|
|
|
【原创】破解图章制作系统
6 [( Z4 o S) I4 d8 ]/ t! H- r日期：2005年5月15日 破解人：yijun[PYG]
3 h9 v. \! k5 G+ X3 [———————————————————————————————————————————
9 ?0 S" [4 H r' m, P) G【软件名称】：图章制作系统 软件版本：1.0
% I( o/ x1 u. N* ]【软件大小】： 252KB8 w5 u- P% q- m& X$ g
【软件简介】：制作各种图章9 s) b. \- j0 h; u; K
【软件限制】：NAG
% F5 a' B& }3 v: q1 B【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！* r" J- s' x( m1 B+ b4 Z" z* O
【破解工具】：OD,PEID
4 v! u t4 I" g( W; L' j———————————————————————————————————————————; y) U7 N9 l- o9 M- f5 ^
) n3 L% \, o5 X% x0 |6 r3 Z【破解过程】：
( j8 y! j& @/ |6 c0 q+ |: @PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~! j% [6 \- ^$ }" I, Q" Y
OD载入，通过字符串查找很容易来到这里：
5 P# U& [) _9 Q0 o ~0046ADAC 55 push ebp //在此下断
! `6 `- ?8 L3 X0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
! e+ `5 H2 p* {0 X6 U7 _0046ADB2 64:FF30 push dword ptr fs:[eax]3 t- y; v" \# a: c- \
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
5 {; Y3 b5 h" h" _7 E5 f0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
9 |2 H' T5 O7 R0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]/ k: n" T& g! j v
0046ADC1 8BC6 mov eax,esi
* {& _6 v3 [- u( P! t# a/ A0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
0 F* e: {5 a; ?. I* u0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
. _0 c( J2 N' [& D) B. i; e0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]7 f9 n7 A0 F- p! _7 z
0046ADCE E8 45D9F9FF call Unpacked.00408718
2 t) m2 A. K! }: V7 R+ ~# ^0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
! g3 K( u+ |, T- c* Q0046ADD6 8BC6 mov eax,esi
! v0 o$ j- P, H/ a% c0 V0 m. k0046ADD8 E8 3359FDFF call Unpacked.004407104 J# ]0 T9 X V8 M( R8 m
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
: y5 B2 G" c( x4 p9 Q1 y0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]+ q" d* C' f3 y1 i6 {2 @
0046ADE6 E8 F558FDFF call Unpacked.004406E0
% l7 x F4 W; U J! G& O0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
" a+ E8 S9 S4 W" {0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
0 k) `9 O2 ^* o( Z, _' V0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
" n: L, J$ L3 o0046ADFA B2 01 mov dl,1 ; DL置1
+ z- l+ Q$ ]. p9 F `0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]8 B2 T3 ~# A; B! H
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8! n2 j7 a( p8 M; {+ v9 l5 y' q- m
0046AE06 8BF0 mov esi,eax
# b" p6 m* H! `9 Y0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
+ {$ B( Y( _! R; L: P. w: p0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]+ N7 D! Y X r$ {1 q) x
0046AE11 E8 CA58FDFF call Unpacked.004406E0
- v' T9 X" \% r) R9 N/ L7 S3 y0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
- D/ `- p2 g+ U0046AE19 50 push eax6 g8 b' [3 t; w L) r5 c3 i" f3 F1 `
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX) E; R7 g8 Y* O. [
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
/ v7 J) @+ J$ E" s/ A0046AE25 8BC6 mov eax,esi
4 O" U1 U4 k$ {3 ]3 ^ X' H0046AE27 8B38 mov edi,dword ptr ds:[eax]2 s: @& c. y3 E
0046AE29 FF57 04 call dword ptr ds:[edi+4]
' z% w$ l( b7 }7 X4 s! R6 R4 d( c0046AE2C 8BC6 mov eax,esi
* ~8 w( Q/ t H) m! q0046AE2E E8 4587F9FF call Unpacked.00403578$ k, |( A& @$ Y4 h {/ A
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]1 {' Z* L/ n! Q) T
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
3 O% @+ ^ ]' g+ T* ?0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
& j! J N' A. E0 @0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~, g7 ? @+ ]! \# X% e1 Z& ~
0046AE42 6A 00 push 0
3 p/ p3 r; t* I# X6 G5 m0046AE44 68 D8AE4600 push Unpacked.0046AED81 }7 b; W: K: e3 H% ?0 }
