|
|
|
【原创】破解图章制作系统% V, s& k* I$ a3 j' j2 f& }
日期:2005年5月15日 破解人:yijun[PYG]
1 }: W9 l0 O# v: R! M& x———————————————————————————————————————————
8 H B: c2 K8 k6 ?【软件名称】:图章制作系统 软件版本:1.0
" y/ K) u: {9 I0 @% q$ I7 b【软件大小】: 252KB
! O9 e! Z. L" u$ h【软件简介】:制作各种图章
. a9 `2 ?/ Z1 v1 `* A% N' L【软件限制】:NAG0 y9 N! g; M; V
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
m4 U1 `; X& o【破解工具】:OD,PEID, F# E1 d5 o1 N. z- b, v
———————————————————————————————————————————0 z' w6 k: C6 |% i P
t8 I4 l" a* {1 i) n/ ^
【破解过程】:
) f# C. T% {* G5 GPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
5 e5 h* v8 g0 K: A( O$ C4 fOD载入,通过字符串查找很容易来到这里:5 @% T1 M7 l1 t: P& L3 U4 C
0046ADAC 55 push ebp //在此下断- l) z8 Y( N- e& A
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
/ b# v$ m5 o4 M/ n0046ADB2 64:FF30 push dword ptr fs:[eax]8 K( M, b" F6 q- S+ q) P
0046ADB5 64:8920 mov dword ptr fs:[eax],esp/ L4 i v% R$ c/ p% H
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
7 {/ R9 d: N F6 D0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]1 s6 M, _; k3 N- }! m7 y! X& l
0046ADC1 8BC6 mov eax,esi
/ U0 s3 i- t h; r! N* u% ?! v0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX) L% h& Z+ O+ ^' Z0 r5 ]
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX8 D; ^9 M8 m! V; m- S7 B
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]1 z) H3 E/ g+ R. x
0046ADCE E8 45D9F9FF call Unpacked.004087181 a, t; ~( v7 a4 z" a4 _8 U# l
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX6 T7 w9 T/ Q" q. `- Z$ `% M
0046ADD6 8BC6 mov eax,esi7 g0 S. Q/ U; h( v6 n5 C* { C
0046ADD8 E8 3359FDFF call Unpacked.00440710. E. Y. A. p! t' U3 R; _2 v b$ b% K4 C
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
" ?9 U7 E( _# u6 q" \0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
t2 M! f, ?+ U# \1 Q0046ADE6 E8 F558FDFF call Unpacked.004406E00 c/ g/ P; O% h, e5 t. c' e. F
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空, y1 x7 g3 S+ x: D) w" ^. O/ n4 i
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
1 b0 _- F, ]9 _0 r. D/ G+ ]0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
S# b$ Y( O2 X1 i0046ADFA B2 01 mov dl,1 ; DL置1
. H7 c/ m* e# V E0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
; {4 i5 m+ y8 v7 k0 M0046AE01 E8 B2AFFFFF call Unpacked.00465DB8$ t2 H2 K4 y8 E+ O* Z: G" {
0046AE06 8BF0 mov esi,eax( P8 `4 f) s: T) \
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]; ~* u" h+ W4 o j- t5 g
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]' w: W" K o6 o( I- a
0046AE11 E8 CA58FDFF call Unpacked.004406E0. E6 S. u4 c5 e1 z o- d
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX- _0 b& T8 F) ?2 L$ A9 }
0046AE19 50 push eax; P0 u# o2 \1 D, ^! x7 ?
