|
|
|
【原创】破解图章制作系统* y9 ?( P! ~5 s# V; Y7 I4 l( o$ z
日期:2005年5月15日 破解人:yijun[PYG]9 [9 I# E5 i4 ^5 Y- N
———————————————————————————————————————————/ Z* |8 z4 G4 T- a8 w
【软件名称】:图章制作系统 软件版本:1.0! W4 j3 F. O, D4 {( v4 D
【软件大小】: 252KB
+ V# B( K6 i! g. y6 {【软件简介】:制作各种图章
& ^# D- f' o" S \9 P; ]- z/ S: p【软件限制】:NAG
( p) r L$ Z1 P: p' q【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!. I$ D% O* m5 v% [8 ~( S7 j& F' ]
【破解工具】:OD,PEID2 w O, B* O9 s0 [1 J$ a5 x
———————————————————————————————————————————& q% I' }9 ]' m
- h- F0 h, D0 D v$ ]" k1 s
【破解过程】:# s: C# j0 q7 P& M$ n
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
8 T- Y Q& y% K F7 eOD载入,通过字符串查找很容易来到这里:1 s' H+ X3 W$ B6 {" [5 O# O0 H% V
0046ADAC 55 push ebp //在此下断
, ^7 V( L9 I* } i0046ADAD 68 A0AE4600 push Unpacked.0046AEA0- u$ K$ k7 x* b$ n% a" [& |
0046ADB2 64:FF30 push dword ptr fs:[eax]
5 r: r4 R$ O2 Z& ^0046ADB5 64:8920 mov dword ptr fs:[eax],esp
7 S) L0 w4 l% j9 J5 l; A( x1 f0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
6 u0 t' I& \- }/ A4 \0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]1 C$ e- {) ?& H. h0 {
0046ADC1 8BC6 mov eax,esi! d2 I7 O5 {' w* c" c( f; b; V
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX7 I" p* a# H' e. s) s% @8 H
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX& o- ?# F7 B/ F0 S, C7 q$ `( T4 e
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
% n3 X7 ]2 O6 T. _0046ADCE E8 45D9F9FF call Unpacked.00408718- t) v; K* f& B1 c: E, o# q
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
& D I' i, \* c: x0046ADD6 8BC6 mov eax,esi
$ k6 u0 I3 v( t2 M0046ADD8 E8 3359FDFF call Unpacked.00440710
8 i1 a. B2 n/ L5 M0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]) w F: X1 }6 M2 h3 L
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]& _- X* l+ A6 `; r+ d' ]
0046ADE6 E8 F558FDFF call Unpacked.004406E0
' k5 n: T5 w+ ], a# G3 R0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
6 G; f) M4 j' P6 r4 {0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
; V2 d" d% `/ m: l0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX" a( L. F2 n+ `7 R
0046ADFA B2 01 mov dl,1 ; DL置1. M$ g5 v7 `8 x1 Q
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
. @& |( _6 g S q+ d: p0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
0 ^2 k* o4 l7 P; M* [" z0046AE06 8BF0 mov esi,eax
, z3 d8 _& X0 ~$ [* Y0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
! R3 S) w2 y# H5 \0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]# X5 ]/ M9 X) N4 V6 N1 m2 ]) v
0046AE11 E8 CA58FDFF call Unpacked.004406E0
, b" z& U/ C) [. @- z0 N0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
4 P+ o- Z) M. i5 w+ d$ i; o0 F0046AE19 50 push eax1 K4 Z% n% l* C3 W8 r
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX X+ t# h0 o; r$ h# \
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
6 [0 ]. |3 B- f! [$ x5 R( r0046AE25 8BC6 mov eax,esi
