|
|
|
【原创】破解图章制作系统
+ n# C6 T* @* f) W8 U日期:2005年5月15日 破解人:yijun[PYG]
7 k3 W+ t' f5 H9 R S1 o: E2 y———————————————————————————————————————————; J8 |. ~1 [- h e4 P# d
【软件名称】:图章制作系统 软件版本:1.0* W& P/ Z6 s) w- D1 H$ Q' R& g
【软件大小】: 252KB
w5 v Y* N3 V8 @' i: w* Q【软件简介】:制作各种图章1 g6 @3 X/ l7 E
【软件限制】:NAG8 _0 T% v6 K. F b3 W' T. t4 D9 n
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
, D% ]$ w1 f# |1 n, u【破解工具】:OD,PEID3 j6 B2 N" e( o* A" [ n# T
———————————————————————————————————————————2 u4 T- c- B: s% t6 Y! \
+ o, I! H* U3 v) t1 x【破解过程】:" d! c' q9 T0 q+ N+ w* W
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~2 G: N+ Z5 D8 Z. E
OD载入,通过字符串查找很容易来到这里:
5 v8 r: m% v' k: y, ?0046ADAC 55 push ebp //在此下断3 {7 M7 T5 y3 q: M9 x4 B* a
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
8 s% ^' ~* K# a4 m( c6 R6 Y0046ADB2 64:FF30 push dword ptr fs:[eax]$ ]1 \: q6 F! s; S( Q3 H
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
( @- @3 e, N% X7 v7 c, I% t0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]2 v' ?+ Q$ N1 y8 o9 G
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]8 {- D& J3 I& e7 h
0046ADC1 8BC6 mov eax,esi+ v8 v+ E) k5 Y5 {
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX! R3 Z; p: @6 K4 T+ Y" F
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
5 `* g2 ]$ R% `9 L. P9 U0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]6 W. t( g/ O5 Y0 I9 I1 x0 z
0046ADCE E8 45D9F9FF call Unpacked.00408718
0 S: H! p8 v$ {0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
: ]' c6 K2 A* E0046ADD6 8BC6 mov eax,esi8 s% }% D0 u7 `# k! |4 K! G
0046ADD8 E8 3359FDFF call Unpacked.00440710) G' r0 E4 w( I. c2 R3 C2 @9 Z
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]5 m* \) N- k5 `) ^
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]5 Q1 F. E- A3 t ^- F$ v
0046ADE6 E8 F558FDFF call Unpacked.004406E0
- X: S! s$ V" C' F, }6 ^0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空0 K4 q, n/ g2 |
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳2 ^1 ~+ N8 B9 a) f" X4 \
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX* ^, Q: I5 m' M4 B8 M
0046ADFA B2 01 mov dl,1 ; DL置1
4 ^' q6 [! n5 B# c# C9 r3 }0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
& _9 a. i4 `( L. }! r0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
+ g6 O: I; ~7 R8 Z4 n0046AE06 8BF0 mov esi,eax' h: H. W- V+ Q* F7 }
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]' W% [) s. H! X
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]& ^: S( S2 x( t
0046AE11 E8 CA58FDFF call Unpacked.004406E0
# A" h- \" l y( F0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX9 V" f0 r/ [8 F5 h! Y( n( P
0046AE19 50 push eax6 Y! l. `7 R4 H* j
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
j8 J1 ` J9 {, ~8 A3 }0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310] J% ^6 T4 \% u4 r1 e
0046AE25 8BC6 mov eax,esi