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
% ?, }. ^# ~) [2 m! [0 D2 u, b0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
1 s' O/ w* H5 o0046AE25 8BC6 mov eax,esi9 i1 R: c, ]3 S, C' h
0046AE27 8B38 mov edi,dword ptr ds:[eax]1 E+ G. W+ }& R1 J. P8 w. T d L
0046AE29 FF57 04 call dword ptr ds:[edi+4]
# Z4 d% T% M7 F/ L1 B0046AE2C 8BC6 mov eax,esi) m2 I/ A% ^6 L
0046AE2E E8 4587F9FF call Unpacked.00403578' m9 L; r: B+ i! j# [- Q
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]- v' D. g# o/ a8 @3 f, h0 _
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~/ x% s, x$ p: M. ]/ F
0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~). Y! [7 e( C3 M1 ?) T
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
; T/ C+ X) j( v: q( f" v2 ]7 f0046AE42 6A 00 push 0) }: I; H; F' x- t9 H% I2 N7 S
0046AE44 68 D8AE4600 push Unpacked.0046AED8
" _: M/ T. a& z0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误' c9 \' F$ T0 M: R# ]* d
0046AE4E 8BC3 mov eax,ebx
" }/ [# h U( R/ {. J0046AE50 E8 A3BFFDFF call Unpacked.00446DF8& n$ X3 V' D+ o+ Q
0046AE55 50 push eax
/ s+ S3 _, g; ^; I% q0046AE56 E8 DDC2F9FF call + u7 Z; e# A* Z9 A, p a
0046AE5B EB 20 jmp short Unpacked.0046AE7D1 L! ?" e( \, ^3 P: v2 D
0046AE5D 6A 00 push 0* b1 l2 F+ L f, e `2 X. p4 }& v4 H
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8& u* W: @, p/ R3 Y
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功# J2 c: e6 j' s3 f+ z5 {7 o9 h
0046AE69 8BC3 mov eax,ebx* P% U! {* ?2 J r6 z7 [7 p
0046AE6B E8 88BFFDFF call Unpacked.00446DF88 L$ l6 m! p: M5 N) _( B! L) U/ _
0046AE70 50 push eax
8 O, R( x- |! X7 T7 T7 y9 B9 e+ t0046AE71 E8 C2C2F9FF call
6 b {( _. l8 S: G1 S+ c: z0046AE76 8BC3 mov eax,ebx
7 u; X1 v& I' e) R9 ]" ~5 x: Q0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
. F: {, i. y( u$ o6 u0046AE7D 33C0 xor eax,eax
! C$ T& ]6 S6 m) [0046AE7F 5A pop edx& \' z B% _( {
0046AE80 59 pop ecx
5 ^0 Z9 Q: u7 W+ ^0046AE81 59 pop ecx
( o+ s O- [+ S. B K0046AE82 64:8910 mov dword ptr fs:[eax],edx
! Y7 O" u1 ], i/ R- Z0046AE85 68 A7AE4600 push Unpacked.0046AEA7% c5 s, k2 V4 D
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
1 p9 e5 P. d( j# {! A( Y0046AE8D BA 03000000 mov edx,3
$ N" J7 ^) L* r/ X# H/ c7 o+ e0046AE92 E8 F594F9FF call Unpacked.0040438C! m4 `/ V- Y( O3 | E
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]" K# H. f. j0 W1 ~- C3 f
0046AE9A E8 C994F9FF call Unpacked.00404368
" r3 u- ~6 z3 v4 y9 B0046AE9F C3 retn
4 _( x/ ?+ }5 h" k2 e* H& W5 g0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C0 L+ I; J# a& [) B: m
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
4 L) M# G; [# e! e6 K$ H/ V$ K' O# E****************************************************************
) J2 d; q2 B X8 m跟进0046AE39处CALL来到:
# q- h* s: y/ ^: ]' m3 P0046B9F4 55 push ebp: E. {2 M4 s+ B
0046B9F5 8BEC mov ebp,esp
" g: h1 [+ O+ d9 K& E0046B9F7 33C9 xor ecx,ecx4 k# o) s2 ?8 X* K- P5 o
0046B9F9 51 push ecx7 X; [( V# z* P [
0046B9FA 51 push ecx/ J! ]# }: A5 C" k$ n
0046B9FB 51 push ecx+ a% {& @" v2 E- f3 B
0046B9FC 51 push ecx
1 W8 Z! n" I4 z& x, N0046B9FD 51 push ecx
# L5 j$ I( d1 Z; Z) H; H- H4 \9 G0046B9FE 53 push ebx# C e B' g A* B. L
0046B9FF 56 push esi$ W& V0 G+ Z# e: F+ E( Z" R
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
6 P- v7 X# q# c- \) E. {6 G0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
) F& T S4 L1 [& p3 R0046BA06 E8 FD8DF9FF call Unpacked.00404808
3 S+ d' X( _9 J0 u A0046BA0B 33C0 xor eax,eax) C, K: s) i, {0 U
0046BA0D 55 push ebp( r* e) N, ]4 T4 ]" [, K b, ?
