|
|
|
【原创】破解图章制作系统
* o0 w6 f, I/ ^% h) e S日期：2005年5月15日 破解人：yijun[PYG]" B- N' b8 a! d6 c# {
———————————————————————————————————————————! e6 i( ~! M, O$ h. O3 m5 G* l
【软件名称】：图章制作系统 软件版本：1.06 c+ T; P, |/ l0 B8 M. c' N4 [) e2 g
【软件大小】： 252KB! ~1 ^# z, x& c2 n$ ?6 j
【软件简介】：制作各种图章' X7 |' U5 h9 X$ |
【软件限制】：NAG6 f( j( L- h2 {
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！+ B6 w: ^+ X& `0 n$ P- a
【破解工具】：OD,PEID3 Q; [: k& V) j) p* o
———————————————————————————————————————————, g2 d, d0 f! q
) {: Q3 d0 _" v, C3 F, A- l
【破解过程】：5 f1 B4 s3 i+ O% N- x. V
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~/ a3 e2 u0 k" u" _$ Z7 Z( W
OD载入，通过字符串查找很容易来到这里：: k# C P7 M, `; y `7 T4 k6 ~9 n
0046ADAC 55 push ebp //在此下断+ `5 ]) L2 [" J
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
! B2 O. U; v4 ?8 I, n- _0046ADB2 64:FF30 push dword ptr fs:[eax]) L6 o7 K* X1 v* W& q! c
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
5 L" H, r5 V- z$ z4 U) o7 L h0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
" p+ `3 X _4 p0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]: L, i! d. u* M. Y* M& R1 e
0046ADC1 8BC6 mov eax,esi' U( q% x9 S% w* L3 L' d! m8 ~
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
0 p9 V$ f' K$ g! m) C; s. F5 }. {. r0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX( j, ?' x/ D4 B3 \' x q
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
# q* ^) R% J/ P0046ADCE E8 45D9F9FF call Unpacked.004087184 d0 U0 f5 m' ~2 S0 h5 k. a
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
5 X" `: p8 S4 ~; w' X0046ADD6 8BC6 mov eax,esi' @: @' K, A5 N, `. n
0046ADD8 E8 3359FDFF call Unpacked.00440710
) S) ~! T# J2 M% D. S1 y- y0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
& q* J& E4 B* D! e+ G0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]8 C$ k. C) p7 x0 ^9 G* X; O
0046ADE6 E8 F558FDFF call Unpacked.004406E0: j3 J& G4 g4 {8 M
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空" B" A# L( t% _
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
' N2 [4 `& p/ {) j0 I* s0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
) w1 J8 ~7 D" F7 s; _! g0046ADFA B2 01 mov dl,1 ; DL置11 }6 S; T8 T Q0 I5 Z k* W$ J: E
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]7 g! I- s ~2 s% E) w& n4 {
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8! i s1 ?; G9 l) A/ ?5 c. j" x; A
0046AE06 8BF0 mov esi,eax
* ?) F/ a2 Z S% j. q2 r1 t2 ]+ S* y/ B0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]$ O G" Y% _, |$ o! J, t
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]2 I+ r# S( V8 F7 [$ I
0046AE11 E8 CA58FDFF call Unpacked.004406E0
: C2 @' C: K2 b" `7 [) j* P0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX2 L3 t3 I. @( |8 R5 [
0046AE19 50 push eax
- \- P+ e: N0 a3 B4 }0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
6 H2 j1 P/ W" ?$ U! d5 \) f( a) Q0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]* g r; j% p& h2 s. `) {
0046AE25 8BC6 mov eax,esi% x- _7 }" h" t
0046AE27 8B38 mov edi,dword ptr ds:[eax]
