|
|
|
【原创】破解图章制作系统+ Q) w+ V6 q& W& `- O \; w
日期：2005年5月15日 破解人：yijun[PYG]( Z5 D4 r4 D( a! R
———————————————————————————————————————————
8 V# r0 R: q# g! S0 B* b【软件名称】：图章制作系统 软件版本：1.0" M% a; B$ E9 e$ j
【软件大小】： 252KB
8 n( F, ? z1 g \4 P【软件简介】：制作各种图章
! ]! _8 p5 ^% V- z/ X% t【软件限制】：NAG
: h8 S- Q7 F: }9 S* Z【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！" `* [' ~' T( L$ r: d. c" i ^& F
【破解工具】：OD,PEID! y/ [. I' w }# L6 c6 A' R# X
———————————————————————————————————————————
. B3 V/ V- D0 F ] P: { : F# F& X( `( O
【破解过程】：
5 a- B+ n. G/ [; a* BPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~! p' ]' ~ {9 x- F" U/ h$ q
OD载入，通过字符串查找很容易来到这里：
$ [& O7 b% M n' z5 i) f) g0046ADAC 55 push ebp //在此下断
9 E4 Y% D) S; S1 z0046ADAD 68 A0AE4600 push Unpacked.0046AEA05 |7 e* F: q/ |2 `% I
0046ADB2 64:FF30 push dword ptr fs:[eax]
- B6 y, v- e6 @7 }9 ~0046ADB5 64:8920 mov dword ptr fs:[eax],esp
/ O/ |% \; |# k0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
2 ]. t9 b. A9 X0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]0 |5 W4 F9 e1 n" ~
0046ADC1 8BC6 mov eax,esi$ w0 d$ @, H; c, j# d
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
2 N) h6 i# G& B1 c0 `9 l0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX, j. L- ~7 Z9 l& Q2 e
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]. d1 m& R8 J, F" a4 D
0046ADCE E8 45D9F9FF call Unpacked.00408718& j2 B4 W+ m# w6 Z
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX, x$ D+ Y. P9 I5 K. l+ K g
0046ADD6 8BC6 mov eax,esi
; ]* g7 I" |# I9 } _, ]+ r) d0046ADD8 E8 3359FDFF call Unpacked.00440710$ p' _- X, M3 ?0 v2 d5 {
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
: H+ n* { h; }3 |+ e0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]5 l& \. D3 w+ s7 J; M1 k9 Y0 K
0046ADE6 E8 F558FDFF call Unpacked.004406E08 p) h3 t, k* Q* v: B
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
" H, V0 n$ {$ P$ ~0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳5 H/ F; v: A! w5 a. }6 b- `" _
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
/ o r0 q; k" F9 z1 c) m- `0046ADFA B2 01 mov dl,1 ; DL置1
; B% s( ~( x" o& y0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
9 y O4 j. D0 v8 E- X' r3 [' m0 A0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
- n4 S) v, \. h# n* t+ p0046AE06 8BF0 mov esi,eax& o/ F2 `& ~; N8 l
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
, W( o- M9 y9 y5 p% n7 I0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]5 C4 Z0 _, f' P% H$ K n
0046AE11 E8 CA58FDFF call Unpacked.004406E0' b$ D/ i9 ~6 z. f8 a
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX7 X2 i" u: c" I7 O) ?9 q1 z
0046AE19 50 push eax
' S8 h' k+ x, a5 j3 S0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX/ h0 h) f* w* w
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]0 V' G! w2 I6 K# p5 F
