|
|
|
【原创】破解图章制作系统
6 P! |9 p+ y) u6 \8 ?2 ^日期：2005年5月15日 破解人：yijun[PYG]
* d7 X5 }$ D5 M# M: l; G$ H———————————————————————————————————————————
8 a5 P0 ]: Q, G( b% _1 b& N( t7 Q【软件名称】：图章制作系统 软件版本：1.0
' v: s% j# x3 d- ^' e$ T/ q6 V. {& N【软件大小】： 252KB
! [, j( _% t0 T8 N0 z: ]$ c5 s9 k0 a【软件简介】：制作各种图章: s1 m8 ^+ Z" B6 H, U% Q# A
【软件限制】：NAG; E8 \0 j% L2 N
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
0 U" o% z& q4 O【破解工具】：OD,PEID
' H4 s2 d. B# J1 T7 z———————————————————————————————————————————* E, _( M2 l1 b9 V& l" K7 }
; F! h3 m0 x, X6 A' O2 G2 @【破解过程】：
2 T: ~; J1 S: ~. HPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
3 D0 I; d/ B/ ~- F$ u5 ~" C) }OD载入，通过字符串查找很容易来到这里：
% A: y+ H, T0 j* b0046ADAC 55 push ebp //在此下断
- M2 Y2 Q. o- E- W0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
4 }: I3 E1 ?6 }3 z0046ADB2 64:FF30 push dword ptr fs:[eax]6 ]6 `8 E$ \- x( m" g5 n2 |
0046ADB5 64:8920 mov dword ptr fs:[eax],esp) n2 M6 D+ N1 _' [) G
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]3 Z, F6 m# x: ]9 x; u5 F; m" P
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
2 r4 k5 k5 B2 V& w7 Y" D2 L0046ADC1 8BC6 mov eax,esi4 J6 A/ c- U0 L8 ]
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX* p7 S8 u" W: w4 o* i7 ~/ U
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX, U% S" t/ f* n- v0 a& H
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]) H( t7 E4 R Y& p
0046ADCE E8 45D9F9FF call Unpacked.00408718
% O+ N* d4 U) d! ~9 x( i* u# a0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX n2 y5 g0 A4 a
0046ADD6 8BC6 mov eax,esi
( }; S; J+ Y8 o6 r. J0 C0046ADD8 E8 3359FDFF call Unpacked.00440710
# X: Q5 p' M2 E0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
- q0 W9 e1 Y9 A$ r, G5 L( ]% }0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]/ F0 h8 ^" Y8 V3 O
0046ADE6 E8 F558FDFF call Unpacked.004406E0
" [* N9 R0 e8 ~9 ]+ H7 K0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
2 T4 `5 q/ k2 `; }# \0 z* P0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
: t4 k4 _+ n( Y! [/ ^4 m0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
7 G' ?9 _8 I9 A0046ADFA B2 01 mov dl,1 ; DL置1: a8 g% N$ T. ?8 K/ s d& s
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]; \/ Q, \0 j! D M' f
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
2 [4 g* }1 u( m; |9 Q: ]0046AE06 8BF0 mov esi,eax4 w0 \: o) F/ s, e
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
k1 w j6 H7 ]! {7 Q9 v! o0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]. P& K1 F* a; _7 Y% }
0046AE11 E8 CA58FDFF call Unpacked.004406E0
4 |$ U% f, b( D( A1 P0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
$ A3 l! V! w. `) g6 r; o0046AE19 50 push eax
2 y8 o$ Z2 K1 |/ T) O# P0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX2 o# G; \7 d! [+ a
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]8 M+ e6 J* L, @) y- Y