% q4 ~) @( P% Z ?" Q0046AE29 FF57 04 call dword ptr ds:[edi+4]% N* F* W6 {( R
0046AE2C 8BC6 mov eax,esi( \* I: w- t. T+ C( K4 Z. V* L
0046AE2E E8 4587F9FF call Unpacked.00403578) Q, [# ~0 h7 h" b5 K8 _6 G
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]. r- a' ^. H% ^
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~$ f% Z) U9 ?! `% v
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）, y8 W3 r( l6 V9 _9 v' f9 p/ S
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~- k9 w. g# p" `/ n/ M
0046AE42 6A 00 push 0
' J, F0 ^+ Q2 u; H, p5 L0046AE44 68 D8AE4600 push Unpacked.0046AED8
+ b) C$ Q; u! R% C1 }! P+ ]0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误+ E& P; ?4 ?7 p$ C" U/ ~, O- I
0046AE4E 8BC3 mov eax,ebx
/ ~& R! w g: x& |" J4 U0046AE50 E8 A3BFFDFF call Unpacked.00446DF8' N8 i q+ X( N0 Z6 y" O9 o5 X
0046AE55 50 push eax' L4 I# X6 g S
0046AE56 E8 DDC2F9FF call , I7 s! R. E8 T' J" e# U. {
0046AE5B EB 20 jmp short Unpacked.0046AE7D
5 Q- d% j& Z# g* ~) e) p0046AE5D 6A 00 push 0/ b4 t$ I1 l @) ~0 L
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
4 p$ Y0 h& C1 y5 C0 w" B0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
& F/ o/ t" ^# i# m* g- |( L+ E0046AE69 8BC3 mov eax,ebx% r0 e& a1 ?* E& e
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
- B: X) ~; F0 C' C0046AE70 50 push eax6 ~" A. y2 A. Y. C. o* p$ F
0046AE71 E8 C2C2F9FF call & x. l; {+ j% R, D r' g6 P& b
0046AE76 8BC3 mov eax,ebx
$ C' ?9 T( a" m2 h0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
# d# V+ r# x6 L& d1 I# A# c0046AE7D 33C0 xor eax,eax, ?; k3 S4 h$ V0 P
0046AE7F 5A pop edx
* ?7 B+ O0 n: m& x$ e9 t2 H0046AE80 59 pop ecx
0 C. [, P* |& |. A! v$ c, a0046AE81 59 pop ecx
1 J. y( }" ^4 z- I0046AE82 64:8910 mov dword ptr fs:[eax],edx
% J, U* J& _: q0 v$ g3 O! h0046AE85 68 A7AE4600 push Unpacked.0046AEA76 }; i# K. o+ J3 R& D# ~
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]: f. [$ w; Q# ~
0046AE8D BA 03000000 mov edx,36 z H1 a* K w- G
0046AE92 E8 F594F9FF call Unpacked.0040438C
0 u+ [5 P5 s3 Q4 w0 t0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]& h" j! T( R6 _' z' z& G4 f
0046AE9A E8 C994F9FF call Unpacked.00404368
0 \5 W' V! i O2 ^' m" s0046AE9F C3 retn
8 Z% l- f8 O8 v- e! S6 v0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C+ N; l [! [1 B5 j* _: U. T0 \0 B. ~% M
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A+ n: Q+ F: K D! i; [
****************************************************************3 P1 Q j( E9 H6 t5 W
跟进0046AE39处CALL来到：
/ i% [& B$ a& q! c1 w# u0046B9F4 55 push ebp
1 V0 U" s7 b' C& W0046B9F5 8BEC mov ebp,esp
' T1 T0 T5 _. e7 G0046B9F7 33C9 xor ecx,ecx
2 u) ^" C* X' X7 s" O2 q2 Y, r0046B9F9 51 push ecx; I! ~$ E: N1 @- s; [' X$ V
0046B9FA 51 push ecx. ^7 F' \9 D8 k) M1 U. |
0046B9FB 51 push ecx
/ K$ A# a( k, i) z( m6 C& Y' K0046B9FC 51 push ecx
* K6 G6 b" U1 w- z( U4 g0046B9FD 51 push ecx0 P$ V8 D2 P. J1 U8 h2 @) `- d
0046B9FE 53 push ebx
; r! y- t4 x, B B( p0046B9FF 56 push esi- l# z) ^1 M, I5 }& J/ ?/ Z6 ?
