|
|
【原创】破解图章制作系统 r! m1 o& l3 `' x) S5 _
日期：2005年5月15日 破解人：yijun[PYG]/ m" z* \5 @: x# u4 z* P; v
———————————————————————————————————————————
) ]8 [6 }3 V, b【软件名称】：图章制作系统 软件版本：1.0
: Q; c& W* M0 Z1 W) ]/ n【软件大小】： 252KB
r" i. ~' e' f* |3 v, m【软件简介】：制作各种图章1 X+ M+ V, t- C5 | `
【软件限制】：NAG9 e+ M' h$ b; m1 G# E
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！4 o) K3 F2 o/ @' U
【破解工具】：OD,PEID
" C! C6 R4 t& d———————————————————————————————————————————
$ H! G% I) l, _8 J* T! P
2 t$ ^. V) u, D/ w; J【破解过程】：) ]. k# `) n( }0 j% l B/ c) H0 z$ M
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
1 X" I/ L( l0 aOD载入，通过字符串查找很容易来到这里：. _0 L! e1 o$ Y r! |
0046ADAC 55 push ebp //在此下断7 r4 T7 B7 C# ~0 W
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
! ^8 o7 d* h* k6 {4 X0046ADB2 64:FF30 push dword ptr fs:[eax]
: U: r V; |2 f$ ~! c x/ n0046ADB5 64:8920 mov dword ptr fs:[eax],esp
3 R" b1 d! h0 N2 t5 Z @; E: N0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]- C8 R! _+ Y; ?" r( }& u
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]0 T9 ~7 w6 ~/ h0 h
0046ADC1 8BC6 mov eax,esi' ~* T' p0 L0 k! ~* N* h/ \0 E$ {" M
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
/ `/ r5 o2 }- A; w1 z: z8 j0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX& f; e8 C- N+ K+ A% {
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]( N7 ?0 a5 k; X! ~6 c1 Z, k- \
0046ADCE E8 45D9F9FF call Unpacked.00408718) W" c8 G% J( D0 T2 u+ f' M
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX- a; L4 I: w, Y# f
0046ADD6 8BC6 mov eax,esi, P3 A6 {2 ~0 K/ s# y$ S, L7 E
0046ADD8 E8 3359FDFF call Unpacked.00440710
8 Y. m7 C1 x Y- q6 D6 ~: n0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]2 J5 F# R& G, K& C1 ]% d
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
9 y* Z9 ]; L. H w% Q0046ADE6 E8 F558FDFF call Unpacked.004406E0
, g7 d9 u7 s+ U$ F6 C( F- g0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
+ }1 K" }% s# U0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
$ l: n1 B0 E1 O$ B1 F6 B. i2 d0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX1 L" M3 \' k0 p- T7 i7 [+ N
0046ADFA B2 01 mov dl,1 ; DL置1
, f7 |& M( r2 @9 l0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
3 g( M" N& N. o& u3 z9 n0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
0 ?! G8 ~) d; K' {7 H" |0046AE06 8BF0 mov esi,eax
/ P0 W Y8 S/ I9 _& W0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]2 U3 {3 z. j6 F( s: m
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]9 J. n' T% j5 F# m) t$ t9 f
0046AE11 E8 CA58FDFF call Unpacked.004406E0
. ~! T6 E3 n8 ^7 t7 k& Z0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX# s5 U: h4 U/ [
0046AE19 50 push eax. Z7 T+ B; F/ o
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX0 q; @% Q# k$ J$ X j; Y1 K
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
5 ~& P5 L( ~9 J, Z0046AE25 8BC6 mov eax,esi
' P+ p0 Q2 {& h" u0046AE27 8B38 mov edi,dword ptr ds:[eax]7 l0 y* q: A0 a3 ?& z% z- ]& C
0046AE29 FF57 04 call dword ptr ds:[edi+4]
9 q/ W- a2 p$ o6 E$ I+ t0046AE2C 8BC6 mov eax,esi" p! g. o8 ?& X7 A8 A O
0046AE2E E8 4587F9FF call Unpacked.004035783 p+ W2 x6 X" A- M' j+ K# Y
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
# ^3 R: D2 M4 e' ]& D0 I0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~3 e" e/ n; o- s& f0 c. a( y
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
