|
|
|
【原创】破解图章制作系统; P! a) }- Q. w+ v. h7 s
日期：2005年5月15日 破解人：yijun[PYG]
* D2 e, j( S7 X. R———————————————————————————————————————————& `8 d+ y6 W1 A0 S8 D. k; n
【软件名称】：图章制作系统 软件版本：1.0# D6 i! q) u/ C6 h7 n
【软件大小】： 252KB2 h1 ]' W9 [+ V: F
【软件简介】：制作各种图章
) l% V2 Y" x; M8 a3 v4 w【软件限制】：NAG
; N7 n% o, l4 M: Q* _1 V) T【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！( F0 |" f7 b8 ] ?* p t1 \
【破解工具】：OD,PEID
+ F0 J+ \/ E! j. O———————————————————————————————————————————
) S4 N) [+ a. \: R1 R # g) X8 h2 m# Z @. Z
【破解过程】：4 B& W# y: U, m) q, m8 {4 Z
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
' ~; S% z* Q* G3 O1 COD载入，通过字符串查找很容易来到这里：
" g8 Y: F% m7 ?2 Q0046ADAC 55 push ebp //在此下断- ]+ v! V8 q' z4 }
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
# ~% r2 H( f" E$ L0046ADB2 64:FF30 push dword ptr fs:[eax]
$ q/ }+ e9 ]+ S6 G, d0046ADB5 64:8920 mov dword ptr fs:[eax],esp
- g8 o h, w |, o0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8] d2 c6 b! K% }
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]( v$ h2 A+ `& L% a, ?# a/ u- d
0046ADC1 8BC6 mov eax,esi9 g, J1 M' ^0 [
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX# {9 j0 {! i: I. [
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
* L0 L" B- k9 T% _ u3 ]0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
+ `7 j2 K k& W+ Z- R, ]0046ADCE E8 45D9F9FF call Unpacked.004087187 t$ A2 C: ~6 [8 k
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX# a3 ]) E, s0 d" D3 T
0046ADD6 8BC6 mov eax,esi+ x# O; |! W/ b) V: [
0046ADD8 E8 3359FDFF call Unpacked.00440710
$ r% g* {, R0 t+ a2 _# q8 I+ J- I' E) p0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
% {$ G& M/ V2 W, s; J5 V9 Z0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]$ r/ \9 Y' n0 T; w
0046ADE6 E8 F558FDFF call Unpacked.004406E05 F- ^5 ^, H! O! i# ]1 i/ _
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
, j9 O0 V& n$ y* o: J0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳 m0 J! f& x" }2 a/ W0 v
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX1 A" y# o3 h/ A# R5 r8 A
0046ADFA B2 01 mov dl,1 ; DL置1 S& g9 v% `+ Q& Y! m% N' e% j6 r
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
4 K' B; p0 }; J! }, c; V; r- l0046AE01 E8 B2AFFFFF call Unpacked.00465DB8- A1 X4 |" _3 N0 _4 |& ~. m
0046AE06 8BF0 mov esi,eax! m$ H4 o& q7 R9 K/ m) L- b ~
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]% z2 R3 E* ? X9 A
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]- P" w1 k- O8 X2 V* B
0046AE11 E8 CA58FDFF call Unpacked.004406E0+ b$ v( {8 p B4 Z2 c) u. r z) r
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
6 E% U6 k5 ^ S; z6 k0046AE19 50 push eax
/ w/ U6 u! l% Z, | K- V" D: Q0 x# O0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
) e/ g v" |& ~0 k5 W& c+ U% n5 J1 w0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]# P1 {4 S2 s5 \# t
0046AE25 8BC6 mov eax,esi
. `- ?' y" x' D+ ?0046AE27 8B38 mov edi,dword ptr ds:[eax]2 S5 H) C( M2 ~
0046AE29 FF57 04 call dword ptr ds:[edi+4]# ], O. r* I) I$ q8 z
0046AE2C 8BC6 mov eax,esi2 R, s- S) m, D+ Z6 n