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax! i q% F5 @! _/ _2 \( T9 n, E% [
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]. a$ z+ `, V9 H- \5 T7 Q
0046BA06 E8 FD8DF9FF call Unpacked.004048086 p; V' Z/ t3 z; R3 p
0046BA0B 33C0 xor eax,eax& j! x- ^5 }6 A: [1 O& u1 S
0046BA0D 55 push ebp
9 {7 F7 F- P& V) ?7 o9 U0046BA0E 68 91BA4600 push Unpacked.0046BA91
9 g0 n+ V6 b C0046BA13 64:FF30 push dword ptr fs:[eax]! j! c( B. D' E! L- A5 V
0046BA16 64:8920 mov dword ptr fs:[eax],esp
$ {+ ]( z8 V2 p& `. ?* f" ?: `6 w3 l0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
/ h/ B k$ j6 U0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]0 ~1 d t7 \6 B3 J) h
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 2 j' J& Z: X7 N. e/ `0 p
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]7 i: B1 A: A# M. H: y$ ~
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
0 U9 Z: j" S% R/ p* `4 S- B( @$ b0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进) G5 T8 e' [9 k5 @% z' G r
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里, E7 F$ T# P5 ~! r+ ]
0046BA34 B2 01 mov dl,1 ; DL置1
. M4 q5 |- l* [$ e* j4 s" ~' G0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
- r* \- I8 d) T3 i3 ^) \. q0046BA3B E8 78A3FFFF call Unpacked.00465DB8; o: l" |& f( K. ?7 A3 c
0046BA40 8BD8 mov ebx,eax3 d/ N: r% w$ u+ L
0046BA42 6A 00 push 04 J, h% E) v( z! e; F( A9 W( g
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
3 k9 P0 P9 d" V( u* D% f0046BA47 50 push eax
9 \0 L0 a6 V; g* ^5 i0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code") g9 m3 o; p" B+ Y L
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
- h) v2 B$ t+ \. G1 t' {- T+ Z; R0046BA50 8BC3 mov eax,ebx: u3 U6 _5 C( Q
0046BA52 8B30 mov esi,dword ptr ds:[eax]* K" I8 O3 f0 ~1 y
0046BA54 FF16 call dword ptr ds:[esi]* L# K! G$ g. o! G+ W2 s* D# p& X
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX$ ]3 D( Q" d0 w
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
5 w0 @) L$ r4 y4 ^! H; w8 X0046BA5C E8 B7CCF9FF call Unpacked.00408718% w! T6 M4 n' h& d- z" v
0046BA61 8BC3 mov eax,ebx
3 q2 K/ ^8 x$ Q3 P( m* Y, z0046BA63 E8 107BF9FF call Unpacked.00403578
$ ]" O; s$ K1 M9 a& ?; W0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
& X1 [4 u* U# z+ H* @. Z3 j* T8 i0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
+ d6 _3 T8 l. n+ n- `2 O0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
4 ?) k, K3 [0 T0046BA73 0F94C3 sete bl ; 置BL值% i7 B1 b1 \3 J7 k0 Z+ j
0046BA76 33C0 xor eax,eax
# d) C$ F1 K) k& q: }3 i0046BA78 5A pop edx- G M; M2 U1 [0 V2 j
0046BA79 59 pop ecx
/ k% s/ d1 _1 r* n' o0046BA7A 59 pop ecx
1 }3 c4 L% a* e- N9 \1 L' O4 w0046BA7B 64:8910 mov dword ptr fs:[eax],edx
3 y$ \; X6 c5 T8 m! E( h- e. |! n I5 h0046BA7E 68 98BA4600 push Unpacked.0046BA98
; Y3 d* w: q% _* Q9 W7 u7 s' f0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
; T' H& T: _ m$ q0046BA86 BA 05000000 mov edx,5
