|
|
【原创】破解图章制作系统
X( R# M6 ^( e; S3 i" y1 G日期：2005年5月15日 破解人：yijun[PYG]
( t( e* I# R, f' f8 g; G! A———————————————————————————————————————————" j% u; s+ O5 E0 r
【软件名称】：图章制作系统 软件版本：1.0) Q9 Z0 @* Z5 v
【软件大小】： 252KB) u. A; E4 V$ x4 T+ \' S! W& B Q
【软件简介】：制作各种图章
1 N. R" _& `/ T5 q【软件限制】：NAG! C: r8 v. H* u: p _( ^
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！7 b! f8 z+ H- ~' y$ z# d
【破解工具】：OD,PEID
/ t! ]; I; j; t" n# p7 G! x———————————————————————————————————————————
2 \6 g$ A. |; @4 d% F
) K' S, I) b) ^$ D【破解过程】：) J7 x0 v" W, V. m% V2 L
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
8 y3 e* C6 e; Q! DOD载入，通过字符串查找很容易来到这里：
$ {% o: C) ]' n7 q( b0046ADAC 55 push ebp //在此下断
- p* Y% U. ]1 G6 j1 V$ k1 @& W2 h, v0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
: p, U- N( {" |3 i. f# n0046ADB2 64:FF30 push dword ptr fs:[eax]: R+ _7 ~9 E9 W
0046ADB5 64:8920 mov dword ptr fs:[eax],esp, h7 q% S8 O1 a$ R" L" Y5 H% L0 \
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]3 E1 V/ @ T& H8 F* @( ~; j: n, Z
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
8 c. J* t9 d% m0046ADC1 8BC6 mov eax,esi! k `9 S1 V9 y, A9 k
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX9 @! ]8 `! a2 c
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX5 ?4 ^7 R# n" E; L0 y( \6 S, ~
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
* k! ] }, u* s9 @0046ADCE E8 45D9F9FF call Unpacked.00408718) z9 z3 K0 q2 {5 x$ g
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
/ b6 n* |' j4 s( q& y' y0046ADD6 8BC6 mov eax,esi
4 p+ ~+ k2 Y7 }) G4 O* G0046ADD8 E8 3359FDFF call Unpacked.00440710
G/ B. k% S+ j3 P, T$ |0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
! j" J% j: ^5 U0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]1 Y$ m' m3 ]7 f
0046ADE6 E8 F558FDFF call Unpacked.004406E0- }8 l+ Q/ D: x7 w: l
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
& l$ z5 I- m& y: ?6 v& Y0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳- p9 X- w/ W8 M) u
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
1 `- N$ N& |! L) T+ ?/ y/ s {; X0046ADFA B2 01 mov dl,1 ; DL置1
: {5 g |6 T, Y/ X2 |% `+ G9 W0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]6 L: @+ K+ Z6 u9 x/ h) H: S
0046AE01 E8 B2AFFFFF call Unpacked.00465DB83 |6 t. O& E& X' x5 |
0046AE06 8BF0 mov esi,eax5 i: Y3 W; d0 r$ z7 V4 B+ o( L& T
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]5 _* k. E- A* b+ y& R
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
* p4 G4 D+ e) ]6 b0046AE11 E8 CA58FDFF call Unpacked.004406E0
+ c: f& n+ U5 @0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX, |/ i6 I q# X) V' w; r/ k
0046AE19 50 push eax+ [: F) L6 k4 q) d* L. F" I
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX$ l' {# }, s" \. H5 u+ X/ w4 H
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]. h6 [" N0 i# @1 h0 H) q
0046AE25 8BC6 mov eax,esi2 [0 O0 z9 C" ~' @