) n' l6 g* e1 @: S& u0046AE27 8B38 mov edi,dword ptr ds:[eax]2 ?( o6 E! a/ s' j4 N- o0 E
0046AE29 FF57 04 call dword ptr ds:[edi+4]9 R' O! D3 K/ [' }8 B: K. ]* y
0046AE2C 8BC6 mov eax,esi
" n& |; E8 O3 S- d% I* w8 e4 k0046AE2E E8 4587F9FF call Unpacked.00403578$ w5 ?, @3 n4 f" A9 [
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
- b/ J1 M1 K. U+ F+ O! D1 q0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
) l- `) a% `3 s, r0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~) A2 k8 Y& e. C3 c' C" M3 O6 w
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
/ g1 J" D, N9 e5 l: ]) h) b+ p0 A; P0046AE42 6A 00 push 0
% U" w. c( ~4 K- q( |$ D9 K0046AE44 68 D8AE4600 push Unpacked.0046AED8- P% K& m( h) Z3 p
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
4 k& \5 w5 c4 F% ^0046AE4E 8BC3 mov eax,ebx
0 f! l, i/ B; b1 T7 j0046AE50 E8 A3BFFDFF call Unpacked.00446DF8" u% g. X. j( m% w6 h
0046AE55 50 push eax
?# {2 X# G2 v3 s$ E0046AE56 E8 DDC2F9FF call & \6 c: M: w5 ~, i$ E' R
0046AE5B EB 20 jmp short Unpacked.0046AE7D
0 _9 D' r8 k6 b; j! `' [& G0046AE5D 6A 00 push 0
0 S# j7 h. \2 l: i0046AE5F 68 F8AE4600 push Unpacked.0046AEF8) ]! T2 g: _; d, a6 ^4 R: J1 S
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
1 }# q! U( {) e9 g; `. L6 G0046AE69 8BC3 mov eax,ebx
: l- e9 f# E) B: p' v0046AE6B E8 88BFFDFF call Unpacked.00446DF83 h9 b9 U; h+ g
0046AE70 50 push eax9 Y& q$ K4 r" d
0046AE71 E8 C2C2F9FF call
4 @! G* m$ z0 i- A. M0046AE76 8BC3 mov eax,ebx- L5 ]& a% I/ C( x' u
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC; {, E w" n7 i6 W" q
0046AE7D 33C0 xor eax,eax: C( X+ g" T4 D+ n% ~
0046AE7F 5A pop edx% @8 T- q; G8 h: G* ]; K
0046AE80 59 pop ecx
n2 y1 j$ R0 g8 `- c0046AE81 59 pop ecx0 L& t: M* c& ^" W8 x& F
0046AE82 64:8910 mov dword ptr fs:[eax],edx
+ A5 T! @. G3 M! b0 |! I( r0046AE85 68 A7AE4600 push Unpacked.0046AEA7+ A) B. U, q* v+ e
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
# q5 E2 \- a, F7 y0046AE8D BA 03000000 mov edx,3/ i" `9 B/ j; ~. c
0046AE92 E8 F594F9FF call Unpacked.0040438C+ D5 M' L0 F _/ ?. i" a
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]! A0 B, [) d( `2 F+ B- }7 L$ u2 |
0046AE9A E8 C994F9FF call Unpacked.00404368
3 R% Z, C! U6 a2 `" P1 A( w0046AE9F C3 retn2 V2 I+ K! V. Y3 Z6 U0 v' ~
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C- i H" A& s+ a' g. G( @# {$ Q
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
" _. r$ W, S+ n/ \ v****************************************************************
/ B/ x) w. `# W5 U C' v1 M" o9 U跟进0046AE39处CALL来到:
6 }* p6 [0 m' |0046B9F4 55 push ebp. O! w4 r7 _% V1 [2 ?$ T8 n
0046B9F5 8BEC mov ebp,esp9 ~. u; j. a( g: i' E+ K
0046B9F7 33C9 xor ecx,ecx: u k: h- O# @
0046B9F9 51 push ecx0 H5 ]* N6 n& S% K
0046B9FA 51 push ecx
( ?' A& d+ L( j. U b4 x/ [& `0046B9FB 51 push ecx/ R. J5 A4 b& b7 S$ E9 n
0046B9FC 51 push ecx9 c: ~- _" k/ s+ O. p- v
0046B9FD 51 push ecx
