|
|
|
【原创】破解图章制作系统 ]5 ?) W: u% {. `# N' r( h: N
日期:2005年5月15日 破解人:yijun[PYG]
8 }, ^5 w/ j# l" Y9 F4 ^———————————————————————————————————————————1 E/ S5 q/ y9 `9 h
【软件名称】:图章制作系统 软件版本:1.0
7 p5 N8 {: i' Z; _- V2 w5 N+ f【软件大小】: 252KB
" S! t3 Z# N/ ^: M【软件简介】:制作各种图章; z( d# @. P* d! j7 r6 e
【软件限制】:NAG
# b& B; ]0 Y9 |, \1 W【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!& L, d) I# A4 a
【破解工具】:OD,PEID5 w9 A u# W% Y# T) [+ G0 F
———————————————————————————————————————————% t! @0 K* g- A5 T
. K/ m/ w O: f
【破解过程】:
" M" y2 r2 m) c* ` APEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
4 e6 E3 R- `( ]# H: m" w8 a! U; YOD载入,通过字符串查找很容易来到这里:. B; D5 f7 r6 C, T2 m
0046ADAC 55 push ebp //在此下断
3 Z& q( H' _! W# \ W8 h0046ADAD 68 A0AE4600 push Unpacked.0046AEA0" D. t- i+ h. O& ^, m/ E) z
0046ADB2 64:FF30 push dword ptr fs:[eax]
, l0 l8 P+ H( Q0046ADB5 64:8920 mov dword ptr fs:[eax],esp
$ M* p6 R7 v6 D4 S/ A' a# O$ ~# G0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
8 i$ ~# E9 @3 {) m2 I# V0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
$ G- ^: X2 d+ y6 _2 e0046ADC1 8BC6 mov eax,esi
+ @' P- c" T; s$ G: s, s$ d) |0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
8 ?6 n% ?6 |2 D7 \; u0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
- m3 a$ B' \1 F# P6 a0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
P6 w9 Y* U: D' E1 Y0046ADCE E8 45D9F9FF call Unpacked.004087181 @8 t* d, G5 u! J
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX8 H, I% A6 M/ Y: a4 A" T# Q
0046ADD6 8BC6 mov eax,esi
0 X. D# i; d4 k" d5 H% A/ o0046ADD8 E8 3359FDFF call Unpacked.00440710
2 e5 l3 j+ E2 h( @7 `3 J2 j5 j0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]3 ]: n2 U/ g. K3 Q' h8 Q& L
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]3 [# t/ y% c+ X2 _: T
0046ADE6 E8 F558FDFF call Unpacked.004406E0
7 l: S" m' o8 `! p4 {9 k0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空% k0 m- o$ G9 N/ ]6 Y
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
4 U& W7 B* A- Q( M0 v0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
1 R E2 Q3 S z% _( B3 |0046ADFA B2 01 mov dl,1 ; DL置1) ~3 Z" h m! s/ t
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
: n9 G1 q0 h) K+ h+ e6 W0 K; |0046AE01 E8 B2AFFFFF call Unpacked.00465DB8* u, @% \: a; [ `
0046AE06 8BF0 mov esi,eax3 \' J5 k# n, C
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
* G3 d$ s# M; V8 I( {0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
: D7 l* _5 w4 H o$ G0046AE11 E8 CA58FDFF call Unpacked.004406E0/ H$ r/ U h* F, F
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
5 }5 ~- y! y0 E9 g' [/ j9 F' f0046AE19 50 push eax4 b0 {0 C( Y) h% D+ Q8 v! L4 z
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
! x1 ]$ y- [ i& |6 m4 L# g0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]" ]) L. K( t" K2 `
0046AE25 8BC6 mov eax,esi
