|
【原创】破解图章制作系统: l6 J$ P* `1 ^
日期:2005年5月15日 破解人:yijun[PYG]
; M( r5 P8 h6 k* z2 d6 ]* A5 p) A———————————————————————————————————————————& c6 J# }. a. w0 \( Z# ~' a; {& x
【软件名称】:图章制作系统 软件版本:1.0# [" w7 a6 r9 r4 j* }
【软件大小】: 252KB _$ ~. D; F7 @0 [% a
【软件简介】:制作各种图章
U9 C; _9 A& Y【软件限制】:NAG9 p3 v$ x, p3 Z$ k; ?. P
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
4 A- t1 V8 F* | [3 |【破解工具】:OD,PEID
6 A* v( l. Q x `& w: i7 c———————————————————————————————————————————
( M: X( V) g* A! ^) M& l ; C/ J( y% N3 c% b
【破解过程】:
6 t3 ~9 |2 F2 r. m$ tPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
( J8 v3 M2 R) ]. dOD载入,通过字符串查找很容易来到这里:
' i* P5 N9 `2 g, d0046ADAC 55 push ebp //在此下断
9 F) p7 G+ ]. J2 D8 ^6 L4 W0046ADAD 68 A0AE4600 push Unpacked.0046AEA02 E0 Y R8 V- L0 ~) W
0046ADB2 64:FF30 push dword ptr fs:[eax]
$ S# R9 {5 l2 X$ c0 d# u0 ?4 I0046ADB5 64:8920 mov dword ptr fs:[eax],esp6 m( z6 B- R/ ?. V
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
% u, s+ z/ c8 g0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]. J, a& P$ f4 ]8 d. M
0046ADC1 8BC6 mov eax,esi* Z- Z* t$ O0 w) f" a6 r
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
$ G9 `. B) m o- ^. q0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
* v0 Z4 T1 L' C5 _$ K7 I0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]6 G; U( L9 J: S) L$ {' `
0046ADCE E8 45D9F9FF call Unpacked.004087182 _6 S* m" k; u4 g* k! P
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX* u5 S; r; s% c* z f7 h6 a3 b
0046ADD6 8BC6 mov eax,esi
/ ^: }+ T! k3 o1 B9 n0046ADD8 E8 3359FDFF call Unpacked.00440710
5 v3 F2 c) G- _/ P3 n' M# V0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
- p+ @" a4 \6 e4 W4 ]/ r0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]( t' C4 \9 y- @9 C8 ~4 }- ?. m* ?
0046ADE6 E8 F558FDFF call Unpacked.004406E0
; x5 e* t: O0 h; n0 b+ ?. k0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空! V' _: o4 k# G1 g; a4 c
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳6 a; l+ ?2 V; @2 d7 ]3 }
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
# d* R( O7 i' {. |3 D/ Y0046ADFA B2 01 mov dl,1 ; DL置1
" E: ]4 t. X' V0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08], O# g0 S2 m) Z- J- `: S: Q
0046AE01 E8 B2AFFFFF call Unpacked.00465DB83 ^+ D- J u }% b# E3 [) r
0046AE06 8BF0 mov esi,eax
: T; ^) m5 }. W7 P2 K1 Q* ^! W0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
6 ~6 ?; T% Q1 y. X ^ r: E0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
5 y$ [) J j) _* h: e: M {0046AE11 E8 CA58FDFF call Unpacked.004406E0
- ?, X, c' @* x0 m) v0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX- l8 L; T3 ~) I7 B" u; I
0046AE19 50 push eax
+ y4 _8 G, T; E* n0 K0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
# v1 r$ u9 T0 c& E4 h/ M0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
* T! R& H% A* O! b/ q0046AE25 8BC6 mov eax,esi$ y: A7 a$ g; B' M; A8 x
0046AE27 8B38 mov edi,dword ptr ds:[eax]5 C- z( x! ?. m
0046AE29 FF57 04 call dword ptr ds:[edi+4]8 e- m& H' m, c, g! K
0046AE2C 8BC6 mov eax,esi
