|
|
|
【原创】破解图章制作系统6 }3 _& ?2 d( ?, P+ M- S2 P) l# h/ t' y
日期:2005年5月15日 破解人:yijun[PYG]
3 w+ p5 ]3 K/ B7 I! ]! g———————————————————————————————————————————5 M- l8 @5 N" A2 H! R) t
【软件名称】:图章制作系统 软件版本:1.0- i, a, o9 v3 Q5 @1 U
【软件大小】: 252KB
% I& s! a. l& o+ o' q. H7 V2 U【软件简介】:制作各种图章
l0 \* T" j$ p$ _) p/ f; S7 Z【软件限制】:NAG; P7 H9 a* L6 y, z4 ? P
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!" D) o2 i* \) i4 Y4 O
【破解工具】:OD,PEID8 p$ `! H$ N& e
———————————————————————————————————————————0 j5 q; {' A: X' g
' F, T: g$ R3 M3 I# s【破解过程】:2 j+ Z: Y7 I4 f* n/ w, ? s
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
, F7 Q9 x- p9 c. IOD载入,通过字符串查找很容易来到这里:
& r4 v: V' T6 {! _0046ADAC 55 push ebp //在此下断& G) n& J7 `# K# k
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
( i- d7 I/ E! \" W% J$ \/ R7 R0046ADB2 64:FF30 push dword ptr fs:[eax]5 J: i( v0 p$ @) d" e: A- }1 v
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
& s8 ^- b; N( M; N- n, A4 n* g0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]* ]0 ~' P6 }# T1 o
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
: f" O: z$ ~ ~8 x, [2 D0046ADC1 8BC6 mov eax,esi H! |; i) s& x3 V
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX( x! V2 Y$ u, y2 ?$ ?- @7 ^
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
/ k% H1 A' ^/ e+ Q. e& e" W0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]4 }" A& D" c1 \) f4 S( L; r
0046ADCE E8 45D9F9FF call Unpacked.004087182 q( i# u, ]3 C) x# Q, v& q
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX! Q" V- M1 r' W8 W6 S3 v4 D+ X' [
0046ADD6 8BC6 mov eax,esi+ I( Z& W% T& q
0046ADD8 E8 3359FDFF call Unpacked.00440710. k$ x1 X. j5 E9 Z5 o
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
3 s$ y0 m) k/ ?1 ?( g4 ^2 C0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]5 ?7 ~% z; A: B4 S* H
0046ADE6 E8 F558FDFF call Unpacked.004406E08 r3 o1 h. j( a* C$ `. W
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空# ?7 ^* c3 k; b% m1 F
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳: f5 Z+ }: I+ H- a( s& D
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX6 G% t" {- y9 J
0046ADFA B2 01 mov dl,1 ; DL置18 }; g# w/ D0 Y: }. j
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08] e* U$ ~, c0 V
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
3 b- T# Q% O5 ]/ N, q% _5 Z7 [) J0046AE06 8BF0 mov esi,eax
2 E! O6 ?1 g( ~' A- J, a/ h0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]2 Q0 _. ~" y. G7 y6 B1 A
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
1 m! c( {& j( x* l3 c0046AE11 E8 CA58FDFF call Unpacked.004406E06 X1 c' e/ }/ Q- W1 @
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX6 B! B7 V- d1 M
0046AE19 50 push eax) s( y3 {" H3 z' y* [2 i
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX+ D- U5 {2 M/ x2 i
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
! P; w8 I" c: y1 p+ C0 X% V0046AE25 8BC6 mov eax,esi4 h# J3 G. V" `8 r6 b; N! s$ N
0046AE27 8B38 mov edi,dword ptr ds:[eax] [1 J \& l& t/ f$ _( F
0046AE29 FF57 04 call dword ptr ds:[edi+4]$ ]" }# ?4 Q) C! f7 ?0 @
0046AE2C 8BC6 mov eax,esi1 R+ e# c, ^# |( K
0046AE2E E8 4587F9FF call Unpacked.00403578+ Z' T5 Y& @8 N" G, E1 [
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
) X0 S5 D. |0 J* n/ A6 W+ X% x0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~7 b: e# {- r- _) a+ j- h
0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
% O2 z$ s. o" W D: b0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