0046AE25 8BC6 mov eax,esi) k2 ~% K6 ~: v
0046AE27 8B38 mov edi,dword ptr ds:[eax]3 x5 G3 Q9 }/ Q. [# E
0046AE29 FF57 04 call dword ptr ds:[edi+4]
3 ], D3 O2 _" b5 V0046AE2C 8BC6 mov eax,esi6 E/ N0 D% D2 O a4 f4 o% P b
0046AE2E E8 4587F9FF call Unpacked.00403578
4 _2 p8 w( _! a+ \0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
. c* M' ^8 l0 O" S! h0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~0 ?' ~% ]+ k' X
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）0 p3 v2 j# S2 T0 P" A$ A x
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~4 o( Q% H/ T J1 A, C a3 x# F9 W
0046AE42 6A 00 push 0/ S# }; o- ^8 i0 n! o" F+ s
0046AE44 68 D8AE4600 push Unpacked.0046AED8# K, F- F i/ j" j+ b) l3 a0 d, h' |
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
3 i, _, U' k# s3 F' Y2 z! w: K& A7 l0046AE4E 8BC3 mov eax,ebx8 F% X8 _1 o" r: c+ L
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
% \% h4 v9 [' e& x8 M( q0046AE55 50 push eax8 t" t+ Z' ]5 f4 b5 \' ]: B
0046AE56 E8 DDC2F9FF call % M) B' \6 G* {) v2 h O4 |9 n9 z
0046AE5B EB 20 jmp short Unpacked.0046AE7D
, s3 G' u8 \% m; R0046AE5D 6A 00 push 06 q, ~- m' @3 F A; D! K+ E4 s! ^" v
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8, }( f. x. O# _: t) t4 O9 d8 x
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功9 v& b( T9 R; ~, X; S; t- K
0046AE69 8BC3 mov eax,ebx+ M9 I8 A" J$ M: N
0046AE6B E8 88BFFDFF call Unpacked.00446DF8$ D- F' c/ E; C) e
0046AE70 50 push eax
* Z+ y8 P& b2 T0046AE71 E8 C2C2F9FF call
$ E3 j Y1 Z7 b5 @9 c0046AE76 8BC3 mov eax,ebx
3 ~+ s9 x8 i1 e/ H! Q5 ]0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
0 n9 h2 R' G* {9 V+ A* q2 n0046AE7D 33C0 xor eax,eax
% L3 G7 L9 Q j( y) Q0046AE7F 5A pop edx. s3 o% F( j) i0 c" u- k
0046AE80 59 pop ecx
- N6 |. S) L0 x; q) _3 T, q" c2 c+ ?0046AE81 59 pop ecx
: Z A u1 w2 L$ l0046AE82 64:8910 mov dword ptr fs:[eax],edx- m8 m! M, R- J4 ^4 ?# A& @
0046AE85 68 A7AE4600 push Unpacked.0046AEA71 \1 {' j7 z8 R( J- Z& m
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]. Q# ]2 b: Z, k
0046AE8D BA 03000000 mov edx,3
& n" w# n6 T0 h9 D3 I0046AE92 E8 F594F9FF call Unpacked.0040438C
. x) B; ~* T7 J0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]3 ]4 m( _; u, E* K; o& ?
0046AE9A E8 C994F9FF call Unpacked.00404368/ @6 U& `9 N1 }! g, P& R+ v
0046AE9F C3 retn# U8 ^- e% T" f" k5 ~% ]2 }, n
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
/ z) l" K8 P' q" N! j8 n0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
) \8 d0 V c* \; R, V4 o****************************************************************1 |. X% H$ E9 l2 ^( W1 z
跟进0046AE39处CALL来到：0 O* |: A" w' X! d3 C! E, O! I% A8 v
0046B9F4 55 push ebp
# x4 P6 R$ E7 ]0046B9F5 8BEC mov ebp,esp% S6 t- f. T+ o& T
0046B9F7 33C9 xor ecx,ecx" M# L6 s# y2 h' S) y( K; ?