* N. s" I* x( T! l8 j0046AE27 8B38 mov edi,dword ptr ds:[eax]3 [& ?8 B$ @" i* X1 Z
0046AE29 FF57 04 call dword ptr ds:[edi+4]4 E: K, y. e/ Z+ \8 j
0046AE2C 8BC6 mov eax,esi
8 }' ~0 U' i4 z: L* M2 p( W4 X0046AE2E E8 4587F9FF call Unpacked.004035783 W) c3 u8 G4 _% u* B: ]
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]1 t. Y" ^5 `" i) Y* _
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
9 L* `2 C1 j* K' N7 s0 c0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)8 ~, M. I4 ~, e
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
( d: ]8 s0 |8 M# U; I, z0046AE42 6A 00 push 0* l: P/ `+ g: J0 H/ e
0046AE44 68 D8AE4600 push Unpacked.0046AED8
! L+ H# p2 r+ A' ]( z8 g4 U8 p6 z0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
! S1 p) ?5 n' K* `( e0046AE4E 8BC3 mov eax,ebx
# L6 E* u. n) G6 G# z0046AE50 E8 A3BFFDFF call Unpacked.00446DF8% ]+ ~+ A7 h& L7 l k( W
0046AE55 50 push eax7 Q9 r" h; e* M( Y1 Z0 B
0046AE56 E8 DDC2F9FF call
4 A! V" R: v3 o, L4 J0 i! S0046AE5B EB 20 jmp short Unpacked.0046AE7D0 f) ^5 I0 P) [+ ]+ O% Z8 s
0046AE5D 6A 00 push 0( s0 m/ @: m2 o) W; |! e$ J
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8! S. J+ B& D1 ~* W
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功8 t2 J" W3 u+ I6 v
0046AE69 8BC3 mov eax,ebx
0 y; P `* Q B4 Z0046AE6B E8 88BFFDFF call Unpacked.00446DF8
4 |" G4 x$ ]/ X# b$ j, q/ G0046AE70 50 push eax4 @# A$ e9 c9 O# {
0046AE71 E8 C2C2F9FF call 5 E" f. F" ~0 P! c( V3 O) f
0046AE76 8BC3 mov eax,ebx
1 V5 p4 R& H K# @0046AE78 E8 7F21FFFF call Unpacked.0045CFFC' V. N7 ?/ m2 y7 j
0046AE7D 33C0 xor eax,eax/ D# _. A. i" f7 A; S, K
0046AE7F 5A pop edx
( s K+ O' I7 H, i) [0046AE80 59 pop ecx
. `; d6 A9 S' h& S/ O7 k0046AE81 59 pop ecx
2 l0 l' \4 n) U5 a9 Q- S/ z0046AE82 64:8910 mov dword ptr fs:[eax],edx
, b- {5 ?9 A y8 R/ J+ N: n0046AE85 68 A7AE4600 push Unpacked.0046AEA79 t I% k+ W- T1 n: V
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
% w2 v. ~6 l6 h0 z0 |) n, r0046AE8D BA 03000000 mov edx,30 l6 ]4 Z( f+ L8 m4 {4 ~" Y
0046AE92 E8 F594F9FF call Unpacked.0040438C
; {) Z, j' S" [1 V) v0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]; a0 u S. \* Y% ~; O3 ^
0046AE9A E8 C994F9FF call Unpacked.004043685 Y9 ~% ?6 e6 Y- p- D/ s! Z1 q; ~
0046AE9F C3 retn
6 S P; m3 r: V" Z) J% R7 g( D1 j/ C0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
1 `9 f8 ~' h7 w/ i) W+ [, C0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
- M' Q U* X0 \6 n: a, f6 w****************************************************************
1 i+ ^* Z) g9 P% w% g跟进0046AE39处CALL来到:
" b* @$ N% ]0 k; l8 A0046B9F4 55 push ebp
7 B. U( o: r3 _# I. I5 q- Z0046B9F5 8BEC mov ebp,esp7 [* ]7 Y! }9 l! o
0046B9F7 33C9 xor ecx,ecx
* q3 N u' y( e4 ^/ ^. z3 p0046B9F9 51 push ecx& L9 b( L$ j" V9 T* \
0046B9FA 51 push ecx0 k5 H' ?/ L# q2 G5 S v
0046B9FB 51 push ecx3 G9 T1 \1 k5 K J0 N& a, K
0046B9FC 51 push ecx6 [ N9 m! p0 B
0046B9FD 51 push ecx