0046AE25 8BC6 mov eax,esi9 B- |/ @6 t! l% [$ `
0046AE27 8B38 mov edi,dword ptr ds:[eax]! t7 |% t# l; u
0046AE29 FF57 04 call dword ptr ds:[edi+4]
( w i, K* T. [' l) V6 r0046AE2C 8BC6 mov eax,esi+ r" T" R9 x3 J$ Q: z( x, _, @
0046AE2E E8 4587F9FF call Unpacked.00403578
" d8 M9 k0 M( ?6 d. j, U0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
. }- Z5 E4 s0 g9 r! t5 {! w( w5 V0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~9 U2 {, ]) ^2 Z8 [/ y* {
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
R* z/ z% y! K' w0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~3 L: w/ P% m. a+ P! L
0046AE42 6A 00 push 0
+ L- a/ g- ~' a' M# y- |5 s+ a0046AE44 68 D8AE4600 push Unpacked.0046AED82 i6 n% H0 V& K( K' m& s* S
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误# @- g2 c; c5 E" m+ k) `, x% H" O
0046AE4E 8BC3 mov eax,ebx
: i& {7 F: Z8 x0 c. _; b- z6 w0046AE50 E8 A3BFFDFF call Unpacked.00446DF87 p" @/ D3 l6 J9 W0 M0 _
0046AE55 50 push eax
4 Y: Q8 Q. o7 o8 L) x/ ?# r7 K0046AE56 E8 DDC2F9FF call
, ]1 f n+ R. @3 i- v0046AE5B EB 20 jmp short Unpacked.0046AE7D- H, B% H2 I9 [% B7 r: A! f
0046AE5D 6A 00 push 0; O; ]% q, J; U
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
5 i8 f* P* a1 j' B' A% I2 v# G1 c0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功$ l+ [. T' K1 n7 M, d
0046AE69 8BC3 mov eax,ebx
9 t5 P4 }. U% |9 d+ T8 H0046AE6B E8 88BFFDFF call Unpacked.00446DF8
3 d9 x, R+ |# q% l! W9 `0 M7 t0046AE70 50 push eax
' L( M9 o' c% i# P( B1 j0046AE71 E8 C2C2F9FF call
& }3 c1 @! d0 R$ A, {9 q i0046AE76 8BC3 mov eax,ebx5 f* b) c, u% {5 J; q; p3 ?. c
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
% ]2 z6 [- T2 ]4 `! a! p7 J1 C" M0046AE7D 33C0 xor eax,eax& M2 Q8 D) v6 `) F% p! y- O
0046AE7F 5A pop edx: F( V* K9 B% M1 d, F
0046AE80 59 pop ecx
8 }; o/ Y1 U* E: f% h" ]0046AE81 59 pop ecx( J) t' T2 K2 y* z
0046AE82 64:8910 mov dword ptr fs:[eax],edx
( ^% m2 N* |2 o I0046AE85 68 A7AE4600 push Unpacked.0046AEA7% d! N- \9 g0 A
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
" Q6 ^# S' v7 M, {0046AE8D BA 03000000 mov edx,3, z0 x# F$ G( [" r: e
0046AE92 E8 F594F9FF call Unpacked.0040438C
* x! ]# C+ f2 C, u0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
4 i+ p* a. q( N! G- I- m' O0046AE9A E8 C994F9FF call Unpacked.00404368
+ ]% v6 W6 y; j0 O1 g0 m, j. Y0046AE9F C3 retn
6 m3 Z) E8 X* c0 k0 q0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
c6 T0 `$ |% M/ E0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
0 N5 Q& I9 C/ V( ]# b1 V# c****************************************************************4 |) w& i7 V! ~- p- n |% R6 Z$ e
跟进0046AE39处CALL来到：
: s* \; F* J- J( T( Z2 |1 x0046B9F4 55 push ebp
9 S: t5 S& S n9 A# [; n4 ~- J0046B9F5 8BEC mov ebp,esp
2 r- ], W b" x4 [0046B9F7 33C9 xor ecx,ecx
! Z9 k% P ]+ s3 c: {8 ^ C0046B9F9 51 push ecx; p2 q9 p1 G( B3 x$ I" J
0046B9FA 51 push ecx
) c, Y4 e5 s: L) N0046B9FB 51 push ecx# N, A# s3 l f
