|
|
|
【原创】破解图章制作系统
+ u6 u [/ _9 D* ?+ C; h日期：2005年5月15日 破解人：yijun[PYG]
; Z o( l% @: O: i1 D& r f———————————————————————————————————————————
, d* Q1 x. M; p5 c; t# G& a【软件名称】：图章制作系统 软件版本：1.0" p7 u9 D0 Q( s- _( J6 ?; [' O6 O6 o0 \; {
【软件大小】： 252KB
2 m) _3 x, w% t; Q2 ^9 z【软件简介】：制作各种图章2 m" D! z3 T2 p2 W1 `- K& d/ b2 X
【软件限制】：NAG$ ?2 j5 _9 ^0 ]# Z
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！9 M$ g6 G5 D5 Y5 E& s7 l
【破解工具】：OD,PEID
7 A2 ?6 h4 g5 N" |. w7 E( T; b7 ]———————————————————————————————————————————4 I' x3 ]' l0 q9 U- s# ]
1 c' d$ E$ E1 W6 B; T【破解过程】：) d. ~7 {. h" I, R. m, W& ]! |/ U
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
4 p7 b$ h% @' o( \# `) ~7 o/ NOD载入，通过字符串查找很容易来到这里：+ X7 a) o" O" h8 L% ?
0046ADAC 55 push ebp //在此下断
3 t& W& v! [0 _ E/ S2 d, k0046ADAD 68 A0AE4600 push Unpacked.0046AEA0$ J* q8 f/ q5 z/ V }
0046ADB2 64:FF30 push dword ptr fs:[eax]% `9 v3 P1 `; y
0046ADB5 64:8920 mov dword ptr fs:[eax],esp8 e* i! L8 y: P; O5 y1 O7 x% \
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
( h) f# v- e" u0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
! f* y' s% T8 S+ R! _( W3 t0046ADC1 8BC6 mov eax,esi
& m. ~$ }/ M. W7 Q3 ?0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX+ L9 H( w. w% J2 p3 b' r
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
" N4 b6 |7 S R& N' ]0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
) @; c4 Y# Q6 Y' t- v- g; c0046ADCE E8 45D9F9FF call Unpacked.00408718
0 ?, \# s( `4 q2 g- l0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
2 r1 ]$ e) r& Y9 G) V0046ADD6 8BC6 mov eax,esi
9 `7 ]. |% G4 h+ Z \3 S0046ADD8 E8 3359FDFF call Unpacked.00440710* Y- v+ m2 f& } E; O
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
7 X, S; {1 e+ X* s8 I0 J, u0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
# Q1 t0 d9 l: i7 D0046ADE6 E8 F558FDFF call Unpacked.004406E0
* g$ H$ [* Z& Q: X" X C0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空1 I0 a/ ~7 |! M( J: Y: D5 X6 A; e m
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
, t# W2 e t. ~4 _0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
8 W. C1 T! @- z0 N& ]. D0046ADFA B2 01 mov dl,1 ; DL置1' u3 c, A t$ d9 l$ B3 {0 o
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
- O6 k( J8 `( D7 g& L4 a. G" T0046AE01 E8 B2AFFFFF call Unpacked.00465DB8% L* ]! Z# e# e+ F& |) v0 {
0046AE06 8BF0 mov esi,eax
/ G8 Z' Q8 `- |0 j, o+ |) n8 N0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]! r- I% P: V) e, t" j% H- J
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]* s4 ` z( X- n2 }% e) f1 \
0046AE11 E8 CA58FDFF call Unpacked.004406E0
+ |) \, G4 W F4 w+ s0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
* U9 f- T3 |* @2 @6 C0046AE19 50 push eax
2 E+ J* M) v" T7 N! U0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX( e2 v4 y' _3 W
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
+ A; w% C/ L7 ?1 k0046AE25 8BC6 mov eax,esi9 i6 Q9 {) s: i6 {* y O
0046AE27 8B38 mov edi,dword ptr ds:[eax]9 z0 ~# a z/ u. C
0046AE29 FF57 04 call dword ptr ds:[edi+4] G8 p$ ~; R8 X) T8 t/ z
0046AE2C 8BC6 mov eax,esi' X1 e+ i, c0 C9 G
0046AE2E E8 4587F9FF call Unpacked.00403578
% m. v( ]. s ^6 c- {0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]- `8 O9 W4 a" U9 I/ q/ P
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~8 K2 }: h! ?2 `
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
7 \! S5 A$ i0 z" e% j- \! f0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