, h6 s. r$ X2 | ~' f% n5 ~" o0046AE2E E8 4587F9FF call Unpacked.004035780 T, n9 ~: t( h& @- E9 Z
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]' ]) n6 L4 c; s9 v4 r8 {4 X# t- f+ g
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~6 ^. [/ Z' ^' s7 v# h& t
0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)% I7 i8 d% t6 _- F2 A" u
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
! G& S/ \9 b& l1 |- p( s2 N0046AE42 6A 00 push 0
1 J3 S$ [; _% Y. a0046AE44 68 D8AE4600 push Unpacked.0046AED8
& q4 \' _& A% d0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误1 \- n l l: y: j; O; H% S# }* G
0046AE4E 8BC3 mov eax,ebx
/ L9 ~+ \9 f M% L7 e% g0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
4 m( {* l3 ?$ L( A1 _$ c: g/ Z0046AE55 50 push eax* N' ^2 g" S6 d5 @( v0 b7 u" x& g% d
0046AE56 E8 DDC2F9FF call
+ ^% C7 }5 Y% Z: {/ c g( ~" P f0046AE5B EB 20 jmp short Unpacked.0046AE7D
) D) m7 D3 l4 m5 Q3 w+ j! ~! s9 Y5 s5 ^0046AE5D 6A 00 push 0
3 M+ a8 T, a' g; J8 q+ @6 Y0 R! K+ D0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
( v2 X* h- g/ E9 ]) Z0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
9 O: D2 b; D: d. l7 b% `0046AE69 8BC3 mov eax,ebx; {- V0 m# q K8 s: O: x# d1 K
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
9 ]& Z1 B7 y7 x: O3 Q7 ?0046AE70 50 push eax! Q' b9 |7 Y( x' c
0046AE71 E8 C2C2F9FF call 9 m8 K0 A7 c% l: |+ L, S& U% t
0046AE76 8BC3 mov eax,ebx% i5 _/ L- ?* Q0 ?* @& \
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
& X- d$ v, R6 p \0046AE7D 33C0 xor eax,eax
% t1 k9 x$ ^* u j0046AE7F 5A pop edx
8 ^3 L$ ^" d4 l- D# z6 R0046AE80 59 pop ecx
% e: t& ], A+ q% W# O$ c* I7 U6 h0046AE81 59 pop ecx
. v B, V i6 X" e- [" ^3 {0046AE82 64:8910 mov dword ptr fs:[eax],edx) e/ L# k) ?9 b0 Z. |" r
0046AE85 68 A7AE4600 push Unpacked.0046AEA7/ Q- b2 o5 P; R+ Y1 M( Y
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
Z6 y; B9 O9 |! b5 S1 I0046AE8D BA 03000000 mov edx,3
2 e; L: R) \# M' u0 X( j! c& H0046AE92 E8 F594F9FF call Unpacked.0040438C
2 M' I; h0 Q+ x! u0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]8 a( r& l0 j; K5 e. }3 D% c5 |) C
0046AE9A E8 C994F9FF call Unpacked.00404368
8 A* O1 e9 X( K! y; w7 e* B0046AE9F C3 retn; h P+ J8 x6 k) t* @) [- X) @$ l
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
, E2 O8 t) ~7 b+ C' P; S: c0 N0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
& U1 L% r5 s/ R$ e k+ u0 I Z****************************************************************
) m# u9 e( t1 t& @跟进0046AE39处CALL来到:' H# J& T, G0 f/ G2 i- P
0046B9F4 55 push ebp, D; W* {; P- T; X
0046B9F5 8BEC mov ebp,esp. R( a+ V t& f
0046B9F7 33C9 xor ecx,ecx+ b! {5 B/ n, M4 Z
0046B9F9 51 push ecx9 e4 \/ H; ~% f
0046B9FA 51 push ecx
& G7 u; N/ t. t0046B9FB 51 push ecx8 T5 `9 r W( w5 n6 N
0046B9FC 51 push ecx
! J6 s$ @. ^" R* y, I3 c0046B9FD 51 push ecx
y6 q0 M/ |7 B* y% u! ~6 @ }1 L0046B9FE 53 push ebx
1 `! ?% m I2 \0046B9FF 56 push esi
4 P& B" e* t# l( E2 V: N8 C5 ]0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
* U; q4 O. w: q. J5 ~0 T3 e0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