0046B9FC 51 push ecx X9 z6 S3 }$ n! ]
0046B9FD 51 push ecx1 y! j0 p1 r8 A7 e
0046B9FE 53 push ebx% ~) S# a7 M7 W- v+ E" v: j
0046B9FF 56 push esi
4 P* R# z9 X& s4 b/ j* j: T0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax% C* ?$ m3 F* n1 n1 I
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
% [( J$ J1 w( }1 f1 P! A; }0046BA06 E8 FD8DF9FF call Unpacked.00404808. e* L* O% y/ d$ ]
0046BA0B 33C0 xor eax,eax, H v: i1 H1 m6 b* F- I" b
0046BA0D 55 push ebp
; ^& A8 {; H5 b1 w( _! z0046BA0E 68 91BA4600 push Unpacked.0046BA91
/ c9 z/ O9 X- U! G0046BA13 64:FF30 push dword ptr fs:[eax]' k8 j% g; |% W2 y- f; f% h2 A
0046BA16 64:8920 mov dword ptr fs:[eax],esp) R# ~. \9 m- a" T
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C] K: ^$ X5 v4 ? l7 L
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
6 [! W2 o5 V) I: I' r) N0046BA1F E8 DCFDFFFF call Unpacked.0046B800 3 p% Z3 i; d% f* e$ H# F6 c9 ~1 {
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
2 t0 F) T$ p7 l; a& o, H0 Z0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
0 ~+ ^, h' @3 z- ^5 I0 z) u0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进9 Y; c, t u- J
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里& y; v. b* E: D
0046BA34 B2 01 mov dl,1 ; DL置1
. y3 v& Q W! r: C" w/ ^: B0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
; ?, ^7 _( @/ {- p, }4 u; t% ?: o0046BA3B E8 78A3FFFF call Unpacked.00465DB8
5 s) N3 U2 M7 z3 m* \0046BA40 8BD8 mov ebx,eax u7 T, P, E: {; F% J
0046BA42 6A 00 push 0
+ }. `# x/ l- T8 r) L: d0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
4 h$ T J0 [( B# d" M+ V0046BA47 50 push eax6 \4 E- Q" l* f. M9 h+ E( G
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
( `/ {0 t+ b( i1 C0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
7 Y; A! @* l1 I. u. J0046BA50 8BC3 mov eax,ebx, O& T: ~8 e2 B
0046BA52 8B30 mov esi,dword ptr ds:[eax]; G2 z/ W0 x1 A& \$ s& P' t/ w
0046BA54 FF16 call dword ptr ds:[esi]: {% r0 [0 T4 d
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX$ _5 b1 I4 n" S+ r; Y2 C. g7 E
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]3 @% d, I1 m7 p6 J0 _. V8 ~+ J
0046BA5C E8 B7CCF9FF call Unpacked.00408718& u4 o0 m9 D7 _# o& K! e* z" X
0046BA61 8BC3 mov eax,ebx
1 f# j0 C- _) n5 o- p# ?0046BA63 E8 107BF9FF call Unpacked.00403578
- `2 o$ O# n- D6 c) n5 @" w# Z0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
) K* x q* h1 j0 X) I0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
& t' `, a4 e: `5 H' P5 w4 h G3 m0 I0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~8 @" Z) ?; B& d2 X! Z6 {+ a
0046BA73 0F94C3 sete bl ; 置BL值1 w3 O* v! b+ z$ r# x* L4 r
0046BA76 33C0 xor eax,eax
/ b) W+ K! j# J0046BA78 5A pop edx' i5 Y! ]0 }; u4 n! Y
0046BA79 59 pop ecx
( t* R- z- v! P$ w0046BA7A 59 pop ecx
# n+ k" E. a) y8 F- s0046BA7B 64:8910 mov dword ptr fs:[eax],edx; E+ x) {1 u( C2 h
0046BA7E 68 98BA4600 push Unpacked.0046BA98: L8 B4 g+ }& l$ K