2 @0 R- q- G5 \; Y& {9 |0046AE42 6A 00 push 01 b6 H$ A C6 p$ k7 o' ^$ h
0046AE44 68 D8AE4600 push Unpacked.0046AED86 i3 O& |0 [8 w4 k# x: A+ _2 `
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
+ R% d3 `7 {- k* i" _- i9 v# O0046AE4E 8BC3 mov eax,ebx; f& k1 O" p. ^4 o9 N1 L& Y% L& }. ?, `
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8! T# B N6 I/ u; b4 h
0046AE55 50 push eax5 t/ o$ W& @8 O2 w* ^) X! D, d
0046AE56 E8 DDC2F9FF call % q8 x U3 u6 O" a: m( i r; G
0046AE5B EB 20 jmp short Unpacked.0046AE7D
9 Z/ g9 o( s. z% X; O) h0046AE5D 6A 00 push 02 }$ x& n; d ~2 F4 ^3 U
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
* q# L3 [' q' ^+ W8 Q0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功8 o' N3 j( u5 X" ~! L
0046AE69 8BC3 mov eax,ebx% K1 A! J* U6 T/ G" G1 ]
0046AE6B E8 88BFFDFF call Unpacked.00446DF8% v5 C U/ l1 R1 g" `
0046AE70 50 push eax
! j# S% D+ T p z' l. s) S0046AE71 E8 C2C2F9FF call 3 L2 {9 y1 M$ w7 {- V
0046AE76 8BC3 mov eax,ebx7 F0 J: ]/ R5 W3 {- L+ g
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
4 y* d7 {! y9 p& T" f0046AE7D 33C0 xor eax,eax) ]5 @4 J* g/ K5 D/ V
0046AE7F 5A pop edx4 `9 q3 K4 s# `
0046AE80 59 pop ecx
0 Q& F# D' H3 F. A/ @/ G; Z, }0046AE81 59 pop ecx
0 s. x7 V% p" P& g. n! z& q0046AE82 64:8910 mov dword ptr fs:[eax],edx
, Q. x' B! \0 g, l& h0046AE85 68 A7AE4600 push Unpacked.0046AEA7, |2 G( X" Q- z- H, J
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
7 e* i- }% l, `0046AE8D BA 03000000 mov edx,36 f _! j* k( m- }5 t; ^: e
0046AE92 E8 F594F9FF call Unpacked.0040438C
& H0 l/ v6 u3 ~0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
& |' B* u6 d) W( u! v7 l0046AE9A E8 C994F9FF call Unpacked.004043681 Z: x! P: }& [' w
0046AE9F C3 retn6 s# U% Y& z; _7 C, t0 M T
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C+ n3 e# n8 r5 W
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
( N' w4 R' e4 x. g****************************************************************
. I R. E! b) n) T- A跟进0046AE39处CALL来到：' _( x' N: @7 V3 G9 J9 m
0046B9F4 55 push ebp
; p5 J8 P- f# ~. w0046B9F5 8BEC mov ebp,esp
+ W6 ~' s' t1 ~5 R. j/ P# H8 m1 g0046B9F7 33C9 xor ecx,ecx
9 F/ I$ z6 U7 ~& l0046B9F9 51 push ecx
, t$ a$ R6 i2 i" g r0046B9FA 51 push ecx7 w; j" @$ G4 U0 J w2 }
0046B9FB 51 push ecx
" S3 h+ n* ?6 j8 r0046B9FC 51 push ecx. Y' r. K( Y3 n: D
0046B9FD 51 push ecx
9 Z0 q$ ?! H W6 Z# b. S1 s0046B9FE 53 push ebx
/ ^: |6 n2 Q1 _. B/ Q0046B9FF 56 push esi
7 S: l, @7 F; B3 _ {0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
$ p. D$ N/ J" x0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
5 K* c ]* w% g$ Z+ E/ I1 |! P0046BA06 E8 FD8DF9FF call Unpacked.00404808) J: z2 _1 y. w
0046BA0B 33C0 xor eax,eax8 G7 n& u& H- e; u! |
0046BA0D 55 push ebp* m7 u6 L. [, q3 V% k$ k9 _
0046BA0E 68 91BA4600 push Unpacked.0046BA91
5 [; l# e' [2 q5 s$ S0046BA13 64:FF30 push dword ptr fs:[eax]
3 N0 u( o, n/ O: ]' F$ I0 H0046BA16 64:8920 mov dword ptr fs:[eax],esp
2 v" ^- ^; K9 H3 I* @% ~& R. H0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
, X! R5 c4 B" R/ y" R; C0 N6 S0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]$ C4 V5 e9 W2 w+ {
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 2 f1 ?9 D! l% E! W3 k5 e
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]6 h6 m- k7 i$ H$ }" W: K
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
* n5 H" j0 Y; g0 {0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