_5 M- {, q1 s* Y0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
% S7 e" s8 l; n( Y5 `( ?5 t" ~0046AE42 6A 00 push 0
P4 _) r: ]4 K+ J$ o" {0046AE44 68 D8AE4600 push Unpacked.0046AED8! c& p( [8 u- t; J8 o7 D0 @/ U8 h0 S
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误- Q9 |; u6 t) p% }. a/ A& Q' J
0046AE4E 8BC3 mov eax,ebx
/ l/ _- }; Z3 W4 r0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
; z) ?- k& ^3 v( g0046AE55 50 push eax
* a" s& ~/ x( T" r0046AE56 E8 DDC2F9FF call * K0 t1 y1 v* O [
0046AE5B EB 20 jmp short Unpacked.0046AE7D
* ^: o/ s$ }: Z# k0046AE5D 6A 00 push 0# U( ^8 S+ \; Y' W( j8 U, U
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8: A7 }1 s3 F; d7 e, o
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
! x/ ` }+ }- p9 l$ l, W' u1 b) ]) ^" i0046AE69 8BC3 mov eax,ebx
" l) G& J* x. U2 q6 f2 q0046AE6B E8 88BFFDFF call Unpacked.00446DF8
0 j1 `$ `% Q, Q& @5 p9 ]' l0046AE70 50 push eax$ m5 Y: G9 I1 @6 A# ]0 Q
0046AE71 E8 C2C2F9FF call # X# A1 O3 _! i( u L6 R. n# W! ?# `
0046AE76 8BC3 mov eax,ebx
) w) s; ?& i# J5 b0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
. `) N! [1 K* ]' b0046AE7D 33C0 xor eax,eax
% e; ^: U/ t0 y- H9 `: m0046AE7F 5A pop edx" Q! w5 w7 A! N0 X g& |' t
0046AE80 59 pop ecx( t, X: n2 Q- X
0046AE81 59 pop ecx
. u% Q( @5 W i$ h& G7 f0046AE82 64:8910 mov dword ptr fs:[eax],edx
! \$ s" J5 q6 z0046AE85 68 A7AE4600 push Unpacked.0046AEA73 g* t1 Y( h6 l0 T) R
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]% K, M d# s; g& n- }
0046AE8D BA 03000000 mov edx,3! P [$ i" N& |* P% a- x" @- i
0046AE92 E8 F594F9FF call Unpacked.0040438C7 V0 O& v9 `2 f: N8 a& u6 I
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
2 d4 W0 Z2 {/ R d; `8 W2 g0046AE9A E8 C994F9FF call Unpacked.00404368
# Z, Z8 J% W5 S% x0046AE9F C3 retn/ Y& R) f7 O' X. l; `5 w& |: h
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
# I7 O7 C8 w2 {0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A+ ~5 I/ B: d( k. G0 M, _# u
****************************************************************
8 V8 B" b! G$ }. P* p跟进0046AE39处CALL来到：
/ `" {* \+ _# i0046B9F4 55 push ebp
; M3 _ b$ ^2 O: h3 r7 j8 @0046B9F5 8BEC mov ebp,esp
. \# X6 P6 V' K$ d( x0046B9F7 33C9 xor ecx,ecx
1 c* {$ r, h% k- L) Z1 L0046B9F9 51 push ecx% d4 Q0 F0 ]0 W! |' T$ i1 ~
0046B9FA 51 push ecx
% Q4 e) M! e( [% A" b' y0046B9FB 51 push ecx3 ~1 k1 [/ O: ]
0046B9FC 51 push ecx
3 X( g. j. V0 \' q6 V0046B9FD 51 push ecx0 h2 N' J# y( Z3 n* D6 U3 z
0046B9FE 53 push ebx( S- q: V, v$ f0 i/ \+ R) a
0046B9FF 56 push esi$ r- P1 g; X' f! ^- e
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
# @! b8 e% k# ^' b' B7 v0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]1 q3 b* p6 w; w
0046BA06 E8 FD8DF9FF call Unpacked.00404808# B6 I7 S" F$ [8 w5 B
0046BA0B 33C0 xor eax,eax) |7 f* U M; H x( f
0046BA0D 55 push ebp
! [8 Z3 v P8 Y: ?2 z# N& J0046BA0E 68 91BA4600 push Unpacked.0046BA91
, a1 i- R E' L7 P0046BA13 64:FF30 push dword ptr fs:[eax]
8 g m2 j- s9 |6 p+ S" Z0046BA16 64:8920 mov dword ptr fs:[eax],esp
% M1 ^9 n1 h& ^1 L3 |8 H7 m6 E1 _0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
7 T! ^' {& ~* o' ^0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
7 b w' K; u. ^4 c* y$ C* F0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ) f4 M h0 \ z0 P* h4 }
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]: B# c; _8 j3 {" N0 g