' ^! h* m5 i7 b0 B' l/ I+ Y4 N0046BA06 E8 FD8DF9FF call Unpacked.00404808! E% y0 D# u$ o; o3 R n. b9 `& ~3 l
0046BA0B 33C0 xor eax,eax
9 L0 x, Z% h b; ~& h' R0046BA0D 55 push ebp: d2 m: c; x0 w
0046BA0E 68 91BA4600 push Unpacked.0046BA91
1 g! S& R) k0 \: [0046BA13 64:FF30 push dword ptr fs:[eax]/ \. A! u( t* X. e2 h9 {
0046BA16 64:8920 mov dword ptr fs:[eax],esp
2 G* U T0 V8 b0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]2 B& p# `) v% f2 _9 o
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
]. {5 L3 y$ J' D/ a7 \0046BA1F E8 DCFDFFFF call Unpacked.0046B800 / J' M4 a8 G! Q9 ]/ R2 t
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]2 f3 `% L0 M' W+ T5 e. `
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
& F% E1 [) S1 s6 D1 O' [0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
( p" `! k) |4 m# D0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里. s4 x- y3 b7 A" d
0046BA34 B2 01 mov dl,1 ; DL置13 J, X. v5 C6 \/ S
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]4 i# O3 j5 B; N; y2 v7 d
0046BA3B E8 78A3FFFF call Unpacked.00465DB8: h8 O# r1 q* h
0046BA40 8BD8 mov ebx,eax
4 m# { j3 K! X0046BA42 6A 00 push 0
6 g1 s: M9 B: z! c) @( p8 `* j t0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
' B+ r9 q' R7 Q5 H! m0046BA47 50 push eax
7 j1 h6 X ~$ z9 p* v! a0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"4 t& K: ]" I/ f @7 M
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]! }6 I. e. T, @0 q# k
0046BA50 8BC3 mov eax,ebx
7 n; Z1 w1 W( W+ | s; s6 k0046BA52 8B30 mov esi,dword ptr ds:[eax]9 u, u% C3 S0 s) E, f
0046BA54 FF16 call dword ptr ds:[esi]
) e! n/ f8 q, `9 A8 H9 r- r/ X+ g0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX% H$ I2 B6 e4 _$ s; |5 T% k* ~$ ~- t
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]) w" a. S$ Q! [% i* o) ]( t
0046BA5C E8 B7CCF9FF call Unpacked.00408718
' M/ U/ ]* G2 O0046BA61 8BC3 mov eax,ebx- ?/ q4 g$ P4 ]) H( }9 c
0046BA63 E8 107BF9FF call Unpacked.00403578 0 a0 X7 F3 @. Q% u1 O1 J! k; H
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX0 I" q3 Q# G! I( v
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX: w# ~& j0 J1 k4 D
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~) ~( L' I- _: C3 n
0046BA73 0F94C3 sete bl ; 置BL值" z8 G) o( v5 n: [( D) J2 s
0046BA76 33C0 xor eax,eax* M8 J# H/ ~+ B
0046BA78 5A pop edx0 ^5 c8 C- M3 I3 y$ r# D; k1 ^, T
0046BA79 59 pop ecx: N( u* B1 k3 _1 k+ K
0046BA7A 59 pop ecx
% ]8 q& _+ S8 L7 E3 O _0 L2 N0046BA7B 64:8910 mov dword ptr fs:[eax],edx; S. ~7 X$ W& I8 C
0046BA7E 68 98BA4600 push Unpacked.0046BA98
. L9 P9 m4 q! ?0 g0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
# G6 _/ t8 y, h. V" C0046BA86 BA 05000000 mov edx,58 @. M3 k/ X, h8 F
0046BA8B E8 FC88F9FF call Unpacked.0040438C2 p1 w# d6 ?+ i5 g2 k! z4 C
0046BA90 C3 retn3 }% B: q- m9 ~3 M {
****************************************************************
8 Z5 D* K9 z7 ^# u跟进0046BA2A处CALL来到:6 N. ~. k4 r, o4 f/ G5 k1 c
0046B908 55 push ebp* e7 U; I! a* ~! H q5 D9 V& V% X
0046B909 8BEC mov ebp,esp
3 |- K+ t4 ]8 f0046B90B 83C4 DC add esp,-24
