|
|
|
【原创】破解图章制作系统
% u; S5 O. a; U% H5 S9 l/ ? b日期：2005年5月15日 破解人：yijun[PYG]6 @* h& W! e- \4 F! b1 z3 @$ b
———————————————————————————————————————————! n" c2 t0 m* o
【软件名称】：图章制作系统 软件版本：1.0( d- i4 B0 q+ t2 i" y
【软件大小】： 252KB, K) l. I2 ]! J; y, a0 D
【软件简介】：制作各种图章
3 C r) Z) O) ^; `/ l8 z3 e3 p【软件限制】：NAG
; { j# k# m( \$ q4 b* R【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
2 \% v5 J, F; e8 J/ ]# ~【破解工具】：OD,PEID% N/ M" u) G5 O3 [' {
———————————————————————————————————————————
# m, ?% u0 }, P + k5 y3 H0 e+ l- i2 R0 d r
【破解过程】：
- X- f' k7 R! g( s7 x9 Z" \3 fPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~; \; k8 `- L, O7 s9 Z9 l( J
OD载入，通过字符串查找很容易来到这里：3 n6 }* u1 d& o$ n
0046ADAC 55 push ebp //在此下断7 t8 o9 U" q* v% x1 A4 r
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0) y. N9 R5 F. E' z- n! `; l
0046ADB2 64:FF30 push dword ptr fs:[eax]& B- K, G$ C4 ^/ }! z: l
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
4 {6 W) ]! H0 t+ {# t0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]" t$ b$ V; O" F0 U
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
% t* b8 l' p% Z9 E: ~9 Z/ [/ o6 j) g0 L0046ADC1 8BC6 mov eax,esi: f% w# m2 Y$ D$ a) V
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
5 \2 f* ~0 a) x( ]+ z0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
1 c0 s. m, k# f: d. c1 G' g: J4 X0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
2 b" s" e8 O% ^2 C. s0046ADCE E8 45D9F9FF call Unpacked.00408718
. K! q' n* |3 Q2 ]" Z0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX X' E* D- I' s. f- E, |
0046ADD6 8BC6 mov eax,esi
o) L2 ^9 [2 P1 S0046ADD8 E8 3359FDFF call Unpacked.00440710
6 J2 J( R6 r# I- K6 ^/ o' J0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]. H% ?; `, t. C, a
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]6 b# X1 N; {4 ?
0046ADE6 E8 F558FDFF call Unpacked.004406E0
/ T1 N! P/ ]9 H& a% p( I0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
" Y3 F7 e* _7 D8 i( @0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
7 B4 n2 ]0 o) x! }% j8 R0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
4 o2 e F7 K8 z" l" M! ]0046ADFA B2 01 mov dl,1 ; DL置1
; c0 [/ [ E' \& w& ^0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]1 _2 ~/ t& P* I
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8( f% Z2 j0 r4 ~+ `/ s- @/ G3 }
0046AE06 8BF0 mov esi,eax
" `3 w9 j5 K0 Q$ [0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]: t. F# D4 S, h( {3 O4 }& }' F- f
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]( \! ~& a6 R' d* X) d% L
0046AE11 E8 CA58FDFF call Unpacked.004406E0
6 O) h! p6 Z+ u8 K+ ~% I6 [8 J0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX% ^4 ?% K/ h, k5 L+ e* Z9 r
0046AE19 50 push eax5 s$ [9 ~: O- q, f0 h! T' s
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX; ~. t* z$ F3 Y4 @
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
9 J# @# ^ M5 t& A9 |3 Y$ L0 m" g5 G0046AE25 8BC6 mov eax,esi
# h. ~- h& n0 H0046AE27 8B38 mov edi,dword ptr ds:[eax]) D! X$ C' B. C$ `0 q1 q) ^
0046AE29 FF57 04 call dword ptr ds:[edi+4]! B4 k+ j+ q% P. S1 e
0046AE2C 8BC6 mov eax,esi6 L1 I( y6 V: n! `
0046AE2E E8 4587F9FF call Unpacked.00403578
$ ^' G( H% q, b ]- I" a0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]6 V4 G7 J+ i0 o* N+ w k
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~0 {. ?1 ~0 D1 e
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
) o. v. f4 H$ U" H0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~* M$ s" d2 S v" I0 `+ v