/ ^( U$ p0 {4 _( e' C0046AE42 6A 00 push 0
! `7 ^! s [, |" Z" v0046AE44 68 D8AE4600 push Unpacked.0046AED8
. q7 H1 d# ~; S+ p2 v. Q0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
. F' a: `! a" k4 g6 X$ @ n0046AE4E 8BC3 mov eax,ebx
5 d5 z3 y, ~. S* s+ }( `0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
5 u% P& U* p. r" y* `0046AE55 50 push eax
) J3 I, }+ c/ e. k/ D5 @" ^1 f# r0046AE56 E8 DDC2F9FF call
+ \ t9 ~2 X$ t U0046AE5B EB 20 jmp short Unpacked.0046AE7D1 u8 N4 @! x( u% G* Z- }
0046AE5D 6A 00 push 0
" x1 \$ z! ]7 I/ a& m; u. \0046AE5F 68 F8AE4600 push Unpacked.0046AEF8% k, }2 }( Y, T7 O. l7 i& x- |
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
2 F8 w! u8 ~' I3 q% z0046AE69 8BC3 mov eax,ebx8 t, s, ~! u, P* S: B
0046AE6B E8 88BFFDFF call Unpacked.00446DF8' C% e$ w. `3 U- _$ \9 d7 o: V: X
0046AE70 50 push eax1 t5 @' X& a- G) E* n1 B9 g0 p- K( r
0046AE71 E8 C2C2F9FF call ( P: G* a0 |) |. f8 n
0046AE76 8BC3 mov eax,ebx( N& l; S7 u$ R( j0 ~$ \+ \
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC& o4 U7 C" m; \
0046AE7D 33C0 xor eax,eax9 m% ^7 U! t2 C1 V8 t
0046AE7F 5A pop edx9 X, |0 \& n6 K* k4 N
0046AE80 59 pop ecx9 r% P% j! e6 v# G* ]) {" ~
0046AE81 59 pop ecx* K$ r) @( s9 V& ?, H
0046AE82 64:8910 mov dword ptr fs:[eax],edx
6 x& ?) G" ?. }' T: V( [0046AE85 68 A7AE4600 push Unpacked.0046AEA7
9 { @. R n q& ^0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]( L# o. B# @* S# M- N
0046AE8D BA 03000000 mov edx,3
; g3 v) x& \4 r+ r" S$ E& d$ ]* |% `0046AE92 E8 F594F9FF call Unpacked.0040438C
* ?0 u$ r$ e) ]) v& M! H% o0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
, I* I* m7 _ A+ c0 Z# j" |0046AE9A E8 C994F9FF call Unpacked.00404368+ v* S, c1 x1 t }4 B2 r
0046AE9F C3 retn7 L, e/ b$ k0 G" a& H8 r" k) _
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C, p5 k' q3 ^! g1 x4 n# `$ \
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
' ~* ^8 E8 ~! a& l8 f$ v****************************************************************/ X+ U: h! d7 f+ ^& _+ D0 J
跟进0046AE39处CALL来到:
; y) K, a2 w- G( G8 ~0046B9F4 55 push ebp. k% l9 o* n9 y
0046B9F5 8BEC mov ebp,esp! B6 n9 O% H: W3 Q# Z
0046B9F7 33C9 xor ecx,ecx
8 O" ]/ O" m c: c. ^0046B9F9 51 push ecx
4 o% G$ Y2 e1 A- w0046B9FA 51 push ecx) R8 t+ ]4 X+ m4 p @: I$ `
0046B9FB 51 push ecx5 n8 I0 r' u$ t/ L
0046B9FC 51 push ecx
X# t1 A% S/ ]5 |+ V, v0046B9FD 51 push ecx
1 b, Z/ a0 m- z8 a0 O* f' E: e2 R4 i4 \0046B9FE 53 push ebx
" M7 o @1 H8 l9 X$ P# W0046B9FF 56 push esi
8 B% g- X' D( t( |! }0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax; V) z2 V C. F/ X
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]( f$ n1 M, ~" k5 b" ~' C$ ~
0046BA06 E8 FD8DF9FF call Unpacked.00404808! D! }& j1 O! I! ?! H, A
0046BA0B 33C0 xor eax,eax) P( o* D2 J4 k: s+ @5 a; F
0046BA0D 55 push ebp
E( @# E! k: p7 r# k4 y0046BA0E 68 91BA4600 push Unpacked.0046BA91
4 Z/ Y- X- `# L- d; h" O0046BA13 64:FF30 push dword ptr fs:[eax]" j$ u; z5 S5 }
0046BA16 64:8920 mov dword ptr fs:[eax],esp
& \; h0 \$ j; z: t c2 ]7 O% Q& Y0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
T* u. [% H. q6 z8 a" m6 p7 _0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
/ m* [2 S U+ s9 e2 H0046BA1F E8 DCFDFFFF call Unpacked.0046B800 _8 ~ q5 }4 ] w7 q7 r
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]! L- |- Z4 R1 \/ w) R; ?8 B
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