0046B9F9 51 push ecx! }' x( X8 R; D% X) t K! B
0046B9FA 51 push ecx- P/ w) n; [) B& H9 m# v5 B
0046B9FB 51 push ecx# S$ r( U) K- d+ H/ H5 F
0046B9FC 51 push ecx
. f, ~; \% E- \4 ^* F* d, p! X0046B9FD 51 push ecx
% y0 e, M' f! Y" C0046B9FE 53 push ebx. w3 y) k7 V3 o2 a2 Y. E6 }# J: k
0046B9FF 56 push esi
O! @( Z$ K! d) B0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
7 ^+ y5 B5 V1 q# u& N; y2 a0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]& O( O9 l/ M$ t G) }4 `4 u+ p
0046BA06 E8 FD8DF9FF call Unpacked.00404808
( @5 v( Q1 c1 R, u2 f0046BA0B 33C0 xor eax,eax6 t' p7 K" r, D- Y# ~8 j
0046BA0D 55 push ebp( t0 i3 c! `! o& h8 ?- b1 c" Y
0046BA0E 68 91BA4600 push Unpacked.0046BA91
7 d$ p d! G/ r0 u# E9 q& @0046BA13 64:FF30 push dword ptr fs:[eax]
2 n R8 H- z2 L4 w; b9 F0046BA16 64:8920 mov dword ptr fs:[eax],esp) v2 @$ f3 A: P/ a& K" J, b3 ]6 M
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
3 n. T+ {" P* M' h# C# c" Z0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
8 x6 C' p6 ^4 i, W5 ~; @; R6 h0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ( _6 [3 N) g% W2 w4 Y$ |
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]& g# _6 b M* ~( T9 }# J
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
0 Y- t' P8 K D/ Y0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进, Z# Y% A7 o; U6 t, U; `4 `
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
( x1 n2 r2 t j. @6 t w0046BA34 B2 01 mov dl,1 ; DL置1
4 H; S# H9 Q1 t. X1 O [$ R0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
8 V( D0 m: u( o3 ^0 O& X1 u! _6 x0046BA3B E8 78A3FFFF call Unpacked.00465DB8* J6 F& a2 M. G; l
0046BA40 8BD8 mov ebx,eax
( C5 d# A" Q3 V, X4 A0 B" o+ n6 \! r0046BA42 6A 00 push 0 J( t! F" U9 F1 d y0 h
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
- z4 N8 }8 S/ \8 K+ }0046BA47 50 push eax
. f0 [; @! o5 ]" B# i0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
2 v1 i# Y- g1 P. N( A5 b: O0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]. s' @' V% |' w2 [3 H* @" y' U
0046BA50 8BC3 mov eax,ebx
7 V9 X% H% J7 s+ n; s0046BA52 8B30 mov esi,dword ptr ds:[eax]
' }/ w8 X; J2 E: V0046BA54 FF16 call dword ptr ds:[esi]
, X/ G) T' X. d @& V2 X4 M0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
9 J; z+ w# b7 [# L+ y$ F; C0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
6 |& G, p/ M& v0046BA5C E8 B7CCF9FF call Unpacked.004087184 u5 |7 n) r" K/ P) S! [
0046BA61 8BC3 mov eax,ebx8 @7 B% l- N, W* p" h4 c% k. ~
0046BA63 E8 107BF9FF call Unpacked.00403578 8 G) D& o9 d Q
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
5 M/ V$ i) U$ f2 ?: z. L' r) S0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
3 N$ G5 {5 ~0 G. i$ x- y' m. F- ?* c0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
9 K! S5 j1 Q; w( Q# v! U+ e3 R, ]0046BA73 0F94C3 sete bl ; 置BL值
# f4 t4 V$ y1 X0046BA76 33C0 xor eax,eax5 B! [4 j1 O2 A
0046BA78 5A pop edx
' z$ N: w9 G. Q( j( j0 X8 P1 V+ h, \) n* ]0046BA79 59 pop ecx
& v& _3 d) I# O0046BA7A 59 pop ecx( G: C8 h! @6 b& _9 s. e- A+ H- ?