2 _0 ^0 m2 s& L8 b# t% h0046B9FE 53 push ebx
1 ]6 ~; Q0 o7 S0046B9FF 56 push esi
: `3 _" c1 O# a+ e) a0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax8 m0 c; D) Z4 _6 {" A( M9 S
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
5 Y- P/ u" Y# h S1 ^. O8 U+ w& P0046BA06 E8 FD8DF9FF call Unpacked.00404808, H( h" ~% G: e, M- _3 d" \
0046BA0B 33C0 xor eax,eax3 G4 l9 F! B# ^3 u
0046BA0D 55 push ebp3 s. Z' C& z6 ~
0046BA0E 68 91BA4600 push Unpacked.0046BA91& v5 s' b B3 C. }7 V3 X0 U# y3 O, l5 r
0046BA13 64:FF30 push dword ptr fs:[eax]5 x5 p9 P6 p9 I* I* B, U
0046BA16 64:8920 mov dword ptr fs:[eax],esp( w4 h1 ~ a' K- I
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]! Z3 y0 l( a( [
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
: F2 A5 l: X; E* n C' Y0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ! V" \: Q* a' S0 Q5 z& @/ f2 v
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]6 V9 o) ~( M* `; E
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX/ w y& w+ Z, c$ r
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
+ l% t3 C h5 d0 \# B* H; H q0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
) }) F1 e* ?; \/ Q8 z# k! L6 g% [4 r- N0046BA34 B2 01 mov dl,1 ; DL置1
, P! F5 P; ]9 o. w, B2 h% M/ P/ P" i0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]0 E# ]# l% _, T6 F2 {
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
5 J- N# D! Q, \" v B0046BA40 8BD8 mov ebx,eax0 j3 p! ?. \( i/ A
0046BA42 6A 00 push 06 i/ z! s0 Q0 E0 L3 b, W
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]! r5 d4 t( h9 a' x" b8 @
0046BA47 50 push eax
* h! |; F o& P8 n0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
) s) E. d6 }0 `3 b( ^& @$ Y0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
1 u1 M# b" [$ e+ W; B/ b0046BA50 8BC3 mov eax,ebx
' H: l6 Y6 }; |% o0046BA52 8B30 mov esi,dword ptr ds:[eax]0 [" x2 V3 w7 l$ V$ T- W$ N
0046BA54 FF16 call dword ptr ds:[esi]- q2 a, d% v6 D* J! H
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX# \7 A, g7 \' X; ], @) Z
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]$ i% Z9 L( x7 D4 a4 k/ S
0046BA5C E8 B7CCF9FF call Unpacked.00408718$ |2 |$ F& T4 r+ Z
0046BA61 8BC3 mov eax,ebx$ @5 M+ W5 _: y' U+ }" `
0046BA63 E8 107BF9FF call Unpacked.00403578
7 `3 F# r, O* s6 d9 `: H0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX! B) w' Q0 M. e$ v" p
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX) N- T9 x3 ?) }. G
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~3 W5 `# O$ R) [% b' Y! i
0046BA73 0F94C3 sete bl ; 置BL值# k# D2 E3 y, U! \: f2 ]* N+ `( ~$ G
0046BA76 33C0 xor eax,eax
, t3 L5 F. t9 k7 Z- Y; P9 |. ~0046BA78 5A pop edx' V# F# @5 `0 q( e/ {' I! y L
0046BA79 59 pop ecx
/ @. e# m' ?, e ^/ f9 j0046BA7A 59 pop ecx, i: _- @( }' z h, G8 f) m
0046BA7B 64:8910 mov dword ptr fs:[eax],edx$ H" @5 q; c! p1 A# s
0046BA7E 68 98BA4600 push Unpacked.0046BA987 V8 {9 \% N0 w
