|
【原创】破解图章制作系统6 ^1 l6 |' y8 N1 B/ F# f/ P
日期:2005年5月15日 破解人:yijun[PYG]
( w) r; m- V" [6 W4 T1 M! |———————————————————————————————————————————
6 l3 r8 T g+ f5 W+ X; \2 b【软件名称】:图章制作系统 软件版本:1.0, z) b9 Y# u/ v( h6 z' G
【软件大小】: 252KB* N P& z" V7 l- G# x" ?
【软件简介】:制作各种图章
4 O( M" z* |* J) S: h, ^/ {【软件限制】:NAG
: D) l$ U D; G【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
1 ?* N/ l6 A" p% t: ] R$ k【破解工具】:OD,PEID, {! n# H2 S+ |
———————————————————————————————————————————, w& A! b4 ^* n( f% c
4 W+ H. A# \0 F9 u【破解过程】:
) k5 y7 ?! L8 C5 _4 Z3 yPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
0 R6 o/ F- L9 P5 ]OD载入,通过字符串查找很容易来到这里:6 U) [8 z9 R! _( v2 G
0046ADAC 55 push ebp //在此下断/ w1 t" @* i: n( E. F
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
6 x+ V; W1 o- E1 R0046ADB2 64:FF30 push dword ptr fs:[eax]
' E+ t' c: R+ C3 m* c% [7 ^, ?0046ADB5 64:8920 mov dword ptr fs:[eax],esp3 v7 V' b1 ]- u8 e: i+ b- f, A& k4 G
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
3 K: u, u" ]( S6 Z r0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
& n0 Y: {$ ~* [* i! l, `8 Q0046ADC1 8BC6 mov eax,esi6 }! @. |9 j4 c9 Q2 T" x
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
- a7 n. b, m) Y7 M1 l( T' `0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX# a Z% L5 C5 @$ k4 _* t: o0 n
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
+ ]) o7 H0 s; @9 e0046ADCE E8 45D9F9FF call Unpacked.00408718
$ C# C' \9 m( b0 ]* C* R$ A: ~0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
0 z" J- p+ g0 f. I, }( }% O$ V) X0046ADD6 8BC6 mov eax,esi
: p- A* @4 r3 j7 {% V( G% e1 s0046ADD8 E8 3359FDFF call Unpacked.00440710
T: X. J* N# f! [$ F. p0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C] x4 o* s( y b) h4 i
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
8 b' S' K3 w4 h- @$ a0046ADE6 E8 F558FDFF call Unpacked.004406E0. v2 Y/ x0 h [: v- Z: A
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空6 i3 y+ K! Q+ A& N! L, d" t9 S
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
* m& W( \3 v `# C, r3 d3 _+ e1 V& w/ Q0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX* B9 P5 N4 Z* p% i
0046ADFA B2 01 mov dl,1 ; DL置1
3 @7 f: @( u) G* x! H. T0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
/ V& k3 w+ t6 _) K7 }) ^: M0046AE01 E8 B2AFFFFF call Unpacked.00465DB81 o5 D' ]9 A! u' ~; o. x6 F$ j
0046AE06 8BF0 mov esi,eax/ z0 [0 P: n$ m! W& C& \
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
1 k8 J) }7 d) m- d' Q% h0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]' W% P* B( x! ^. y
0046AE11 E8 CA58FDFF call Unpacked.004406E0
: e2 H7 q6 E: H) l$ [/ B! {: @, F0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
3 c# D! U9 q% T) v3 T7 w0046AE19 50 push eax% O" O7 S, N" c3 L
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
% ?- L3 T3 Y8 n$ S0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]# O: c6 I/ h; d5 d" N6 v4 f
0046AE25 8BC6 mov eax,esi1 E7 J; Q! [2 e1 j
0046AE27 8B38 mov edi,dword ptr ds:[eax]
! y7 Y% d; Z3 H k6 X0046AE29 FF57 04 call dword ptr ds:[edi+4]! _/ I( Q' h+ I' O }6 R7 B
0046AE2C 8BC6 mov eax,esi
, z& M2 y$ K3 y. `$ Z3 J& h0046AE2E E8 4587F9FF call Unpacked.00403578+ e6 H; I' V. V9 K1 x. u. X
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]& R' ]9 _- T x) y: g' X
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
8 ^" C! X. g3 c) @0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
+ V( Z$ j+ y( V, j+ T: v& C0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~7 M' r p6 q/ E! T) B3 o
0046AE42 6A 00 push 0" {# v d& N+ x" ]. d
0046AE44 68 D8AE4600 push Unpacked.0046AED8! t0 N7 W+ g/ J- c6 [
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误: q0 i$ f0 v+ G* N+ D
0046AE4E 8BC3 mov eax,ebx
0 c4 m# |5 W z1 C* b9 w! A0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
+ T0 o; @1 u1 {0 W8 q( k+ q0046AE55 50 push eax h/ C' l0 T6 I4 M% M/ ?