2 k+ ]: L, H! J0046B90E 53 push ebx' x( F# y3 x: ?4 J" [8 |3 _: L
0046B90F 56 push esi8 q( h; ^+ a+ j j G' ~
0046B910 33C9 xor ecx,ecx% T6 _5 t/ H9 e8 y: q# |
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
4 [/ V' R# i" M, T0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
9 c! r8 r9 m9 J6 l: e- b0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
9 m+ l. R" |" t0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx) O9 Z6 [3 B5 i% [; f& ?7 h8 o: b5 z
0046B91E 8BF2 mov esi,edx5 A# J$ [6 `5 C& |9 ^
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
3 m- T7 Y$ i" \. }+ o4 @9 b6 s* s0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]: O0 F5 f7 f. V8 b E! o" v
0046B926 E8 DD8EF9FF call Unpacked.00404808 F% v2 |) `; |* A3 P2 w
0046B92B 33C0 xor eax,eax
3 a; @6 L4 e2 H% Q0046B92D 55 push ebp, Z g7 w5 M" m7 I4 j- L
0046B92E 68 CEB94600 push Unpacked.0046B9CE
# H$ s* G- S% Q: d2 `6 Y- C0046B933 64:FF30 push dword ptr fs:[eax]" z# e; C4 i1 h% E* _1 N
0046B936 64:8920 mov dword ptr fs:[eax],esp
5 d- r7 p3 }* f& L0046B939 8BC6 mov eax,esi. C1 w/ m! y' J9 P* S( I
0046B93B E8 288AF9FF call Unpacked.00404368' E# F2 b6 Y$ a( N
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
0 k) K% f$ J C* `* N! S1 w0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
9 k0 X1 {: U4 t6 C! R0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4% R. c& @3 R: \4 K& s
0046B94B E8 1C8DF9FF call Unpacked.0040466C! k( p. A4 ~9 N/ `4 m# `( f
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]& ]4 @8 m0 [- Q3 u
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
8 H+ X: @) l( }" m' `0046B956 E8 EDBCFFFF call Unpacked.00467648- C5 b1 q6 R6 ?. [2 ]" @! V
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C], l! ?/ ~# m9 ]* U1 W
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
* t4 @: O5 C. ]: V/ N0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
2 G5 a* V5 _% z+ n \0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~- C% Q" c) H3 u: V l
0046B969 E8 FA89F9FF call Unpacked.00404368' A. a& A! K! g* X8 K8 I
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX( f7 V& C4 @* U1 C- H
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX7 e* X, B$ X1 H2 B1 n
0046B976 8BD8 mov ebx,eax ; EAX送EBX
/ Q* Z3 u3 U# a) V2 q0 l0046B978 83FB 01 cmp ebx,1 ; EBX和1比较% w4 R* d( v$ L, W( t6 r
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
5 W4 b! L$ Z) ^* `- L! Q0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
/ U _2 g' u0 C* v; [0 |+ a0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX+ R. C& O4 L! F5 t$ c
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
+ n! z* Z2 C6 V+ _0046B987 E8 BC8BF9FF call Unpacked.00404548* }$ y1 P, B% E
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]% h* m" m" f$ n) J
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
' w! r$ X7 W% }6 U0046B992 E8 918CF9FF call Unpacked.00404628
% g5 k2 |( X8 W0046B997 4B dec ebx ; EBX减一
( r9 ^- h; Q/ H8 k( a1 X0046B998 85DB test ebx,ebx ; 是否为0
( ~; a+ g, P9 C( t8 [0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。. N0 c! p2 W, j