4 [5 l& V/ q) j2 H) Z2 v8 @0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进# d9 _+ A. ~# K$ I' E$ r
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
. m5 ]2 `% h7 R4 H5 E9 D0046BA34 B2 01 mov dl,1 ; DL置11 {6 \8 U8 U/ Q8 t1 r0 R* R
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
, C; f* e' y9 o- @; P+ \0 q- Y0046BA3B E8 78A3FFFF call Unpacked.00465DB88 |7 x, E2 E9 r9 N L
0046BA40 8BD8 mov ebx,eax
7 q" j* \% ^" K2 f8 P$ h% v8 T8 Z0046BA42 6A 00 push 0, g, n* L. c& x# p6 g+ J" e
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]/ y3 F/ B' F {) M
0046BA47 50 push eax
2 i: A: i+ l% K9 m0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"0 W! P5 X% C1 M
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]% e) Z( [* |$ L
0046BA50 8BC3 mov eax,ebx
% D8 Y& G) {6 ?0046BA52 8B30 mov esi,dword ptr ds:[eax]* g- e0 R- E- o3 R# D5 q
0046BA54 FF16 call dword ptr ds:[esi]9 a. b. @4 y+ T
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
. p+ j4 ^ v7 F4 b0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
3 `$ y. p) {/ I9 |0046BA5C E8 B7CCF9FF call Unpacked.00408718! m f h: f1 {8 h6 i% Q1 k* \
0046BA61 8BC3 mov eax,ebx
* b5 Z# ?0 |! B: {, D) {0046BA63 E8 107BF9FF call Unpacked.00403578 ) S7 w% }+ N) q# C g* Z: B
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX2 E8 |: e1 q d" w ^" r
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
) D' V1 l3 q- W1 A0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~( T# ^0 |5 d( X: D0 D
0046BA73 0F94C3 sete bl ; 置BL值3 I! k N; J! |3 `6 ?4 z
0046BA76 33C0 xor eax,eax
) G9 A; h% U# h! e: H0046BA78 5A pop edx1 l& s9 M; m" `% W
0046BA79 59 pop ecx; ]3 F$ O* }+ ?/ ~+ g- g' C- s o
0046BA7A 59 pop ecx
7 n5 [) g! Z0 A- c% b/ P! [1 m6 a0046BA7B 64:8910 mov dword ptr fs:[eax],edx6 A2 Q' J2 f2 ]( P9 l. x6 K( W
0046BA7E 68 98BA4600 push Unpacked.0046BA98
{: @1 i- ^( ~' K0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]- M9 _9 ? R; U4 |$ d. u
0046BA86 BA 05000000 mov edx,5
: }, a7 H- `8 w4 ]4 c0046BA8B E8 FC88F9FF call Unpacked.0040438C
7 D( \+ }. X' N" Z0046BA90 C3 retn
0 l& y9 e" H# ^" _***************************************************************** K* H) o$ \/ m* o+ d
跟进0046BA2A处CALL来到:* q+ A4 y0 P' i5 l. C- z
0046B908 55 push ebp
7 F+ I* d. [& x6 d" q% `0046B909 8BEC mov ebp,esp
' Q# t" P7 P1 n0 g' K( ?0 \5 u: v0046B90B 83C4 DC add esp,-242 U6 b; a- j* P$ h4 y: S
0046B90E 53 push ebx/ I4 z8 E6 R2 I1 R1 F! E% T
0046B90F 56 push esi2 p# k# E$ E( u3 X
0046B910 33C9 xor ecx,ecx
0 E0 J) R( I) }0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
7 ?) V+ j5 ?3 Y* K5 J6 t0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx" a& L- e: P, r$ `$ _" m
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx( @1 e( K% K# }2 [5 }- }
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
0 z! E3 _+ Q& s' k: o1 P# f0046B91E 8BF2 mov esi,edx# C7 X& H, U* E2 A2 b
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax8 s# n) D ~* S b; u' f
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]5 B- B) j; N# @+ Y
0046B926 E8 DD8EF9FF call Unpacked.00404808! f, ]6 x, m) Q+ ?1 m( o9 h2 T1 _+ q
0046B92B 33C0 xor eax,eax/ ] O5 \0 n3 a
0046B92D 55 push ebp
% z" U1 q# g+ J/ C0046B92E 68 CEB94600 push Unpacked.0046B9CE
& J. P4 W7 b" ]; a0046B933 64:FF30 push dword ptr fs:[eax]
* a" X; ^! S6 w+ }7 ~- D/ n0046B936 64:8920 mov dword ptr fs:[eax],esp
% M" y/ D% n# A5 o! e0046B939 8BC6 mov eax,esi
) l/ w9 {) z6 R" t4 [$ u- I' _0046B93B E8 288AF9FF call Unpacked.004043687 E: b# H' p/ `1 n5 b! W
