|
【原创】破解图章制作系统
5 U7 n8 ?4 X+ \3 B- ~* g日期:2005年5月15日 破解人:yijun[PYG]
* T/ [, E& O9 u7 K- M$ w& T———————————————————————————————————————————
9 _& ~* H( s1 u, |【软件名称】:图章制作系统 软件版本:1.0
- u/ [' D! t L4 B- Y c6 c2 P+ ]【软件大小】: 252KB
! u% y/ M7 ~1 z2 z4 E【软件简介】:制作各种图章" I, [7 y, b. r+ C
【软件限制】:NAG j% @- R0 r3 V2 g) o
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!7 Y" h# ~) @5 k. }$ g
【破解工具】:OD,PEID5 n" W# E& Q @9 R& b3 g s
———————————————————————————————————————————4 T8 P' ^2 s3 D2 A3 m$ d s
- m/ d. m; x: T/ N0 q【破解过程】:
; A4 m* O: d, cPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~2 @- C4 i: }( F# _: w7 }9 P1 @$ K& E
OD载入,通过字符串查找很容易来到这里:
* s" o8 _+ S; _0046ADAC 55 push ebp //在此下断
5 a4 q5 S* h; s5 H* |* j2 X: `0046ADAD 68 A0AE4600 push Unpacked.0046AEA03 h |9 }! X/ G2 A0 b1 O
0046ADB2 64:FF30 push dword ptr fs:[eax]
8 s$ w! R& ^2 {' w0 U# N0046ADB5 64:8920 mov dword ptr fs:[eax],esp2 [! e5 o" E$ ]. f+ u
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
U2 ?& u9 n7 v$ ^0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300] z) ~& K0 f# h2 ?( a6 [% y
0046ADC1 8BC6 mov eax,esi
4 t. B3 t7 j0 w+ l1 d. A$ H( G6 g0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
. i7 B% |* e* L1 ^( |, U" t0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX5 o) h( X% z1 S6 \! U4 g
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]) d! N' w9 j1 H4 d* A% |
0046ADCE E8 45D9F9FF call Unpacked.00408718
* |7 X" f- z6 y8 \' u: X8 s3 f0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX6 A7 i' b: [. y% \7 U6 K
0046ADD6 8BC6 mov eax,esi9 |# n( \5 B/ [$ y# A4 U
0046ADD8 E8 3359FDFF call Unpacked.004407105 y0 u0 S% R b% b' {" J$ l3 n
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
. y! W) Y( C7 ~6 q T* F( g0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
/ H ]& {& k: w1 s' O. h4 ]0046ADE6 E8 F558FDFF call Unpacked.004406E0/ v5 C8 N0 M1 k2 P* L2 z
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
) G; F& R. c! s% P$ `8 f0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳" C4 i# M5 B z9 @4 Q
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
- a4 Y4 B% c& y* }0046ADFA B2 01 mov dl,1 ; DL置18 c2 H6 g0 a* X; r
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]4 P5 V8 g2 q8 ?0 E; X' u
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8' D9 {' K' L! T% Y9 ?: U ]
0046AE06 8BF0 mov esi,eax1 Q" e% g% d' D. P
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
6 Q2 p, G4 Q( [0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]# i4 ^( S) R y( `2 t' A" B0 [
0046AE11 E8 CA58FDFF call Unpacked.004406E0, F( E5 z2 c. \% @ D. h
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
( `5 Y4 R/ `+ d- b6 ]: o0046AE19 50 push eax# n7 [. t: V& F3 X- p! C
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX2 W) \$ ]! U: k% [* Z' K
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]& n6 N9 B: F/ {+ c8 U# r! G1 f: z3 ]
0046AE25 8BC6 mov eax,esi
2 W5 q: K) z2 `3 e0 _0046AE27 8B38 mov edi,dword ptr ds:[eax]% u; l3 T# V$ P b
0046AE29 FF57 04 call dword ptr ds:[edi+4]
" i" A/ S& L, r. u0 P0046AE2C 8BC6 mov eax,esi' C, ]5 V: a3 B! K2 a t
0046AE2E E8 4587F9FF call Unpacked.00403578
. e" s1 J+ ? o) u! C. l! Z* J- C0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]- A, c. O) e! z
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
3 ?- Q1 C; |' C2 n" ~0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)6 W* @, w5 W X$ [
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~( T: F. ~. z1 ~, d
