|
|
|
【原创】破解图章制作系统
) [7 F+ @( J% k6 @: L% f4 r7 d日期：2005年5月15日 破解人：yijun[PYG]
7 }+ ~- J7 ?2 Z# a" ~3 q7 m( A———————————————————————————————————————————$ T* B& h/ S& L; R8 u
【软件名称】：图章制作系统 软件版本：1.0; ]( w7 b* E* B* b/ U0 Q
【软件大小】： 252KB
, q& \3 u |5 z% s5 _% _【软件简介】：制作各种图章3 v9 j, l9 j9 T) M
【软件限制】：NAG7 c7 g. S$ q( L: ~; U
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！0 X E$ e- t; }" q& z
【破解工具】：OD,PEID: U, R( Z }& f( E! p- ^8 G4 n8 ^
———————————————————————————————————————————
4 O& v& Q( x: `) E
8 {: E8 n9 r" ]! t1 c! A8 m$ c& V【破解过程】：
- G U# U. O( RPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
+ |2 s% }$ ~# v0 t9 q$ }OD载入，通过字符串查找很容易来到这里：* T0 c# l' {8 _7 N( s8 a4 s# k
0046ADAC 55 push ebp //在此下断% |7 g3 V( [- N- L* G/ ?3 Q
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
) _3 c, F3 ~ {# @4 a% ?0046ADB2 64:FF30 push dword ptr fs:[eax]
! u7 u/ t! T4 G Q2 l2 Y. D, Y0046ADB5 64:8920 mov dword ptr fs:[eax],esp) `8 s, a5 \/ y! |8 R# h& W, e
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]4 l6 M6 d4 N3 D" q: }8 T% u
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]" D5 Y5 J& k% t; J
0046ADC1 8BC6 mov eax,esi
8 E$ B& N# n' G2 u) U0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
- q% h. |; `, V! O2 h0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
. i9 S: I8 J9 j8 E1 _0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]' {% Z0 F# x# h9 L8 G; d8 u
0046ADCE E8 45D9F9FF call Unpacked.00408718
4 l' R- t; G! j! G0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX, D& l+ Q6 b: G* N3 X
0046ADD6 8BC6 mov eax,esi
7 Y% _# p5 e$ n$ `( a0046ADD8 E8 3359FDFF call Unpacked.00440710# z# H/ y! }1 I) N9 b
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]; ^4 I* c* g$ _/ r
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
7 u. z; h% `& g7 |4 a% C2 t2 E0046ADE6 E8 F558FDFF call Unpacked.004406E0
/ {- k) g" |' A0 ~* ^: v: k0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
) K; E% C4 S- b: a0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
4 n1 f% ]4 I, O" q8 i" ]0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX3 |" d( n1 O- x9 {0 y6 t
0046ADFA B2 01 mov dl,1 ; DL置11 d! P0 L& k+ F9 Z; S9 O
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
% _0 T% Q! D. n; W6 Y4 o0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
% f/ \3 g7 a4 V7 H t' [/ {0046AE06 8BF0 mov esi,eax
6 e6 Q0 ~7 O+ A& r0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
! o; u# N6 y! L. l0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]: f! n; S7 y/ ?7 B2 a
0046AE11 E8 CA58FDFF call Unpacked.004406E0
% L) w! T8 m' b" u0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
- F" k: R0 C9 @3 F8 ~; q- K$ |2 ^0046AE19 50 push eax' } Q+ F: x* L, u4 B
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
0 |* m3 p7 n! A* E4 ]/ Y, W& n0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
0 h( Y6 k7 k+ w* [) u0046AE25 8BC6 mov eax,esi1 E; q# D) K+ N' g
0046AE27 8B38 mov edi,dword ptr ds:[eax]
0 M3 B4 ~( H7 V# F. c' p0046AE29 FF57 04 call dword ptr ds:[edi+4]! I; `& h: }" h6 U. Z8 c
0046AE2C 8BC6 mov eax,esi! A$ o( V( o+ T1 t6 ~; u4 D
0046AE2E E8 4587F9FF call Unpacked.00403578$ E0 x2 Y! R/ e m' g
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
4 {1 A$ g* D0 }7 E( n3 M& r/ U0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
0 J7 P+ a$ ^" T2 r8 f- c' c0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
5 P3 ?5 L7 _9 O3 U" u0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~) }0 L& D. Z8 e$ v8 H+ v0 a" E