3 _& @0 ?2 x Z# E$ d0046B9FE 53 push ebx
) W$ V0 y8 Z9 x; a5 m0046B9FF 56 push esi
/ G* P$ a- i# V' i8 I/ q, y& ~0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
G1 l& Q: `9 Q0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
; R( D# {7 X4 }9 ?4 R7 Z0046BA06 E8 FD8DF9FF call Unpacked.00404808
8 M4 I$ H) _9 }0046BA0B 33C0 xor eax,eax6 X; M. P) v5 A# c* `
0046BA0D 55 push ebp
" O4 L7 y% }" X% [2 i' p9 N4 W0046BA0E 68 91BA4600 push Unpacked.0046BA91' c) ]" X. d7 e* i0 ~
0046BA13 64:FF30 push dword ptr fs:[eax]
, o: c9 m9 x: }5 A! c. K+ C0046BA16 64:8920 mov dword ptr fs:[eax],esp" ], ^; a f! D3 Z0 y
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]. @2 |( o, l) E8 ^
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]# J0 z) e+ Z" y* B& M
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 9 k$ ?! Z: q3 k0 l* y" r! a
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
# `5 `* B' G O, J! x" y2 H) L0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX8 u& j* k5 T" j5 X, [. @2 u
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
* H9 \% `4 g& n5 r0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里 N# M, b( Y% C' x# J0 @ X
0046BA34 B2 01 mov dl,1 ; DL置1& `3 b" G1 s# B8 ~$ A, F
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
' b7 j( m3 O0 r7 D5 _) J% X. z5 Y. R0046BA3B E8 78A3FFFF call Unpacked.00465DB8
% Y' u# Q- q% m( v3 v) z7 L0046BA40 8BD8 mov ebx,eax$ |) X! v, g! b0 b
0046BA42 6A 00 push 0
$ W7 H& v$ N: {7 m5 }2 b$ ~7 G/ y0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14], ?3 n$ e: X& n0 j
0046BA47 50 push eax5 Q4 L" ]& H2 {/ S, x
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code": [% @- V* _. Y8 t
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]) X6 I3 v0 }, P. X4 O! \
0046BA50 8BC3 mov eax,ebx- W# a; @2 ~" R0 e# ^
0046BA52 8B30 mov esi,dword ptr ds:[eax]% R( h% N6 T- Z+ h) ~
0046BA54 FF16 call dword ptr ds:[esi]% A5 [1 v9 m( f) b l0 ?
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
4 ?& `. |& ^0 q8 J h. _$ m0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
5 r1 D: q! r4 C9 b0046BA5C E8 B7CCF9FF call Unpacked.00408718
9 W+ V: W0 H- _, ]. W# S! v; R. _0046BA61 8BC3 mov eax,ebx8 u1 {- R& O- i4 N! L7 E, `* H
0046BA63 E8 107BF9FF call Unpacked.00403578 ' I7 x" F/ R/ U# [
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX( v7 i) M$ U3 H" T
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX8 z& m0 j$ g* L- c
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~2 X+ |8 N4 m! p2 x7 \$ U% ~1 E0 \
0046BA73 0F94C3 sete bl ; 置BL值' X. ?$ K5 d V/ M
0046BA76 33C0 xor eax,eax; @. s1 G$ Y9 H6 c! r& I
0046BA78 5A pop edx
( h; W8 t: J# T$ [0 H3 ]( z# |0046BA79 59 pop ecx$ w B2 T4 i* J# |& v. G7 ?( J
0046BA7A 59 pop ecx
8 _$ P: w% i8 U+ B8 r# e0046BA7B 64:8910 mov dword ptr fs:[eax],edx+ i- y8 z n1 f& _0 g. p
0046BA7E 68 98BA4600 push Unpacked.0046BA98