0046AE56 E8 DDC2F9FF call 0 M ]5 Q: b I+ d3 G2 i
0046AE5B EB 20 jmp short Unpacked.0046AE7D
0 p( l- w7 _; b; t/ E% y0046AE5D 6A 00 push 04 c1 ~: `" x" _2 Q$ b' n) w
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
- v5 g- I. Q V8 F. I# O0 X# X2 P( d0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
( C* C1 r1 y5 o' c5 M0046AE69 8BC3 mov eax,ebx" u- b( f4 d: s/ U0 n
0046AE6B E8 88BFFDFF call Unpacked.00446DF8& A; B5 Q% Z9 |/ {* w6 a
0046AE70 50 push eax$ z" ?0 z( X5 A1 [3 f @
0046AE71 E8 C2C2F9FF call
7 ]* _- `4 c* I [4 l- C& a0046AE76 8BC3 mov eax,ebx# ?0 L6 k8 |4 }( F" l+ Q% G
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
# s' z+ A+ k i9 ~0 ]9 f0046AE7D 33C0 xor eax,eax, H" Q' I' y# R9 W. ?# e4 O8 t, |& y
0046AE7F 5A pop edx
3 F. T) g8 b( s3 t: Z) J+ s+ Z0046AE80 59 pop ecx `' `3 q" d2 p6 o/ f$ X
0046AE81 59 pop ecx
$ S: v3 {3 E$ p! d0046AE82 64:8910 mov dword ptr fs:[eax],edx. K$ O- f/ N( g; g. V% I' }4 k
0046AE85 68 A7AE4600 push Unpacked.0046AEA74 x, `" [& q) C7 W
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
5 F7 B+ ^2 a j+ p7 P' z6 X% A9 t0046AE8D BA 03000000 mov edx,3
# H1 z2 b6 U' b3 h7 O0046AE92 E8 F594F9FF call Unpacked.0040438C
) w1 y3 I o7 Y# [5 a I0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]% ^1 G7 y2 @# e0 J9 ^
0046AE9A E8 C994F9FF call Unpacked.00404368
6 e) B7 x g7 t4 K* W0046AE9F C3 retn* I& h. u" |4 W
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C9 i, [( a( @& Y1 ?) Z- T; T; W
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A- ^$ z/ d. h! H& W2 [
****************************************************************
3 M5 f V% i" }7 P( j" Z: H$ S跟进0046AE39处CALL来到:
8 w- a# N4 Q- \0 l: a L0046B9F4 55 push ebp7 r2 v$ Z" ^3 a
0046B9F5 8BEC mov ebp,esp8 E0 {4 u: L; D) n* _
0046B9F7 33C9 xor ecx,ecx6 N3 n1 R& C6 H4 R0 Q2 |
0046B9F9 51 push ecx
# [3 k* c$ v8 b" e* p0046B9FA 51 push ecx
0 D) E8 G8 `, i! T0046B9FB 51 push ecx( p) O2 e2 ~5 X. J9 V
0046B9FC 51 push ecx
- p8 G3 R' k% H6 O0046B9FD 51 push ecx
$ O/ R. t2 a& K0046B9FE 53 push ebx% [5 s- K$ A; B- d1 D" B1 J
0046B9FF 56 push esi! B/ z- E+ D% O
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax6 I0 l1 U% G: Y! V3 f- h( S
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
2 U- I1 p2 b& \" g- m% u1 S0 H( z0046BA06 E8 FD8DF9FF call Unpacked.00404808( s h8 P0 v5 R! @8 s
0046BA0B 33C0 xor eax,eax5 t! c: t7 e1 R: C3 \6 \* Y$ K* S
0046BA0D 55 push ebp- ~6 x `9 P u0 J5 ]; N
0046BA0E 68 91BA4600 push Unpacked.0046BA91
$ q% G% H' k% ^! P6 U* s& R6 V0046BA13 64:FF30 push dword ptr fs:[eax]. H4 E& }3 X- q5 ~2 E+ V+ S9 X
0046BA16 64:8920 mov dword ptr fs:[eax],esp. i2 K% v" V B1 C% W2 E6 m
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