0046BA7B 64:8910 mov dword ptr fs:[eax],edx5 Z- ]+ e" t( r, m4 i d5 a
0046BA7E 68 98BA4600 push Unpacked.0046BA98
. F0 |+ J* i( Q& }, ]0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]9 M" m' K; E+ B
0046BA86 BA 05000000 mov edx,5+ |$ @, x1 }8 ]9 g6 G+ d/ d
0046BA8B E8 FC88F9FF call Unpacked.0040438C5 A( |4 X7 i! ?( X, v6 ?- ~3 V7 C
0046BA90 C3 retn
7 p: Q7 {/ \ Y' r" q; v****************************************************************4 K; R' A, | B5 ]6 h4 Z% F' o
跟进0046BA2A处CALL来到：
$ u- g4 Z \" [+ C3 E) c0046B908 55 push ebp
! P8 [; [6 ~/ m- A# b5 ^* ?4 y; B0046B909 8BEC mov ebp,esp
- u, p' E2 }. G/ h$ @3 f* s0046B90B 83C4 DC add esp,-245 B+ ~5 z& F/ b8 ?% h8 ~
0046B90E 53 push ebx8 B6 F9 W4 i4 L$ V5 p* L' e, i
0046B90F 56 push esi T9 j+ ]3 |6 {+ F S
0046B910 33C9 xor ecx,ecx
4 \' o {; d* B) `0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
2 f9 N1 o" b, w& K' b, [9 z0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
, T% I3 t B+ V0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
) u8 p8 h. }& l; ~! @; ?' y2 S0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
0 N( O0 k/ L/ o0046B91E 8BF2 mov esi,edx9 v5 c8 y5 \0 T( s5 T) [+ m
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
3 Y7 p, Y' X3 t% I( V0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]% ^; g, M% f" X: s: Z, m: `& {
0046B926 E8 DD8EF9FF call Unpacked.00404808
/ F, _( a) G; u0046B92B 33C0 xor eax,eax
2 `" O$ L6 w( e% F; R6 v0 C' Y0046B92D 55 push ebp6 I2 M/ F5 s( z9 n/ E
0046B92E 68 CEB94600 push Unpacked.0046B9CE9 H# v( Z. ]& ~& _. ?7 H
0046B933 64:FF30 push dword ptr fs:[eax]+ W }5 n% B0 E4 X2 \* `6 n
0046B936 64:8920 mov dword ptr fs:[eax],esp$ |/ \3 ?3 ~) `3 V2 P
0046B939 8BC6 mov eax,esi; H! b/ t& l9 d5 o% y3 n! ^
0046B93B E8 288AF9FF call Unpacked.00404368
: ]6 F3 w% d/ a2 [0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]3 n0 @8 s' X' J4 a8 ?4 z& c5 B
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX: F2 @. ]+ f: f" n6 u" C) a) r+ }) u
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
4 P$ \5 G: E$ m9 |1 }% E0046B94B E8 1C8DF9FF call Unpacked.0040466C
; {1 t% l5 g* j$ {, d6 F0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]$ N7 V) o' [/ M/ M
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]7 R1 _# r& y* I! y
0046B956 E8 EDBCFFFF call Unpacked.004676484 L. ~1 B) \) n& C5 [4 F/ ~
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]. W* a* r8 N" A6 i
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
( e! ^0 G: } j/ W0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
, ^! a# t. s/ T0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
) H O9 l9 s9 U0 |0046B969 E8 FA89F9FF call Unpacked.00404368
7 ^) o$ Y" s) I% P6 R. ?; D0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
; j3 u4 ^" w2 S: V2 N0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX: ~, N: R( O/ ]" K8 u) l0 h3 T
0046B976 8BD8 mov ebx,eax ; EAX送EBX" j6 n n9 e* S0 h. P, |; V( Y% L