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]! |& s" ], m8 A: P: H4 u( S
0046BA86 BA 05000000 mov edx,5
# A; n2 x& f. g6 Z& e0046BA8B E8 FC88F9FF call Unpacked.0040438C8 Z/ v5 B, \9 t" q
0046BA90 C3 retn1 z) c4 D2 n) ~" E
****************************************************************- K( F6 w: q/ U* L7 h- h
跟进0046BA2A处CALL来到：1 U" o) A6 h7 y2 E
0046B908 55 push ebp% e6 r1 f: N$ I2 s
0046B909 8BEC mov ebp,esp
1 o& w @; d& G" v2 m# Z& ]8 {0046B90B 83C4 DC add esp,-242 h7 e( t! I$ E6 p# O, Z0 n; P. r
0046B90E 53 push ebx/ }' q+ `! s' t1 O# `
0046B90F 56 push esi5 ? u, m' L) w0 {* a
0046B910 33C9 xor ecx,ecx, T. C" S5 y: w w+ W" P
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx1 {; T0 s, ~ T2 M" z
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
: J2 m2 k3 R4 t, r0 g9 f0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
+ F( t% c1 V& y8 T0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx7 v% I& n' h1 u( d, n7 N: c
0046B91E 8BF2 mov esi,edx. ` T# j% c* A; V& }9 q2 C4 e s
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax2 D2 r+ ?- V( d+ A- ^, j1 E
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
0 m" x8 i( G- i" w5 K" n0046B926 E8 DD8EF9FF call Unpacked.00404808; C2 L# j0 [4 g2 o2 G) e
0046B92B 33C0 xor eax,eax, a) B7 y, w6 E" G' D) N* h% e
0046B92D 55 push ebp
' n4 x! Q/ ]/ y% M7 K& u* A( ]0046B92E 68 CEB94600 push Unpacked.0046B9CE
! M5 ~: y4 _2 J0046B933 64:FF30 push dword ptr fs:[eax]
+ a3 |& ?) n- C0 W ?% l5 B0046B936 64:8920 mov dword ptr fs:[eax],esp
$ o6 B, ]. k: X' b. {" X. X2 o0046B939 8BC6 mov eax,esi
9 D8 p! L5 W3 M# H, E2 N' `0046B93B E8 288AF9FF call Unpacked.00404368
. t. M" T! Y5 Y# n. f, V5 n+ v0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
$ h$ A8 }) V& s9 E/ m- c0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
, C( V+ O0 B9 V7 _4 p9 O0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
1 u% r- [" j- j- M# u% x0046B94B E8 1C8DF9FF call Unpacked.0040466C
. B" N* C) M, A6 s8 Z- b0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
, Z* t3 Q3 a* H1 X: y0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]$ [; v3 k" v. F2 S6 _. h
0046B956 E8 EDBCFFFF call Unpacked.00467648
, H) n+ b) |# }. J/ }0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]0 K( [- Q$ Y8 }! [8 `
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]. \. N$ F( T" p9 @
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e3 {% F9 ]* C% E& a3 |3 F+ u
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~: M* H1 a$ [; s6 K o3 R
0046B969 E8 FA89F9FF call Unpacked.00404368
- ^/ j4 d% ~1 L i3 S0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX2 ` C( F! z' R j2 _6 H: {
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
' B4 \4 l! C& @/ J7 A9 u0046B976 8BD8 mov ebx,eax ; EAX送EBX
0 |3 t' M; v$ O" I8 T" J. W0046B978 83FB 01 cmp ebx,1 ; EBX和1比较* C: q7 X! e1 h0 }$ Z