, B4 |9 I/ X- M7 q0 O& ?1 r0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
* U" ~6 r! k! p/ N0046BA1F E8 DCFDFFFF call Unpacked.0046B800
; Y/ [ N U( ?$ r* e# r! B0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]& o7 p' @ B5 ~! z
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX; B6 S( v4 n m3 l, l
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进# z) z3 J: \; c' P" N3 n
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
2 I, ~& q2 U" n/ T0046BA34 B2 01 mov dl,1 ; DL置1
" w5 j8 B& P& l1 B' z8 l1 @4 I0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
! h4 u! l0 m! T5 ?$ c0046BA3B E8 78A3FFFF call Unpacked.00465DB8' J2 g7 Z V% T G" I K
0046BA40 8BD8 mov ebx,eax$ i: [% m% \( E; b* O" t& r3 l0 w
0046BA42 6A 00 push 02 T2 o+ v. [1 B* {2 W n
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
. I7 m9 M# P0 [% j* @0046BA47 50 push eax
# |9 F; U7 n+ P1 R% g- w% E0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code". |5 Z0 `# p2 t
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
c% j% M( T1 k9 o0046BA50 8BC3 mov eax,ebx4 K; Y9 O" B) A! q7 L4 @
0046BA52 8B30 mov esi,dword ptr ds:[eax]7 W. Q/ o8 z0 v$ k# h- c
0046BA54 FF16 call dword ptr ds:[esi]. W, L' I: k$ H N6 a7 y2 |
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
( S9 h- v0 o# g r0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
2 H: t6 x# x5 L/ U7 A6 H0046BA5C E8 B7CCF9FF call Unpacked.00408718: I2 @/ j- E+ G0 y# p, G0 z
0046BA61 8BC3 mov eax,ebx
8 s% g9 R' z6 u0046BA63 E8 107BF9FF call Unpacked.00403578
9 Q! y* p6 `% {) B0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX: z( ~ O9 e+ Z! q/ z0 m: L3 v; ^
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX: Y! T s" c1 z/ a. V
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
+ O1 I4 ~2 r, o6 S$ x8 M# T2 P& ~0046BA73 0F94C3 sete bl ; 置BL值; A# G9 h1 ^2 I3 e) J$ P$ _# V, \
0046BA76 33C0 xor eax,eax) @; l$ z: _; m6 ]! ]( W3 G
0046BA78 5A pop edx; y/ k7 J+ U4 q7 P
0046BA79 59 pop ecx. M- L! v6 ]' |5 m! ^0 @) ^& S5 r
0046BA7A 59 pop ecx
9 w8 G4 q, Y" a5 L) B! y0046BA7B 64:8910 mov dword ptr fs:[eax],edx8 t# T' h/ j8 p0 n
0046BA7E 68 98BA4600 push Unpacked.0046BA98
5 w! t% `) }% q9 Z0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]; t5 K+ Z8 v# x7 S6 `
0046BA86 BA 05000000 mov edx,58 Z5 m# X! h/ A0 a" d. e- h
0046BA8B E8 FC88F9FF call Unpacked.0040438C5 x# n: H0 d( p' _9 ?7 x
0046BA90 C3 retn5 F }0 v2 R. ?. l( D
****************************************************************
/ z5 r1 l. j/ I& E/ M; ~* A跟进0046BA2A处CALL来到:
% l8 J* i- M- o* v2 J. j \0046B908 55 push ebp
% n P5 v( b- E% D0 x+ g% \0046B909 8BEC mov ebp,esp
c8 x$ D# ?7 e5 W+ O% A. q0046B90B 83C4 DC add esp,-24, l0 y4 _" W! L- c+ B
0046B90E 53 push ebx