0046AE2E E8 4587F9FF call Unpacked.00403578
4 l0 r' z8 L+ Q8 g0 ~, W: G# V0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
9 m8 j X% `. B7 W) H. n) ?- S8 b0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~( T( p7 K' G1 r% e& H T5 y' r# x
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）( Y+ V; P; {+ v4 \
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
! O' y! ?4 l/ B4 z" B d0046AE42 6A 00 push 0# d/ H, K8 R# {3 G% I6 i7 y5 j
0046AE44 68 D8AE4600 push Unpacked.0046AED8
& G8 o: ~% w8 Q: V$ Y/ K9 R8 ]0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误: S- O$ P- V7 \4 @5 d- e3 s; ? |7 C* e
0046AE4E 8BC3 mov eax,ebx
) B. I" ?" j3 q( T; D9 T; F0046AE50 E8 A3BFFDFF call Unpacked.00446DF8 U7 T6 H6 @! Z' i7 x9 q
0046AE55 50 push eax: d% } U' E x& U" |( p
0046AE56 E8 DDC2F9FF call
6 l) `1 f* R( c, h; b0046AE5B EB 20 jmp short Unpacked.0046AE7D. N' c5 i# a" F( p" ^- W/ m
0046AE5D 6A 00 push 0* |& R2 X$ v) `2 u
0046AE5F 68 F8AE4600 push Unpacked.0046AEF89 x5 W4 g: I9 C5 ]! C
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功( k' s W8 s8 H% C0 u# H
0046AE69 8BC3 mov eax,ebx% O* S5 E1 C- O$ E
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
7 Q, {: N# e' G. p7 W& s/ g0046AE70 50 push eax' z q O# ]' m3 F- G/ v% H# I
0046AE71 E8 C2C2F9FF call
: h" X9 v5 ^, T' ~+ N5 x" x7 T0046AE76 8BC3 mov eax,ebx
3 u3 v$ K2 f, \, w0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
1 ?+ b) R" ?: V. ?7 a+ H0046AE7D 33C0 xor eax,eax
$ t7 _" B3 ^1 `8 C. |0046AE7F 5A pop edx
: |/ i7 H! ?8 m3 F0046AE80 59 pop ecx6 n7 P" s3 N- [
0046AE81 59 pop ecx4 Q4 p, m/ m- V- n {7 r& y
0046AE82 64:8910 mov dword ptr fs:[eax],edx* X4 |0 o% O$ Q( [/ E& s
0046AE85 68 A7AE4600 push Unpacked.0046AEA78 T# h1 n( k1 r; G7 ^
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]7 |4 |, ]' \2 K
0046AE8D BA 03000000 mov edx,33 w8 p& C! d: v6 |# V6 X
0046AE92 E8 F594F9FF call Unpacked.0040438C- W; X1 @2 [" z( K
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]. T0 X' x/ W* `3 g! ]/ r
0046AE9A E8 C994F9FF call Unpacked.00404368
0 E f1 v# i) {0046AE9F C3 retn* r" K) Z" i; j* }7 p( y
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
% Y: _# K8 K' o1 _9 n# Y( ?0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A3 b" Q3 j4 M" F2 o
****************************************************************
) q3 K3 u# T z7 M跟进0046AE39处CALL来到：8 |; m# J. n' X" H0 s6 u+ C9 B0 O
0046B9F4 55 push ebp
1 \; v6 M* o4 q8 n" k( s) @/ Z0046B9F5 8BEC mov ebp,esp
) ]# O) t. P& E. |: b% g! z% [0046B9F7 33C9 xor ecx,ecx
! B! o; y; u9 A) `0 [. _0046B9F9 51 push ecx
9 ]. j! ]$ K0 J0046B9FA 51 push ecx
* h; y" D& a) t; W/ ~0046B9FB 51 push ecx8 j; Y0 @( D1 T
0046B9FC 51 push ecx9 y' w. W( J& Y* o8 e1 G6 ~* |. O
0046B9FD 51 push ecx n$ [0 v3 q5 d8 y! X5 ^9 \9 K
0046B9FE 53 push ebx
0 O. E) o1 Z7 Q$ _8 H1 T0046B9FF 56 push esi4 N8 F4 G( b; a/ B
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
& z2 ]; f7 @5 s& }% {0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]0 J4 k# f2 \) C
0046BA06 E8 FD8DF9FF call Unpacked.00404808
' S% J- u' n/ U" ]0046BA0B 33C0 xor eax,eax2 ~: L% u# u* L# P9 c: k- {) }+ o) ~