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
' q; [" q% y6 r. G: t9 t8 Y0046AE4E 8BC3 mov eax,ebx
3 M: E% q8 h! |0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
. ?: Z7 a; r8 H" n! l( x. y0046AE55 50 push eax4 x+ R. h" ~- Z; B! ~, B, _
0046AE56 E8 DDC2F9FF call
: o0 T6 p5 }- S7 i2 B8 p! U) N0046AE5B EB 20 jmp short Unpacked.0046AE7D+ z$ C" Z, W9 D- Q! K- V: V) e
0046AE5D 6A 00 push 0* W: U. l6 _2 [+ ?9 Q9 y6 p4 s
0046AE5F 68 F8AE4600 push Unpacked.0046AEF83 w. F0 V- n9 o! |9 x- U
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
6 G( R% ?* s) d( N* b0046AE69 8BC3 mov eax,ebx
) @8 E8 Z# E& ^; D0046AE6B E8 88BFFDFF call Unpacked.00446DF8
5 ~& \. f) z5 D S3 f. U, Y; j0046AE70 50 push eax& H# W7 ]7 W. k* v# B+ p7 Y
0046AE71 E8 C2C2F9FF call % a; x) ~$ N/ c- l& ^
0046AE76 8BC3 mov eax,ebx
2 M7 T2 V% n' I5 u0046AE78 E8 7F21FFFF call Unpacked.0045CFFC+ e& C# n) ^5 }1 A$ r
0046AE7D 33C0 xor eax,eax
5 a; |+ w' e& R* t0 n0046AE7F 5A pop edx- Q5 K1 |, i! a, r
0046AE80 59 pop ecx
9 b! I" F# R$ Q3 m6 U0046AE81 59 pop ecx
$ ~0 j1 p) `" }$ s* }0046AE82 64:8910 mov dword ptr fs:[eax],edx
' y+ b+ @3 [! i# O/ J& W0046AE85 68 A7AE4600 push Unpacked.0046AEA73 x$ X% @+ B1 K
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
x3 O5 l% ~, R2 e( p Z) q% g2 D2 l0046AE8D BA 03000000 mov edx,3
; S/ a2 c4 q+ l; C4 ~9 _8 U0046AE92 E8 F594F9FF call Unpacked.0040438C
$ O1 @& H, p* Q3 r$ M! V8 O# D0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]" J# b9 B/ Y, _7 Y. n( _# P
0046AE9A E8 C994F9FF call Unpacked.00404368" {4 e5 s$ R1 G$ `
0046AE9F C3 retn) `7 ?! ?& {, Q2 Q. M
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C) M, _! L2 S. e5 d6 B8 Z) z
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A8 _! [- S: Q% B* T! K) A7 p
****************************************************************# }+ d3 N% X1 I
跟进0046AE39处CALL来到：4 Y7 N: V* S9 A. n/ M
0046B9F4 55 push ebp" p) B* ?1 c! y
0046B9F5 8BEC mov ebp,esp7 E0 `* I) ^$ W. V( d+ H
0046B9F7 33C9 xor ecx,ecx, @3 T& L( r8 H+ }4 w
0046B9F9 51 push ecx3 |! A1 W6 p/ c9 P
0046B9FA 51 push ecx
: b. B R# O* _( G1 l0046B9FB 51 push ecx
i4 P% r9 i) N0 }0046B9FC 51 push ecx9 i I( q$ n+ N. s3 X- K& i4 b
0046B9FD 51 push ecx
1 ^8 k' q, l/ F, I/ v0046B9FE 53 push ebx+ V. Y5 J( s1 b0 X: J
0046B9FF 56 push esi& A( w; ~5 _9 c4 K" t, b: }$ j
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
! u8 a$ D! r/ M( h/ v' Y* c$ |0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
$ k( |/ }. F1 O* B8 J! G; d1 H0046BA06 E8 FD8DF9FF call Unpacked.00404808' r9 w0 {7 V8 E9 b. V. }9 ]
0046BA0B 33C0 xor eax,eax' V, a+ v" F% a2 v% B4 `5 o
0046BA0D 55 push ebp
, H, ]9 P& c+ D- z V: \' T0 s0046BA0E 68 91BA4600 push Unpacked.0046BA91
: f/ {$ n. h3 J4 P# |0046BA13 64:FF30 push dword ptr fs:[eax]# ^( G9 | s& \: W- o7 l
0046BA16 64:8920 mov dword ptr fs:[eax],esp- W, R! K" k5 }
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
, @( g# g1 p; X8 {* f5 d. R0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
) S4 g3 v, ~9 a6 s7 C' M" Y1 ~0046BA1F E8 DCFDFFFF call Unpacked.0046B800
$ M8 ? k/ u. q0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8] g/ @) {; V, m
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX, a8 C6 S: x+ \' o) {& _# t& a
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进0 i# R) k& C' n1 K @) `+ L3 _/ f
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里$ B. t7 g. V5 M
0046BA34 B2 01 mov dl,1 ; DL置1
# _9 m6 q, y: c( f0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
0 a: S, G' ^% `3 e6 D% |8 F0046BA3B E8 78A3FFFF call Unpacked.00465DB87 ^& X" y C8 s# x' J( t) I+ ?