8 ]; N; r7 s3 [! P- F0046B90F 56 push esi
L' N$ ~% z0 ?8 p, L0046B910 33C9 xor ecx,ecx
. \+ W9 L1 x8 y0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
7 x. |* g4 r# l5 x0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
. n9 L6 p0 z, A, j# }$ F2 u- T" d0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
' w1 C/ B- V1 n1 e. \: X4 h& [; M0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx9 _% q) L _, U) f
0046B91E 8BF2 mov esi,edx0 k2 h7 z4 O, x' L! x
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax" S2 g4 v+ p1 _: ?! T* j
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]9 G% l1 A: A$ |# q
0046B926 E8 DD8EF9FF call Unpacked.00404808
, c5 Q) Y: W2 }( @0046B92B 33C0 xor eax,eax
, E. S# x# J8 F, }0046B92D 55 push ebp- U8 C& v( t9 W
0046B92E 68 CEB94600 push Unpacked.0046B9CE% N0 H A I! G4 Y& s" |" T) X
0046B933 64:FF30 push dword ptr fs:[eax]2 G, ~ a4 w" s M( X5 f/ @! o
0046B936 64:8920 mov dword ptr fs:[eax],esp% M A6 Y( G/ I1 p% p q
0046B939 8BC6 mov eax,esi
$ ^; @# u2 Y& Z- k' i7 C: s7 O0046B93B E8 288AF9FF call Unpacked.00404368% z' W- v+ i! }5 e' p
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20] j) N. H, Y/ j9 K$ b: ~
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX! }! ]4 W) u/ F3 k$ F5 x8 X9 L
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
$ D* A9 ~" c, M8 o! t# x0046B94B E8 1C8DF9FF call Unpacked.0040466C3 {- f9 o( A& m' ^" X& R2 E
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]' n" F n. W0 F5 I* U& C7 _
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]. h- k2 a8 f7 ~* y% d; w
0046B956 E8 EDBCFFFF call Unpacked.00467648
) X" Y0 \. |9 s0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
; K6 C* J7 q- F9 m, \0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
, [4 q8 {$ z7 @* A/ B( ~2 M6 u0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e# z8 V7 F* F. v* L
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~" \* Z! ]# p2 I1 M5 d4 v
0046B969 E8 FA89F9FF call Unpacked.00404368
( p. Q& y& @& n" ?+ Y9 T0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
; _) d, x8 o8 g% t0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
( [* {) n7 @5 C- F0 L5 V; N9 `5 a0046B976 8BD8 mov ebx,eax ; EAX送EBX& k& _" m9 |1 V0 O, `5 Q
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
$ Y/ N6 ?5 J9 Z' l$ @' f0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳' t" ]& P, r7 | E( j! }
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
# c. s7 t! [1 j# w9 a! A& q, J0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX+ `3 }, c. E& t# ]$ L8 a
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL3 o3 H# X) A8 D; U, e. s6 D7 C
0046B987 E8 BC8BF9FF call Unpacked.004045480 B3 M7 o2 v& m8 `4 c: C0 Z- a