0046BA0D 55 push ebp
2 R! c8 s+ g0 K# l/ G: r# j& T- ]0046BA0E 68 91BA4600 push Unpacked.0046BA91
5 u c4 g' V5 N0 J, H0 Y5 O( \0046BA13 64:FF30 push dword ptr fs:[eax]
8 H$ e6 M" ^% T: J+ r9 h0046BA16 64:8920 mov dword ptr fs:[eax],esp# p1 l$ s: c* x# a Q5 r( |
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
# Z3 Q: A7 g( x ]7 x0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]% O k/ i3 H! \' j
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
/ ~" e0 D- g+ _0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
, b! F: ]' d6 L0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX' B# q- ~0 F' m! H% B
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进2 u: M: L0 T+ g7 w/ B/ @
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里0 }6 G* j2 ]6 i0 Y3 r7 a' X
0046BA34 B2 01 mov dl,1 ; DL置1
2 a; ?: ]$ b- u( N4 i0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]' ^) d2 }6 `( p8 x& a
0046BA3B E8 78A3FFFF call Unpacked.00465DB8# E4 h" H- o; B
0046BA40 8BD8 mov ebx,eax
1 D( I1 Q+ ?( u2 F, @9 U' F' Y0046BA42 6A 00 push 0
+ [ G2 t! `! p; Q& {0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]/ k! N0 }( h0 [5 ?* m
0046BA47 50 push eax3 A2 M5 v2 e1 f+ O8 u0 K, `
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code", ?/ j( T3 w- p* y! k" w
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4] i0 |& S2 T- b3 G8 J
0046BA50 8BC3 mov eax,ebx2 c: r, t; } [5 I$ r3 `4 H
0046BA52 8B30 mov esi,dword ptr ds:[eax]
# n/ u- C$ u3 [) B2 k* a0046BA54 FF16 call dword ptr ds:[esi]
; r, i% p. E* B: p& @4 t* j% z0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX9 K( h+ y, X& C% o
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]% Q" M3 L2 a8 j
0046BA5C E8 B7CCF9FF call Unpacked.00408718
' D" f. q- h" }0 {4 q7 b( z0046BA61 8BC3 mov eax,ebx
3 w% r- b7 ]: A T3 k$ M+ M4 g0046BA63 E8 107BF9FF call Unpacked.00403578
( w# f4 m; q4 l+ X& E0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
) m. j0 h2 ^6 r7 j' V. N. n- i0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX. _) B7 p: k3 e* i2 x
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
2 _" ~3 ~% B; c& M0046BA73 0F94C3 sete bl ; 置BL值; q7 O, B+ t" B6 l
0046BA76 33C0 xor eax,eax
- k9 i h* ?% G. L0046BA78 5A pop edx r6 \0 T: r, \
0046BA79 59 pop ecx/ p9 j" a& ]5 Q) W! c
0046BA7A 59 pop ecx9 E( R: [) G( K$ g7 t% h% S
0046BA7B 64:8910 mov dword ptr fs:[eax],edx& D* r, P! s5 r
0046BA7E 68 98BA4600 push Unpacked.0046BA98
- G4 }, \' Q/ y+ Z$ X" I9 U6 n; e0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
' F4 a- ?1 k: |4 n6 ?0046BA86 BA 05000000 mov edx,5! x3 k+ j: l8 R' w( |
0046BA8B E8 FC88F9FF call Unpacked.0040438C2 L* n2 G2 a! e9 W$ Q" N
0046BA90 C3 retn
- n5 `) C/ N& P' D0 l3 Z+ `3 }****************************************************************
! L8 O3 t7 a. s" N跟进0046BA2A处CALL来到：
5 t2 `. H K6 _% r$ p0046B908 55 push ebp5 c6 J: D2 H' f$ C) U6 E" x
0046B909 8BEC mov ebp,esp/ d8 V1 l0 X7 ~# c: l) f% e
0046B90B 83C4 DC add esp,-24
$ S0 {& q/ \; b& u- |0 w0046B90E 53 push ebx( R* d R# W% X" V0 Q" ?2 U, j K
0046B90F 56 push esi