0046AE27 8B38 mov edi,dword ptr ds:[eax]
; m+ F" j. R4 n. T4 f. ~2 ?0046AE29 FF57 04 call dword ptr ds:[edi+4]' g f8 @3 c9 @& @( ~6 p
0046AE2C 8BC6 mov eax,esi
7 `' K% n4 v7 f! Q0046AE2E E8 4587F9FF call Unpacked.00403578
s; c7 b/ \4 Z4 T1 \0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
5 X3 J9 I/ u2 L! K6 h# w0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~$ I8 e$ e% i* j; Y: A
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
' ~( z; O+ u1 [4 N0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~/ [# \) A5 e, }, L& P8 R" ?# g
0046AE42 6A 00 push 0
3 b3 _& [& W, Y' y) H0046AE44 68 D8AE4600 push Unpacked.0046AED85 _ T- u+ j2 y) _& {# l5 C
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误- `5 e8 e! `/ k( {
0046AE4E 8BC3 mov eax,ebx' ]* S; ]; _; t1 w& c; M
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
7 v" Y$ h3 N) |. g* b0046AE55 50 push eax
* E( I6 {, u' z% P' b2 |0046AE56 E8 DDC2F9FF call
7 H& S' z) R) ]/ c* o0046AE5B EB 20 jmp short Unpacked.0046AE7D; ~. {$ h9 h1 ] e5 v
0046AE5D 6A 00 push 0/ x! Z7 l$ R% f; O
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8& Y+ G3 f) k, w4 e
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
6 v1 M- h9 f) u! U" V q0046AE69 8BC3 mov eax,ebx
' m2 @8 { q% W2 |0046AE6B E8 88BFFDFF call Unpacked.00446DF8% u2 |, ], i/ x4 o$ F5 j
0046AE70 50 push eax' R1 L4 {7 V& T0 P% D
0046AE71 E8 C2C2F9FF call ! m: W( s4 c& P% ]- L
0046AE76 8BC3 mov eax,ebx
8 N6 K( b8 S% n1 S' \; e0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
6 o7 V; _" a; G3 e9 q, i4 }0046AE7D 33C0 xor eax,eax
2 D% u1 d8 X! Z, u5 b5 V+ d. b* C0046AE7F 5A pop edx' L( [( k: \7 K# m; L1 T0 R# S. e- d- n
0046AE80 59 pop ecx
2 S4 b, Z4 u: ]+ n% h' S- ^0046AE81 59 pop ecx
( @) |9 d: n% Y% g+ n+ U0046AE82 64:8910 mov dword ptr fs:[eax],edx' }7 k; h$ R2 `9 ]
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
7 B1 p/ P5 @* i$ }. ?) e% b( Z9 q/ M0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]2 O6 Q$ r% G$ a2 F. e4 u6 D2 Z
0046AE8D BA 03000000 mov edx,31 {: O4 ~ r, n U
0046AE92 E8 F594F9FF call Unpacked.0040438C
I$ V6 ~& P" ?) k5 u0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]' T* j/ B( N* I
0046AE9A E8 C994F9FF call Unpacked.00404368
) j% C7 y) B8 m' c, }- `. h0046AE9F C3 retn
+ e! i1 ]+ r, d) `( g$ d% q7 p0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C: j5 ]; A8 z/ b# R) p) p( \' [
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
9 n& ~. W5 q; V4 w' i****************************************************************( ?- _4 @" ]) A, A! D
跟进0046AE39处CALL来到：; o- Z7 [5 {7 r+ \) \0 e7 O
0046B9F4 55 push ebp0 S X8 v$ B. Q
0046B9F5 8BEC mov ebp,esp
5 f. P* _- X+ ?7 ~* c0046B9F7 33C9 xor ecx,ecx- V% i- A U2 l' r. w/ y
0046B9F9 51 push ecx
' u; k7 p6 W6 p0046B9FA 51 push ecx
" k9 L- M2 V) e0046B9FB 51 push ecx
) p# ~ W" y* J0046B9FC 51 push ecx
. A7 O1 x! J6 x4 |0046B9FD 51 push ecx% ?4 ~1 d# e" M9 t1 h6 K