0046AE42 6A 00 push 0/ I4 Z2 q8 q1 p7 Q0 I
0046AE44 68 D8AE4600 push Unpacked.0046AED8
- [ K4 {3 @0 C# ~0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误2 r/ q3 _- F& F& x; I
0046AE4E 8BC3 mov eax,ebx+ t# S7 P% G$ w6 ?" ~
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
: @# V r2 D+ M" A, Z8 P0046AE55 50 push eax
6 _/ k. q1 F! G$ i9 o% o+ [0046AE56 E8 DDC2F9FF call $ U* m, \* F) }# U Z R" m
0046AE5B EB 20 jmp short Unpacked.0046AE7D3 P3 c H- D, r+ A' P. ]
0046AE5D 6A 00 push 0
+ O! J- `& G! v7 p9 K$ ]0046AE5F 68 F8AE4600 push Unpacked.0046AEF84 ^* R6 p; ~6 ^) N/ v
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
8 R U% h3 t) u- U! @0046AE69 8BC3 mov eax,ebx
7 U4 n9 Q$ c2 j7 C2 F0046AE6B E8 88BFFDFF call Unpacked.00446DF8, Q$ _" [9 {: H |; |9 c
0046AE70 50 push eax$ A1 q, l0 p+ H" `8 R
0046AE71 E8 C2C2F9FF call . s. j5 F0 i1 ~7 R
0046AE76 8BC3 mov eax,ebx; _: I1 c6 Z( e. V" p& \2 g
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC8 F1 f, a7 W/ X p% N/ X a; W
0046AE7D 33C0 xor eax,eax
7 R! M( P/ h1 R0046AE7F 5A pop edx
/ I ~2 B; k& i. y* ^1 Q; m( w0046AE80 59 pop ecx4 M" Q- y5 u0 Y8 R' U7 u" g5 i
0046AE81 59 pop ecx
4 |+ Q; L- C% i0046AE82 64:8910 mov dword ptr fs:[eax],edx
) }+ |% E4 T: o% f$ j0046AE85 68 A7AE4600 push Unpacked.0046AEA7: d4 x7 a2 [- j8 a: G( U0 \, r) v7 c3 S
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]! d( Z E% p- o0 E/ J$ t
0046AE8D BA 03000000 mov edx,3
3 Q" Q0 Y( a2 g, ^; k/ Y0046AE92 E8 F594F9FF call Unpacked.0040438C
! Z; w# J1 r6 p/ h0 Z0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]! t5 {2 E( Z5 j9 F! J# w+ J L' Z
0046AE9A E8 C994F9FF call Unpacked.004043686 h; ?) Q- [9 S4 S
0046AE9F C3 retn: |+ M, I. `- r9 e0 J7 a
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C& ]/ S) G- K; M- m& z
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A- r* C* x# ~7 o' K1 a+ N, S& Y
****************************************************************+ T, x/ c! l) p
跟进0046AE39处CALL来到：- E. I, n+ X7 d7 t$ D( w: {
0046B9F4 55 push ebp- z- l/ t E$ \# q4 _8 f
0046B9F5 8BEC mov ebp,esp* z8 m, z6 ]; [$ d
0046B9F7 33C9 xor ecx,ecx( r8 c( z8 \- n
0046B9F9 51 push ecx0 R4 ?, b4 l+ f$ U- ~2 ~1 S0 Y( `- u: z
0046B9FA 51 push ecx) e. ^& ]2 }& ]- v7 E
0046B9FB 51 push ecx4 ~9 L: y7 `" h8 K
0046B9FC 51 push ecx
/ l* H# |# h- j: D0046B9FD 51 push ecx
% ^0 w0 H4 U6 Y9 E* k0046B9FE 53 push ebx. N5 \ b) _; `
0046B9FF 56 push esi% s; T& O3 g" R
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax/ h+ B) l! F( d7 ?/ y9 x6 {" x0 M
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
' {& l2 I2 z1 h/ W0046BA06 E8 FD8DF9FF call Unpacked.00404808
( v( R# L0 d( U( x2 T. Q; p1 S+ e0046BA0B 33C0 xor eax,eax
; _# v8 b1 {3 q0 b$ _% n0046BA0D 55 push ebp. v, G* S. c) n) l! s& H
0046BA0E 68 91BA4600 push Unpacked.0046BA91
* m6 \+ u6 S- w0046BA13 64:FF30 push dword ptr fs:[eax]
( o6 `' d% T0 d0046BA16 64:8920 mov dword ptr fs:[eax],esp$ U. e7 N. @2 E& Q! ~3 q+ c
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]& f: O, B# {0 n: U
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]& X" A5 q$ [7 Y" z+ ~) e" E
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
; t% k# J) V, k! y% g) a0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
6 Y' Z" D4 n5 F% J3 d1 z0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
1 b3 s, a! d: P0 e# J0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