0046BA40 8BD8 mov ebx,eax
% H4 }! g- S s" u0 O, W0046BA42 6A 00 push 0
% X- ?& _ f# f w C# h9 e0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
& W) L3 K9 |7 t- R2 O) w# P0046BA47 50 push eax, ^ }% ?% v% ~/ C6 W
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"; `3 g1 T" M1 _, | d# S7 n
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]2 ^: \9 i$ }" `+ p
0046BA50 8BC3 mov eax,ebx- i3 Y! B) Z* a1 ~$ i
0046BA52 8B30 mov esi,dword ptr ds:[eax]
$ g# P: u: Z8 w0 C5 a( I t0046BA54 FF16 call dword ptr ds:[esi]
) q4 h" @' u7 b( w0 d4 G0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
; w+ k3 u. i& s v' k2 n$ g% [6 Y0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]; y7 E- C6 |; L( z5 V( ]
0046BA5C E8 B7CCF9FF call Unpacked.00408718+ [2 @+ T/ z. X5 N6 Y
0046BA61 8BC3 mov eax,ebx
+ P3 c' R' E0 `3 i# C8 \/ g% Z0046BA63 E8 107BF9FF call Unpacked.00403578
" k9 l; o8 Y& c+ q$ J1 b3 S0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX( L* c! A- K% u
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX8 s' t" B6 t- Z
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
0 _* ~; I u: w1 M. \0046BA73 0F94C3 sete bl ; 置BL值2 |3 K$ t; b$ l# K$ ~" f0 c' w
0046BA76 33C0 xor eax,eax, V# K" m5 F2 j9 ]' O& ?& j
0046BA78 5A pop edx
7 o1 k, J$ [$ @' O* d0046BA79 59 pop ecx7 r& ~& \ u# p+ e# N. Y" w5 D
0046BA7A 59 pop ecx M- U, w& @; F& ^) A6 [+ [
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
+ L/ d% f1 J# y$ M' p3 K0046BA7E 68 98BA4600 push Unpacked.0046BA98
0 B+ ^- [1 }* A9 j) k( S0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
( G& b: C( i# B6 R! [0 K0046BA86 BA 05000000 mov edx,5
% g3 u6 z# [8 o' F0046BA8B E8 FC88F9FF call Unpacked.0040438C \" t9 f% w$ K2 i. Q
0046BA90 C3 retn
/ ]/ M" ]- f" W# C1 W$ L****************************************************************7 B( e* T0 `5 ], y( G
跟进0046BA2A处CALL来到：6 ], J" G2 k0 D: y" B+ H
0046B908 55 push ebp9 A/ A" [" E4 T" P
0046B909 8BEC mov ebp,esp7 g# X4 U5 H# E8 Q) f/ Q2 A
0046B90B 83C4 DC add esp,-241 `6 j& G5 k' Q) |
0046B90E 53 push ebx
9 q* h5 L6 j! j1 p/ }' v. D0046B90F 56 push esi
! w0 y/ p/ Q0 m% s! z1 v4 G; _0046B910 33C9 xor ecx,ecx) A) A+ Z( R6 t8 U
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
5 P9 ?, q7 K+ n: y) e2 Y0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx' l4 |: U7 ]* P c/ @5 v+ r
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
& z; q- ~4 t3 E' Z8 A4 F, o+ G0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
( {5 H9 M7 ~9 B0046B91E 8BF2 mov esi,edx; h; F* @: e( Z7 z* W. ^
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax- e- T5 P0 I; X, q* C1 {% K1 Y
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
8 }' v" q! F$ E& U9 ]4 g* M0046B926 E8 DD8EF9FF call Unpacked.004048081 w1 d( \9 i! D- ]1 n& l
0046B92B 33C0 xor eax,eax; W2 k8 e3 _" h
0046B92D 55 push ebp% K) N- C2 S' | s" `0 T& x
0046B92E 68 CEB94600 push Unpacked.0046B9CE* q! s u6 `& \; |. j- w. x( I
0046B933 64:FF30 push dword ptr fs:[eax]
$ ^. j& U% Q0 F* S- i: v0046B936 64:8920 mov dword ptr fs:[eax],esp
9 ~# ~0 v e3 L2 D! n$ J9 O0046B939 8BC6 mov eax,esi
" q5 e. `7 k2 i- g( j1 s8 M0046B93B E8 288AF9FF call Unpacked.00404368( R3 S4 r, U# c
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]# l6 d$ F J8 I: q ^9 u( z* i
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
1 |% k& F" M5 T' |- ^9 S0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4; X7 e7 ~- e& ^