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较5 O: } x) G$ \' k6 M
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
6 Z/ @- I; X. B/ p0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
; d0 c5 u" V" z4 w* ]9 n! e9 W) a% F0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
8 k/ \9 N. t3 e+ p2 W( B* R% P+ ?) @- s0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL% A8 e5 x1 S1 |. B) ?# f. |
0046B987 E8 BC8BF9FF call Unpacked.004045487 n- ^" |8 ~) M
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]' o' ^( g# z& F7 b h! I+ v
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
, X( K7 n' Y' y2 c0046B992 E8 918CF9FF call Unpacked.00404628) E: E1 m' { L2 G. |; q9 U
0046B997 4B dec ebx ; EBX减一
8 S& V3 K6 k: A+ G0046B998 85DB test ebx,ebx ; 是否为0
7 o* E, \3 V* x0 D3 c8 R0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。- s5 E% r+ F5 n2 u8 e
0046B99C 8BC6 mov eax,esi
# L% Q1 S9 e) l8 n, v0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX- b+ h8 k; X& M* H, I0 ?0 x3 J
0046B9A1 E8 168AF9FF call Unpacked.004043BC# m4 f; ^* Y9 f' }
0046B9A6 33C0 xor eax,eax% o" e3 J4 g' t
0046B9A8 5A pop edx ~; Z: w4 g5 P! g% I0 v+ \ ?
0046B9A9 59 pop ecx1 |3 b6 ]! r" a: U; u. \8 I [
0046B9AA 59 pop ecx
4 u, D$ _, z8 b: ~! |0046B9AB 64:8910 mov dword ptr fs:[eax],edx
3 o& g2 N$ X5 f9 s5 Z0046B9AE 68 D5B94600 push Unpacked.0046B9D53 ], K1 J8 w; b) z
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
; ]: i1 D2 N/ a' B: c5 G4 ~0046B9B6 BA 02000000 mov edx,2
. k! a" I' Q; ~- b- G0046B9BB E8 CC89F9FF call Unpacked.0040438C
1 d4 h' ~& K" p; \0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
6 D9 _$ \4 ~1 s) `. _; [. W# Y- f, b0046B9C3 BA 03000000 mov edx,31 X# |7 j& p, {7 d" f9 f# H6 Y; ]
0046B9C8 E8 BF89F9FF call Unpacked.0040438C3 r6 S* w0 [3 F& o3 b
0046B9CD C3 retn3 ?) U; I/ V6 X! Q, U
****************************************************************
. |6 c- }) I3 N) {! T8 {跟进0046B961处CALL来到：' m( D: a( G5 B3 v
004676BC 55 push ebp. F0 x/ f* d8 J
004676BD 8BEC mov ebp,esp" n/ L& j) V) u' _
004676BF 83C4 E8 add esp,-18
% @5 _ B7 X+ k w9 R. Y2 h004676C2 53 push ebx
* l" M' { G+ E, _; \+ \004676C3 56 push esi9 V) w* O1 ]5 n! G% i6 B" ~
004676C4 57 push edi3 k; b9 G) k% p
004676C5 33C9 xor ecx,ecx0 i& s F/ k# F1 u* ~' | r. _
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx* J8 r' d" N; s4 |6 O& ~7 @5 [3 ^5 j2 T8 p
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx7 ^$ M8 k+ T# R- j6 g; F" h
004676CD 8BF0 mov esi,eax
2 R P: x4 [+ R0 k$ Z( }004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]: [9 O) B. o* ~; `* h
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>4 M$ C7 r' d4 G- _: J" w
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
" d2 x1 I7 y# n: d2 e004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
6 M6 d& A$ o2 A) x: r6 `004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
* b2 S# E; ?2 S$ o8 C7 j$ h( _004676D6 8BFA mov edi,edx