0046AE42 6A 00 push 0
6 T& M4 b, \7 m5 S4 S# O0046AE44 68 D8AE4600 push Unpacked.0046AED8' l* E' i% p' S6 r3 \' F' j p
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误! L- x; c) K. l& K
0046AE4E 8BC3 mov eax,ebx6 G" g; @/ i2 s# w/ x; z
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8' o% |" h! f" z4 C$ T# G& x, n! V( \
0046AE55 50 push eax; M8 p! ]( @2 X$ h% A) Y, n
0046AE56 E8 DDC2F9FF call
7 K& B/ {, B0 y3 n" e- i7 k& P0046AE5B EB 20 jmp short Unpacked.0046AE7D+ N- f, _$ Z4 ]7 I5 V
0046AE5D 6A 00 push 0) j% j, S9 \8 {& |: U) D
0046AE5F 68 F8AE4600 push Unpacked.0046AEF84 U$ _4 c/ r$ x% p9 H0 M
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
6 o) Z8 M' C) j. g. H+ K8 H0046AE69 8BC3 mov eax,ebx; o5 T& J1 ^, D7 _) a N
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
2 J* j( N1 R! U: P# m0046AE70 50 push eax
6 f4 B+ o1 L5 X8 X, U0046AE71 E8 C2C2F9FF call
5 N3 P+ o7 D B0046AE76 8BC3 mov eax,ebx# |7 i! J( \5 s
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC# l% @7 v, ]$ M/ V6 x& j6 K
0046AE7D 33C0 xor eax,eax
! _) I& F$ i# S& @" G0046AE7F 5A pop edx% A0 u3 C( i2 e ~; v8 ~
0046AE80 59 pop ecx
; q/ r# H0 G( q7 w% f2 g0046AE81 59 pop ecx' c# R Q/ w- C# {, E
0046AE82 64:8910 mov dword ptr fs:[eax],edx! L8 x+ R- |, ~) Y1 E, k6 i
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
9 S) Z( e7 v" ^* G: J3 t0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]1 @3 I; Y3 W1 O t: U
0046AE8D BA 03000000 mov edx,3
+ b8 L/ S" A: p4 w+ M0046AE92 E8 F594F9FF call Unpacked.0040438C6 D$ f3 m( t/ ~# b
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]0 k* y- t8 |7 h1 S4 m: u
0046AE9A E8 C994F9FF call Unpacked.00404368
0 H! j8 Y2 A6 U( B) y$ F0046AE9F C3 retn( e' l/ z# z4 \ I3 x0 T' G
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C5 P) }% B7 n) f
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
2 \! H: x! D! J; y****************************************************************/ d2 c7 v5 s" s4 l* M
跟进0046AE39处CALL来到:
4 _4 O3 J3 y) v8 v5 b- H8 L0046B9F4 55 push ebp
# P5 o- o8 Z! X6 r0046B9F5 8BEC mov ebp,esp; V& a" E0 v6 H/ F. L/ i" r; A
0046B9F7 33C9 xor ecx,ecx
2 ]) N/ {7 x0 A$ c$ P3 r: L% N4 v0046B9F9 51 push ecx
3 X) J# {6 i& h: u( g1 |1 o0046B9FA 51 push ecx2 r$ T, J- t' |) \# q2 f: y! }
0046B9FB 51 push ecx
& c& |" O! l! d5 P6 \3 p0046B9FC 51 push ecx
0 T' l4 E. I( A5 |3 b0046B9FD 51 push ecx+ T; a4 ~3 a3 k1 L
0046B9FE 53 push ebx
6 Y: s$ `2 y) C* S( c0046B9FF 56 push esi2 v4 y" \/ l( K( ` ~' e
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
1 Q: U* Q6 c' Y" k) G; {0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
, i" g8 D2 M, w: o* n0046BA06 E8 FD8DF9FF call Unpacked.00404808+ E" K" u! X0 l9 x$ \6 N3 {- @4 y
0046BA0B 33C0 xor eax,eax5 u+ `. I. p7 q8 A) g
0046BA0D 55 push ebp
% o2 y" f8 j8 h6 A% I8 e0046BA0E 68 91BA4600 push Unpacked.0046BA91
3 t4 g' y3 n, n0046BA13 64:FF30 push dword ptr fs:[eax]% \3 a: c T. `. J; b
0046BA16 64:8920 mov dword ptr fs:[eax],esp
! |& Y& @. [/ _0 a& {7 h0 ?2 s0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
. l8 J9 D6 }- r3 j0 E0 X0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
. c7 [- ~3 U7 L* o- J0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ( |% I! L" h" L1 N; P( p
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]4 G( C; r) z6 ]% K. M6 Z# }0 ~
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
M/ I: j! M" w* b1 S$ {7 x0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进4 t8 P# p9 {: _ r) T2 c# q8 ]: ~