: b0 c" m" p" x* l2 {1 T0046AE27 8B38 mov edi,dword ptr ds:[eax]- p) b. J: C" _8 a* L& ^) @
0046AE29 FF57 04 call dword ptr ds:[edi+4]
, a6 c9 f [9 E `0046AE2C 8BC6 mov eax,esi, M* [% \$ R2 [& L. X! \1 h
0046AE2E E8 4587F9FF call Unpacked.00403578
$ n- U0 R' G6 L2 {1 c1 Y* K( u0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]2 r/ x( B" Z' `# O6 u: o* a5 w& X1 a
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
/ g% e* w9 S) E" [' u# e" q- Q) P0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
6 X" a7 D( F9 X0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~( l$ C- V# f; T1 l. a+ `
0046AE42 6A 00 push 0
4 M7 H4 l4 m/ g r/ o4 C) }0046AE44 68 D8AE4600 push Unpacked.0046AED8* F% L U/ f" n3 \. o2 x+ Z
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
9 N# C4 T$ _' B- C0046AE4E 8BC3 mov eax,ebx
) { m* R s( E0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
+ b' z7 `9 |4 i; h Y; z0046AE55 50 push eax3 V( r- c& }) [2 i
0046AE56 E8 DDC2F9FF call
$ D; x% S# Y3 |- T# u) ^0046AE5B EB 20 jmp short Unpacked.0046AE7D
/ |0 {0 T8 Z8 O6 u4 z# n0046AE5D 6A 00 push 0
6 A3 N3 ~' i9 K: t8 c( q0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
/ V7 K( y0 E/ P2 i* X0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
: v# T# j0 |1 h/ W/ k# h- g0046AE69 8BC3 mov eax,ebx
3 b1 o- U# l l' |0 E+ z' I7 E0046AE6B E8 88BFFDFF call Unpacked.00446DF8+ k: D g9 o+ K/ k p
0046AE70 50 push eax9 q3 B* ^' _8 n, T
0046AE71 E8 C2C2F9FF call
9 x2 q+ u! R5 ]5 }4 m7 p0046AE76 8BC3 mov eax,ebx
- e6 Z3 k; a* V( g8 ]1 _$ T+ B0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
! M( x* r8 a' q5 x5 \0046AE7D 33C0 xor eax,eax+ X2 O4 }& x/ D: R2 L
0046AE7F 5A pop edx7 K. {7 i7 P, R" K, J3 R
0046AE80 59 pop ecx7 y7 n+ o# |; `! ]
0046AE81 59 pop ecx
+ x; u1 k+ b% f0 ~0 R0 g2 r. p0046AE82 64:8910 mov dword ptr fs:[eax],edx
Q ?5 H6 H& s; W: \3 k; o0046AE85 68 A7AE4600 push Unpacked.0046AEA7
$ D7 h% k; k( P) n2 f$ [4 N) r0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]7 d8 S$ f1 X8 G: y7 r
0046AE8D BA 03000000 mov edx,3
/ E/ X( f8 C4 u9 w# {# H0046AE92 E8 F594F9FF call Unpacked.0040438C0 \) H W8 B" O6 M. S( M
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]1 Y8 i1 h9 w+ t) U5 o" t2 J9 m: e+ b
0046AE9A E8 C994F9FF call Unpacked.00404368
' ]; N. ]4 I% J% {/ J8 T; s0046AE9F C3 retn
, B6 b# C# {0 N9 K+ s0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
! L% q/ K1 `8 q% F1 M0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
. l6 Y' w1 R- X7 P4 X9 a( q9 Y- m6 I****************************************************************
1 g6 O- s M1 P3 S跟进0046AE39处CALL来到:2 o% N9 }$ p6 J8 S; L
0046B9F4 55 push ebp
+ w% b4 B9 o, [4 ~0046B9F5 8BEC mov ebp,esp
- x3 @3 Y2 r- o8 u3 L0 O' S0046B9F7 33C9 xor ecx,ecx
) h$ R' F; c( A' S0 a3 k& a0046B9F9 51 push ecx
) I! T) V4 r/ c5 Q, g; _9 V4 u4 V0046B9FA 51 push ecx: j! ?& S8 V. \$ |( G
0046B9FB 51 push ecx
- e' R$ ]9 x6 ?( A. S& S0046B9FC 51 push ecx