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
, E! s0 ?+ x' y; a" a& t7 F1 p* r4 _0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
+ a Y% |* ]3 \. |0046B992 E8 918CF9FF call Unpacked.00404628
7 t! u. s, B' _: {# o' l& O0046B997 4B dec ebx ; EBX减一3 e y2 ~( Y8 I6 K
0046B998 85DB test ebx,ebx ; 是否为0
( J, {6 [" W: U$ l/ S4 @" E" d0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。
4 `& M' e+ V5 S& R+ p9 `- A$ k0046B99C 8BC6 mov eax,esi; E8 f% ~( D6 B( G+ Y) R0 H: L. R
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
, S! ~& I& I) u- D0046B9A1 E8 168AF9FF call Unpacked.004043BC
. f `. V9 j$ G/ [9 c+ _3 N5 o8 U0046B9A6 33C0 xor eax,eax
) X" J% J5 t) @$ E7 ~$ \. G0046B9A8 5A pop edx2 u: y3 t; t0 `/ |4 ~* P3 y
0046B9A9 59 pop ecx9 a1 Z1 Q) [, l+ D/ G
0046B9AA 59 pop ecx
* W0 R- c1 c: A& J! x* g R! s1 j0046B9AB 64:8910 mov dword ptr fs:[eax],edx
- |% B }4 R, x( j: R4 p& _0046B9AE 68 D5B94600 push Unpacked.0046B9D5
8 F# q$ r4 Z- m0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]) z5 p4 E, c/ k
0046B9B6 BA 02000000 mov edx,2
& z6 l) D% \1 f9 k. r$ k2 ^0046B9BB E8 CC89F9FF call Unpacked.0040438C, E* } o V" N* ? D/ A% t7 T
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C] J% ]/ _3 S2 V* L$ N+ Y
0046B9C3 BA 03000000 mov edx,30 h& ~' }7 l' a! j, b& r7 |
0046B9C8 E8 BF89F9FF call Unpacked.0040438C r! L, I9 v, i; S. }: Q" r
0046B9CD C3 retn
# q- k+ ?/ H* A% D****************************************************************
; b* H) ^ I5 _( h! F9 {跟进0046B961处CALL来到:
% H2 C3 H, J7 v$ m* N+ u8 k1 c$ M9 ~004676BC 55 push ebp* v8 R" B) I V6 E6 R( u
004676BD 8BEC mov ebp,esp6 M& P! t. X4 L
004676BF 83C4 E8 add esp,-18" t' ~$ a+ [% ?! y9 H
004676C2 53 push ebx
5 I* M# Y- r4 a/ |, v# ]8 a8 }8 o2 m004676C3 56 push esi5 C5 x$ W; g! } J) t
004676C4 57 push edi
7 ]3 A) q' {" @004676C5 33C9 xor ecx,ecx
- e7 ?& R8 E9 [1 W- `* E6 W& T" R004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
" |8 f- T4 m# n1 L004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
# y% F6 k7 a, |8 r4 ]) \! s004676CD 8BF0 mov esi,eax( u- \; c( @, P9 I
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]; ?2 \# V- G# O/ u
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
8 O9 x, c* E# y7 \( w4 y7 q' G004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
3 B- P& z: s; t3 |- N004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
; x) {; W* D: B1 f9 e& q004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>& q1 w% @: b" Q, \: e( L% h
004676D6 8BFA mov edi,edx: Y: z6 M& n; r+ z
004676D8 33C0 xor eax,eax5 U! R& v4 z7 U" C& Q
004676DA 55 push ebp
. f2 C9 y. Y$ @! ^& B( U004676DB 68 57774600 push Unpacked.00467757
- z3 ~4 x3 U& X! x7 P2 k# N9 Z3 L' t004676E0 64:FF30 push dword ptr fs:[eax]; B( V6 D& r+ ^7 E6 P