$ }$ Y% O0 L2 p7 N% k t0046BA8B E8 FC88F9FF call Unpacked.0040438C- l$ m3 A4 e I
0046BA90 C3 retn3 y6 @+ j3 k4 [- [% \; U. X/ A
****************************************************************3 V( J% n: q7 B: t
跟进0046BA2A处CALL来到：
) |, g7 w% P6 ~' n! G0046B908 55 push ebp
! ^/ z6 H/ @& \4 ]* g: R0046B909 8BEC mov ebp,esp# k& r0 Z) N7 f3 q7 W5 g
0046B90B 83C4 DC add esp,-24
- r0 d% U' ?+ F' r, c. M* `4 G0046B90E 53 push ebx' p, v% ~9 D- n3 [6 E. |$ a
0046B90F 56 push esi5 H l+ U) m, j' J% _6 M
0046B910 33C9 xor ecx,ecx F8 S. g8 |3 Y- |9 M; ?
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
% z+ x5 }- C+ U4 I: c, `- _0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx* z/ \9 n C# |& M8 n h5 K: m
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
# n( S/ T$ J9 {1 H0 A0 Y0 o0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
! ^. }( J X S# v8 c/ Z. }, r0046B91E 8BF2 mov esi,edx
+ g5 I& H$ ?( j: O0046B920 8945 FC mov dword ptr ss:[ebp-4],eax, L$ H& T8 D" d) U
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
: Q- \3 R8 l* t5 X0046B926 E8 DD8EF9FF call Unpacked.00404808. Z Y0 g! w1 u! @# l
0046B92B 33C0 xor eax,eax0 x1 ~; ]% f8 q0 v
0046B92D 55 push ebp# v4 Z3 R* s9 o- N7 Q( [- [
0046B92E 68 CEB94600 push Unpacked.0046B9CE
( X! M% ~ L& `( p0046B933 64:FF30 push dword ptr fs:[eax]
% t- H/ a) i7 L5 h4 I8 ?9 b- o2 A0046B936 64:8920 mov dword ptr fs:[eax],esp* Z8 x) W1 }* r& @' P6 p
0046B939 8BC6 mov eax,esi7 ?0 @9 F8 D% k2 i1 i, M- |2 A- H
0046B93B E8 288AF9FF call Unpacked.00404368, h" _( t1 T7 ]
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]# x1 H' O* F" [ b' j& k1 {
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX0 F* [$ {. y( M( f4 v: g8 w( m
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E42 f$ O; v. u' v
0046B94B E8 1C8DF9FF call Unpacked.0040466C2 e2 ?, j3 s) e9 X
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]0 Q2 s8 Y) E& O2 U/ q, S
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]2 L6 E: G% w1 P7 y4 [ U- U
0046B956 E8 EDBCFFFF call Unpacked.00467648
: L5 k3 I1 [ [8 R6 i! `5 d5 O0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
7 d, K, h% i" ~: _. A* D: F0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]$ c; ?8 c3 A0 S! A# e; H* l2 k
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e/ Y4 ]6 f$ F/ n
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
$ w; P- Y3 E! ^/ O; g1 y& t) u$ l0046B969 E8 FA89F9FF call Unpacked.00404368 i$ O. n$ a/ ?6 s$ x6 [/ F
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
4 _1 V% K4 a# R, v0 S5 H0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX; k. x1 h1 r8 @8 h
0046B976 8BD8 mov ebx,eax ; EAX送EBX
& B; M1 `. X+ j7 ]. b1 o0046B978 83FB 01 cmp ebx,1 ; EBX和1比较 a% j' u+ V7 ?+ r5 C' f
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳6 t# I4 O. ~# d/ K2 o
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算# I, V4 q4 U# i+ M( V/ ?