$ a, r; j/ a( O/ C* T6 Q5 }, W! K0046B9FD 51 push ecx
- F+ v8 T$ ]/ [0 M& P& u3 u9 n0046B9FE 53 push ebx- r" E! O( U* d0 \* {0 o& E' p: D
0046B9FF 56 push esi. n3 |; o& c7 o+ r( h- ]5 I
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax- t6 c; v' S) i6 V+ {
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]/ P e$ W; F7 r! N. z
0046BA06 E8 FD8DF9FF call Unpacked.00404808' E5 @0 q7 i; i* b
0046BA0B 33C0 xor eax,eax
2 _' p x: L% y( s0046BA0D 55 push ebp
* t2 q+ H; F- H7 B0046BA0E 68 91BA4600 push Unpacked.0046BA918 Y; H$ h. g' G, J$ z% _' i8 ~
0046BA13 64:FF30 push dword ptr fs:[eax]
" R1 N+ Y2 z9 B0046BA16 64:8920 mov dword ptr fs:[eax],esp N/ i, p+ [$ i' f1 A. m7 m: W
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
" P' w/ y7 d2 f5 C% T) T8 R) T0 b0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]& l9 Y4 h$ U/ I/ ?* C
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
?2 Q) t2 F, | x0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
8 b2 v+ ^, n6 u' [/ b0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX2 \2 s9 P) I- t9 f4 c- H' Y
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进2 R6 i) x# B' B% [) W
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里& q: U1 c+ Q! R6 D+ k& {
0046BA34 B2 01 mov dl,1 ; DL置1! T4 h3 L8 p. p' a9 V j, ]
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]' N! f/ |7 \% ]& l: M; z, ]; U
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
O) ^5 d9 p* a4 }0046BA40 8BD8 mov ebx,eax
6 e/ I2 Z$ ?0 x o0046BA42 6A 00 push 03 c+ @( r7 @! a) o- U1 |; N
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
; [8 w" u9 W# m" ?2 l- E& `+ C0046BA47 50 push eax. C- E# {0 p$ T9 w2 h2 L& ~5 v
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"( f3 |# E1 E. X& s) h7 y' k
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
y/ c: _7 p/ J0046BA50 8BC3 mov eax,ebx4 S6 X+ w% b* V
0046BA52 8B30 mov esi,dword ptr ds:[eax]
' @) v' i, B+ T( O8 O B5 x' ^0046BA54 FF16 call dword ptr ds:[esi]6 S) w8 t2 ?4 p
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
9 Y6 L! _' P- p0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]2 L1 }( d4 T- g: L, t# [1 n9 H
0046BA5C E8 B7CCF9FF call Unpacked.00408718$ g! ^# d6 V7 ?7 D2 f& E
0046BA61 8BC3 mov eax,ebx
8 k) A, E0 C4 z' u9 u0046BA63 E8 107BF9FF call Unpacked.00403578 ( q" `5 M0 {( C+ I7 e
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX/ u. k2 r+ J5 c( h$ e
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX5 i" O4 |# ]7 C% f
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
: p2 j" \5 G) d3 L% S0 Z0046BA73 0F94C3 sete bl ; 置BL值" q: w$ D5 n8 H. \3 Q+ `1 y
0046BA76 33C0 xor eax,eax
2 u2 ^ p+ H1 x2 O$ h K/ b0046BA78 5A pop edx2 l; [' b1 z! `2 b% e5 i% H
0046BA79 59 pop ecx
& L5 X/ j/ G$ R5 i1 a$ q2 t0046BA7A 59 pop ecx4 f" i' Q1 t2 _8 i% _/ D: x
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