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳4 R2 u$ v$ x2 r, c
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
6 H; ]/ ?; e j8 p# y3 j0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
8 V7 y% X( |# n* ^+ j0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL: T. J9 }# d$ r" r/ y
0046B987 E8 BC8BF9FF call Unpacked.00404548
`8 i$ P: g- S8 z- Z" Y! J$ a0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
2 @7 W" V$ C+ s+ e: V9 P, {1 }0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX' }! X- Q$ O) L( z- x# u) \
0046B992 E8 918CF9FF call Unpacked.004046286 E9 ~' K# h' g) v% `$ L4 h5 O
0046B997 4B dec ebx ; EBX减一" K/ x1 o, s+ a/ T0 c6 V" H
0046B998 85DB test ebx,ebx ; 是否为0: [9 P! \5 ^# I7 G/ q
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。: s5 V# J% n$ C! P
0046B99C 8BC6 mov eax,esi9 F4 S- |! ^* I) R, h- D, ^
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX, ~3 i6 G' d$ u# E& X0 o+ Y2 J
0046B9A1 E8 168AF9FF call Unpacked.004043BC
" |3 k; r9 z0 k7 I0046B9A6 33C0 xor eax,eax
2 ]1 n$ S% d5 i* }0046B9A8 5A pop edx+ Y& E2 a0 J! k h6 Z
0046B9A9 59 pop ecx
. I$ |9 a# s4 F+ A9 z% A: c0046B9AA 59 pop ecx
2 T0 j) p5 Z5 l0 I, E* W( W, c* m0046B9AB 64:8910 mov dword ptr fs:[eax],edx( A/ ^3 i. S. t; Y7 k
0046B9AE 68 D5B94600 push Unpacked.0046B9D54 I* i- B, W& m: R
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
1 Y9 w( C$ }! }0046B9B6 BA 02000000 mov edx,2
0 L* w3 n+ L( I) ]- j0046B9BB E8 CC89F9FF call Unpacked.0040438C
' S' ~8 |, ^$ V0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
& V: l u3 S+ ?- D2 S. [0046B9C3 BA 03000000 mov edx,3' O& y! G& A# p3 i
0046B9C8 E8 BF89F9FF call Unpacked.0040438C. @" `; H! P' F' A8 Y) b
0046B9CD C3 retn3 ?$ y; J- e5 Q( U* E5 g+ b
****************************************************************/ }7 |/ `0 Y8 o9 P
跟进0046B961处CALL来到：; P2 m4 v# ?4 q7 C
004676BC 55 push ebp
. R1 u; J& [0 \8 i' b. I& }004676BD 8BEC mov ebp,esp8 V2 o8 w9 O# O5 \- l- E3 K
004676BF 83C4 E8 add esp,-18
, r$ t5 S( j; z0 F( \004676C2 53 push ebx
! M9 E7 A" I$ {; D2 H& r004676C3 56 push esi
$ H1 q9 P2 r3 k0 a8 |2 Y$ P004676C4 57 push edi# A0 Y1 ^6 n/ `
004676C5 33C9 xor ecx,ecx7 T: t% ?8 i3 \9 o9 d+ n3 D
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx+ b, k0 f+ A; L
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx, j# m- v" C3 T9 M6 _
004676CD 8BF0 mov esi,eax
4 H9 Y" X. A' m* \7 d1 j, [/ r) J004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]9 h) |* u7 m! d# I$ K$ V
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>: W! X0 U0 O$ A. L
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>, t+ B. ] x" d# U- F' m
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
8 ~4 ?# l" B* p) j+ l/ z004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
: w. N5 J4 h0 F7 U0 W* R: }( q2 d7 z004676D6 8BFA mov edi,edx
% U5 ~1 X3 p+ x# [* Y+ p/ d004676D8 33C0 xor eax,eax+ D3 T" k" I, N% s" y0 _