0046BA0E 68 91BA4600 push Unpacked.0046BA91
- `8 r& M' [% ~& |0046BA13 64:FF30 push dword ptr fs:[eax]
/ y$ q9 L8 S9 ]" y# K0046BA16 64:8920 mov dword ptr fs:[eax],esp" Z/ o+ h9 z c. x* X
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]- I5 Z$ p- V9 f1 P0 t" a
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]: ~' z L' x1 W- N( ~1 `
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 2 y# R }& L% ~9 ~
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]3 m$ ]9 f* D' g% S+ k: w+ D
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX* }! c8 W$ z1 O n9 A
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进+ F3 G7 B2 s+ X) v
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
) p0 |, Y, j* u' i0046BA34 B2 01 mov dl,1 ; DL置14 G0 Z, ^. v( N/ ^4 X, Y# V
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]5 `+ [5 G8 Z: G* F
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
; }- Z2 z; p: q+ ^5 ]0046BA40 8BD8 mov ebx,eax: p) O1 U" c" @6 ^; s3 h& L
0046BA42 6A 00 push 0$ @2 z+ z# x7 W+ T: d
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]1 o4 C9 A$ n( s. z6 S
0046BA47 50 push eax# u- m, Z* I* `6 O5 M Q* l: K5 D
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"9 K, n8 ` H* w/ ` M% D
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]0 u4 ]- w5 z6 Q; e! H I) f& F i1 D
0046BA50 8BC3 mov eax,ebx
& R) `0 B. h5 W6 y% d- f( v1 ~0046BA52 8B30 mov esi,dword ptr ds:[eax]
6 T9 A* y' E- B# M' l0046BA54 FF16 call dword ptr ds:[esi]2 V* {0 e1 [& a- P+ k+ S& g1 E
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX+ D% X+ M4 l/ ^. E2 j$ ]
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]# {) N6 q5 A8 ]0 A# T8 n
0046BA5C E8 B7CCF9FF call Unpacked.00408718! [6 N5 V! f; E( ~1 P' {' [- i
0046BA61 8BC3 mov eax,ebx9 u) t% J! f3 g5 H. y" V$ `' c
0046BA63 E8 107BF9FF call Unpacked.00403578 9 g* d- L) I$ ]# x
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX* b7 }4 A1 z8 W! f3 T* h
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX3 K5 m' f) R3 e% w
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
% U) O J$ S [! t9 C$ c0046BA73 0F94C3 sete bl ; 置BL值$ t" \6 k* G; G# {
0046BA76 33C0 xor eax,eax7 U3 c9 @- E8 s$ T* b, |" d! y! p
0046BA78 5A pop edx
( P U4 G$ o b# r* {% O0046BA79 59 pop ecx
7 x/ M3 h" w W' V" d0046BA7A 59 pop ecx
6 q V. g7 M4 P& a0046BA7B 64:8910 mov dword ptr fs:[eax],edx
0 i6 a$ H8 j0 g. u5 N( l: x0046BA7E 68 98BA4600 push Unpacked.0046BA98$ z7 N3 |) b+ T; B% A
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]5 H( W- W3 _. Q: Z5 K
0046BA86 BA 05000000 mov edx,5
8 U" Q! p. o# B" V/ d, i6 v, K. J0046BA8B E8 FC88F9FF call Unpacked.0040438C! O( j! w7 @; k. G2 p+ f* T- L
0046BA90 C3 retn3 ^8 O& x6 s1 d! P8 W
****************************************************************
* x9 G- V/ V- A( D" D跟进0046BA2A处CALL来到:
1 \# I1 n F- a8 I1 e1 [0046B908 55 push ebp
! g9 Z: }2 j) X4 U n0046B909 8BEC mov ebp,esp Y) Z, u: P( G. O, f
0046B90B 83C4 DC add esp,-24
2 ?8 p& v* z P& W/ [3 {2 j+ K0046B90E 53 push ebx
! v F k) x& C9 J9 P0046B90F 56 push esi
4 {& ^3 a$ T! z7 p0046B910 33C9 xor ecx,ecx1 s `( K- |7 x6 U9 m
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx0 `) Z8 W# h: H% ]
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
6 H! J# U# `; k3 m5 h6 X0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx+ M N+ a/ T3 \2 G
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
' q" R! R+ C! h3 m, g1 f( L0046B91E 8BF2 mov esi,edx
- u7 E* A# G4 X% r M+ }6 e, k2 N0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
* |* ]9 o9 b. l0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]: C" C* ], T9 c9 r
0046B926 E8 DD8EF9FF call Unpacked.00404808: Z+ V5 o; t2 ^- R d) z. N' E9 Q
0046B92B 33C0 xor eax,eax# c# ]: p% i* j' j* J
0046B92D 55 push ebp, d7 \, f$ r; R6 E" v% n6 q
0046B92E 68 CEB94600 push Unpacked.0046B9CE
$ }9 F+ `: z( {# K( N6 A0046B933 64:FF30 push dword ptr fs:[eax]
+ O, ^4 x5 Y8 y) S) E, P0046B936 64:8920 mov dword ptr fs:[eax],esp
3 Q" d; y( t( ~" y4 H' A0046B939 8BC6 mov eax,esi
+ H: p1 `! ?( e0046B93B E8 288AF9FF call Unpacked.00404368
3 G% Q& Q; L# C! V. V0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]" N- @, @4 J2 |1 x& P
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX/ `3 h5 p! i2 U) \0 E. d: R
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
( B. o6 R" |2 ^5 V. }! ~0046B94B E8 1C8DF9FF call Unpacked.0040466C" M6 o8 C* B. m3 g8 A
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]; M0 e2 F A5 {. g4 b# I( M1 _, ]
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]0 c6 N1 w$ R5 h- ?