0046B9FE 53 push ebx
4 g6 j+ K& V. t5 ~; J5 N0046B9FF 56 push esi
4 Q+ H, K* Q/ a" q, V; l0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
' t z4 @4 |) _/ v0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]' C! t5 P! w6 `7 D
0046BA06 E8 FD8DF9FF call Unpacked.00404808, ^' q) W3 O8 Z9 b$ Y
0046BA0B 33C0 xor eax,eax
! g- }% _ w9 [4 u7 I p; d0046BA0D 55 push ebp3 S" ~3 ?% s6 N2 I. R" x
0046BA0E 68 91BA4600 push Unpacked.0046BA91" k/ y9 t# Z0 ?6 @" G+ s9 ]9 e4 P
0046BA13 64:FF30 push dword ptr fs:[eax]' g9 t" i6 [' {0 d# _% \4 t6 E
0046BA16 64:8920 mov dword ptr fs:[eax],esp
' T, H! q& l* i _8 P! b9 p3 x0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]6 A6 l) G6 u8 i z' h
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]* S. a9 N7 R* I ^: H2 v7 _
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 2 S9 ~% d |7 V
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]" z& `! L6 x. P! s
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX" k) g3 c5 ?( F# Z) r+ V0 k
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
% B2 r6 m# [; t' L5 z$ v+ l0 @* v8 [0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里1 O6 f$ `$ o) X. W' Y) R
0046BA34 B2 01 mov dl,1 ; DL置1
" t+ |: j& D' v. h0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
( M* p0 T5 ?+ y# G/ e" w* p0046BA3B E8 78A3FFFF call Unpacked.00465DB8
. g$ E6 `1 e2 T" q; A- g0046BA40 8BD8 mov ebx,eax
/ v: @ j) ?* L( R0046BA42 6A 00 push 0
% ?* i' y1 r0 `/ J# _0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]1 n0 k; _8 d( t& e8 V/ e. H0 g/ B
0046BA47 50 push eax
. M, D8 z* U* B7 \0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
* w9 j ]% C1 n6 T7 N4 Q. q/ p7 q0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]9 @' d9 a+ v0 m0 s% V6 Q( m. z6 ~
0046BA50 8BC3 mov eax,ebx4 `# j! Y; [" d# C0 O% S$ u
0046BA52 8B30 mov esi,dword ptr ds:[eax]
' |8 h3 I" }/ U9 C0046BA54 FF16 call dword ptr ds:[esi]
- x7 R# j# W( h2 Z, C' t0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
9 d$ E" H% _* d2 Q: F0 A7 v u0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]; W8 I) Y7 {5 n ~' c, G9 o3 H
0046BA5C E8 B7CCF9FF call Unpacked.00408718# L$ V$ ~3 r" e7 z2 ~3 r7 m
0046BA61 8BC3 mov eax,ebx# `' f5 ]" ?' I2 z9 Z
0046BA63 E8 107BF9FF call Unpacked.00403578 8 U+ y. q5 G; R3 C! q
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
. `$ T8 m: O! h0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX4 F8 O# t: e1 r' j2 E. z' F6 ~% C U
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
; b8 x3 i$ ~% {0046BA73 0F94C3 sete bl ; 置BL值
9 u. q! h7 {1 u. [% x7 f0046BA76 33C0 xor eax,eax( ?4 }3 a4 o) U/ p$ K- P3 n5 k
0046BA78 5A pop edx1 H# U1 L6 b7 f" ^2 L" k& t
0046BA79 59 pop ecx
5 A2 Z* \' Z# u D# H7 \6 z7 C0046BA7A 59 pop ecx
* q0 w' `) p1 B0046BA7B 64:8910 mov dword ptr fs:[eax],edx K0 r9 w' b+ m: R L, Z5 w; G
0046BA7E 68 98BA4600 push Unpacked.0046BA98