- W/ R+ k. b: l1 u3 s7 ~. D; T0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里' p, @/ e5 v! Q9 G# R
0046BA34 B2 01 mov dl,1 ; DL置1/ \7 P6 N% {/ n2 R7 s! {
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
m8 l7 p- \, p8 P' {, e0046BA3B E8 78A3FFFF call Unpacked.00465DB8
, G2 w0 `) l' v" c0046BA40 8BD8 mov ebx,eax9 z& K. r! m* b, c
0046BA42 6A 00 push 0
; t3 s* W8 S+ B4 \2 _0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
7 G% G; `( _ S# h8 [( Q0046BA47 50 push eax
; l/ F; {$ V. ]2 Q* _0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"- _8 B( I: a, p* r
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]8 ^2 \4 D- B( x# v% F
0046BA50 8BC3 mov eax,ebx4 P5 A6 Y+ ]" i8 N$ H7 C
0046BA52 8B30 mov esi,dword ptr ds:[eax]
2 C5 L# `0 I1 C! _$ O0046BA54 FF16 call dword ptr ds:[esi]( O" e- y' |$ o2 ?$ q4 A
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
d% P+ e& b/ m7 s0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
" U. D1 h) V: a$ |3 Z0046BA5C E8 B7CCF9FF call Unpacked.00408718 i6 O/ i8 {+ s
0046BA61 8BC3 mov eax,ebx8 b: B" H/ D1 r* K9 g
0046BA63 E8 107BF9FF call Unpacked.00403578 6 j) E! ?9 F) ~! G* @
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
5 a( [- V! f: `& x! }, _6 j. c0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
) T; y7 `6 H4 ]0 \0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~2 x! Q+ g# h/ ^% d* T, T0 @- m
0046BA73 0F94C3 sete bl ; 置BL值 L* c) R; F9 r+ ~% K3 z
0046BA76 33C0 xor eax,eax
/ h! Q- l' e7 f' N9 u0046BA78 5A pop edx& E7 B- u. B! M4 t! D2 p, ^
0046BA79 59 pop ecx$ f/ u% ~6 J$ i9 z- B! O1 m
0046BA7A 59 pop ecx) ^6 o2 m3 n, d H6 w( {
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
6 f. P2 g3 c5 m: W0046BA7E 68 98BA4600 push Unpacked.0046BA98
+ r$ N0 Y4 n, T* L0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]+ }' Q. s: ]& T' P+ l
0046BA86 BA 05000000 mov edx,5
2 v/ E7 A* x5 H9 k- r0046BA8B E8 FC88F9FF call Unpacked.0040438C
5 R: c. a3 A) @6 k8 ^0 o @8 e- N0046BA90 C3 retn, j% Y( q+ v% E
****************************************************************) z( t8 e, _0 {
跟进0046BA2A处CALL来到：
. a% d6 ?& w# ?! @; y0046B908 55 push ebp8 ^, f5 w @8 g/ C, u% Q& r
0046B909 8BEC mov ebp,esp
& _$ d/ h( @3 b0046B90B 83C4 DC add esp,-24
! V4 q; {5 R9 F* Z0046B90E 53 push ebx2 T8 R$ K( d4 ~: K5 ^' v& C/ x
0046B90F 56 push esi
9 Z2 _8 Q: x, Z0046B910 33C9 xor ecx,ecx7 H' {* L) `( a4 c' ]6 k8 J7 D
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
7 M% Y* b2 J2 Y c3 q0 |0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx* W4 G0 M1 E6 M7 T0 d6 G9 `
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx/ p/ a# W# ^/ t$ j: n8 m( k& o) n
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx4 G, g9 w( z. H# F
0046B91E 8BF2 mov esi,edx
" n0 h7 ~% G Y% I0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
7 f# w# X0 H2 ^3 l T( B$ k0 O0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]) ?; Q: h# A8 O; q. q) b6 z
0046B926 E8 DD8EF9FF call Unpacked.004048085 b* f. `1 p- V$ Z; ~+ A5 X6 F
0046B92B 33C0 xor eax,eax3 E7 b8 ^7 G" y) Z0 X
0046B92D 55 push ebp. ]; t; L0 m2 { }& b1 W* ~
0046B92E 68 CEB94600 push Unpacked.0046B9CE
5 _ w, ~/ A! G7 Q1 ]0 r0046B933 64:FF30 push dword ptr fs:[eax]0 _3 s; s9 X4 q" u) g% J- G |7 J7 L
0046B936 64:8920 mov dword ptr fs:[eax],esp6 Y7 O# |! R2 S8 t& R, K
0046B939 8BC6 mov eax,esi
3 X/ t0 e( k& D0046B93B E8 288AF9FF call Unpacked.00404368) M4 X2 Y) S* }0 l
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]: F: w) \ y) o5 _/ Z2 N