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
4 r; }: M$ X( n0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX/ I# t1 }1 y S! W4 |
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4' J. W4 Z X4 x) ^* ~! z
0046B94B E8 1C8DF9FF call Unpacked.0040466C
( l$ s8 X- L' {/ H, N* |/ q5 u0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
8 _& W+ o( i0 Y- a% i3 h6 H4 p0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]; T2 z. e j" H
0046B956 E8 EDBCFFFF call Unpacked.00467648$ a; z+ X. x# g: W5 v+ ]
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
Z+ U( N8 u9 j5 M0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]: T$ L) i) S& t& E, j. [6 y
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e, l- x. ^1 M- N( }: y% a, B$ u& O
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
* @+ k" ^/ F7 d6 A+ I' }3 y# c0046B969 E8 FA89F9FF call Unpacked.00404368
7 ^: C7 {9 s" |" W0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX7 T' ^6 N& ~; h* [1 i0 t
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX% U* S8 m% K; V& q$ B
0046B976 8BD8 mov ebx,eax ; EAX送EBX
3 b0 H' j! s: J3 y7 O7 c4 U4 u0046B978 83FB 01 cmp ebx,1 ; EBX和1比较1 J, y* J$ Y- P2 {+ }- d z
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳$ A4 P8 p* X8 y' \1 o7 i
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算
- o8 B9 E4 l! I& B1 ?% g0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX' H* g$ \3 N7 ]+ c& t ~
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL1 F/ b! F( F w; y+ Z
0046B987 E8 BC8BF9FF call Unpacked.004045481 D$ q2 ?8 }; T3 n% i
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
9 T" \- M! L. A+ S5 T/ V% f/ p1 Z9 Y9 x0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
* T; ]$ V8 _) N6 G0046B992 E8 918CF9FF call Unpacked.00404628
& `( \+ r A& C1 I- Q5 a) ]; n0046B997 4B dec ebx ; EBX减一
q. g" |$ j1 U) [' F0046B998 85DB test ebx,ebx ; 是否为0
" W& V1 c1 `) D ]0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。
W9 D$ P) M. Q. u! z0046B99C 8BC6 mov eax,esi
, |3 d% `9 X" M% W$ x0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX3 L; j2 W2 Z: y% Y% l6 }; d
0046B9A1 E8 168AF9FF call Unpacked.004043BC$ V' B/ q' v: |8 \, R% f* f
0046B9A6 33C0 xor eax,eax
$ z1 t8 }/ G3 T% ^* o% i4 \0046B9A8 5A pop edx
2 y1 ^, u3 P+ `: [0046B9A9 59 pop ecx
' N4 k: x. Q* C- w/ ?0 L0046B9AA 59 pop ecx+ o' C, s1 w# n. D
0046B9AB 64:8910 mov dword ptr fs:[eax],edx$ @- y2 H: c: W( J
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
( S) W, [6 {8 P4 @ G& w4 P0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
7 x- R- B8 v9 a6 N" n" Q: h: v0046B9B6 BA 02000000 mov edx,2
1 \5 Z, | h6 E* H( N2 p0046B9BB E8 CC89F9FF call Unpacked.0040438C) y0 N& L$ k3 Z. E; V
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
; O+ a/ }* o! E: T0046B9C3 BA 03000000 mov edx,3
1 J/ M1 K; F5 o k8 }0046B9C8 E8 BF89F9FF call Unpacked.0040438C
0 ~7 d1 o4 ]+ v9 {! y* z. v0046B9CD C3 retn
5 @$ R! Q: N, V P****************************************************************
, F6 s) k- t. B: n1 c跟进0046B961处CALL来到:+ ~2 l8 h6 k$ m1 R
004676BC 55 push ebp
1 o; D4 ^5 V1 {0 s9 R004676BD 8BEC mov ebp,esp
; d! J9 \( P' f+ n( B004676BF 83C4 E8 add esp,-18
3 [ |/ f% r% R2 T2 g" F' m4 I004676C2 53 push ebx
. O' H( V& X' T+ O3 }004676C3 56 push esi
1 J1 a1 F, e& T: y004676C4 57 push edi6 a. F/ R5 n' H* k. e' s, |
004676C5 33C9 xor ecx,ecx
0 n# [$ R5 @& Q. ~9 ]004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