5 T z/ q& S+ C2 W+ o) ]0046BA7E 68 98BA4600 push Unpacked.0046BA98. {% [; F( \7 ~6 G/ N" I) m# o
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]. L& D D x. I9 |' u" s
0046BA86 BA 05000000 mov edx,5
, z4 V9 ~) r, q% Q0046BA8B E8 FC88F9FF call Unpacked.0040438C
~6 }4 I3 \+ i7 H0046BA90 C3 retn
3 V" _9 k% e! ~& u****************************************************************, ]5 O2 \ o1 i0 H3 O; {
跟进0046BA2A处CALL来到:0 \% H4 l) h8 B7 w0 Q% \
0046B908 55 push ebp+ b: K' T, w) x( o1 F0 t7 t1 A
0046B909 8BEC mov ebp,esp
1 _0 C. A2 T7 F& @, e! t0046B90B 83C4 DC add esp,-24/ W5 Y' H6 f2 T; @
0046B90E 53 push ebx7 d+ H" B4 e! ^0 \- K
0046B90F 56 push esi! t8 o9 t4 _& \: ^: c' a6 r" i5 g
0046B910 33C9 xor ecx,ecx N6 g" ]/ z6 Y) }. o, |
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx9 J, w* r! p: s$ Z' d! O! {. g/ ?+ e
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx: Y/ U9 k" A, T8 R4 w1 G+ \, S
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx- }& _. ~0 `+ \. H% o
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx# I* V9 y, }' k5 y. s
0046B91E 8BF2 mov esi,edx8 ]) \9 c5 j! h: E
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax% G- o8 |7 c: w
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
' M& T9 w8 t) q; H0046B926 E8 DD8EF9FF call Unpacked.00404808
" l/ n; j# M# L' m0046B92B 33C0 xor eax,eax
+ `( _/ S& h( Q6 \. u) d2 S* _0046B92D 55 push ebp8 }, ^) i! v. V. {+ _1 b8 }% e
0046B92E 68 CEB94600 push Unpacked.0046B9CE# g+ o4 }. I+ d
0046B933 64:FF30 push dword ptr fs:[eax]
8 S9 e5 |. t0 I0 e0046B936 64:8920 mov dword ptr fs:[eax],esp* P; J8 k1 A& b+ m( w0 b
0046B939 8BC6 mov eax,esi! [6 K# m2 M) z0 ^0 b; X2 w
0046B93B E8 288AF9FF call Unpacked.004043688 K4 M+ {% V' D3 y
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]1 q7 z6 I7 d" N6 Y1 L! `
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
4 P; J8 @6 _& p4 C1 I; x3 c2 O0046B946 BA E4B94600 mov edx,Unpacked.0046B9E40 g4 g0 w# g% |9 {/ b; E
0046B94B E8 1C8DF9FF call Unpacked.0040466C
, b4 v" Q' b% ]5 D0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
$ y5 b2 d8 ^$ t6 V1 y0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]* R4 P- }: g7 ?* V
0046B956 E8 EDBCFFFF call Unpacked.00467648+ g5 N1 K. Z: G! U7 H- ~& G j
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
' I5 r7 `$ H8 r( V1 h/ E1 Z0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]% X6 w# |3 C; ^: Z- K: }
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
( T6 a* o6 Q7 o/ d( c0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
% h$ p% o- l% C* F& B7 [0046B969 E8 FA89F9FF call Unpacked.00404368
5 s* c- P; X+ y1 K! c0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
- L4 b' P; q% P; }6 y0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX$ [9 `5 |' |1 `; R; C( b
0046B976 8BD8 mov ebx,eax ; EAX送EBX
8 f8 c2 I' k ]( m7 N1 K0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