6 O. v# K# C: ~0 h4 O0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
+ A* ~6 X U" s: {1 }* {' {0046BA34 B2 01 mov dl,1 ; DL置1
1 @" r5 M& o4 |. U0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]/ j/ d) e9 `: w2 Z
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
! C9 ^6 B! S, v9 s0046BA40 8BD8 mov ebx,eax
& Y+ _3 e4 T9 z$ a5 j8 L0046BA42 6A 00 push 0% f- G \4 X S3 T$ j9 j! x$ h3 c
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
( F" V% Z1 C" T6 J* v: E1 g* S0046BA47 50 push eax
$ T8 p# u0 s$ K$ _- Y5 n1 k9 z3 V0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"5 Q: a7 D3 u5 K2 r" s4 a( g* q2 F _
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
v" R, T9 |: X, X# j0046BA50 8BC3 mov eax,ebx
# `/ u0 x8 |( l2 ] ?7 R0046BA52 8B30 mov esi,dword ptr ds:[eax]
$ I9 e( K3 z# y6 o. \0046BA54 FF16 call dword ptr ds:[esi]6 P4 d- v/ y% \7 I
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
( ~9 m1 V5 I& K; h0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
7 r8 \! H& g- @4 f1 m$ s0046BA5C E8 B7CCF9FF call Unpacked.00408718
. A9 f# e' E- U n9 w' l0046BA61 8BC3 mov eax,ebx" A. @# E3 U6 A! g8 B
0046BA63 E8 107BF9FF call Unpacked.00403578 4 _) d9 K( h- L" t j
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
+ v6 X# s+ T- Q, c" x/ ]& U: ^0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
) ? Q, O: c8 D; ^( k0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
0 C* e7 G& H. E( K2 J/ t0046BA73 0F94C3 sete bl ; 置BL值
' Y4 o' n% _; Z) P0046BA76 33C0 xor eax,eax( [! @% g4 }0 T: v- v5 L
0046BA78 5A pop edx+ Y) O& u" V5 z1 S Z
0046BA79 59 pop ecx
. O8 [$ k& i. f4 [7 X0046BA7A 59 pop ecx% V0 S5 g" D4 |
0046BA7B 64:8910 mov dword ptr fs:[eax],edx/ X# l7 _, j# m( E+ U. w
0046BA7E 68 98BA4600 push Unpacked.0046BA98! e9 Z/ V0 w: Z: f/ Q& G
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
$ w3 L5 L* D/ Q# L7 Z/ Y# N/ _0046BA86 BA 05000000 mov edx,5* Z1 d# R1 @' i; V6 j
0046BA8B E8 FC88F9FF call Unpacked.0040438C
$ i7 u, ?3 i9 I9 `+ y0046BA90 C3 retn, W! t4 ?' h" N, a. P
****************************************************************
* u7 `' J: t j( O跟进0046BA2A处CALL来到：4 n$ y7 f) q; \" g/ [7 ?# Z
0046B908 55 push ebp
, N1 ]6 F% g1 ]9 W" L) Q, U2 p) P+ d4 r0046B909 8BEC mov ebp,esp3 M7 c# h) x s
0046B90B 83C4 DC add esp,-24& I' w0 q1 E( g. Q1 d, v) T/ P
0046B90E 53 push ebx" I, z+ |' i* Z- L2 x, q {
0046B90F 56 push esi
# O& P7 ?3 ?5 M) p- b3 ~6 T9 _( ?& v0046B910 33C9 xor ecx,ecx t9 i( K, F0 G- b
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
- C0 i4 m! ]! A8 L0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx# F0 c' l0 S4 r& ~ s1 X9 W9 Z
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx/ p- A8 x; T$ ~! p& W
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
4 r1 T7 ^. e- p' \/ F0046B91E 8BF2 mov esi,edx/ ]/ K) t) G0 R) n
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
1 v5 n" H3 ]' z8 ~" P0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
Y' s( S; M& w0 Z) e7 [0046B926 E8 DD8EF9FF call Unpacked.00404808
7 B, W) D+ q/ {8 Y4 W7 T0046B92B 33C0 xor eax,eax
: X, f" }$ \' {0 S3 X0046B92D 55 push ebp
% s6 @' r3 |7 S& A/ {0046B92E 68 CEB94600 push Unpacked.0046B9CE
9 x. K5 s/ S+ W6 r, y5 | N0046B933 64:FF30 push dword ptr fs:[eax]
& k1 y3 r. {9 L+ V' J7 P$ G; s0046B936 64:8920 mov dword ptr fs:[eax],esp% p7 v5 ~ w& ^$ m" c6 l7 i% U
0046B939 8BC6 mov eax,esi
+ }9 e4 R2 t* X2 _- y" @0046B93B E8 288AF9FF call Unpacked.00404368, r+ I) J6 g, q- S7 L) g( U/ W5 S