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
- R9 E" t* ^$ L8 k* \0046BA86 BA 05000000 mov edx,5; E) U1 G! |+ {, f5 Y6 ]5 o
0046BA8B E8 FC88F9FF call Unpacked.0040438C
0 Q" o; N1 _4 w. I) D4 x! t9 S0046BA90 C3 retn
- {" _0 ~4 \, _( {****************************************************************: P! L$ K6 c1 V. @
跟进0046BA2A处CALL来到:' t) [0 [5 {0 H _6 B( e, u
0046B908 55 push ebp
# h. j2 X5 ^: s, K6 x0046B909 8BEC mov ebp,esp6 v" @. ~) b& c+ T
0046B90B 83C4 DC add esp,-246 w+ I5 d: d" w6 c1 s
0046B90E 53 push ebx
2 t1 S3 m2 K8 G0046B90F 56 push esi; Q6 f; r ?, J' }5 U
0046B910 33C9 xor ecx,ecx
/ Y! }/ B8 o% V8 `, z* B* G0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
% L0 W# o! Z" V) u0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx; [% E& p# M% F) ]* f4 o9 Y* N
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx j; L" N/ [* k2 q8 [- [9 q
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx" o0 l/ E. Z. C* e( a7 }3 X
0046B91E 8BF2 mov esi,edx
5 P. i" }) J: _0 B4 A0 O- Q0046B920 8945 FC mov dword ptr ss:[ebp-4],eax" D/ m8 u S" X/ _8 a! A; w1 Y* [
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
5 @# x& T) j, E+ I3 _0046B926 E8 DD8EF9FF call Unpacked.004048088 s1 q- W; r0 ~, I3 L4 y% c( s
0046B92B 33C0 xor eax,eax* O( \" I+ ~ B9 o& @4 _: f" ]1 l; A
0046B92D 55 push ebp7 q5 X) o6 T- c5 U; F$ {
0046B92E 68 CEB94600 push Unpacked.0046B9CE
y! b! E& l9 [! }* h" r# V0046B933 64:FF30 push dword ptr fs:[eax]6 C% ] G5 o, ]! ]% o2 B
0046B936 64:8920 mov dword ptr fs:[eax],esp
" F1 W e0 y5 U# u& `& G0046B939 8BC6 mov eax,esi3 t0 u9 ]* |- ?! [4 g m
0046B93B E8 288AF9FF call Unpacked.00404368( d8 s0 i3 I5 a! b4 V
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]1 w; y- X; i" X& |% d
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX( C+ \# T* f( D* |
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4; w, @ i) d; g2 U
0046B94B E8 1C8DF9FF call Unpacked.0040466C8 g0 W4 ^1 s3 g, b# D9 X1 }2 n
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]. E0 @# }. C! V) {
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
: c5 ^9 V3 H$ O* Z+ q: `0046B956 E8 EDBCFFFF call Unpacked.00467648, Q: l$ H- l( N6 I/ E Z
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]) P9 {2 Y6 }/ l2 ?2 d
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]# p4 M/ n. H1 X, H1 G4 F
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
( @# }! s4 ?4 L% V* W: S0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
{2 X# n" V9 u$ J# x0046B969 E8 FA89F9FF call Unpacked.00404368
- b* A; ~# y ?1 [! E0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX* S$ `8 n5 a8 Z3 y4 N7 H8 D7 \
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
$ G+ w* o; B. i5 |0046B976 8BD8 mov ebx,eax ; EAX送EBX5 E. x; @* `( C8 ?# {# u% `6 Q& v
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较/ e( P, I" C7 s: o9 b) l2 D' d