. v! x- C" H7 L% n& k- \0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
# x3 A6 G2 |+ F0046BA86 BA 05000000 mov edx,5
8 n+ u$ C9 K" S0 j: K0046BA8B E8 FC88F9FF call Unpacked.0040438C' r2 o6 U7 ]) i2 B: W6 @5 r- b5 P9 N8 f
0046BA90 C3 retn
6 j+ ]4 B- t& i4 Q****************************************************************
: r3 X* E1 ]% R q' \8 D! j跟进0046BA2A处CALL来到：
' B" Q# N' W9 ]' _0046B908 55 push ebp- S1 p3 u3 g* I% p; ^1 h) E9 | A
0046B909 8BEC mov ebp,esp" C; u9 J; r) T3 x k! h3 O! d, a
0046B90B 83C4 DC add esp,-24' N: h+ ^7 K& `: v6 @& T- B5 \
0046B90E 53 push ebx
/ ]2 }+ B/ P; k* i0046B90F 56 push esi
* m: I$ o6 g) P* S% d6 I. \7 M8 f0046B910 33C9 xor ecx,ecx
, I/ M8 u/ f5 }0046B912 894D DC mov dword ptr ss:[ebp-24],ecx2 n& K/ G5 K% [$ p0 F
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx) j/ x- j5 k( F4 q% L$ ^: D9 o; K
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx2 d% ^( p1 S9 i" W# s
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
~, ?8 O" m h, _9 h! b3 l& |0046B91E 8BF2 mov esi,edx# c& }* Y' O/ f
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
* j+ L1 W q: N$ I" P; }1 }# ]3 ~0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]: {; K; _2 O" Z {& k
0046B926 E8 DD8EF9FF call Unpacked.00404808
; u1 P( _+ Z# z/ x- l% [5 w! u8 T0046B92B 33C0 xor eax,eax! R4 E$ e$ |: R. g3 w5 U- Z
0046B92D 55 push ebp
& J# v* N! U" o' e" P5 l% T7 ~0046B92E 68 CEB94600 push Unpacked.0046B9CE6 T; c6 C4 ~2 {9 }, W
0046B933 64:FF30 push dword ptr fs:[eax]% w0 N6 I+ \2 |' {
0046B936 64:8920 mov dword ptr fs:[eax],esp
: E& `: ~4 P5 h f u0 m3 _0046B939 8BC6 mov eax,esi# [) A6 z2 m/ w3 Y6 I, z
0046B93B E8 288AF9FF call Unpacked.00404368! f9 R- R% f$ Y% t5 _1 v1 _
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
. r, A/ x7 K# A" f3 K0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
* d. |/ s# f& x1 \! v8 \! N0046B946 BA E4B94600 mov edx,Unpacked.0046B9E44 M) \( X! E5 Y- a3 i0 z
0046B94B E8 1C8DF9FF call Unpacked.0040466C
# m9 S: \7 _2 `0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
1 H' Y! j$ ?% B* s3 c; N; l. j, c) K* ]0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
! X7 [* p( E- J" M, X0046B956 E8 EDBCFFFF call Unpacked.00467648* p& a) }! [9 T) b; c9 }' M
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]+ L4 ?# d: O6 d, M
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]; M& u* n7 M- X! n, p: t* Y
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
# |. C& l! q5 M9 j" S0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
$ q2 ^0 f4 z+ U% {1 n& b1 t0046B969 E8 FA89F9FF call Unpacked.00404368
# U- C* Z2 L0 m& ~0 F: B0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX( U0 u: @) I6 C" S9 N: x& b
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX7 e) o1 ]7 [$ X3 D* h
0046B976 8BD8 mov ebx,eax ; EAX送EBX0 ]4 z' D( t* a9 }" r/ ?- r
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较+ G5 e+ @$ K/ @+ U9 B