7 Z m) O1 p9 p1 ?, T7 g* d0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]4 k0 u4 U" b7 h! f
0046BA86 BA 05000000 mov edx,5 }8 f1 y9 s) x! w! _& J1 w. Y
0046BA8B E8 FC88F9FF call Unpacked.0040438C8 }2 i9 s5 O( L8 I0 I
0046BA90 C3 retn
6 s7 N/ _+ e7 S3 c- V+ c3 M****************************************************************
4 d- d5 s; m: A8 K跟进0046BA2A处CALL来到: I/ h$ M# p6 A* ~7 P) L
0046B908 55 push ebp. ?, P% m5 ?# ?2 u+ l* z1 @' \
0046B909 8BEC mov ebp,esp- Y1 e2 N2 G8 s, M+ e3 f
0046B90B 83C4 DC add esp,-24" x0 I* s$ |9 ?) ]
0046B90E 53 push ebx
S- u: D$ R+ F* p0 G; W0046B90F 56 push esi
2 W$ E' n+ X# h7 {0046B910 33C9 xor ecx,ecx
2 j; b+ U2 C3 [& f% W1 I3 j0046B912 894D DC mov dword ptr ss:[ebp-24],ecx {. S( B; W2 n) F) \
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx8 V4 v2 J, n3 b4 Z
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
8 k( U! c! P, Z8 m Z6 z$ A ]0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
3 z+ O" g" ]8 e; e6 @0046B91E 8BF2 mov esi,edx
, v( c( ^- R- t' h$ i0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
3 t: C* g, I' i+ Z1 f0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
" o9 _0 |2 l i" c. K' X0046B926 E8 DD8EF9FF call Unpacked.004048082 B! G! d$ R0 P) n
0046B92B 33C0 xor eax,eax* m z- y4 I4 k+ P8 m3 Z. g. W3 p
0046B92D 55 push ebp
+ `0 @8 ?+ X& I* F! i d; N2 y0046B92E 68 CEB94600 push Unpacked.0046B9CE
- V* x4 d& A; d# N2 Q% s' |0046B933 64:FF30 push dword ptr fs:[eax]: X0 A) T; \' X# i/ V& o* b3 v
0046B936 64:8920 mov dword ptr fs:[eax],esp
, T$ C/ s, S7 r" e' c3 v( J' p0046B939 8BC6 mov eax,esi
' g& w+ P% ^& H. b/ c0046B93B E8 288AF9FF call Unpacked.00404368! E+ y3 }' o1 _: u5 z! x9 @
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
# p7 L% r! |. w1 }0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
( d. v; o Q0 o) @+ @% ^7 p0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
8 d5 [. y4 y1 e0 L0046B94B E8 1C8DF9FF call Unpacked.0040466C
: m( }# ^; h0 [0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
+ g$ X1 y5 e: _) H0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]1 _. T& {6 F/ F5 s4 v+ N: A
0046B956 E8 EDBCFFFF call Unpacked.00467648
2 b' c4 r( ]5 ]9 w: g% S9 I5 @0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
! v9 R0 @& Y% _- P( [! q- D0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
/ G8 P" n- i$ m( n: ?, b0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
) Q! H$ `) s/ y: _/ \. {$ _0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~9 R) r4 z# G5 n5 G# M
0046B969 E8 FA89F9FF call Unpacked.00404368
& p, q$ r! g' G3 F( G5 S$ t; u0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
& u: U( F3 B, U) T9 {0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
" ]5 F& O4 j, g- r8 V5 ^4 ]0046B976 8BD8 mov ebx,eax ; EAX送EBX
9 [8 e) ^5 r1 O0 W7 w0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