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳" ^0 v" c# p& l4 v2 g
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
) b* b4 f1 f4 }& h! o' z+ I b4 L0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
, X: J6 S# [. ?6 S0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL! b& u5 C, Y/ ^: n+ a! W
0046B987 E8 BC8BF9FF call Unpacked.004045480 ~* W& P/ G$ z9 ?+ S/ c# I
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
$ _, \; {. \' g$ [& Y! M- M0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
& a' k# u& @6 F7 m+ R& X; a* }+ w4 r# i0046B992 E8 918CF9FF call Unpacked.00404628, D3 [7 E7 W G) [" N* p
0046B997 4B dec ebx ; EBX减一3 J0 z" k P* _& i1 k
0046B998 85DB test ebx,ebx ; 是否为02 |* ?0 e1 U* B+ |% L( D6 z+ D9 V' O
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。0 C% N2 E2 M) X2 a* L. L
0046B99C 8BC6 mov eax,esi
) }( N- Y% i/ U/ x+ }& E0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
8 c/ B' n/ [* L* f" p$ }0046B9A1 E8 168AF9FF call Unpacked.004043BC
4 x; r7 s* [- x+ U* t0046B9A6 33C0 xor eax,eax
% M+ i. ^* q- W( |0 v0046B9A8 5A pop edx
* `& Y4 A+ V, {0046B9A9 59 pop ecx
; G: [2 O* R7 [# T9 A+ Y. u. |9 Q" ^0046B9AA 59 pop ecx1 C9 G7 W' c B
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
/ @! t/ k8 w( m7 C, h# K3 g% y. u0046B9AE 68 D5B94600 push Unpacked.0046B9D5" ]( b& |* [: c, Y' u v2 W# i
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24], U" \; h* u! D7 f6 d2 b: b
0046B9B6 BA 02000000 mov edx,2
/ Q4 H! F0 I' A. M: }4 g* B8 y0046B9BB E8 CC89F9FF call Unpacked.0040438C" M, m' _: z: L
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
9 m7 b9 }5 D& O& n0046B9C3 BA 03000000 mov edx,3: V& f+ a- e: k s' v/ u
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
( N2 A& q! w+ G* ?0046B9CD C3 retn
) F7 Z# |, N* e: c/ \% _4 c****************************************************************% W% y& s7 B& R& ?0 Y7 m- c+ r9 X
跟进0046B961处CALL来到:+ v) ^' X8 j5 `% Y9 i/ f$ [8 _, r
004676BC 55 push ebp
% c: S1 B! H; ?004676BD 8BEC mov ebp,esp" ~ m& o& }" R) ~
004676BF 83C4 E8 add esp,-18" H' B) i& G4 b6 t' i' r" \ _# k7 X1 U' N
004676C2 53 push ebx
6 k G* `& E# ?004676C3 56 push esi
/ _ w' j+ U+ i9 M2 B004676C4 57 push edi
' k0 K& q0 c6 D004676C5 33C9 xor ecx,ecx2 | n+ E" K2 m+ e) \: q! j
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
' N+ s. P8 ?6 \* W! [ A9 a004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
- U* m, g t) I) ~004676CD 8BF0 mov esi,eax
7 [7 `. a1 C" j9 u: R7 N) v004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
* ? T0 J* g2 M" q7 o004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
& t+ ^6 b% p9 X2 h- L004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
4 L3 J! m! P# f5 e8 z. i5 N, n/ f004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>4 \# ?& G# }, q6 O2 |: y0 u3 O6 z
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>. ?, U+ P! O2 m& F, [! L' d% _