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
1 Y1 u1 C g" \& s0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算/ I, a# M9 w8 \
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
4 S0 \: Y% _; i. z: ^/ }0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL$ R1 q3 ]& O8 a
0046B987 E8 BC8BF9FF call Unpacked.004045481 H q: {4 y8 G9 V: @. ~' G
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]/ \* U4 J+ v2 E! g, Y& B1 G7 @+ ]
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
3 E3 g# R* o- r6 S' T0046B992 E8 918CF9FF call Unpacked.00404628" C. N! f' _: h c+ q
0046B997 4B dec ebx ; EBX减一
& u3 j& O- C+ ]! j0046B998 85DB test ebx,ebx ; 是否为0
9 b; i1 R/ X- c; v/ K3 I0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。* ?; ~2 d/ e( s
0046B99C 8BC6 mov eax,esi+ I2 I. J5 Y# |3 u0 @
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX; e- T, {& c1 e) v
0046B9A1 E8 168AF9FF call Unpacked.004043BC& ^: Z5 e. I) t
0046B9A6 33C0 xor eax,eax3 \4 d7 v1 W6 U' @5 ~* O
0046B9A8 5A pop edx
9 G. A1 I/ h. g1 n K0046B9A9 59 pop ecx4 ?* M% b" ~+ q) r3 K) U; x( X6 [
0046B9AA 59 pop ecx; F- ]0 a0 R' c: Y
0046B9AB 64:8910 mov dword ptr fs:[eax],edx5 f- w& L: a6 `: I: q# t( [
0046B9AE 68 D5B94600 push Unpacked.0046B9D5& [ u! P; S" ]% t" B0 i
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]* o% w) X0 x& c/ w' S! ]6 r# ?
0046B9B6 BA 02000000 mov edx,20 l% J' I& k7 A+ }, L1 v* L7 I
0046B9BB E8 CC89F9FF call Unpacked.0040438C
0 K2 w7 n8 O4 p/ A0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
! ]: D& Z0 W. m0046B9C3 BA 03000000 mov edx,3# c; i; |, O( I# p8 M* c7 P @. y
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
5 Q6 ^3 O( }8 L+ }1 _0046B9CD C3 retn9 }* Y1 C. P/ |- u' j
****************************************************************
9 C4 {! H$ w' P* V0 Y/ [- m! M; Y0 O0 t2 f跟进0046B961处CALL来到：0 q. A8 Q( ~2 F4 N# G; w6 h% i) w
004676BC 55 push ebp7 d6 _" K% v2 t- n8 r+ ~5 S
004676BD 8BEC mov ebp,esp
7 u( z4 f! z. W, e: p7 b004676BF 83C4 E8 add esp,-18- E+ n7 `( h6 u! L6 ~9 x: `
004676C2 53 push ebx
$ j; r) @" W1 x7 C+ {004676C3 56 push esi" M6 z+ F( S# G. i Y
004676C4 57 push edi
) m. r% k# u0 w% O6 X) p004676C5 33C9 xor ecx,ecx
. u0 k' V2 x$ Q004676C7 894D EC mov dword ptr ss:[ebp-14],ecx8 T0 R3 l* Z$ w, Y2 F& D
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx; `7 W8 a n; u! J
004676CD 8BF0 mov esi,eax) b! A% V& y1 }1 d" B
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]1 c4 b1 i" [2 G6 m8 D+ v6 u- K
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>+ o: b* f4 ? Q
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>3 l, j: N) W+ P2 R+ j, }( p" h
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>, n8 B# y+ g6 G( ~2 k' w
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>$ z! M" a5 f) N0 n; A) C
004676D6 8BFA mov edi,edx
) s6 L+ n( _- i/ |" U* u004676D8 33C0 xor eax,eax( v8 h, k" A. O# |0 [