H# I B/ Z' `8 F0 J x0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳+ ]) a3 m0 o8 t! }% S, s" F" S
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
3 o+ _: X! R2 h z0 @0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX( B: k: Z" y- J. w5 e& l/ I6 F; Y/ f
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
2 G. H w3 @) v9 J0046B987 E8 BC8BF9FF call Unpacked.00404548# x9 G0 \! e) z
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24] \. r3 A e1 h0 V o
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX* I3 Q4 c; c# j! R) a r0 P: w# l- e
0046B992 E8 918CF9FF call Unpacked.00404628
) U5 @' D" G6 Y% ?$ ~0046B997 4B dec ebx ; EBX减一
+ z5 `: y: U5 z& ?4 T/ ]0046B998 85DB test ebx,ebx ; 是否为0
1 U7 y4 S0 n; @7 F- A0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。- X# w% J. E& B0 F4 F
0046B99C 8BC6 mov eax,esi
/ S5 X b( R1 S5 E' \0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
* b. X/ m: G" o2 c4 X) \0046B9A1 E8 168AF9FF call Unpacked.004043BC
1 ~5 b* K+ S- @ Z8 A% y/ r0046B9A6 33C0 xor eax,eax
+ w- f0 l0 Q& B- s; S0046B9A8 5A pop edx! t# Q+ _2 d% W7 H7 l
0046B9A9 59 pop ecx) t4 Z { V: P# P! g: c
0046B9AA 59 pop ecx! c, c; M" C& H) x
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
. E! Y) k5 P! ^0046B9AE 68 D5B94600 push Unpacked.0046B9D54 P- l( c! K2 P; ]$ Z% `
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]$ N4 {/ ]4 K7 I2 r7 M
0046B9B6 BA 02000000 mov edx,2) k! H# \1 [6 x! `$ i
0046B9BB E8 CC89F9FF call Unpacked.0040438C' M3 {' K) x- o$ ~! A8 W' d
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]% H0 V y: q! p) P q1 z
0046B9C3 BA 03000000 mov edx,3/ Y5 p0 U h0 J
0046B9C8 E8 BF89F9FF call Unpacked.0040438C* L8 k) s+ X g6 f, p
0046B9CD C3 retn9 {. p+ C5 t# M* Y
****************************************************************" q% N9 _" ~8 I, f$ P/ S
跟进0046B961处CALL来到:# Z3 t' T# i! ?5 G
004676BC 55 push ebp4 `. q5 P0 T4 `) l2 _2 p' }9 b3 V
004676BD 8BEC mov ebp,esp
, j/ C" [6 [& ^004676BF 83C4 E8 add esp,-18
$ @5 k& G) X. P) g004676C2 53 push ebx7 f; D1 n4 c: y# ?5 b9 d/ C w; z
004676C3 56 push esi
; p9 }7 d: K. T, s6 G2 T004676C4 57 push edi0 n% k/ ]: l L) _
004676C5 33C9 xor ecx,ecx
' `: x* V+ r0 E3 w. P' Y004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
. ~) i6 D3 W2 k9 \6 q004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
# M$ M3 k6 K) R, Y004676CD 8BF0 mov esi,eax
) w v4 |4 }3 Y6 ?) {) L004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
$ `/ |. }- N% g- h8 i+ M+ q004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
7 o+ T E9 x. n004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
4 `4 B7 m& e/ [# C) j$ l; p* h. I004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>* g* X3 u' e& X7 d8 k) G: M2 i- g
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>3 ^! q) z9 R1 t9 u' j' `7 @0 v
004676D6 8BFA mov edi,edx
, q9 t+ k; l* `004676D8 33C0 xor eax,eax9 u/ o) i3 }# D9 m2 W' E