004676D6 8BFA mov edi,edx$ {5 L$ H/ v" r, C. I7 c a
004676D8 33C0 xor eax,eax
3 Y+ k6 ?* i# T# K) j004676DA 55 push ebp& y R. S6 D2 Z$ J% D, x: Q- C
004676DB 68 57774600 push Unpacked.00467757
4 _5 D' r! L' Y) b2 B+ K004676E0 64:FF30 push dword ptr fs:[eax]2 m$ ?% ]9 B1 W9 j/ s- |( u' Q
004676E3 64:8920 mov dword ptr fs:[eax],esp- m P4 U# K# E
004676E6 8BC7 mov eax,edi
" y4 d5 L) t! }# o* _004676E8 E8 7BCCF9FF call Unpacked.00404368! K4 N+ @" y* L! U
004676ED B3 10 mov bl,10
% O! _5 F: h2 h5 n `004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
3 B$ Y2 {6 P" i$ S004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****! Z! j1 `$ F% ~7 G+ @" z" ^
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]( p& M" j3 Q6 O/ W( k7 D
004676F7 33D2 xor edx,edx
% q, t5 {. G @. d7 g8 r! m. F004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
7 N* Z' e8 t3 t9 b% F004676FB C1EA 04 shr edx,4 ; EDX右移4位/ h, }8 B6 ~5 [7 M
004676FE 83E2 0F and edx,0F ; 和0F与
. o7 f+ H! ~, X00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL+ w( m# V- }7 g/ Q3 E/ H
00467707 E8 3CCEF9FF call Unpacked.00404548
6 F. o9 L% _. c0046770C FF75 EC push dword ptr ss:[ebp-14]
# M/ z5 B& |7 Q Y$ E/ q) D0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
7 [$ f+ ^2 P7 \# t5 C- @/ P00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
' [( X. u" t, Y% J00467714 80E2 0F and dl,0F ; DL和0F与
0 s6 }/ d2 y0 @& k0 @) z3 s00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与& u$ }1 k( n9 ^% s
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL/ R- T% `. ~ ~8 d& |" E
00467723 E8 20CEF9FF call Unpacked.00404548
. t! J8 u' T8 g7 r- K; v! C- O00467728 FF75 E8 push dword ptr ss:[ebp-18]% H' H7 O. w, }& }" p1 n& H
0046772B 8BC7 mov eax,edi ; EDI送EAX
& v, A" m! m/ V9 C# M$ t0046772D BA 03000000 mov edx,3
( ^' X3 W; L# o/ Z00467732 E8 A9CFF9FF call Unpacked.004046E0
& k, k" ?2 v, M00467737 46 inc esi( i9 ~3 C. d3 j5 q9 c7 y
00467738 FECB dec bl
3 A1 q, L7 L$ @" ]0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e. M! ?1 X7 E; d. [$ a
0046773C 33C0 xor eax,eax6 }! k! X, q% E' d: r9 i+ z
0046773E 5A pop edx
( B% _) Q u$ f! ?% M0046773F 59 pop ecx" v/ }1 U6 V6 T3 ^/ ]
00467740 59 pop ecx* ]1 y# P; y4 g( ]
00467741 64:8910 mov dword ptr fs:[eax],edx+ r, L# G* m- y7 r9 _
00467744 68 5E774600 push Unpacked.0046775E
1 h1 o% H8 _9 V00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
3 H& T7 H! z# K: a0046774C BA 02000000 mov edx,2 N" k) _" P1 l ?
00467751 E8 36CCF9FF call Unpacked.0040438C
y# q: I d+ F6 }( }( T00467756 C3 retn //返回
7 Z. x1 Y+ V/ @. a. `" J7 {" h———————————————————————————————————————————- r2 I9 Z/ D& u. q& Z4 ?; o8 q
【Crack_总结】:
7 ?4 g, G/ N% O' O9 T. j: D将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
1 M0 A* k- r! ?, R( Z- t& ]机器码:bbba33de56c4cf31d9063cc074248d4b
3 i. k9 {7 U- m, e: ?注册码:e807519487d7ad4f57ad42dc87fbb191
4 E# [) v- W- E( H附件: MakeSign.rar (249 K) 下载次数:298 |
|