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
% |! y- Z1 @4 K2 U( s0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
. W) B* q) |/ @9 Z5 H: A0046B94B E8 1C8DF9FF call Unpacked.0040466C
" `7 D- j/ n" b0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]) o% M% V. _8 E2 c8 t
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
1 @4 a7 K M) z# r0046B956 E8 EDBCFFFF call Unpacked.004676489 }) c& R5 m N2 r8 b2 {
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]( z* R! l/ M. t+ ^( o
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]0 T' O0 u2 [1 ], x
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e9 v6 `0 m) ]; y
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~+ i' ]; U1 m5 M0 Z
0046B969 E8 FA89F9FF call Unpacked.00404368
9 x' f: X# K- G2 a0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX. z/ z- g+ M) _/ A; F
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX+ Z5 P: ~6 F) t6 u$ \/ Z: Y. ]
0046B976 8BD8 mov ebx,eax ; EAX送EBX
3 o; g6 Z7 f: V) v5 g0 V0046B978 83FB 01 cmp ebx,1 ; EBX和1比较; ^0 O) P5 }9 y9 T h l, T
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳! B5 ^% X5 s3 l
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算8 W* N- I; w8 A
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX% h* _; ` X. c8 A
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL( U4 y( x9 C" c9 n# F1 e
0046B987 E8 BC8BF9FF call Unpacked.00404548# }! ^9 m w: F0 _8 [
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
1 z) U) D) X0 [. V. l% Q0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX1 s' `$ X4 E0 a# t) t5 H
0046B992 E8 918CF9FF call Unpacked.00404628
6 |/ @- @- }. M4 D0046B997 4B dec ebx ; EBX减一, N- ^* ]$ j0 c
0046B998 85DB test ebx,ebx ; 是否为0/ m& u: Q4 B* |# }2 v
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
( W) e" ` ] [% r1 r0046B99C 8BC6 mov eax,esi, o7 A, I* j% x9 s
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
[: a1 {. Q' z3 l. Q0046B9A1 E8 168AF9FF call Unpacked.004043BC
" \7 w/ r) S8 ^& ?0046B9A6 33C0 xor eax,eax
( g: \: D }# K% T9 a6 e+ U9 s& d0046B9A8 5A pop edx
; ]" G* C- ~2 n# x0046B9A9 59 pop ecx6 M; F; |) x9 o' Q& s+ D- E. d
0046B9AA 59 pop ecx+ C8 g) L2 D6 J( [: ~0 B6 ^2 U# v6 h
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
( E6 h7 \4 J& q7 z0 v/ s9 e0046B9AE 68 D5B94600 push Unpacked.0046B9D55 z5 M3 ?9 z1 |4 W
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]( u5 Y5 L$ U/ G4 l* B, x: D
0046B9B6 BA 02000000 mov edx,2
6 M* @1 l; k/ Z+ R1 Q1 [9 c0046B9BB E8 CC89F9FF call Unpacked.0040438C
7 c4 k, Q+ a5 Y# ]0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]* F2 Y8 O6 I1 f, l& q" v/ q
0046B9C3 BA 03000000 mov edx,3$ J V2 l; B, M2 B8 O
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
5 \3 `8 p6 J: G+ J; }0046B9CD C3 retn
L! Q* l3 r( F& B1 H' T! |# i****************************************************************: [/ G, w( E1 f# q: T
跟进0046B961处CALL来到：0 b, n# t' a% ]8 {3 [7 @3 Y
004676BC 55 push ebp
/ f/ [" T0 a) H5 X% F& H: v004676BD 8BEC mov ebp,esp1 N5 _' P* K# T9 K; Q* K5 q
004676BF 83C4 E8 add esp,-18
& N/ P/ ?: H9 r) D004676C2 53 push ebx
* L% T4 |$ F( F0 g9 q% X d004676C3 56 push esi
/ z0 `0 Y; y/ [5 e# _5 F004676C4 57 push edi7 G/ v; { t1 [' V O# r
004676C5 33C9 xor ecx,ecx0 D, e2 {8 @+ |& ^8 ]
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx- h7 x% ^+ m; Y7 R, B
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx! W9 ?2 J$ [8 o. r. U# [8 |