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX( G' ^# I. P+ }, {" p
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
9 j8 h. n4 X) K" j1 A0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
$ A9 k3 N: w y7 x1 t% R- V0046BA34 B2 01 mov dl,1 ; DL置11 R4 v0 J/ M. W; \9 N/ S
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
5 R7 K3 m. ~, r) U0046BA3B E8 78A3FFFF call Unpacked.00465DB8
Z; d, ~" b; T8 `0046BA40 8BD8 mov ebx,eax" H% h) ]- c) |9 z/ {4 q
0046BA42 6A 00 push 0
; d( ]* \4 [% x$ v6 Q0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]5 A2 y8 U0 s# F' `7 d$ q
0046BA47 50 push eax4 ~, I$ v' u2 d
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"; n3 E! o5 S u4 b3 ~4 o! m0 R
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
2 |8 u, Z0 ?* `' X( o0046BA50 8BC3 mov eax,ebx) x8 A+ J+ j% D. Z3 ~
0046BA52 8B30 mov esi,dword ptr ds:[eax]
6 ?( u8 C! W' j4 \0046BA54 FF16 call dword ptr ds:[esi]
2 r2 I4 p7 T+ E: w0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX9 j, d+ @9 R# O# e6 o5 O, K$ z. H
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
( v; c& d1 f1 @; P. G0046BA5C E8 B7CCF9FF call Unpacked.00408718' w* y9 y$ ?: [- C1 {4 g
0046BA61 8BC3 mov eax,ebx
! l. G5 w; M% e5 f8 b0046BA63 E8 107BF9FF call Unpacked.00403578
; d6 h4 M& X. N) y0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX- f: q6 I3 g1 u, j, x
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX4 f7 W- E/ s8 _! f s6 F
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~* i, E' d# t" t
0046BA73 0F94C3 sete bl ; 置BL值
p8 Z, V( [' C8 m; V; M( R0046BA76 33C0 xor eax,eax
* w# z" p/ ^: H; ?. Y0046BA78 5A pop edx
9 g8 K4 {( L8 H0 @6 ?8 k0046BA79 59 pop ecx8 h z$ p# L2 X9 h! S& j- `
0046BA7A 59 pop ecx
! T& u y, n( D) g! j' ~8 s0046BA7B 64:8910 mov dword ptr fs:[eax],edx
7 N/ Q, x3 h" A1 a0046BA7E 68 98BA4600 push Unpacked.0046BA98
6 h& ?% S3 ~$ N6 _ F# g7 D0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
- i e, P4 D+ k) W+ q0046BA86 BA 05000000 mov edx,5+ i% t) L) C% {$ B- G# [
0046BA8B E8 FC88F9FF call Unpacked.0040438C
e$ ]# _3 q4 E& c {* H0046BA90 C3 retn
3 _, z" Z" @2 G/ p2 ]****************************************************************
6 @& {, _0 N u0 }跟进0046BA2A处CALL来到：$ Q' b9 \& P; T+ c; a+ y
0046B908 55 push ebp( z2 z) f2 W' l
0046B909 8BEC mov ebp,esp8 g4 ], }# o! L
0046B90B 83C4 DC add esp,-243 Z+ y/ g* W4 V; @# S; K
0046B90E 53 push ebx
8 {; j% k+ _5 R: F3 }5 u0046B90F 56 push esi& f. z& A7 h3 W( ^/ N
0046B910 33C9 xor ecx,ecx
: U5 G1 Q. i& _- o0 q0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
- {* O; k1 e% a0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
+ \3 \2 M8 z+ k6 X: y2 g% \0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
! H3 i; P4 N' e, }8 W$ _0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx2 `% m+ ~& Y, Y
0046B91E 8BF2 mov esi,edx
, D: ~7 l( b$ M, F5 Q0046B920 8945 FC mov dword ptr ss:[ebp-4],eax* z+ f" P& ~$ E
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]3 u h6 M+ ^7 v& N9 g
0046B926 E8 DD8EF9FF call Unpacked.00404808
$ ~" c- H0 ?2 Y5 B0046B92B 33C0 xor eax,eax; a/ S4 i" L; X; S5 X. P: s1 i
0046B92D 55 push ebp+ u4 N/ z7 r0 ~$ J# d1 w
0046B92E 68 CEB94600 push Unpacked.0046B9CE1 d3 Y( o0 _6 a, r/ T1 f/ _
0046B933 64:FF30 push dword ptr fs:[eax]
/ V/ W/ K9 f8 X& u8 k! }( `0046B936 64:8920 mov dword ptr fs:[eax],esp, W+ B9 b& |* W. T) K- o+ t
0046B939 8BC6 mov eax,esi, V+ X7 V8 I6 K3 w