0046B94B E8 1C8DF9FF call Unpacked.0040466C
8 n- a/ L6 u+ ?8 F0 v) o0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
3 R% m- n" f! r" l: Q3 w9 Z0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]& U# V7 o4 z0 {4 F2 M2 ^
0046B956 E8 EDBCFFFF call Unpacked.00467648
C# R! j: h1 V: p. N$ u0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]+ _0 e( ~: L3 r0 [( S: P
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]4 ]" z% e" }/ _+ X9 y
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e% d c; q! R7 v; @0 G
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~2 \ s; r) {: w" y. Z) b
0046B969 E8 FA89F9FF call Unpacked.004043683 O( L6 C" @$ T
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX- K& V# \6 [1 x$ l* I2 @" Y: G# _$ M
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
; O! ~$ a0 E3 [7 ?3 k% z/ e2 {; g3 Y0046B976 8BD8 mov ebx,eax ; EAX送EBX
# h- F: z& T9 y9 C. O0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
8 [0 p- |. S* w0 V+ H$ x0 A! c0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳+ E9 x4 A& e& R/ L. v3 E
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
7 ?) ]" Z: t. [0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
4 V/ N% p! B h0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL& F5 l% K+ y; p* V$ o
0046B987 E8 BC8BF9FF call Unpacked.00404548
2 f% B- q7 a, a7 q) s9 x' u0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]; z; y4 U; h9 o
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
0 u) i+ ]9 P- `0046B992 E8 918CF9FF call Unpacked.00404628
4 U0 C# j; |5 F# G0 g$ l3 W0046B997 4B dec ebx ; EBX减一9 J1 M. [8 w$ q3 ~6 {7 j
0046B998 85DB test ebx,ebx ; 是否为0/ _4 z2 |$ L4 q s; u
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。' F1 h0 @1 ]4 P$ e! @& d3 E* B
0046B99C 8BC6 mov eax,esi
9 \* a6 b0 |: u' s9 ?( a, ^% b0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX% e5 ]3 Z$ l+ @: G% X' X6 q
0046B9A1 E8 168AF9FF call Unpacked.004043BC2 H+ b/ R2 c* z j( Z$ R
0046B9A6 33C0 xor eax,eax5 ?# u9 E5 Y: Z9 s
0046B9A8 5A pop edx8 o8 r# Y8 K& X, x8 ]3 B
0046B9A9 59 pop ecx( i; T. k$ Q% L
0046B9AA 59 pop ecx
3 ?7 `# B$ ]0 r7 l" x: W9 d0046B9AB 64:8910 mov dword ptr fs:[eax],edx- i" B/ v, l+ h1 q/ m- t
0046B9AE 68 D5B94600 push Unpacked.0046B9D5: I* k1 p2 I. k+ x8 V: P r) j
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]8 W4 W/ E5 d! {3 J: p" c: A5 m
0046B9B6 BA 02000000 mov edx,2
k! o4 ]. Y: `; s" |0046B9BB E8 CC89F9FF call Unpacked.0040438C
8 J& U9 e( ^$ U& @0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]9 B2 q1 x0 u: n! e
0046B9C3 BA 03000000 mov edx,3
( m% b2 i# T* ^7 `8 w6 e" j0046B9C8 E8 BF89F9FF call Unpacked.0040438C& Y! o6 q* g1 L& ^' Q9 [4 C
0046B9CD C3 retn- e8 v8 R8 g+ Q
****************************************************************
7 o; I# y" y- C+ G# [# j& v3 D跟进0046B961处CALL来到：
/ v& E# E8 }# p9 }" M$ i004676BC 55 push ebp; `/ K# [# V5 F W. w" \5 i; I
004676BD 8BEC mov ebp,esp
" |0 e9 Q( Y9 c0 ^) Q; I* Q004676BF 83C4 E8 add esp,-18
8 Z6 q. r2 e- l$ c% E6 D, y; J* [004676C2 53 push ebx j6 K) o6 u1 z" S* Z; H* ]; Y
004676C3 56 push esi
) [; _# c" F7 c& c004676C4 57 push edi
6 J g. c* p+ r0 R; c004676C5 33C9 xor ecx,ecx
$ w8 g7 p/ {1 j004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
2 }7 F D0 [. U! B. x% U! s) [004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx3 `9 C! F9 B' K: Q, c; G3 o3 L