0046B956 E8 EDBCFFFF call Unpacked.00467648: r7 J- x' m" t9 }0 d! |, Y7 G
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
# G) }8 i8 B% W; D; S( C0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
5 \# u) o: e7 [' p4 D7 G0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
+ ~* t" [3 U- i4 X% h/ H! N) a0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
0 L/ B' [& Q( ]/ n* Z0046B969 E8 FA89F9FF call Unpacked.00404368' f) D0 z+ @, `: c4 g5 r
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
- _% g* N, L1 g0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
; R. E% N0 g3 f0046B976 8BD8 mov ebx,eax ; EAX送EBX
5 a, L- w1 b6 f0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
$ A4 k1 ~3 q+ o8 e2 W) ?. {0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
6 G" \+ c f$ b: }% }0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
& ]9 L4 X( f9 z3 x7 o0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX+ x/ S4 [: [$ C. F
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
% Y& b, ]* s" m) P' T% I' K0046B987 E8 BC8BF9FF call Unpacked.00404548
5 }9 l5 R5 f3 J4 v( ]0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
' R3 o9 }4 n& y0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
9 @. W$ B2 x2 K" x0046B992 E8 918CF9FF call Unpacked.00404628
' K; v% x D1 [$ I& G, r" B. p0046B997 4B dec ebx ; EBX减一% ~6 g& t+ K* O" K/ h% J. v
0046B998 85DB test ebx,ebx ; 是否为0! T2 _, d! ]3 ]2 e! z+ A
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。
8 x" n& c$ J& t7 D- u( j" w, a" F2 @0046B99C 8BC6 mov eax,esi8 h/ w2 @. {( ~9 i$ H, J- U
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX+ J! W: A. F) {0 B: W: R( |6 \
0046B9A1 E8 168AF9FF call Unpacked.004043BC n1 y3 ?1 e, R8 @) A
0046B9A6 33C0 xor eax,eax
8 z/ c: c* s8 { s; z0046B9A8 5A pop edx
+ ^( R5 d R5 {! h9 j2 x& \0046B9A9 59 pop ecx
9 p1 L9 y" U3 p( t; ~0046B9AA 59 pop ecx( P- T# V, C9 I+ [
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
+ z' C! A; ?9 u' y% Z0046B9AE 68 D5B94600 push Unpacked.0046B9D54 ?$ c8 F# ^* |2 }9 m" y, N& }
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
, v+ H: Q% G2 {# R0046B9B6 BA 02000000 mov edx,2
* S& W9 ]! `5 `# B9 K! B$ u& S/ ^0046B9BB E8 CC89F9FF call Unpacked.0040438C
7 q0 Y% K4 `6 d0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
& k5 s e! f' u7 v$ P2 t) O! X0046B9C3 BA 03000000 mov edx,3
+ W; a# |; k4 _ P* t9 M. v0046B9C8 E8 BF89F9FF call Unpacked.0040438C! d5 q+ ?4 F0 d0 R% G# j4 P
0046B9CD C3 retn" W. Z, t. l/ H* W/ C
****************************************************************" z9 Q0 B [# e/ f; e4 ]8 O+ o+ d
跟进0046B961处CALL来到:
! A7 L0 j: e4 C$ H! o! J004676BC 55 push ebp0 R1 t( M# L% l y2 R9 _( |
004676BD 8BEC mov ebp,esp8 K- b s! C( J8 N& Q; p
004676BF 83C4 E8 add esp,-189 e. e0 [/ w6 g4 Q m
004676C2 53 push ebx
! y/ }1 z. L+ f004676C3 56 push esi
O/ @" n7 N, ]- _004676C4 57 push edi
# p% f/ b9 @" S: D7 o9 F004676C5 33C9 xor ecx,ecx
3 @) J! ?2 f* f- _, P. e1 S, ~; P004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
( d( M( h# D2 c: V6 }0 Z004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx* ^ y& n5 Y: W1 U9 @% [9 w
004676CD 8BF0 mov esi,eax5 ~( q5 |! w( H
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