0046AE42 6A 00 push 0
* S% E2 Z" z" ~ L2 A( }0046AE44 68 D8AE4600 push Unpacked.0046AED8% W# Z0 [ T" n/ g k8 y
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误' w. R$ \+ T; h* s5 D2 u
0046AE4E 8BC3 mov eax,ebx
( F% G, i0 J8 E1 c0046AE50 E8 A3BFFDFF call Unpacked.00446DF84 d6 L! L+ [0 c! d& z
0046AE55 50 push eax: e' d/ d2 z* C/ w
0046AE56 E8 DDC2F9FF call
( J/ Z, I1 K# l- V3 W8 l( N1 T2 S0046AE5B EB 20 jmp short Unpacked.0046AE7D
2 @+ ?1 b" \& e9 u9 O) ~0046AE5D 6A 00 push 0
8 ?5 x% ?" Y& h0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
) K' |+ M3 e. v$ r3 G* R0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功& W0 s0 j1 T& V# ^ v9 F
0046AE69 8BC3 mov eax,ebx
/ N- ?& j J; [0046AE6B E8 88BFFDFF call Unpacked.00446DF8
+ p8 s! _& D* K I$ k1 z. d0046AE70 50 push eax
6 W @3 p9 s+ P% H3 J, {8 M0046AE71 E8 C2C2F9FF call
3 O/ y0 U4 k& b3 v0 q4 i0046AE76 8BC3 mov eax,ebx
( n' W) g p9 ]0046AE78 E8 7F21FFFF call Unpacked.0045CFFC$ b" n: M/ j" s4 j# `: n- f+ e& S
0046AE7D 33C0 xor eax,eax+ X% U" x8 m3 i* k
0046AE7F 5A pop edx
& s" l# T$ H) N# U- U0046AE80 59 pop ecx/ b+ H& X! D( X" C& J Y7 O9 _# E
0046AE81 59 pop ecx2 r8 T9 T5 G# A/ ~5 s
0046AE82 64:8910 mov dword ptr fs:[eax],edx
8 _2 |; B( [: k0046AE85 68 A7AE4600 push Unpacked.0046AEA7
& h/ K5 o! s0 o0 ^ q( R0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
. r; L+ D( L. |0046AE8D BA 03000000 mov edx,3
' w" |7 U; L! h; |9 M0046AE92 E8 F594F9FF call Unpacked.0040438C
% E, {$ {+ z6 f! ?$ X) h# y4 m: K8 |0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
; p" m# [7 D% J' @3 r0046AE9A E8 C994F9FF call Unpacked.004043680 d' U0 L |& A8 M9 r8 @4 l
0046AE9F C3 retn! [7 _; U- ?1 D. E/ y
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C0 X$ w* `) W0 _5 l; x
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
4 Q$ i6 Y: Q" \5 F* [0 ^- ]5 b# T****************************************************************
m/ `( B; T( B5 J2 _. a! A跟进0046AE39处CALL来到：7 A/ S4 p7 l% o
0046B9F4 55 push ebp- {# `& |) i$ T
0046B9F5 8BEC mov ebp,esp+ R' J3 i8 E2 c2 T. Z0 i3 W
0046B9F7 33C9 xor ecx,ecx
( N @6 v9 g3 T+ S/ X" ~0046B9F9 51 push ecx& z3 M+ t7 e: `# v w
0046B9FA 51 push ecx0 w% o7 r! [; F K
0046B9FB 51 push ecx- q- O4 T T" t9 d
0046B9FC 51 push ecx
* X8 L" v. k C0046B9FD 51 push ecx
" T( o$ \8 k% Q, Z; W, V0046B9FE 53 push ebx
) V" K; ^" ^% e# w4 \0046B9FF 56 push esi
; M6 [2 C5 h! H5 _. H0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax! j8 W; G1 N! \) v m+ u4 q
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
R9 C, A/ d0 d0046BA06 E8 FD8DF9FF call Unpacked.00404808# [" N- G3 V7 i! O
0046BA0B 33C0 xor eax,eax
W3 q# z: P W6 X0046BA0D 55 push ebp
# M! H* \8 }: A' x6 ]0046BA0E 68 91BA4600 push Unpacked.0046BA91
, [* N2 T6 ]9 M% V2 r' p5 Z0046BA13 64:FF30 push dword ptr fs:[eax]
6 s; a Q% O' q( U" N W0046BA16 64:8920 mov dword ptr fs:[eax],esp5 O: K7 x+ z# i0 b
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]! E, b. @2 e/ h* _1 ]
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]& Y0 Y3 N0 I' g! j! w/ K4 F% w+ [
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 3 R) q6 ]6 t1 C
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
* g* n; V4 Q. {3 J; ^0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
8 ?3 Y U! O) L' |0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
" N8 j& L t6 x2 ]' o7 z+ j0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里/ Y l; J6 F& _# C