004676DA 55 push ebp7 {$ B9 n9 x5 x }
004676DB 68 57774600 push Unpacked.00467757( M5 U; _+ V9 S" n2 b
004676E0 64:FF30 push dword ptr fs:[eax]# _$ u+ ]( k0 \/ |3 p k
004676E3 64:8920 mov dword ptr fs:[eax],esp
! N' l' q" y" ?, ~6 b2 J004676E6 8BC7 mov eax,edi |2 Z- C( y. H# V3 [* T9 b \
004676E8 E8 7BCCF9FF call Unpacked.004043689 B* z2 ]' S# ~/ ?7 g9 D+ t
004676ED B3 10 mov bl,10! L! \( C1 a: a/ Q. f
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]0 h, y" A Z4 Z+ x9 ~
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
7 W$ o, ~6 S# R; n* X! W004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
/ x$ t2 T0 s& K! |, s9 {. r8 j004676F7 33D2 xor edx,edx% M' W% p3 E4 C0 W, g: U
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL+ c+ j; z- l2 M. x; ~
004676FB C1EA 04 shr edx,4 ; EDX右移4位
% g8 }; T& Z# m/ _! O/ G004676FE 83E2 0F and edx,0F ; 和0F与
5 H9 D; [6 C) _7 L- l& x+ Z# H00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
$ d) ]; Z1 K+ t- y) m00467707 E8 3CCEF9FF call Unpacked.004045489 J5 u# ^- L: I2 `, x# T
0046770C FF75 EC push dword ptr ss:[ebp-14]
8 N3 g+ O, u: X( O4 d" v7 a, l0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
! Q" N- n# R# _1 ]- f# A00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL8 i; C% t0 {2 Q( F5 f, H" b1 N% f
00467714 80E2 0F and dl,0F ; DL和0F与; H8 T4 D8 W! g; C3 q
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
5 j- U1 E5 S. J, q4 E0 k0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL% w( Z0 j2 R- n$ f* ]
00467723 E8 20CEF9FF call Unpacked.004045488 v) B9 S' Q/ y
00467728 FF75 E8 push dword ptr ss:[ebp-18]4 H. Y6 t0 K7 W
0046772B 8BC7 mov eax,edi ; EDI送EAX8 u) c7 s2 A: l' N( a8 t* d
0046772D BA 03000000 mov edx,3' {* v! G/ K/ O# n( U, f# K0 C& r
00467732 E8 A9CFF9FF call Unpacked.004046E0% D& U1 _: M# S: ^7 D" G) i+ f
00467737 46 inc esi
/ u7 Z' |' H) U6 x0 X8 ]00467738 FECB dec bl
- n& t" t. p+ ?, P/ t9 I0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e6 E8 V0 W" d5 }5 J' I
0046773C 33C0 xor eax,eax
1 m; f6 ` E% k7 S4 _7 i$ U7 L0046773E 5A pop edx
/ y2 G& |# i) R: B* \0046773F 59 pop ecx. h7 G& m- I- ?1 G, J
00467740 59 pop ecx" Q) _7 V' F4 A# \* e6 q% ?
00467741 64:8910 mov dword ptr fs:[eax],edx
, N1 O- u# S+ H k' d- o$ B: U00467744 68 5E774600 push Unpacked.0046775E0 v+ B8 _3 w! N9 E0 z1 r+ d
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]5 b+ F# I% ^8 u$ e6 z6 t% u9 ^ b' B
0046774C BA 02000000 mov edx,2% x8 v' t2 H) \+ e; m9 R* r
00467751 E8 36CCF9FF call Unpacked.0040438C d- e" g* l) |7 G+ \
00467756 C3 retn //返回
) P; N5 X& T+ w———————————————————————————————————————————
1 ]$ @' t8 c. E# W4 c4 x: X {【Crack_总结】:
% e( s& M; ~1 n* Y+ r" ^将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^) t: l$ g0 t% L
机器码:bbba33de56c4cf31d9063cc074248d4b: S0 {2 G6 H z( c
注册码:e807519487d7ad4f57ad42dc87fbb191
8 Y7 A& m% W2 T5 ^6 k0 k; [附件: MakeSign.rar (249 K) 下载次数:298 |
|