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
: `/ }$ C: ] U o! S# [0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
% [2 p P3 v( N: z) c8 n( F& j0046B987 E8 BC8BF9FF call Unpacked.00404548/ t& Z1 a; u& X
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
; l" b# j" z; _' s0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX& b! K r, J& V6 l& F/ A4 C
0046B992 E8 918CF9FF call Unpacked.00404628
# V+ r9 j2 q: ^- C* `, I5 d4 b0046B997 4B dec ebx ; EBX减一5 ]2 s# d4 K) a9 n- G g9 O( n
0046B998 85DB test ebx,ebx ; 是否为0
" s% J& |* G# x0 h0 V* b8 _0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
6 e! y4 x3 {* x% E0046B99C 8BC6 mov eax,esi
- P* w- m* F5 c& D0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
8 h9 T- [3 Z+ I0046B9A1 E8 168AF9FF call Unpacked.004043BC* b. @* m+ y6 B. @+ g$ ^4 y
0046B9A6 33C0 xor eax,eax
( E$ R- M; l& o0046B9A8 5A pop edx) {# }) g. h: \ k- F9 c0 \& i# t
0046B9A9 59 pop ecx' z% w' \( g7 |8 G
0046B9AA 59 pop ecx
% R7 ^/ B3 b( K6 y$ P0046B9AB 64:8910 mov dword ptr fs:[eax],edx
6 I- c% c7 `- N3 Q* w F2 Y0046B9AE 68 D5B94600 push Unpacked.0046B9D59 X1 N. ~. ^: U) G/ Z
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]5 T+ K/ _ K* A& x/ y" E
0046B9B6 BA 02000000 mov edx,2
+ x! x* w" P1 ~1 W+ U8 M0046B9BB E8 CC89F9FF call Unpacked.0040438C
; Y# N% S5 J: C# i( E, @: m0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]/ Y6 S, [5 a1 }* }6 M$ Y) G
0046B9C3 BA 03000000 mov edx,3
! B3 q$ {! ]* i: A0046B9C8 E8 BF89F9FF call Unpacked.0040438C
- d6 G$ r v$ V. S- ]3 \- I0046B9CD C3 retn
: F- m. a, C) H5 {' i# H( I****************************************************************; J0 J J$ Z% z* ?+ [! c
跟进0046B961处CALL来到：
, O/ M/ k: f' `' j' k004676BC 55 push ebp$ G: n. n; D6 G1 f: A
004676BD 8BEC mov ebp,esp
0 Q" t g8 s: h004676BF 83C4 E8 add esp,-18
7 M Y& z1 T& l004676C2 53 push ebx, g# Q Y) ^7 l' B9 }
004676C3 56 push esi
8 _& E0 Q& n0 l004676C4 57 push edi
3 F4 x$ F* d2 ]3 Y( Q) \) y004676C5 33C9 xor ecx,ecx
- C- A0 N, s. J. b004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
$ j- m) l7 G6 H* O004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
: T, z$ Y n) j7 }6 k6 f004676CD 8BF0 mov esi,eax! \ P, F1 u: g8 R/ u+ |
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10] {. z/ w, O e) m0 H: g. @; @
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>1 a" Q7 T: m& y5 {
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>- B/ u: p+ S: [% N' K }& W
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>! n7 D: J& l0 t7 ^
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi># r% c f. \2 s) c* x, A. y
004676D6 8BFA mov edi,edx
9 b9 n1 V) `0 e7 u) [1 y6 Y. m004676D8 33C0 xor eax,eax
. J. o2 U7 z% F: m7 V004676DA 55 push ebp
6 ?* C$ |1 m7 c# e: ~' C004676DB 68 57774600 push Unpacked.00467757, O+ h, O- x. E1 m& P8 U$ D# O
004676E0 64:FF30 push dword ptr fs:[eax]1 e( F2 |0 _7 R
004676E3 64:8920 mov dword ptr fs:[eax],esp' f, j2 Z" U/ t) E
004676E6 8BC7 mov eax,edi
E2 p7 e/ p8 [8 {2 h004676E8 E8 7BCCF9FF call Unpacked.00404368- _' E& b; \+ A( g h3 X) i
004676ED B3 10 mov bl,10' u9 v* X4 n4 G
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
2 I$ K! b8 I. p5 z- U8 s004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****& S, @3 G# X) ~& A7 J5 g) t0 ~5 `4 }
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14], h: |9 j" x1 J& S9 G
004676F7 33D2 xor edx,edx
$ j% m( A3 ]2 h004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
9 E# a$ D5 V) b! r$ l" }004676FB C1EA 04 shr edx,4 ; EDX右移4位/ F8 ?; w2 d+ K" t
004676FE 83E2 0F and edx,0F ; 和0F与8 U5 O" j8 Q0 J' F
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL( N" m# z9 D- z; \. a0 R. `/ ?