0046B93B E8 288AF9FF call Unpacked.004043686 t3 y; L5 X; S2 N
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
3 Y; j5 U/ c$ Z% _0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
9 [7 U& R; r6 C. I: S0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4, S1 g9 A6 ~* j: t* y. [
0046B94B E8 1C8DF9FF call Unpacked.0040466C( q, K- m- \& U+ \- n
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]1 h1 c' T( l4 y, d& x
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
$ f+ i. S8 I* ]2 ^0046B956 E8 EDBCFFFF call Unpacked.00467648
7 l9 n6 X" [5 A& A. G$ I0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]0 m# V' J4 C2 n4 ?; q
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]& G ?: x) S" e( T0 l5 O4 {
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e& J. o* t+ `: l M
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~# i4 s& X ~9 i9 A) s, G2 H# o
0046B969 E8 FA89F9FF call Unpacked.00404368
3 b1 D G% `. h8 A- i# w! r: x# X8 G0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX7 ]. n& {+ y3 l6 U# P. t
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX: s6 r1 E6 i/ ?; [8 R
0046B976 8BD8 mov ebx,eax ; EAX送EBX, [8 f" g: d; D4 G6 L( W' H- C
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较5 k" c+ v+ a$ s* x
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳% x, c( J; r; e2 ^% v& U. p$ h* @
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算+ v+ ^' x0 D1 L$ Y9 m' z ~
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
: r- q: U- ~2 |7 X! v0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL) @* B3 l6 f% p+ Q9 \
0046B987 E8 BC8BF9FF call Unpacked.00404548) P H- j$ M% I L
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]# l) n, Y7 @5 k" `$ Z, w* d+ f
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
, L( s! U) X* t" O; }4 c, X) H0046B992 E8 918CF9FF call Unpacked.004046287 ?! @4 ~2 E8 i' ?' c
0046B997 4B dec ebx ; EBX减一
9 `: p7 u+ n, d0046B998 85DB test ebx,ebx ; 是否为0
: q+ l, s# }4 j4 r% ]0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
0 b# a( G9 l* b! q0046B99C 8BC6 mov eax,esi
/ C1 |+ y1 m# b* ^0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX6 ?3 `; ^, x3 E+ H% i
0046B9A1 E8 168AF9FF call Unpacked.004043BC5 R) u8 L/ Y0 @* c' {
0046B9A6 33C0 xor eax,eax3 o2 T9 R$ X& O2 F) e
0046B9A8 5A pop edx6 l. g, H( t& k$ l3 q
0046B9A9 59 pop ecx0 [# e1 W1 `; x2 W7 G* \) M
0046B9AA 59 pop ecx Y+ o" \3 q3 S+ l
0046B9AB 64:8910 mov dword ptr fs:[eax],edx9 X' Z8 b/ r4 r9 J
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
, u; H% D+ M' r6 ^3 N0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]/ Q* Q: m$ Z& w
0046B9B6 BA 02000000 mov edx,2, }6 ]/ t+ I6 h8 h" |+ b; h2 r5 d9 R
0046B9BB E8 CC89F9FF call Unpacked.0040438C
7 D0 b% P& \4 \0 f8 v, ^( `0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C] @2 K6 V% o4 h# u/ g& N# M
0046B9C3 BA 03000000 mov edx,3: w* n# R6 |5 ]5 d& |5 n, B
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
5 v, z0 r% z$ ?3 N! ~; r5 M0046B9CD C3 retn0 ~7 ^- C- D& n
****************************************************************
1 L- P; X& D) }% H# L跟进0046B961处CALL来到：
2 o7 I) a" M# L004676BC 55 push ebp$ k7 [- j; K8 |4 C! j
004676BD 8BEC mov ebp,esp
0 h6 [; [9 L4 z {004676BF 83C4 E8 add esp,-18
0 }9 g+ G% F3 g+ b3 z004676C2 53 push ebx U& O$ }5 l+ o$ m/ i( z
004676C3 56 push esi \7 Q! r- e8 o
004676C4 57 push edi p' H4 K2 F* ]: \( i* P4 Y4 \ ?