+ l5 H, g# p' e' p. u4 l) f004676D8 33C0 xor eax,eax+ h1 `& C$ I5 v3 E; W( W
004676DA 55 push ebp
4 X" i+ K E# g1 N* U: G. u+ P004676DB 68 57774600 push Unpacked.00467757- b6 @3 `( V6 M r7 f5 \* L+ q
004676E0 64:FF30 push dword ptr fs:[eax]) p, E/ H! \% G4 W$ _
004676E3 64:8920 mov dword ptr fs:[eax],esp1 g B! V) n: }7 ?5 u
004676E6 8BC7 mov eax,edi
2 C' C' o! E& [. C004676E8 E8 7BCCF9FF call Unpacked.00404368
4 m. }$ V j3 x5 G004676ED B3 10 mov bl,10
* t" n+ ]) G' U1 d& W; W$ {, [004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]! Q2 M1 e# ^1 @) g
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****0 `' K$ j D/ h6 t& P% n1 W
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
! Y$ E! a! |, Y2 {, V004676F7 33D2 xor edx,edx
" s# |' b1 a" d8 ?5 X/ X004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL5 l: m. |& q1 W: G- M! P
004676FB C1EA 04 shr edx,4 ; EDX右移4位
5 Q& b4 J7 O; ^" K6 K* Q004676FE 83E2 0F and edx,0F ; 和0F与
, H" z' K8 y& u! O! @; k( q9 e- b00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
. v( t3 I, G; I2 p5 o: t00467707 E8 3CCEF9FF call Unpacked.00404548
) G0 f3 F7 N0 r4 U Y0046770C FF75 EC push dword ptr ss:[ebp-14]
y* n( F; B& {3 L8 W# p9 i: @1 [6 G! k0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
, [+ e3 x- G. h! W6 E! l* S00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
3 I# t M4 a6 \; Z00467714 80E2 0F and dl,0F ; DL和0F与
! D0 R4 D/ k' ?; i8 V2 ]# r4 v& F- J00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
7 U" Y* F; A, G* f0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
l; v- x3 r1 o6 [& K0 ^00467723 E8 20CEF9FF call Unpacked.00404548
/ u8 J& h+ P3 ]; Z% x00467728 FF75 E8 push dword ptr ss:[ebp-18]
" ~- d7 `' O: T0046772B 8BC7 mov eax,edi ; EDI送EAX8 f: e3 d% o" @. X+ s: Y
0046772D BA 03000000 mov edx,3
+ M4 ?3 M, X. h& r8 S# x ]00467732 E8 A9CFF9FF call Unpacked.004046E0
, e- K/ z! g1 T( M00467737 46 inc esi
n7 H* q4 e: O a/ C00467738 FECB dec bl }) O3 t3 Z" ^! ^
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
1 D( Z# W; l2 ?0046773C 33C0 xor eax,eax
/ B' r _4 Q- J0046773E 5A pop edx
3 m1 `6 r5 L* d, L, s- u0046773F 59 pop ecx
: T# ]7 j% E: w, h3 h00467740 59 pop ecx
4 K! Y& [7 A2 [3 X8 ^00467741 64:8910 mov dword ptr fs:[eax],edx8 E1 f' U. n* \# s+ z6 c
00467744 68 5E774600 push Unpacked.0046775E- E: @8 ?* _8 W( I$ i3 k$ q
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18], Z+ B& w2 \3 O( r. R" ?
0046774C BA 02000000 mov edx,2( [& A4 \3 S2 I' N; T
00467751 E8 36CCF9FF call Unpacked.0040438C
- s8 U( B; ^1 x6 |7 e. k9 O. D0 a00467756 C3 retn //返回
7 o+ b0 \3 F8 ~: m. {0 ]2 [7 r& V———————————————————————————————————————————& E; S7 ]( z6 ~6 i7 H: v
【Crack＿总结】：
4 X6 k4 T5 e$ k7 A3 R* e将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^0 X9 w. d. P" q2 z4 V
机器码：bbba33de56c4cf31d9063cc074248d4b
0 B9 v o8 |6 L注册码：e807519487d7ad4f57ad42dc87fbb191
1 o% q7 f+ L5 p附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