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里% Z( |1 e, P1 j5 [* V8 C
0046BA34 B2 01 mov dl,1 ; DL置1/ H/ W0 }# g7 V, h" K
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08], F6 k7 A, k) U5 r" i6 A+ N
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
! x$ |. y! B+ a) J4 J F) W, B8 f0046BA40 8BD8 mov ebx,eax
3 q. Q! r$ y8 a, \( Q- q0046BA42 6A 00 push 0# M1 Y: P0 X# n8 J! A
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]2 E& I; z. W* v; o
0046BA47 50 push eax, U8 C$ X P. [$ k% F- R' z
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
, d. \8 A' x! \- V4 }0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
6 L) z' y* K+ ?! Z' |; I" A* L0046BA50 8BC3 mov eax,ebx
* T9 W3 y3 a. a( p0046BA52 8B30 mov esi,dword ptr ds:[eax]
@. g- B: d5 y+ d( \3 p3 F0046BA54 FF16 call dword ptr ds:[esi]7 W I+ {; I- u% b" g# h+ G
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX* Q* o. t) i0 y0 O/ J2 Z
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
+ g4 ~3 N2 @* x# e3 x0046BA5C E8 B7CCF9FF call Unpacked.00408718$ M2 o3 v7 d3 {9 s. V
0046BA61 8BC3 mov eax,ebx
5 I7 w; A$ Y4 C* t8 D3 L$ Q0046BA63 E8 107BF9FF call Unpacked.00403578
. |% K5 m4 {' G- |- y0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX) |8 S- N6 M% D0 h5 {
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX, }5 X6 H4 x+ h6 X1 @/ R+ h! [
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~9 D/ {# ^+ o+ v1 B6 G, z `& w) a& W
0046BA73 0F94C3 sete bl ; 置BL值, W" h7 U" h& w' Z" I" [8 C
0046BA76 33C0 xor eax,eax+ P+ `! L ]/ K
0046BA78 5A pop edx$ S* {8 F: x3 {( b# {0 c# I* U
0046BA79 59 pop ecx
* F6 @6 v- ~- R& F" a& y5 f9 J; f( ?0046BA7A 59 pop ecx
6 Z! F6 M; Q8 {: {( X/ w$ ]& m- |0046BA7B 64:8910 mov dword ptr fs:[eax],edx
! H& H5 ~+ k* t( t& @0046BA7E 68 98BA4600 push Unpacked.0046BA98 C/ v8 t3 t& |' B
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
; W: M) [( Q3 i# S6 H0046BA86 BA 05000000 mov edx,5
0 v3 K6 n5 `/ S1 ~$ f0046BA8B E8 FC88F9FF call Unpacked.0040438C
1 q& M' P! ?2 `! Y0046BA90 C3 retn4 f' Z4 u: t, u: H
****************************************************************4 a7 { W9 [: ^9 L
跟进0046BA2A处CALL来到:- x& |, l+ c& I+ v' H
0046B908 55 push ebp/ q& L ~$ v& a1 T2 v; n) g
0046B909 8BEC mov ebp,esp
& J' w& A0 n7 E) c. O9 F9 D0046B90B 83C4 DC add esp,-24
( G$ U7 O0 f$ c; W" @; G0 ^0046B90E 53 push ebx
s5 x% y* w9 _ e0046B90F 56 push esi9 ?: _" D# D7 E' q
0046B910 33C9 xor ecx,ecx$ @$ {5 V# p9 D6 ]
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx7 S4 e+ w1 g8 b7 w* e+ D- E$ d; V1 J: z
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
; u7 n( k7 s5 A+ Y+ y/ N0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
1 g/ z3 O% J/ r) s0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx) |' u1 F( H% ]6 Y6 M: ]' `
0046B91E 8BF2 mov esi,edx
6 b: G& o: W- V/ L4 _0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
7 m1 [" ^% ?& U) P3 Q7 _8 e0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]* ^) `% [$ a6 D9 r) Y1 }8 b6 k
0046B926 E8 DD8EF9FF call Unpacked.00404808- K2 a0 q! I& ]& F! q
0046B92B 33C0 xor eax,eax
6 d5 }" h8 E; L$ X7 Q) B, d0046B92D 55 push ebp8 N. w0 ^5 Y. n$ i1 E# i* x
0046B92E 68 CEB94600 push Unpacked.0046B9CE
, C8 n& e+ I z$ l$ s0046B933 64:FF30 push dword ptr fs:[eax]
/ R) t2 o$ |" g4 I- I0046B936 64:8920 mov dword ptr fs:[eax],esp
7 W8 D" _, F7 S& ~/ x3 c! L# ^$ w0046B939 8BC6 mov eax,esi
& d- K3 Y- Y% r$ b0 q0046B93B E8 288AF9FF call Unpacked.00404368- U, b4 Q. _6 w" ~, g/ G