004676CD 8BF0 mov esi,eax
- e! w! b2 e- v# m$ z4 x$ D004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]! n& J6 ?- |) l+ y% l& g7 @0 [
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>5 _+ N Z' a' c/ l/ J+ U l
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
* S* ]/ N2 `6 W1 u. x4 u& H7 }004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
! }0 F3 A v, R4 R; t; M004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
9 |4 a5 r0 v: N004676D6 8BFA mov edi,edx
1 Y$ `8 Z2 t7 @% m5 l004676D8 33C0 xor eax,eax6 [. K1 r7 _6 ^4 R
004676DA 55 push ebp$ E4 u$ q" K, e6 R. e
004676DB 68 57774600 push Unpacked.004677572 Z& Y+ I. E5 y' E3 u% Y6 O6 Z1 V
004676E0 64:FF30 push dword ptr fs:[eax]5 M* V5 t# y8 s5 R
004676E3 64:8920 mov dword ptr fs:[eax],esp' Z- }; M* S+ S/ t3 S
004676E6 8BC7 mov eax,edi% ~+ ]$ c" i0 O @" P% Y* f5 L: i
004676E8 E8 7BCCF9FF call Unpacked.004043681 ~5 C% x. _/ C4 @; Z
004676ED B3 10 mov bl,10, D. \( [' N, f! V7 p5 i; m" N6 i
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]/ c4 T( t! B! k, d# Q
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****7 n. R6 w3 J4 u- O
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]( A! M# X( a( x z
004676F7 33D2 xor edx,edx- V2 m$ `8 s2 t5 h; z% A
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
& m( ^. [/ A3 S004676FB C1EA 04 shr edx,4 ; EDX右移4位" J9 _$ p+ Q5 _4 X' ?6 i5 p
004676FE 83E2 0F and edx,0F ; 和0F与% r p7 k0 A; d" L) d
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL4 z7 s& C( @7 ~( {* S8 O6 |
00467707 E8 3CCEF9FF call Unpacked.00404548
4 N7 {" Y% R5 x' T0 w0046770C FF75 EC push dword ptr ss:[ebp-14]
& X! W% Z: n9 g" a7 ^/ S0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]0 j% P' M4 C6 N
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL" U2 E, H* y* p' d( q0 m- h8 M. w1 \
00467714 80E2 0F and dl,0F ; DL和0F与- y8 K4 O7 [8 h- t7 M
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
5 d2 v# A- N" r4 t1 a5 }" o( | M0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL9 l, Y8 c" r( |% Y. t* s
00467723 E8 20CEF9FF call Unpacked.00404548
; E8 t2 @+ c+ V% A* I) D00467728 FF75 E8 push dword ptr ss:[ebp-18]1 h* }8 Z/ `, E+ R- t4 G' o1 |
0046772B 8BC7 mov eax,edi ; EDI送EAX
. {5 w9 \7 U: H, D) M3 G' G0046772D BA 03000000 mov edx,3
& ~9 f/ X0 _4 }% x00467732 E8 A9CFF9FF call Unpacked.004046E01 J5 I$ B) }* K! H$ X2 u0 p6 _/ v
00467737 46 inc esi$ e* S) S2 S; G6 e% u
00467738 FECB dec bl
7 c. ]/ n4 [; }' M0 i5 b0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e' `2 U" S% Y% G5 m' E( s
0046773C 33C0 xor eax,eax
: H0 D& b# R" _2 G0046773E 5A pop edx8 t }6 p6 j+ V3 O: W
0046773F 59 pop ecx
8 M5 Q, n3 Y2 W2 Q$ T! r8 [# ~00467740 59 pop ecx
$ a N3 C2 q: O& V% B9 z00467741 64:8910 mov dword ptr fs:[eax],edx
1 {8 H8 E2 k! m, C0 a- G$ j) d00467744 68 5E774600 push Unpacked.0046775E- F% r! g, G! n8 h" G; z
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]- O# a0 [& {$ i3 Z5 v# V6 k
0046774C BA 02000000 mov edx,2: q5 G7 W2 V1 f/ ?7 B
00467751 E8 36CCF9FF call Unpacked.0040438C8 `5 ]6 p% |6 y1 m* {/ S2 ?
00467756 C3 retn //返回6 [0 U. A% w4 G+ r& x3 G
———————————————————————————————————————————) ?4 m( P7 [6 X) Q: k
【Crack＿总结】：
3 X6 }$ ^+ ~; L6 J( ` V将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^
/ v1 [7 q0 x* q机器码：bbba33de56c4cf31d9063cc074248d4b# x/ n1 R* T& }/ |. k3 c
注册码：e807519487d7ad4f57ad42dc87fbb191
7 }1 L) B t, @6 h# W$ Y8 ?附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