# \& o/ b4 \8 m7 i0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳( `/ w' e0 o$ R5 Y9 a( \* L5 K
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
. T) E- |) z/ t% y4 H0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
. F% b3 ^" `: V/ {% T, S4 Y* U1 {0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
: K7 V4 q4 m4 E1 d5 d. M( r0046B987 E8 BC8BF9FF call Unpacked.00404548; k& D3 e9 H3 }: w& g% L5 ^# `
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
- W, i7 _" M+ }' @0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
! w/ K; v1 m3 ^' \, x( u$ m0046B992 E8 918CF9FF call Unpacked.00404628% ~+ `7 t" j, e/ _/ s
0046B997 4B dec ebx ; EBX减一: A) v6 j! l' t# n; G) K
0046B998 85DB test ebx,ebx ; 是否为0: g9 a9 y' d' v l& J X O
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。3 b+ Q1 ?) v) e4 |. f: O- P
0046B99C 8BC6 mov eax,esi8 R. M4 j% W& Z4 H0 G' w
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
' t% H4 {6 g7 v' ~, m" i, g0046B9A1 E8 168AF9FF call Unpacked.004043BC
3 [1 O/ `7 W' z& P0 ?. T0046B9A6 33C0 xor eax,eax
5 s% o: T: n" N3 g7 Y0046B9A8 5A pop edx6 @# V6 s& o0 k% |
0046B9A9 59 pop ecx6 v& _8 ~- \- a: T, `7 U
0046B9AA 59 pop ecx/ {% J# u' R9 ^& s3 e o$ N
0046B9AB 64:8910 mov dword ptr fs:[eax],edx- I, ~# _% l( A% c
0046B9AE 68 D5B94600 push Unpacked.0046B9D5; A m j, ~% T, k7 ^$ |
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
! a) p+ v0 w, b$ i, ^0046B9B6 BA 02000000 mov edx,2
3 ~2 l5 W6 T5 _- I9 o6 g4 ` @0046B9BB E8 CC89F9FF call Unpacked.0040438C
6 J! h/ v7 q3 _5 o' H+ D, r' f0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]/ ^- x3 }! s& A& Q
0046B9C3 BA 03000000 mov edx,3' Q7 Q( f" Y3 r1 i+ e
0046B9C8 E8 BF89F9FF call Unpacked.0040438C6 S- j/ O( V U: m5 x* S
0046B9CD C3 retn
9 c/ g( g0 v K( \) ^) m' k& W2 {****************************************************************" z. u. l1 t, D8 z- u$ f B
跟进0046B961处CALL来到:/ l2 l; W2 C* p- \
004676BC 55 push ebp
) h" M+ ?+ K1 o6 p+ R004676BD 8BEC mov ebp,esp' l+ R" h6 l0 F/ ]- y) S; k
004676BF 83C4 E8 add esp,-184 u8 v8 V9 G+ {4 w8 s# Y d
004676C2 53 push ebx+ P. F" F: y/ y* E; G; K& K
004676C3 56 push esi
4 g6 U" v& ?6 L T. Y/ K1 P" h004676C4 57 push edi1 W% m( G5 s3 H$ V. w
004676C5 33C9 xor ecx,ecx- {, ?' V8 i4 Z6 e U
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
M$ z# N% r b7 l A004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
/ I4 Z F6 T k4 U% v; N004676CD 8BF0 mov esi,eax7 l& G K- v$ Q5 C, q0 F5 ~
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
3 I+ X `- s0 h$ _3 Z004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
4 b/ b) x& n" X+ M( i9 c' S004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
r& B3 P* E' j) v8 C, l* |004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>: F" K* O- d% ?' T
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>- c' i8 |+ T+ t3 T
004676D6 8BFA mov edi,edx. E! } t; S0 {" l
004676D8 33C0 xor eax,eax' `& B; L& k2 v' w. e; t
004676DA 55 push ebp/ Q- _+ Z7 Z Q