00467707 E8 3CCEF9FF call Unpacked.00404548
6 o% D5 D' b, B- O0 @, o! I0046770C FF75 EC push dword ptr ss:[ebp-14]
$ B6 O0 `+ D9 i' F0 J2 L0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]8 p4 W: T) R* k$ ?/ m2 C: F
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
; W- ] n, } g1 a00467714 80E2 0F and dl,0F ; DL和0F与1 f: @+ m% h* G8 a5 C* h
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
9 [5 T8 u) { G0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
7 u o) V* `, f- i7 V- h4 F00467723 E8 20CEF9FF call Unpacked.00404548
4 K, S, f+ }/ t% c00467728 FF75 E8 push dword ptr ss:[ebp-18]
; A& [4 ]: p2 @" j4 ~0046772B 8BC7 mov eax,edi ; EDI送EAX% ~2 M! h& d" ]+ s& W+ R8 d
0046772D BA 03000000 mov edx,3
" K- m" C0 w2 b6 c& p. {2 b00467732 E8 A9CFF9FF call Unpacked.004046E0' s- y# `1 m! N( K: Y- C: u5 v
00467737 46 inc esi7 w+ t5 t6 A8 u3 ~
00467738 FECB dec bl
" g# ^* B0 b! y2 j# J0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
" T+ M2 z6 d. H7 }- t! y4 x0046773C 33C0 xor eax,eax
& a! H$ I, ~0 z0 [% n5 B i- m9 d6 Z0046773E 5A pop edx/ D" k9 c, Y* Y& P P/ R$ @5 b% l! W% j
0046773F 59 pop ecx) S6 T, z" t0 s
00467740 59 pop ecx0 P% X! F& i) C* `
00467741 64:8910 mov dword ptr fs:[eax],edx$ I* d) V7 {) Z% k! y$ ^9 }
00467744 68 5E774600 push Unpacked.0046775E
- X2 k+ |, ?4 I3 p" ^& a! s+ [: p00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
# _3 L7 H/ k! R! X0046774C BA 02000000 mov edx,2& Z8 f, u! b9 D# \; w
00467751 E8 36CCF9FF call Unpacked.0040438C
) j+ ]; q: D& U9 Q00467756 C3 retn //返回- v. Q+ u5 w2 C3 _- z
———————————————————————————————————————————
4 ~1 \/ J, t1 s2 D. u【Crack＿总结】：
+ {8 ]# G% I% I# z. Q8 v0 r将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^9 V/ r O3 y% l5 c) x: R
机器码：bbba33de56c4cf31d9063cc074248d4b
6 Z1 T0 P7 t; l2 Y# d注册码：e807519487d7ad4f57ad42dc87fbb1911 L. f) k R$ F3 ^
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