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
2 i9 l# O; ^7 D3 k) e% s: g7 ?0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX! B- G; i3 _. r7 ]# E- E4 A
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4, @$ C) v- S0 g: c8 O8 C" C
0046B94B E8 1C8DF9FF call Unpacked.0040466C+ B# d$ l" N" E8 W$ d
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
* S+ k9 |; O1 B; U" F0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
; z, L! a* m% _. }3 K0046B956 E8 EDBCFFFF call Unpacked.004676481 M% P+ n/ \* p
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
" Z$ J; K4 s6 `- g e- k9 n0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
6 E9 a7 X. o: v# _0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
. B. S7 f; e) @6 m: `0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~8 }% `, |9 c5 N
0046B969 E8 FA89F9FF call Unpacked.00404368
+ {9 X1 [/ ]: K' n4 B+ G0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX$ p: J; L% s+ W% Q
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
7 u! O8 I4 }5 }% }! I$ m0046B976 8BD8 mov ebx,eax ; EAX送EBX
! u/ R i& ^% D+ V2 z) H0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
' x7 n9 H' x, D, H6 `, e1 L0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳& r% Q+ _. e, x6 l& N- m
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
8 f% S, z% G; \5 ]( D, r0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX1 _% n1 o9 C+ d
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
" g9 I. B7 H1 x8 G" } v% {! x0046B987 E8 BC8BF9FF call Unpacked.004045484 r; u/ u$ g- s8 {4 _+ R6 ]
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
" w. [# l2 L. V) G# d, A0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX. o1 a4 S- H6 A' U
0046B992 E8 918CF9FF call Unpacked.004046283 r: F/ j7 f+ c m5 Q
0046B997 4B dec ebx ; EBX减一
- N: V: a7 [4 {" G" S! u0046B998 85DB test ebx,ebx ; 是否为0
- d( r7 j6 q: a2 a. k* P# y! B5 t0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。 k- a; o+ `9 A; S# W: [! ~- E
0046B99C 8BC6 mov eax,esi
/ j8 H) \. {( _5 q0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
( C, i! S( E$ C. b) d3 d0 y n% M0046B9A1 E8 168AF9FF call Unpacked.004043BC
5 T/ F/ C) v& r, A0046B9A6 33C0 xor eax,eax( ]9 i% `! U& r9 n% a
0046B9A8 5A pop edx
0 j+ l& k+ O i0046B9A9 59 pop ecx: { y) D3 i0 ~* R1 ]! O: a
0046B9AA 59 pop ecx
! F6 C# |! W7 N2 V7 G i- w0046B9AB 64:8910 mov dword ptr fs:[eax],edx# k% x& h$ E6 L! A/ T$ u4 |
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
# [6 t$ I, V& I, H$ m% z4 _' b0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
* x* Z; v( o/ N) a' N0046B9B6 BA 02000000 mov edx,2- |; ^/ D5 ]5 {% X* \) U
0046B9BB E8 CC89F9FF call Unpacked.0040438C
/ |' B. `8 G7 G: J E. a5 o0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]& R1 z+ t( B Z5 a- \
0046B9C3 BA 03000000 mov edx,3
( `4 c O# j, M/ `# g0046B9C8 E8 BF89F9FF call Unpacked.0040438C" m+ p! X" ]) d8 P8 I+ q
0046B9CD C3 retn1 T) e1 w/ ^ h% ]( t9 q( L
****************************************************************
8 X% |; N" }+ ]! V: J跟进0046B961处CALL来到：
! `/ d; P. g7 f004676BC 55 push ebp" y! q+ J* F( u. h
004676BD 8BEC mov ebp,esp
6 v( C& N% C4 X# q004676BF 83C4 E8 add esp,-18- r$ e1 y$ f) A) F' X: K
004676C2 53 push ebx# Y# i8 [& ?* ~4 @' z- V
004676C3 56 push esi$ r; W5 M+ [: f" v
004676C4 57 push edi' @6 a5 F4 Y+ E% m7 O
004676C5 33C9 xor ecx,ecx/ S# o7 y! H0 Z9 i; \$ `
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx D. d P t( L. b3 o7 I