004676DB 68 57774600 push Unpacked.00467757
! y9 i6 O- g3 |/ p6 h1 r3 O2 Z: u004676E0 64:FF30 push dword ptr fs:[eax]. }. h1 j# G0 `$ D1 S: Z) d6 @
004676E3 64:8920 mov dword ptr fs:[eax],esp
" K6 v( r5 q4 ^: t& z: D& V004676E6 8BC7 mov eax,edi' R8 u0 v$ i; P7 r6 w% \( P
004676E8 E8 7BCCF9FF call Unpacked.00404368; ]) H9 z& r* o% {6 Y3 E6 C0 E! K
004676ED B3 10 mov bl,10
% C$ b8 n0 ?# T4 ]0 d+ X7 H" ]* E. a% M) ]004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
8 E) F+ r) a1 ]4 _ ~004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****+ f. u, G [/ f" E" b; ]) j+ T
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]( ]% P$ n; @" v5 ^
004676F7 33D2 xor edx,edx( t8 n6 k0 y. b* m4 v: g f3 J
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
# v: t1 M! A; ]004676FB C1EA 04 shr edx,4 ; EDX右移4位
% b' `/ e! S" q004676FE 83E2 0F and edx,0F ; 和0F与" a" {4 @, E$ G8 ]$ }1 l9 X2 g
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL" W* x, Z7 [+ Z4 V
00467707 E8 3CCEF9FF call Unpacked.00404548
- k3 Y9 C+ ?" v4 _0 l( I0046770C FF75 EC push dword ptr ss:[ebp-14]
7 l8 i0 E/ \8 y+ ], s0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]) T* m f) z' m2 L
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL3 d1 o5 N4 F9 o, U6 G4 R
00467714 80E2 0F and dl,0F ; DL和0F与. h( R9 z0 I7 D) h4 S3 K
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
+ ]# U4 {) k& D$ z" E0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL$ c: K0 \, P4 P1 t
00467723 E8 20CEF9FF call Unpacked.004045486 J" V' |1 F+ I& i+ E7 ?( T5 y# R. b' M
00467728 FF75 E8 push dword ptr ss:[ebp-18]
+ R0 _0 o- Z) `7 |0 K! l4 E* r% Y! p7 ?0046772B 8BC7 mov eax,edi ; EDI送EAX
" h8 v9 i; o. P" @0046772D BA 03000000 mov edx,3
/ q1 ^& A1 Y1 G" P00467732 E8 A9CFF9FF call Unpacked.004046E0
/ Z% l6 O$ c: ?2 R00467737 46 inc esi3 p1 Z- T8 s P4 f/ t
00467738 FECB dec bl
* _# s5 A2 q7 o. `& U2 _0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
: {2 {) `4 L5 \# g" f0046773C 33C0 xor eax,eax
: ~" n* f) u1 k3 E4 ?$ g0046773E 5A pop edx
8 x Q* z$ L% _. Q! d( \0046773F 59 pop ecx
) X- ~3 v( ^- {5 L00467740 59 pop ecx0 H) n( D6 a/ D4 k/ ]4 K: }
00467741 64:8910 mov dword ptr fs:[eax],edx/ ]9 W5 H8 M/ Z4 S8 ]
00467744 68 5E774600 push Unpacked.0046775E, v. n& ^8 \/ t" M8 f2 R
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
7 |* P3 k% }/ F+ G" Y9 n! ?0046774C BA 02000000 mov edx,2* c$ ~$ S" \7 i) c2 i' p0 Y
00467751 E8 36CCF9FF call Unpacked.0040438C- p' ^: h0 t) W b6 Z; ]1 O
00467756 C3 retn //返回. o' }* q# M8 _
———————————————————————————————————————————
7 z* c7 n H6 N1 L5 d$ F2 A: o' ?9 F【Crack_总结】:% w6 J$ B% d- W; W+ W
将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^7 ^2 g: x. ~. f2 c5 `( K2 L
机器码:bbba33de56c4cf31d9063cc074248d4b
" D% K( C; G+ O, ]' M! U. F$ z注册码:e807519487d7ad4f57ad42dc87fbb191) v! y9 ^, L7 U, s3 f* D
附件: MakeSign.rar (249 K) 下载次数:298 |
|