004676E3 64:8920 mov dword ptr fs:[eax],esp
1 C i" _) c# s5 P/ C: [; U004676E6 8BC7 mov eax,edi: |% R2 q/ \" P* w
004676E8 E8 7BCCF9FF call Unpacked.00404368. }& `1 W5 U. ?/ ^8 B1 t" J2 x
004676ED B3 10 mov bl,10
3 Q! u9 E a- H+ `. _$ s004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]8 z# i* [7 H- N/ }0 l
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
# j, m$ `0 r! d! S% U4 k! J004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
* ]' K8 {' |0 l6 R004676F7 33D2 xor edx,edx% m3 ^4 g, ~2 @/ [
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL G# r# h8 T" u, c, S/ b
004676FB C1EA 04 shr edx,4 ; EDX右移4位
' Z/ I+ K/ b" h% [- l004676FE 83E2 0F and edx,0F ; 和0F与
' A8 }: Y- a7 r; w2 l/ \" D! h00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
( `8 e- _# S& W8 r0 a00467707 E8 3CCEF9FF call Unpacked.00404548- K" m& ^! N- ~, p+ Q4 f" e
0046770C FF75 EC push dword ptr ss:[ebp-14]
5 H( _2 r# I8 o \( C! g V0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
- d8 X( Y% N9 o00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
% C' z% n7 w% p% ?5 U# r% T00467714 80E2 0F and dl,0F ; DL和0F与
: g8 x! s5 J% ]9 v, M$ I% ~00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
6 o& j( Q1 A' K, c0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
# b3 W7 _" I. T2 B00467723 E8 20CEF9FF call Unpacked.004045488 |& d4 P) @7 x; c- y8 ?# ]7 f+ B0 v
00467728 FF75 E8 push dword ptr ss:[ebp-18]5 N! H4 j8 Z4 c0 k+ B& C1 m1 Z2 }
0046772B 8BC7 mov eax,edi ; EDI送EAX
) B$ y6 l- k8 L8 M+ f0046772D BA 03000000 mov edx,3# X0 q; M; G* _& U( k
00467732 E8 A9CFF9FF call Unpacked.004046E0
) i/ b- r g+ P8 E) P! v00467737 46 inc esi5 R- X( t. q- N8 e5 y% l
00467738 FECB dec bl
- N1 o9 r1 p0 p0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e4 X. ]8 N- A0 G7 D A* B, ^
0046773C 33C0 xor eax,eax
' s" ]8 p" j4 S$ S4 d0046773E 5A pop edx/ q1 W, F# p# O9 f0 Y' H
0046773F 59 pop ecx
4 e) r% j) ]( N; h00467740 59 pop ecx0 f6 }' L4 W2 e! E
00467741 64:8910 mov dword ptr fs:[eax],edx
$ I) R" h9 p' h& I% a1 W) A3 Z00467744 68 5E774600 push Unpacked.0046775E
; L o: t# p+ f2 Z' u3 s+ P00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
) G! `# l5 @: E0046774C BA 02000000 mov edx,28 G; x% n1 C1 S9 @
00467751 E8 36CCF9FF call Unpacked.0040438C5 \5 h! P5 n3 I) ~
00467756 C3 retn //返回# u' I( w6 W2 k v: ~
———————————————————————————————————————————, R5 N8 A0 J, H4 c* h& \( e% e- |
【Crack_总结】:1 [3 Z, K/ D+ f w# J5 X0 p
将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^: w2 k) o4 h |5 L* j# H' K
机器码:bbba33de56c4cf31d9063cc074248d4b
, F1 r ]/ C: t% @7 d注册码:e807519487d7ad4f57ad42dc87fbb191; G* G9 ?$ |4 n2 H4 v) U1 ?
附件: MakeSign.rar (249 K) 下载次数:298 |
|