0046BA34 B2 01 mov dl,1 ; DL置19 D# F. D/ @. M
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]( B, R. W* r! y% K9 W: m; ~- `
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
3 f2 l0 M# c& \. N+ \$ I1 ~/ f- [0046BA40 8BD8 mov ebx,eax% i b2 @3 W4 z1 A) a( x6 C+ ]! e
0046BA42 6A 00 push 0
) r; f: n! X8 g" I+ o* h0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]0 |/ g1 ^% d K
0046BA47 50 push eax. ?0 Y6 Y3 h6 K2 j
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
& d# j8 n- t$ i4 E% B0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]4 L- e7 d6 a# N" C+ H
0046BA50 8BC3 mov eax,ebx: P* ^9 Q) f9 k
0046BA52 8B30 mov esi,dword ptr ds:[eax]" c4 ^, i0 Y+ I$ @9 b- h
0046BA54 FF16 call dword ptr ds:[esi]2 w) l' w) P& S ^- t# E
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX6 _% b6 K) k- t
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
. ?8 A4 S9 ]+ E' U! O. M0046BA5C E8 B7CCF9FF call Unpacked.00408718
2 J% t/ b- I o* Z l2 ^& C0046BA61 8BC3 mov eax,ebx' W& D4 F& r# y" z* u3 S
0046BA63 E8 107BF9FF call Unpacked.00403578 % C+ ]$ _6 g% r6 L W, A. j
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
2 J- |* B) e- V0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
7 j( ]/ v! P0 Y5 o% [0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~$ }4 Z9 f9 W% ^
0046BA73 0F94C3 sete bl ; 置BL值: y; U* L, o% J5 \
0046BA76 33C0 xor eax,eax
# Q& S0 J! {% Z4 s5 F" \0046BA78 5A pop edx
, Z( T8 _; H% a, l0046BA79 59 pop ecx
4 k/ p; W+ ]- M' [# `( V0046BA7A 59 pop ecx
6 l0 d1 n1 z$ ^! n) }1 X0046BA7B 64:8910 mov dword ptr fs:[eax],edx c3 [# C4 g# [ s
0046BA7E 68 98BA4600 push Unpacked.0046BA981 @- G; ^7 M1 g! T' B
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
; _- n" \, \" D" G4 }0046BA86 BA 05000000 mov edx,5, x: {7 `4 n6 B M. Y7 g
0046BA8B E8 FC88F9FF call Unpacked.0040438C
" B0 c* M2 U7 N8 t j- \0046BA90 C3 retn/ ?5 K" x0 ` r# i! {4 W% r' B
****************************************************************
% @9 z+ |7 Z8 x$ I跟进0046BA2A处CALL来到：# f5 Y. I& K6 n: E' N+ |1 r( k6 z
0046B908 55 push ebp" i) q- B3 L* v/ S* m( p
0046B909 8BEC mov ebp,esp$ f# ]* z% g( j$ u3 H: L
0046B90B 83C4 DC add esp,-24" k2 L, c) P3 Q
0046B90E 53 push ebx
) K5 F9 Z8 _7 V. V/ r; u# ~8 S2 N0046B90F 56 push esi
1 S6 j2 B R7 I8 i' w4 b2 k0046B910 33C9 xor ecx,ecx/ G0 C4 _: Y: y+ T& F
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx: ^ s" p3 ~8 V1 H& X" T3 `% t
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
7 S) y; }+ `3 f7 z! F# t0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
6 j; [. h* {, k( V6 v' A" i3 R/ N: ]0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
. C' E3 ]6 h; Q$ }5 z1 ^. s) x0046B91E 8BF2 mov esi,edx
3 C) F2 H! z+ q3 b8 R) V0046B920 8945 FC mov dword ptr ss:[ebp-4],eax# d; O4 z! Q3 O Q$ V
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
! Q6 X- R* C: V' F$ [! z# H) T/ T0046B926 E8 DD8EF9FF call Unpacked.004048087 D D8 L# g, P; a7 a4 Q% |8 |
0046B92B 33C0 xor eax,eax2 r( r$ ]( D( R5 ]+ b0 Y
0046B92D 55 push ebp
" V( t0 W0 f+ A- P7 i/ N7 i0046B92E 68 CEB94600 push Unpacked.0046B9CE
3 @: A3 j! j1 e. r0046B933 64:FF30 push dword ptr fs:[eax]
# f9 q' p( w7 ]+ m2 g% d# u0046B936 64:8920 mov dword ptr fs:[eax],esp: E) o H4 c+ h
0046B939 8BC6 mov eax,esi0 t' b" a, Z8 \) o3 }% J
0046B93B E8 288AF9FF call Unpacked.00404368( |6 r; O, V* x' u7 C+ k
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20] M. n9 f% L, [- u7 }; i2 ~* X
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