004676DA 55 push ebp2 e' d* ]$ w% |( G+ H( c
004676DB 68 57774600 push Unpacked.00467757
$ A6 i; I8 q, v ^1 `! ^004676E0 64:FF30 push dword ptr fs:[eax]% k5 X2 b& p% m! y0 J T
004676E3 64:8920 mov dword ptr fs:[eax],esp, Y6 `( L4 b6 i9 ]! i; F# M W
004676E6 8BC7 mov eax,edi
% v' R! O" v/ h) M I004676E8 E8 7BCCF9FF call Unpacked.00404368- X/ h- n# @3 _1 h- L
004676ED B3 10 mov bl,100 @ A- W2 ]/ I) P" c% C
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
1 {0 J5 h) F6 N- P% {004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****5 w- }( _4 f* {2 [# F- l
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
& t* g6 b2 f u( { }004676F7 33D2 xor edx,edx
# z7 g+ L! P$ U r% U; {1 g004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL+ T6 {) o E. h. L/ Z! K" ^
004676FB C1EA 04 shr edx,4 ; EDX右移4位
6 L7 z9 @& t8 ?( _004676FE 83E2 0F and edx,0F ; 和0F与
$ w! q/ f. j: ?# g0 m00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL/ J$ Y9 c3 r5 s4 i
00467707 E8 3CCEF9FF call Unpacked.00404548
6 U9 q Z0 o; j+ l0046770C FF75 EC push dword ptr ss:[ebp-14]: ^. X; @+ S5 a. I, L
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
& F' o$ l6 O8 t7 f00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
2 T. `! h6 g( a0 D: C0 C00467714 80E2 0F and dl,0F ; DL和0F与
' H4 g& i7 _$ o3 f00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
1 _: ?0 i0 E% X! L$ {8 y5 K* t0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL5 U# ^' t: _/ [% w
00467723 E8 20CEF9FF call Unpacked.004045488 P% s5 N7 H1 W6 R, |& p2 i# M
00467728 FF75 E8 push dword ptr ss:[ebp-18]
) q7 `7 Q) T& ~# i0046772B 8BC7 mov eax,edi ; EDI送EAX- S2 }3 W' V! p/ s4 o/ D/ J
0046772D BA 03000000 mov edx,3
- a a0 T; W: p3 v; }5 S8 t, j00467732 E8 A9CFF9FF call Unpacked.004046E0
9 Y2 ~0 `6 {6 t- x' S00467737 46 inc esi
( C7 X J- ^5 C {00467738 FECB dec bl
. R' ]* o; R# _: }+ ]- n0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
; w- w8 ` v; \3 }# R& O7 t0046773C 33C0 xor eax,eax- k6 ~2 }8 B- t- e, } f/ {
0046773E 5A pop edx
5 B1 N S4 W3 o% c) Z( `6 k4 j0046773F 59 pop ecx
) z9 M( O |/ Z- v( _8 m00467740 59 pop ecx$ G7 x9 ~: G# h. {* T) R
00467741 64:8910 mov dword ptr fs:[eax],edx
8 b# L/ B+ T9 q: [" k8 C00467744 68 5E774600 push Unpacked.0046775E
3 H' z/ p- ~& i( U* h! B6 _" c00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
! |& g' S5 L$ k/ v0046774C BA 02000000 mov edx,2
! {, T, u7 R8 B1 Y# o5 t+ O5 Q00467751 E8 36CCF9FF call Unpacked.0040438C" K, j a. A$ ~
00467756 C3 retn //返回, z9 g' z4 [+ K7 g) Z% `/ O. o. N
———————————————————————————————————————————
, ~2 k: t U. ]; E- z. C* T【Crack＿总结】：( f5 x$ V$ M8 s: h
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^: q9 q, f9 o" C% i
机器码：bbba33de56c4cf31d9063cc074248d4b
8 F# |. P; p! P5 F! Q注册码：e807519487d7ad4f57ad42dc87fbb191
; o, G/ z8 F D3 K! [. {附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