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
5 T6 H6 N/ q, N6 K7 k004676CD 8BF0 mov esi,eax
7 L" I# [! n* |% V, S) B004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]& F/ y+ @- H. [6 R a2 Q
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
# q3 Q0 G; F7 S. M004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>' a; J' o3 A- x9 X
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>4 M% E$ A! u" C
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
, H; H4 R3 o, b( [0 }; v4 ^004676D6 8BFA mov edi,edx
$ U3 y# s& u( e% ^) J004676D8 33C0 xor eax,eax
4 m% W) u4 N9 U& l) Z$ u# V: K9 b7 j004676DA 55 push ebp
9 `& z) G9 w5 L) J; o4 |3 S004676DB 68 57774600 push Unpacked.004677578 h \1 k+ D, \) r' U" Y
004676E0 64:FF30 push dword ptr fs:[eax]
8 S0 m) s' n/ ?- H004676E3 64:8920 mov dword ptr fs:[eax],esp
8 o% ~: {' a+ l! Y5 T t A# P004676E6 8BC7 mov eax,edi( y# D0 z8 y: g/ G/ Y7 h
004676E8 E8 7BCCF9FF call Unpacked.00404368
' C. v+ h/ w, W8 G004676ED B3 10 mov bl,100 [5 o& @' \6 a6 I7 u5 V
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
& b% v% ~& e2 s+ v! ?( c6 l% n004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
' t5 x$ b* w) ^! l, u+ g' ]004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
: Y r. Q! F, ?* X, D2 a" `4 R004676F7 33D2 xor edx,edx
- g4 d E7 t l004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
( e1 G3 A w' C5 B( d004676FB C1EA 04 shr edx,4 ; EDX右移4位# Q; U5 `( W' S, V2 T
004676FE 83E2 0F and edx,0F ; 和0F与
2 W* F- ?9 M0 ~$ G) I: M00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL, b1 ]: u' C2 t/ q
00467707 E8 3CCEF9FF call Unpacked.00404548; [% r y( h. n- j) H6 M
0046770C FF75 EC push dword ptr ss:[ebp-14]' w" J- r- [! m" P8 _. z
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
! k; w# p! |; M6 F6 v5 V00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
# M+ \9 H1 F# \00467714 80E2 0F and dl,0F ; DL和0F与
H) r6 |' Y. e5 e00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与3 r' r$ j6 e6 r
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL- a$ v" ]- _" p" s- S, K7 c
00467723 E8 20CEF9FF call Unpacked.004045485 \2 z: F/ _* v; r
00467728 FF75 E8 push dword ptr ss:[ebp-18]
9 _# ^% U& X, s8 _0046772B 8BC7 mov eax,edi ; EDI送EAX5 V* g# b$ u' l
0046772D BA 03000000 mov edx,3
6 ~ j' F u# R) P/ ?: s00467732 E8 A9CFF9FF call Unpacked.004046E0
/ R" C5 o) P- T- {. y. ^& C8 o00467737 46 inc esi# h/ ^% l1 _2 F3 r1 t
00467738 FECB dec bl) o2 V* c# P. X; x; K5 K( {% P* S
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
+ O' r- A: K# s1 C0 K4 x$ P8 f0046773C 33C0 xor eax,eax( y6 c: ^) R; N8 A3 Y
0046773E 5A pop edx Y- I9 [* ?. ~' t
0046773F 59 pop ecx% |2 N/ g5 x4 E4 i2 {3 W
00467740 59 pop ecx0 H: c$ b. i) x& q: b5 o3 B) o M
00467741 64:8910 mov dword ptr fs:[eax],edx
% l' ?6 H0 M$ y* \. C$ p/ c00467744 68 5E774600 push Unpacked.0046775E
+ `# K9 v( ?' x2 J' a" |00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
4 F: z; V( f4 s- G* F: f0046774C BA 02000000 mov edx,2
8 c$ ~+ q6 I/ n9 g; c/ o. w00467751 E8 36CCF9FF call Unpacked.0040438C8 E! s1 F+ K. |
00467756 C3 retn //返回
2 W) y0 e m. E2 v- A———————————————————————————————————————————
3 z: S4 L) N- C9 y' }. B& P【Crack＿总结】：
1 A" S0 g5 s& d. {" s; E* r将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^
4 \) v& P. ~; I) k$ _; A5 _机器码：bbba33de56c4cf31d9063cc074248d4b" Y2 m$ w' p; G* \% }! D
注册码：e807519487d7ad4f57ad42dc87fbb191
- P8 x" E1 d, Y附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