+ Z/ D) C6 T) M, T0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4- I% D0 R% F9 `2 d
0046B94B E8 1C8DF9FF call Unpacked.0040466C$ m* R) z4 i% @, G" G+ [: O1 G6 E1 }
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]+ v' {8 S: [& m8 z- u' N: H: b7 c$ E8 c
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]7 Y" V% A0 E7 Q5 a) f6 h
0046B956 E8 EDBCFFFF call Unpacked.00467648
, ~4 {5 Y) v$ Q' a. J- Z$ S0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
% o$ J V8 B7 `) B2 q4 ?0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
0 D, c7 u& ?: @/ I$ ]0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e- ?0 a5 n3 s5 K" C% O; F
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
6 c+ `8 h: d1 L) o$ [ e! G9 c7 f( K0046B969 E8 FA89F9FF call Unpacked.00404368
8 w6 a; h+ D. O4 y: ~* \0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
2 N' e- F! t+ i, h0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX0 S3 j+ X% l, M6 W' Y7 l
0046B976 8BD8 mov ebx,eax ; EAX送EBX$ n* `, L( A+ [9 A- O7 B3 S- Q
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较: d8 V( x7 j% f* |
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳5 t7 o5 ?9 ^" c6 L) O
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算& P+ V' G% ]$ l- q8 v! m- \8 A. @
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX0 @5 n8 o% O# R8 x) m* h) R' n
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL9 ~3 Z( _- d* Q: }, L v# M& B
0046B987 E8 BC8BF9FF call Unpacked.00404548
; o! s, C& Z/ Y$ c: u( v: o7 W$ }0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]% H5 R9 R+ ~4 C
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX' Z& `, P2 u7 D7 [: D. u1 W. y4 q5 g
0046B992 E8 918CF9FF call Unpacked.00404628
3 P7 j0 q; e1 V; d2 A" a. |0046B997 4B dec ebx ; EBX减一
5 R& Z8 D8 ~, w0046B998 85DB test ebx,ebx ; 是否为0
, m! ~" {6 E" H4 q+ r8 e' s' O' k# A0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。) l; U- {6 o! m- m8 I- F
0046B99C 8BC6 mov eax,esi# k; s3 V. H( ~3 d- F* D( e
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
4 }8 [1 }# N8 L! \- u0046B9A1 E8 168AF9FF call Unpacked.004043BC
5 e' e# m0 J0 `& z5 k0046B9A6 33C0 xor eax,eax/ e9 G, {4 v- t3 M
0046B9A8 5A pop edx
# M- e% G6 e. {% j/ d W* h$ _: k0046B9A9 59 pop ecx
; o2 X2 _% W; l0046B9AA 59 pop ecx
0 l) q1 v2 e; l& A0046B9AB 64:8910 mov dword ptr fs:[eax],edx
& z3 G, A6 `4 @$ a3 N! f0046B9AE 68 D5B94600 push Unpacked.0046B9D5
* c% Y4 o. R4 S/ z) p" p! n0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]( |/ n1 W5 q; r0 ^4 X4 L
0046B9B6 BA 02000000 mov edx,2! C2 F/ e8 s2 u# t% f( S
0046B9BB E8 CC89F9FF call Unpacked.0040438C
( Q& R4 C4 d$ p' z/ r0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]7 [" k5 r' V. @" l
0046B9C3 BA 03000000 mov edx,32 v" w2 B( B: j* x0 E: m G2 L! r
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
6 \4 {; }4 H( y1 {7 j1 R% E0 Z0046B9CD C3 retn6 d/ M; |) g. o
****************************************************************
2 B; C. K, K/ s8 i: \( w跟进0046B961处CALL来到：1 ]3 f' ^+ i0 |7 S2 T% p
004676BC 55 push ebp) O+ ?4 r& U2 Z
004676BD 8BEC mov ebp,esp
* a' V+ e3 ]/ s! |004676BF 83C4 E8 add esp,-18
: H( G. K$ G( R1 J" z! C004676C2 53 push ebx
1 B* m9 m5 h: _* R$ m1 m" B7 P: w004676C3 56 push esi
1 h) N' m* H% f) m. v) u004676C4 57 push edi; @8 ~' u9 j/ b& I+ v, K$ }8 q" p
004676C5 33C9 xor ecx,ecx2 o, O/ h8 I# F
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
