C5 33C9 xor ecx,ecx2 D; @- x8 U5 D5 a
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
3 J' G; w2 {$ u004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx/ Y. R& r' x: |& A+ S+ O
004676CD 8BF0 mov esi,eax
8 M* ^6 ^; d: e" p004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
& V. N2 y+ |2 y" e! D1 b! z$ W004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>! ?+ ?$ @+ _7 z
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
) N1 |" M; S/ ~/ c) y" ?8 a004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>' a* \5 o% m8 e3 b
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi># |( c) \& Y: F _
004676D6 8BFA mov edi,edx! x, h8 k; h: |: m' m. y! f* F
004676D8 33C0 xor eax,eax
. O* [9 i/ W( a004676DA 55 push ebp3 W! L( A- m# R" F" F; x
004676DB 68 57774600 push Unpacked.00467757
; u' A$ [, F. K, b! v004676E0 64:FF30 push dword ptr fs:[eax]- z1 z4 l2 E% D5 V9 m- l
004676E3 64:8920 mov dword ptr fs:[eax],esp+ k9 Z" }, D0 [
004676E6 8BC7 mov eax,edi
3 t7 T( g$ C% a: R$ H004676E8 E8 7BCCF9FF call Unpacked.004043686 Y/ X P: n- c) x L) P2 h R" F+ d
004676ED B3 10 mov bl,10( Q7 _& }/ P9 W0 t* g
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]/ {$ _+ F7 M }- G0 v+ w- l6 ?1 u1 Q
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
4 V: \/ p% R: @( J+ Q/ i% `004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]: e" z; l, d6 v* H
004676F7 33D2 xor edx,edx
4 G+ J$ |& Y2 d0 r" ?9 X6 ]" X004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
& L% u) H: X, H$ A8 Y004676FB C1EA 04 shr edx,4 ; EDX右移4位
/ D% `2 F' L/ k" U004676FE 83E2 0F and edx,0F ; 和0F与
. N, r( I% N+ M: d00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL" U4 i) n3 c2 p/ q
00467707 E8 3CCEF9FF call Unpacked.00404548- L' f9 N% A' z0 ?0 Q5 T, b
0046770C FF75 EC push dword ptr ss:[ebp-14]" D7 z( I3 a0 Q( z8 b
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
. x; T, t2 X8 J- C00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
8 {; g% m- i% r+ e00467714 80E2 0F and dl,0F ; DL和0F与$ E$ S% p4 B- u$ L, n0 U* |9 P
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与! e2 q" V0 w* k% f$ i
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL% S) r. A) B3 a! [0 z8 _7 }6 |4 T7 t
00467723 E8 20CEF9FF call Unpacked.00404548; @$ W B( L* ]: `- G$ \
00467728 FF75 E8 push dword ptr ss:[ebp-18]
/ P" H2 D: m/ Q0 ~& M; E J0046772B 8BC7 mov eax,edi ; EDI送EAX# |. F5 w. Q7 x+ } ?
0046772D BA 03000000 mov edx,3
! y& ~3 d3 S' d00467732 E8 A9CFF9FF call Unpacked.004046E0
! b5 z" f% {7 f8 x. \00467737 46 inc esi
( x* R) n6 ]7 }, U, {; D5 P3 ?$ x00467738 FECB dec bl; E! U* c' E/ Y P) w
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e1 X9 T, `& Y5 c) [$ j" D3 V* t' _, x7 i
0046773C 33C0 xor eax,eax& ~8 l+ o( F9 o$ u$ w
0046773E 5A pop edx8 Q* ~- V# Z/ M' D( G
0046773F 59 pop ecx
% [' N+ x0 |0 Y$ o5 F/ d) y00467740 59 pop ecx& W# s# O9 e0 _* B8 ?, f9 k$ h
00467741 64:8910 mov dword ptr fs:[eax],edx" q* u, X6 [9 I5 x
00467744 68 5E774600 push Unpacked.0046775E4 W w9 p m6 n
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]: h |* x1 J; Q$ i
0046774C BA 02000000 mov edx,2) K7 H+ H$ g9 C) l' E- Z! \0 A
00467751 E8 36CCF9FF call Unpacked.0040438C" b F; _& E M7 Q
00467756 C3 retn //返回4 U$ T, g8 g: _
———————————————————————————————————————————* M$ v, p8 G6 B0 `+ U( V
【Crack_总结】:/ R" e7 d2 G& e2 k5 w9 \3 q
将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
7 l% x3 Z. N }4 v; M& k机器码:bbba33de56c4cf31d9063cc074248d4b
4 M& h; }% J# v0 M/ b$ r c( Z注册码:e807519487d7ad4f57ad42dc87fbb1916 g/ \3 A" D" e7 V; L& d* E
附件: MakeSign.rar (249 K) 下载次数:298 |
|