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
`- {, i9 H8 K- i0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
( A% E: R# D% O0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4& N3 k! H& p o: ^+ Y
0046B94B E8 1C8DF9FF call Unpacked.0040466C/ M$ O- ~( F& x& z
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
* b1 u3 M2 k: J) I+ I0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
8 c9 o+ A3 ~5 ]: {5 S0046B956 E8 EDBCFFFF call Unpacked.00467648
) t# s) g2 p% k+ @5 f- ^0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]$ N" g0 u9 i+ H: g) f8 U' J! B
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
" X6 ^4 A/ a( B( e$ b1 ]4 P0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e$ ]% c0 y5 H* n4 z
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~3 U$ k/ Y4 U/ X v/ B9 w( b' W5 z
0046B969 E8 FA89F9FF call Unpacked.00404368
* r; f4 _5 B. ~- f) k4 p6 w' O0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX; _/ c2 B' _& v+ H! N
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX! z# B9 z4 S: Z4 S
0046B976 8BD8 mov ebx,eax ; EAX送EBX- N( @+ h r7 Y$ O9 w
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
1 B+ `5 r: M; H7 Y2 ~$ ?; _0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳5 Q& A4 z" C$ j* a3 U) Y
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
+ Z$ Z3 N% L. X5 J+ C( M( Y0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
* K& H; t! N! o" W* |0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
1 K* J9 }, l0 z0 H- c0046B987 E8 BC8BF9FF call Unpacked.00404548
" Z! D$ {, W4 U, X6 H0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]% j" C7 u4 V, {0 K& V9 w
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
; N0 {7 R5 O8 e( ~3 a$ m0046B992 E8 918CF9FF call Unpacked.00404628
t# `' F3 f; r! h* h5 q3 D( P0046B997 4B dec ebx ; EBX减一
W9 T/ v/ P7 Z! s( U0046B998 85DB test ebx,ebx ; 是否为01 K! |; f" M5 I5 X4 d p$ |
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。) m( Y) G& L" e0 J3 T# l
0046B99C 8BC6 mov eax,esi
* ]( `, ~( i" U0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
* L/ M- H' O/ X3 A* L& e6 @0046B9A1 E8 168AF9FF call Unpacked.004043BC
* f2 @! S/ ^7 v1 J0046B9A6 33C0 xor eax,eax* D/ ?! `8 G# I8 M2 o" G
0046B9A8 5A pop edx X, M5 @, C' N* V; t6 X) h1 i8 v
0046B9A9 59 pop ecx/ x7 Q1 J3 G! N4 m* G
0046B9AA 59 pop ecx
6 g5 @* W) J% f2 x" c4 _+ B0046B9AB 64:8910 mov dword ptr fs:[eax],edx
1 U% S3 C' J: i8 V1 o$ [0046B9AE 68 D5B94600 push Unpacked.0046B9D5
3 n* ], Q/ _: {7 Z. P0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]3 t2 ^* D# d' L- u& {
0046B9B6 BA 02000000 mov edx,2& u; [6 ~1 F$ @! c: t# u' h
0046B9BB E8 CC89F9FF call Unpacked.0040438C/ {+ [* x+ x/ h+ q5 f# [" r
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]/ |6 Z$ ?9 {& [4 H3 r6 T
0046B9C3 BA 03000000 mov edx,3% Z2 i9 _. i$ S
0046B9C8 E8 BF89F9FF call Unpacked.0040438C+ C, p- Z( ?# X2 f/ M* A3 W
0046B9CD C3 retn+ }$ E% C# H9 C3 r8 E
****************************************************************
/ y. H* z2 U) }2 t; t( [跟进0046B961处CALL来到:2 y' I7 P+ k! B/ i1 A0 b& n% J
004676BC 55 push ebp
+ w9 {/ {. ~" V7 S004676BD 8BEC mov ebp,esp
; X" J* L E% J+ h2 O! c& \. t0 G004676BF 83C4 E8 add esp,-18
) A8 V& B+ G& l0 S2 i9 n004676C2 53 push ebx& b ?2 W2 x9 H
004676C3 56 push esi# u% A+ J; N9 O) s
004676C4 57 push edi
2 T+ v4 J% l5 Z; g5 w! G$ |004676C5 33C9 xor ecx,ecx
( K2 x3 v2 X9 g3 [" W! n: Z004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