004676DA 55 push ebp
* ^$ w$ Y' K: J( P2 I! B004676DB 68 57774600 push Unpacked.00467757
# s* `# i& C. {0 _004676E0 64:FF30 push dword ptr fs:[eax]6 F0 j5 t' C5 g
004676E3 64:8920 mov dword ptr fs:[eax],esp( h7 `' E3 u3 u
004676E6 8BC7 mov eax,edi
$ x! A' y: b1 A2 ~% Y; i004676E8 E8 7BCCF9FF call Unpacked.004043685 N# m. x$ `/ R n, D, A4 X
004676ED B3 10 mov bl,106 x: s. H8 `) @) ?- p8 K
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10], s2 v1 r# v5 }# l. A; t V
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****. ?. ]" ~$ V6 Q1 g: M
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]) d9 B( R. Q; s: E" q
004676F7 33D2 xor edx,edx
* b( R% X* k+ s# @004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
2 O _8 i; g+ c2 p' Y' Z004676FB C1EA 04 shr edx,4 ; EDX右移4位. @8 ?; U; g4 y" \( D
004676FE 83E2 0F and edx,0F ; 和0F与, p, g" g( Z1 H8 [6 \, S9 G
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL9 @( o j: }' m) j) ]0 I
00467707 E8 3CCEF9FF call Unpacked.00404548
1 f- R. N$ a' Q- ^1 {0046770C FF75 EC push dword ptr ss:[ebp-14]
* L+ `0 L. h2 t" X$ V0 f0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
; ^5 F) k1 a$ @7 z' _4 p00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
% j/ U) L8 ?5 w2 h9 _2 O00467714 80E2 0F and dl,0F ; DL和0F与+ \/ U5 w1 j, B( Z
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与2 v& F. H! F6 R
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL) S6 [1 l) r2 N8 A4 T
00467723 E8 20CEF9FF call Unpacked.00404548
2 x1 [" Y4 v6 b& ?3 }! j: ~00467728 FF75 E8 push dword ptr ss:[ebp-18]
6 [, K; a. ~; r( ^& _0046772B 8BC7 mov eax,edi ; EDI送EAX" G7 n7 E% u9 g3 p. N
0046772D BA 03000000 mov edx,3+ _2 j+ C) i+ e O/ f6 Z' D/ q
00467732 E8 A9CFF9FF call Unpacked.004046E0" Q2 K0 V o( D
00467737 46 inc esi8 r. @( _% k" _5 X+ i" e8 G
00467738 FECB dec bl, _' ~/ R9 _. }" W% p
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
9 P4 ]+ R% S9 @3 r ~/ h0046773C 33C0 xor eax,eax8 E8 `; Z: {, a' c1 c
0046773E 5A pop edx
) q" a h$ ]9 R! A+ u0046773F 59 pop ecx
4 _) e7 x" u/ J$ M m7 U g00467740 59 pop ecx
/ M5 @7 l' \$ s, a' E0 E3 E/ s00467741 64:8910 mov dword ptr fs:[eax],edx
8 d: | r: T. J( p& h00467744 68 5E774600 push Unpacked.0046775E
0 J9 U- {1 o" A# t! J0 E00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]) E9 r- s. S. Z; b) }& D/ E* }
0046774C BA 02000000 mov edx,2
4 r R3 ~5 R2 @6 j. Q" G; _3 \7 l00467751 E8 36CCF9FF call Unpacked.0040438C4 s0 }3 w0 z; N6 C
00467756 C3 retn //返回' F" u1 B) \1 H) E* p9 w1 ]
———————————————————————————————————————————6 R( L! X2 v R5 r, E! H
【Crack＿总结】：& p, T8 e4 x9 c
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^2 q# I" [9 A5 s! h
机器码：bbba33de56c4cf31d9063cc074248d4b6 z' M8 S& l( p# {% M$ u" h" j
注册码：e807519487d7ad4f57ad42dc87fbb191
u& b! {8 X5 v* n& F6 E附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