0046B99C 8BC6 mov eax,esi
2 y4 N$ ^' L( O' ]2 L& U' S0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX j( Y" W; z5 F L/ v7 S
0046B9A1 E8 168AF9FF call Unpacked.004043BC
5 |/ g" w, g K) W( b0046B9A6 33C0 xor eax,eax
, i, @: B3 _. x) k0046B9A8 5A pop edx
) \6 z9 |+ p* {0 E3 t$ l! G0046B9A9 59 pop ecx
/ u( f/ \$ i, v" I2 |0 D0046B9AA 59 pop ecx+ x6 _* x0 ~4 H) E+ M, ?4 ]
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
9 G* n: X ^! M0 d0 ?# B2 _0046B9AE 68 D5B94600 push Unpacked.0046B9D51 m# i" q& U' w# e( x( C: q1 k
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]' q) D, E) G+ U5 ~1 L
0046B9B6 BA 02000000 mov edx,2
6 ^# N5 L$ {; f1 [4 G M0046B9BB E8 CC89F9FF call Unpacked.0040438C
0 W2 [2 A9 ^! G$ s) v( Q, ]0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]; l* L* W1 ?. P! G" p8 Y. O" Y& p
0046B9C3 BA 03000000 mov edx,3* g3 z- W. r- G* R4 @! [
0046B9C8 E8 BF89F9FF call Unpacked.0040438C0 J- v9 S( | Z6 m
0046B9CD C3 retn8 x$ G% i1 R, C( p, U$ X) a: l1 x
****************************************************************
1 ]: Z! R4 r: T2 Z9 A9 X" l跟进0046B961处CALL来到:7 W6 Y3 j9 ]* |7 h' f. }& k
004676BC 55 push ebp& Z# |# Z X r9 q# i- b2 H
004676BD 8BEC mov ebp,esp' Y8 H5 ]" d! E2 O
004676BF 83C4 E8 add esp,-18
: z( c$ \! l' m6 B* p004676C2 53 push ebx
9 \5 r: k$ B' k5 ?4 U6 n( Z004676C3 56 push esi
l2 X/ i9 C; W' G$ w, r004676C4 57 push edi
g- Y7 S0 \8 k1 }004676C5 33C9 xor ecx,ecx
/ C, a5 G9 Z4 M* F: I: U004676C7 894D EC mov dword ptr ss:[ebp-14],ecx! E% c- k9 c* [$ G. `! J8 d
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
V' p2 v$ l) t# E# g; }004676CD 8BF0 mov esi,eax
' y- Y/ ?. U x004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]- I' P' s* ?: ]4 t& }
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
/ i7 a' }7 c) ]- i2 [004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>& ^1 D# g9 p* ~7 n
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>$ C# N" i0 J) b: P
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>% t m B5 r O1 E d
004676D6 8BFA mov edi,edx6 o( n4 X/ ?' a+ q' l0 P
004676D8 33C0 xor eax,eax c4 s M6 ]8 B* } f9 N4 B* o0 J
004676DA 55 push ebp
" ~2 |6 U# v, X; s V( ?6 t004676DB 68 57774600 push Unpacked.00467757) c: X4 L. u- o
004676E0 64:FF30 push dword ptr fs:[eax]% _( R7 x; X, i' u1 ]
004676E3 64:8920 mov dword ptr fs:[eax],esp! v8 f" j- n0 d" N- G
004676E6 8BC7 mov eax,edi
( ?4 ]( x2 u/ d1 _. W8 |# V3 ?004676E8 E8 7BCCF9FF call Unpacked.00404368
- ~. z8 v" N' ^0 d; g; c004676ED B3 10 mov bl,10+ J3 Z F" o: P9 J
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
* B$ N u3 M/ b7 X3 z8 ?" R004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****1 |+ p& R0 s% | N+ F
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]* {1 J# p9 j" f0 n
004676F7 33D2 xor edx,edx
8 e% V5 e2 r+ m7 f% I" S+ {004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
- S# V* E6 Q4 i1 ?004676FB C1EA 04 shr edx,4 ; EDX右移4位
+ B+ r: q N5 b4 t" h: E004676FE 83E2 0F and edx,0F ; 和0F与
/ j' g$ Q! F- [" b) N00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL5 A3 E. s( [: F5 I' x& `