& ?- |0 j7 y, r) H/ |004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx; Y% f+ g0 r, N: A8 e
004676CD 8BF0 mov esi,eax9 d% c1 r" q1 Z
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]( f! E7 @9 {% h
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>& O) M t$ d" L# t% b9 E/ r& \. q
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
: a0 d& U% U& e1 @5 A6 j8 Z, Y004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
. r6 W' s/ F, s$ J004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>* ^" L5 H/ M U+ ]. L
004676D6 8BFA mov edi,edx( @6 S/ @2 ]% k9 |+ p( w
004676D8 33C0 xor eax,eax
3 h }) ?: T# i* b8 r* r8 O8 I004676DA 55 push ebp
9 Q/ Z( h [% n/ i004676DB 68 57774600 push Unpacked.00467757
?8 @* j, b9 p7 Y1 O A0 J004676E0 64:FF30 push dword ptr fs:[eax]& f! [$ c& a0 v% C" z" b) T
004676E3 64:8920 mov dword ptr fs:[eax],esp
@! Z* V1 o) f5 }004676E6 8BC7 mov eax,edi& q; x* j+ H) c. M
004676E8 E8 7BCCF9FF call Unpacked.00404368
# d' R! b6 ~7 V/ x6 o004676ED B3 10 mov bl,10
% \2 Y& G" _% y* c \004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]+ A. l9 G9 R/ F
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
% p* l4 t: N3 ]$ ^004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
$ @" _7 o' H% u' Z" G004676F7 33D2 xor edx,edx" \( j6 R6 q1 j
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL& H/ M9 r9 O. K0 m3 s5 b
004676FB C1EA 04 shr edx,4 ; EDX右移4位
- R4 p* Q0 v5 }1 o* p004676FE 83E2 0F and edx,0F ; 和0F与
. f5 Z' P- L, u) K, A/ o00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL x: `/ T2 J- O; O. j2 s
00467707 E8 3CCEF9FF call Unpacked.00404548; t5 k6 j( v- k. ^( N$ {. d5 m! h
0046770C FF75 EC push dword ptr ss:[ebp-14]
( Q% F$ w7 k0 Q9 t4 O1 J$ x0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
+ K" S/ [. G- i) ~00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
( T1 n# v0 y3 s) ?* ]8 m00467714 80E2 0F and dl,0F ; DL和0F与1 g7 D7 B S( ~/ x( K
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
* C; M& `+ H- F0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
: N& }# g6 c+ c00467723 E8 20CEF9FF call Unpacked.00404548
: r/ i {# ~) b9 n% x3 T% j00467728 FF75 E8 push dword ptr ss:[ebp-18]4 o9 x$ c! J! N
0046772B 8BC7 mov eax,edi ; EDI送EAX5 x! \; ]+ }4 M- A3 K# ^7 N$ V
0046772D BA 03000000 mov edx,3$ K. D4 q q, h! z3 ?# S
00467732 E8 A9CFF9FF call Unpacked.004046E0& G; c& a5 H6 [% d
00467737 46 inc esi
) D5 U6 c7 c2 ^4 P3 P! s4 b00467738 FECB dec bl2 t, h, \* _. E% N7 w9 V- a% T& i# ^
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e5 g; o8 D/ m& T
0046773C 33C0 xor eax,eax
/ G) a+ J ]! ^, R9 D. |0046773E 5A pop edx. t- g, i5 b8 T) c; {/ E. b$ |
0046773F 59 pop ecx
$ c) \# i/ V2 x3 N00467740 59 pop ecx+ M Q: C) D9 X+ N! u' \- }
00467741 64:8910 mov dword ptr fs:[eax],edx! x- F3 ]' Q. W
00467744 68 5E774600 push Unpacked.0046775E
: L- Z4 |' |% [: J" e2 p00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]$ k4 L) R; n4 E1 P+ \
0046774C BA 02000000 mov edx,2
0 R8 U0 j1 W4 m% U+ @# U& s00467751 E8 36CCF9FF call Unpacked.0040438C9 x. k- ~. e8 n# K% z2 s5 q
00467756 C3 retn //返回1 K: x: H. f: M4 v* c
———————————————————————————————————————————
& A7 M8 v6 x) F6 y9 m) v: n4 H【Crack_总结】:3 l3 ?& P% d& h* M
将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^ L L' J5 Q; J4 K9 b
机器码:bbba33de56c4cf31d9063cc074248d4b
$ i/ q2 {+ r% `& D, j注册码:e807519487d7ad4f57ad42dc87fbb191
s' f' K3 K- M2 i' i附件: MakeSign.rar (249 K) 下载次数:298 |
|