( R* f) |/ C/ u p u004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx5 B. Y1 u: n& f. W1 ^7 m! J; u
004676CD 8BF0 mov esi,eax
2 W- H+ |1 X) R! M2 Q6 z( r004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]5 g4 a/ t# I' |/ O$ }
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>8 ^& {) A" H1 R2 M" p
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>; H+ S I% Y. `
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
& }! w3 w5 F7 \7 ?$ p- E% o% K004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
$ g! t2 v5 y3 x5 E7 y004676D6 8BFA mov edi,edx7 C9 r L4 `1 }
004676D8 33C0 xor eax,eax
5 G* l; @! u V6 Y8 D4 B& ^" W004676DA 55 push ebp
, z+ G8 y, I- t3 X/ u# @4 B) h0 q. F004676DB 68 57774600 push Unpacked.00467757) o/ o2 G8 Q& O
004676E0 64:FF30 push dword ptr fs:[eax]
5 ?; X2 z- I3 ?004676E3 64:8920 mov dword ptr fs:[eax],esp* }; e* i$ W8 T" f
004676E6 8BC7 mov eax,edi
! W) v Q3 ?+ _. m0 b004676E8 E8 7BCCF9FF call Unpacked.00404368) g. B( E8 ^0 v
004676ED B3 10 mov bl,10
9 f# w+ r7 U+ ?004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
5 C+ Q! q/ [1 p0 U' ]004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****# B9 s) b1 V* _% H) w5 ~' r9 W
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]# C' _+ m1 D6 x( Q( G' m1 T
004676F7 33D2 xor edx,edx
- L* j$ L9 e+ F. H s! z3 J/ G u004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL8 Q6 K, f W# q- N0 _, h; |
004676FB C1EA 04 shr edx,4 ; EDX右移4位
z/ {) m" `! R7 }004676FE 83E2 0F and edx,0F ; 和0F与
/ }+ Y( R8 v5 n8 c! {00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
0 p/ m" K ?3 Q/ n00467707 E8 3CCEF9FF call Unpacked.00404548
6 _; t7 p% y4 ^, r0 f* f+ a" a0046770C FF75 EC push dword ptr ss:[ebp-14]
% h' x8 `. p1 i0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
1 r' M% f) w$ Y" T00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
! R j7 N: o5 l/ [. y; ?8 d00467714 80E2 0F and dl,0F ; DL和0F与
/ I( \3 M U* T00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
" c4 C4 d; Z7 I% D/ S5 E0 [5 u0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL4 u4 w, t3 W% L; ^0 Q
00467723 E8 20CEF9FF call Unpacked.00404548( L# w, o. z$ G/ s4 |! d% G7 t
00467728 FF75 E8 push dword ptr ss:[ebp-18]
, o+ P+ {3 y" T8 q8 M0046772B 8BC7 mov eax,edi ; EDI送EAX( i% |: H; u6 c# |# v7 X
0046772D BA 03000000 mov edx,3
% X W: U# L3 @8 g7 O00467732 E8 A9CFF9FF call Unpacked.004046E03 x6 `. m) B( h
00467737 46 inc esi
# }4 w6 h% m% ~) o. w00467738 FECB dec bl
, {) v6 B; G- {/ n0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e# O" s2 ~3 d; p' ~9 P
0046773C 33C0 xor eax,eax
H) ]3 Z, K' N' w0046773E 5A pop edx
. [; [8 U5 E" w0046773F 59 pop ecx# g' V B4 M/ t$ v4 q6 {% `
00467740 59 pop ecx9 {7 `7 }) o. q! ~8 R; J7 t
00467741 64:8910 mov dword ptr fs:[eax],edx3 A2 B$ L/ x) n- e
00467744 68 5E774600 push Unpacked.0046775E. Z- Y6 _0 Y; s7 |, h* s
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]" z9 {6 a6 U& L
0046774C BA 02000000 mov edx,2
5 ^0 X* t9 e& @00467751 E8 36CCF9FF call Unpacked.0040438C- R5 b [9 W- F* _! m5 G
00467756 C3 retn //返回* F$ ^4 |1 i1 k; D% |
———————————————————————————————————————————
% P) q4 E& p" ~; x# c2 P9 C【Crack_总结】:
) G+ M7 P2 ^: y, a* J9 @4 y. p, I+ {将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^4 q- t" l: |* l( R/ q! q
机器码:bbba33de56c4cf31d9063cc074248d4b" u9 ?, C9 o$ k
注册码:e807519487d7ad4f57ad42dc87fbb1917 u! C) H8 |# t8 a* ]
附件: MakeSign.rar (249 K) 下载次数:298 |
|