\0 r. o; Y! d" O+ L0 \0 ]% o004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>0 v" u B W( b/ U6 k( R
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>- B, G' p+ h3 \: A p3 d
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>" ~* C* Q. `) c/ `, g
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>( C6 p6 Z- V, D n
004676D6 8BFA mov edi,edx
5 j3 s8 c) n- I) B: ^004676D8 33C0 xor eax,eax) F* [4 H$ J- [% O: j. ?2 g
004676DA 55 push ebp8 M8 i/ L% E) B# E. w* J" J( K" p4 e5 y
004676DB 68 57774600 push Unpacked.00467757
6 f8 W8 |: v2 `004676E0 64:FF30 push dword ptr fs:[eax]. Z: @! y- p" N+ O
004676E3 64:8920 mov dword ptr fs:[eax],esp" C2 X! m u7 B8 d) Y3 B; {- e
004676E6 8BC7 mov eax,edi
& _- i( Q% D4 \1 {3 V' B004676E8 E8 7BCCF9FF call Unpacked.00404368
5 ]* A9 p+ o) [8 O+ c% z/ {, z; A8 J004676ED B3 10 mov bl,10
5 ]4 [% f. X0 c0 _; M004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
% H; t9 ]# U9 s$ B" ]! o004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****) k1 h8 V! G8 c4 a4 h( Z M
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
+ s, v& w2 E: q6 o3 k+ [7 h004676F7 33D2 xor edx,edx
, w" A [5 z5 \6 y004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
( F7 D& N$ ~: w0 |: b004676FB C1EA 04 shr edx,4 ; EDX右移4位: Q: O& \" K* ?9 I% y* e5 k- f
004676FE 83E2 0F and edx,0F ; 和0F与" j) V& d0 N0 n' A
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL/ ]/ K4 T& Q/ E, u$ E& s' o
00467707 E8 3CCEF9FF call Unpacked.00404548( C$ e/ J/ q* S! l% ]
0046770C FF75 EC push dword ptr ss:[ebp-14]+ U4 m( m$ x, O; a5 X8 H
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
0 C4 D& t) ?/ I- w/ G1 F00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL+ Q; t& \, q3 \, m$ z
00467714 80E2 0F and dl,0F ; DL和0F与5 F$ K+ r! h6 y: V1 G
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
0 K# W) d6 T3 x" i* O0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
5 I4 M4 N2 c7 t! F- K00467723 E8 20CEF9FF call Unpacked.00404548: u2 w% L6 \3 q; J( n6 ]. W
00467728 FF75 E8 push dword ptr ss:[ebp-18]4 a# L+ z. ]8 m/ [
0046772B 8BC7 mov eax,edi ; EDI送EAX
; f& y# L/ e7 g, R0046772D BA 03000000 mov edx,3: |( I4 i% V N& W4 G
00467732 E8 A9CFF9FF call Unpacked.004046E0
- Y( U* g: c# l( o9 e. G1 W00467737 46 inc esi/ V0 m3 ^. o; e2 X' }1 k
00467738 FECB dec bl: I2 {: C) _) s6 H( ~; K! D
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
( B) C! w# W5 {% c) x# C Z0046773C 33C0 xor eax,eax
) N! G: z. p, h4 V8 |0046773E 5A pop edx
_, ]) A$ S Z k& l0046773F 59 pop ecx3 u4 @8 \4 F% w
00467740 59 pop ecx& S3 f* Q, t9 u$ o# x
00467741 64:8910 mov dword ptr fs:[eax],edx
7 z4 ^% u; Y7 o3 w4 d+ O$ P00467744 68 5E774600 push Unpacked.0046775E
9 t9 f A9 v( F$ y5 j" |4 G00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
! Y7 u8 k' o4 R" K, s6 f0 X0046774C BA 02000000 mov edx,29 o# [. q( Y; D+ I$ p1 `
00467751 E8 36CCF9FF call Unpacked.0040438C+ l6 U4 ~# e6 r& g
00467756 C3 retn //返回
$ {; G4 L6 {. F& I———————————————————————————————————————————
7 U* Q9 [( L! w3 c& k$ \【Crack_总结】:
8 u `/ |- l% i' D# d将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^' o9 s6 U3 ?( g6 F3 W$ [1 @
机器码:bbba33de56c4cf31d9063cc074248d4b" z2 e: ~% R5 b4 K7 p2 v# z
注册码:e807519487d7ad4f57ad42dc87fbb191 s4 @4 b8 s- v" s! I$ k" u
附件: MakeSign.rar (249 K) 下载次数:298 |
|