004676CD 8BF0 mov esi,eax
/ m% A' ^4 u# j' m# N004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
/ I H8 w6 ?8 U* Z. ]# S* H; s004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>$ P5 L& y% S2 M6 V
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>$ c' E+ {4 U; V$ t+ m5 G& O* z* b
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
: P# e3 x& q3 `0 c5 i004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
5 N" s/ @7 l% m6 Q9 |004676D6 8BFA mov edi,edx
% v/ ?6 k- F# c004676D8 33C0 xor eax,eax- Z$ m" O' g7 o; p% f# C
004676DA 55 push ebp
& v1 v& J! f7 t% M) N- P* g004676DB 68 57774600 push Unpacked.00467757
" K! i( N" M! V8 p7 C& ]/ i1 n004676E0 64:FF30 push dword ptr fs:[eax]
( W& |9 Y# U5 e! |6 j004676E3 64:8920 mov dword ptr fs:[eax],esp1 y, p" n+ B/ P
004676E6 8BC7 mov eax,edi
% K+ D7 \) h) t# {" C004676E8 E8 7BCCF9FF call Unpacked.00404368" s+ s- `# W$ [) I0 w8 M" s$ H, c
004676ED B3 10 mov bl,10- ~% g; R* ?& e8 o2 ?2 z* @% N
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
: V# z1 j7 M' {004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
; Z3 ~1 }( y' W- o004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]0 J4 ?# M4 l0 V) Y
004676F7 33D2 xor edx,edx
* G9 L0 b; \5 W: h004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
/ a5 _$ s2 j; v3 f) b* b2 M004676FB C1EA 04 shr edx,4 ; EDX右移4位& |4 k/ k- ]( g ?1 x
004676FE 83E2 0F and edx,0F ; 和0F与
$ N( g6 u8 ^& B1 v" A00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
. L# n2 w! E$ y1 x: Y3 m8 |, U9 m3 F00467707 E8 3CCEF9FF call Unpacked.00404548
" ~% R% H7 x) \: s0046770C FF75 EC push dword ptr ss:[ebp-14]
# ~* e7 i2 R( o6 V0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]! s) |+ x/ f/ T) d
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL9 j9 ^5 e$ h, I/ M, W- v9 l* n- p
00467714 80E2 0F and dl,0F ; DL和0F与
/ G: k" x/ L7 P00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
3 k G0 b5 F- k( R/ v+ U7 P0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL# a4 e) L: \+ e& f
00467723 E8 20CEF9FF call Unpacked.004045481 ]8 ~( M' t0 a& y; o, S
00467728 FF75 E8 push dword ptr ss:[ebp-18]
1 V$ u. s2 f8 j$ w0046772B 8BC7 mov eax,edi ; EDI送EAX# D) z w* l- m0 ^& N
0046772D BA 03000000 mov edx,32 M7 q% E% Q8 h4 K! g
00467732 E8 A9CFF9FF call Unpacked.004046E0
! E% f$ I$ I4 b* f00467737 46 inc esi. a8 R* [7 P8 W7 R# D+ A
00467738 FECB dec bl
9 p3 I1 {4 j9 E4 m2 f0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
6 k$ I' x k) q' @ M0046773C 33C0 xor eax,eax4 {. [5 J6 a& u5 Q3 E* \' W
0046773E 5A pop edx& L& {* J! l; A8 Z
0046773F 59 pop ecx
) G; Q+ @1 g" h1 b* W00467740 59 pop ecx& n0 {+ _2 x5 G4 i! @: K* y$ G
00467741 64:8910 mov dword ptr fs:[eax],edx* R D6 v$ @5 t( P
00467744 68 5E774600 push Unpacked.0046775E3 ^) H* y8 [% C& L
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]4 G3 Y% Z' a8 l2 M
0046774C BA 02000000 mov edx,2
: q! m8 H4 l9 O$ |+ N00467751 E8 36CCF9FF call Unpacked.0040438C
, c; h( W8 r% \8 C7 J* [' I00467756 C3 retn //返回
7 }4 S/ M7 k' a( {+ J) F) K———————————————————————————————————————————
! T6 V s: h" l- [ u/ d j【Crack＿总结】：7 F0 U# z8 r0 y$ D/ U2 o; V, I; P
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^/ t, [3 Q, r* |* @
机器码：bbba33de56c4cf31d9063cc074248d4b
, L' ?& C/ V& V( d6 j注册码：e807519487d7ad4f57ad42dc87fbb191! O# s+ J6 ?; ^% A7 |$ ^7 L& M
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