00467707 E8 3CCEF9FF call Unpacked.00404548% t) B) x/ h& x4 ?
0046770C FF75 EC push dword ptr ss:[ebp-14], ^6 b+ g3 D) I; l% W4 i# q4 ]5 Y
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]' [5 ~. {( t4 \# \' e
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL$ g2 x5 _. ]8 j8 |+ n& R7 |" }, @: \
00467714 80E2 0F and dl,0F ; DL和0F与8 m' N9 E( ]6 f# {
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与8 n& {7 r. r8 @$ c. ] E- `
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL" ?9 {7 o$ \% F7 p
00467723 E8 20CEF9FF call Unpacked.00404548' a) t: b' R( i7 j" I9 i$ Y% b: l
00467728 FF75 E8 push dword ptr ss:[ebp-18]" ? p6 k) B6 X* e
0046772B 8BC7 mov eax,edi ; EDI送EAX
! ?( B) D; q2 m7 |1 b- Y( j0046772D BA 03000000 mov edx,36 N U) O9 y4 x9 x* }. C5 x/ {3 v$ t8 e
00467732 E8 A9CFF9FF call Unpacked.004046E0
3 `1 Y" e( Z6 d1 D6 B6 i00467737 46 inc esi
4 {+ @0 D6 v( x00467738 FECB dec bl5 ]+ z' [' D+ z; D; |) I4 M
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
( I: W6 ^9 o/ V" C* k5 C. V0046773C 33C0 xor eax,eax
S# |8 V6 [: P! k0046773E 5A pop edx: T6 @& x+ a4 N- E
0046773F 59 pop ecx
) u& |; B4 N0 u9 o00467740 59 pop ecx0 |# J7 K$ k2 H6 |% l u! O$ w7 }. G5 z
00467741 64:8910 mov dword ptr fs:[eax],edx+ V* {* j+ E7 y ?. Q
00467744 68 5E774600 push Unpacked.0046775E( Z6 j- g$ ]" }6 v( g0 ?2 w* M% M& g
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]: S$ A( B9 U# m9 @0 k
0046774C BA 02000000 mov edx,27 k4 @3 s: _7 p0 X9 U7 v
00467751 E8 36CCF9FF call Unpacked.0040438C
; _! G4 l8 M; _( S00467756 C3 retn //返回
8 @7 D. v" D1 g8 H9 w' d* b# p' Z———————————————————————————————————————————
; W- ?* c6 ^9 f【Crack_总结】:3 \- j) o- {, d' K
将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
# z# }. o; f8 c( g5 R" l机器码:bbba33de56c4cf31d9063cc074248d4b
7 k; i4 x4 M/ q; E2 a/ ]; h注册码:e807519487d7ad4f57ad42dc87fbb191
]; H/ g* A/ Q; H6 D' ^附件: MakeSign.rar (249 K) 下载次数:298 |
|