8 Z( U9 g( k8 D5 w2 S3 K, ?004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
! v+ @& S1 F8 S004676CD 8BF0 mov esi,eax
7 }8 I1 O/ b4 C3 d004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]9 L, S3 r5 O. A8 _
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
9 R. u: b0 h* d+ Q004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
# v6 i: } L# I( r5 f4 ]% s& @004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>& l, T' ~' J5 p$ i- {) k6 Q
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi> O6 }* v6 Z9 t& ~
004676D6 8BFA mov edi,edx
: F& C: e$ n7 l. T2 W( A004676D8 33C0 xor eax,eax( z- A6 @/ G! W6 y
004676DA 55 push ebp& t w. Y9 Y: J7 E' \9 Z
004676DB 68 57774600 push Unpacked.00467757
) u ~( l8 l1 s% s8 V004676E0 64:FF30 push dword ptr fs:[eax]& m$ I* k5 w) O( w; p
004676E3 64:8920 mov dword ptr fs:[eax],esp
5 j( V9 ^8 J, T4 x2 K6 n4 H004676E6 8BC7 mov eax,edi
/ f6 v3 p/ }! b1 W$ r004676E8 E8 7BCCF9FF call Unpacked.00404368
( o& P& [7 x/ T. t* a' F2 y4 j$ u004676ED B3 10 mov bl,10
1 v7 l5 ^5 X0 B* L- A004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
/ {- _% f; z% d3 Z* Z004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****$ _6 E1 W3 p, w# B, u8 q' A
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]' m4 w- I* W; | ^
004676F7 33D2 xor edx,edx
1 _4 y; |+ q% r' Z, R* h004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL& d; W4 R% ~8 N% n0 ]% [
004676FB C1EA 04 shr edx,4 ; EDX右移4位
, S. b+ C8 L0 B3 P004676FE 83E2 0F and edx,0F ; 和0F与. T. T! @; `0 [ ]/ O1 g7 z
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
! P* d' |9 O( X5 C00467707 E8 3CCEF9FF call Unpacked.00404548
3 w U# U' Z4 g: L+ E7 B- |; ^3 J0046770C FF75 EC push dword ptr ss:[ebp-14]
! W u4 O* i; U$ ?8 O: ^! s0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
1 P, P+ _' x# r9 Q* V* v00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL4 {5 }7 b& ]$ f' g! ~( b
00467714 80E2 0F and dl,0F ; DL和0F与, [; k9 @! U- f' t/ F4 p
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与! L/ ?$ i; M$ |4 @
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
! s0 |4 s. n9 A% [00467723 E8 20CEF9FF call Unpacked.00404548
; `$ \% ?- w- E% P00467728 FF75 E8 push dword ptr ss:[ebp-18]
! F/ ]0 S+ h: P& e9 z) Y* r0046772B 8BC7 mov eax,edi ; EDI送EAX
" k5 i ~$ f1 I: ?+ F0046772D BA 03000000 mov edx,32 ^- G ^2 {, \: ~+ S/ u
00467732 E8 A9CFF9FF call Unpacked.004046E0
4 J4 K- ]8 L9 N& I7 y' o00467737 46 inc esi
# k5 A- [9 j7 w, F00467738 FECB dec bl- M3 W# H/ |+ i9 T" ~( ~
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
: M! i+ e- z* m( Q) T0046773C 33C0 xor eax,eax0 U' a+ e8 ~+ l$ L* \% q
0046773E 5A pop edx
7 k& C) f6 V+ h8 Z% P& _4 c0046773F 59 pop ecx! s! R. j+ n" E+ }
00467740 59 pop ecx$ I0 \) M+ h" @: C/ a
00467741 64:8910 mov dword ptr fs:[eax],edx
; m* Y8 T O. C5 Y3 _7 P; A00467744 68 5E774600 push Unpacked.0046775E& q! a1 a: J: K/ t. e
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
5 o9 H5 q* B+ H* f( J0046774C BA 02000000 mov edx,2
3 H4 V3 B [* J3 n, y00467751 E8 36CCF9FF call Unpacked.0040438C
! d& Y1 t# V7 ]$ w5 P00467756 C3 retn //返回1 J) a& C" X2 @+ w8 `% e' e, G! N
———————————————————————————————————————————# Q- z; Y: G8 U* h* }0 j. b7 ?
【Crack＿总结】：" ^3 v; i2 z$ A( b, y
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^& ^# x# M/ J' }! M6 X a
机器码：bbba33de56c4cf31d9063cc074248d4b
2 j2 q2 s4 R2 R( i注册码：e807519487d7ad4f57ad42dc87fbb191
5 T& Y6 D) M% n* K" d$ j1 L附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