004676C5 33C9 xor ecx,ecx
2 F! ~1 Z0 Z4 K2 @ b; b( q004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
2 z; L: {1 q f: Z: B7 v+ [1 G004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx1 i& X" t# t) G' H
004676CD 8BF0 mov esi,eax H! F- ~) G4 V
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]. p& i9 N3 `# {$ c9 i1 c7 C2 [8 u1 j
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
) [4 f- ~+ o. _004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
# q. r/ V9 B1 Z, y004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
: o, J, o I1 [3 k004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi># I v9 j _5 W1 }8 y
004676D6 8BFA mov edi,edx
3 g! H N4 v8 |004676D8 33C0 xor eax,eax3 z4 d) P3 }' `$ J+ B0 v2 e8 K
004676DA 55 push ebp
" f5 S; y8 h6 k" A S2 r004676DB 68 57774600 push Unpacked.00467757
! ~% o* r0 X; Q, s3 }$ y9 Z004676E0 64:FF30 push dword ptr fs:[eax]
) e0 @ ^8 B1 L" C1 |/ C0 _3 g3 u004676E3 64:8920 mov dword ptr fs:[eax],esp
% `/ c& r3 R2 w! T) t004676E6 8BC7 mov eax,edi
- q1 l* X4 d1 o2 i004676E8 E8 7BCCF9FF call Unpacked.00404368
8 Y p* W1 U3 Z- L# |004676ED B3 10 mov bl,10
' n2 C% x+ b7 C: i004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]+ v& r! B$ m* l, ^2 l* s( Y2 K9 A
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
0 A( r( h0 Y1 s8 v- A. R004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]3 {7 T) z/ `$ K3 B
004676F7 33D2 xor edx,edx* p3 k7 W/ S& M! g: @2 F* K
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL- R2 a' x! V6 ~+ _
004676FB C1EA 04 shr edx,4 ; EDX右移4位
, P! U0 q2 s3 } _; i/ O004676FE 83E2 0F and edx,0F ; 和0F与! O- @0 Q8 p) H. }
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
% t3 F& {$ Z) _* d. ], k, I00467707 E8 3CCEF9FF call Unpacked.00404548
( |- R3 w* l% @: s, x0046770C FF75 EC push dword ptr ss:[ebp-14]
" R9 z& X% N7 L5 A0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]6 @2 q$ h6 ]4 S
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL# T, y% A( Q) e( L8 Z6 ^
00467714 80E2 0F and dl,0F ; DL和0F与. O0 B& E: w# }) k
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与' h+ y/ x% i+ ]8 E1 X! K6 O: b
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL" U F+ B* c( D0 x
00467723 E8 20CEF9FF call Unpacked.00404548$ w7 t, O8 l; I2 p- }
00467728 FF75 E8 push dword ptr ss:[ebp-18]
9 S% @' ]4 m. \0046772B 8BC7 mov eax,edi ; EDI送EAX
( y6 ~: v6 S* g* ?$ R0046772D BA 03000000 mov edx,3+ W" E8 g1 k( Q. X% a' e0 X1 V
00467732 E8 A9CFF9FF call Unpacked.004046E0
/ S0 U4 ^! v* \3 F0 U00467737 46 inc esi
0 i8 O4 a9 U2 c& r( q9 {, q00467738 FECB dec bl: ]- F# w) c- n
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
; C4 X- i( J. F3 M" z( G7 k9 b0046773C 33C0 xor eax,eax d) u; ?: Z+ O6 T, O$ u% F
0046773E 5A pop edx
s; \0 q& Q# H* u% [% x* b0046773F 59 pop ecx% }- e' k. V. U5 j8 [4 [
00467740 59 pop ecx
/ I3 @: g1 t+ F5 U: \/ C0 p; |# i3 P6 a00467741 64:8910 mov dword ptr fs:[eax],edx
: f' R) \- b. S( l' \0 d7 i8 p$ P00467744 68 5E774600 push Unpacked.0046775E
+ q6 ^7 b* C) V& T6 U5 D00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
/ k3 m/ ?& |' l. v' l0046774C BA 02000000 mov edx,2& z# d0 ?% m/ p9 _# N
00467751 E8 36CCF9FF call Unpacked.0040438C
. l( }0 ~% T6 C00467756 C3 retn //返回
6 T. e$ B' ^( I: t5 U# V———————————————————————————————————————————
$ Z3 j0 `" W, f. \" t【Crack＿总结】：. `* p$ W6 P/ G
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^
" x7 d4 c, e1 N: h" {机器码：bbba33de56c4cf31d9063cc074248d4b
4 b4 @: V7 J/ [ P/ g2 f; A* v注册码：e807519487d7ad4f57ad42dc87fbb191 H: k) j' l! e& j! {* l
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