. s6 l- `6 d9 W" U {/ m" ]2 W0046B910 33C9 xor ecx,ecx
4 p0 f" [6 g2 ]2 }# ]/ I0046B912 894D DC mov dword ptr ss:[ebp-24],ecx* N, V; P; a6 w( W- O! T5 z+ S
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
+ |7 j+ H1 L2 B, L) p0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx$ e$ P+ O* D7 L& h3 Q! N w
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
3 e# Z, }! O. o- }0046B91E 8BF2 mov esi,edx
% E2 ~1 q4 i- r! k* i8 R4 F0046B920 8945 FC mov dword ptr ss:[ebp-4],eax0 \+ L/ {, X# o( M6 _5 o+ L
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]) Q" e* \5 Z8 X+ X
0046B926 E8 DD8EF9FF call Unpacked.00404808
: `. N( h! e1 R6 E* h% N5 u1 o2 V0046B92B 33C0 xor eax,eax
. S" E6 F6 m1 l9 m1 g, Q6 ?7 ~: |0046B92D 55 push ebp
# h. c e' G V! r: a) [' ^0046B92E 68 CEB94600 push Unpacked.0046B9CE j5 N1 p0 ~& x: I2 O
0046B933 64:FF30 push dword ptr fs:[eax]
. N9 \2 z3 G2 |0046B936 64:8920 mov dword ptr fs:[eax],esp: }9 E9 }" {/ Q* O3 `" d, n, g
0046B939 8BC6 mov eax,esi
9 z% x5 O1 g } Z, n: q0046B93B E8 288AF9FF call Unpacked.00404368
7 s/ B% t( Q* Q( `0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
. `$ {% n; l! |' ~+ I; a0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX0 U) x7 y( ]( }" _4 t
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E43 y6 `' L3 v! p- r- N: x0 ]
0046B94B E8 1C8DF9FF call Unpacked.0040466C% u D. @) g, k3 D
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
; E: h3 H T; a) _/ V: f0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
( M# `; ~0 g5 ^! C0 k7 u0046B956 E8 EDBCFFFF call Unpacked.00467648
: K+ v3 }$ X A0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
# Y" A9 S3 a# X) Y0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]' ?3 G O4 `9 d2 \) W# H2 F
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e0 F1 U/ L6 W. s; {: _9 [5 L/ j
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~( D- a1 X( g! }: \) s
0046B969 E8 FA89F9FF call Unpacked.00404368
3 g' I9 v* |& o% r( I) L0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX% A$ ^( M r" ~% o% X7 |8 y% q+ M
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX6 q+ P- Q0 U( \1 Z: D
0046B976 8BD8 mov ebx,eax ; EAX送EBX C' ?: u/ Q5 s, Q+ |
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
- P' N; T- P1 ^3 I! z0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳* K) s9 |$ @6 m! M- v8 l5 O
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算8 {% r4 i* s8 J0 F! X# b6 t5 z
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
4 j7 \$ o6 c* p. t, r* j0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
& a; `) V. w, P9 F {9 q0046B987 E8 BC8BF9FF call Unpacked.00404548/ o( {$ ` H% M/ \8 ]% p
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]* n' {& l+ y* P0 V; P: }
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX A' D, f, d: @2 S/ Q1 g& r% y
0046B992 E8 918CF9FF call Unpacked.00404628
0 I. J; E8 N6 H( y0 m0046B997 4B dec ebx ; EBX减一
0 o5 x+ S \1 n0046B998 85DB test ebx,ebx ; 是否为07 t. U( }* E4 T+ Q
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。3 B2 |3 l ] V5 C3 j
0046B99C 8BC6 mov eax,esi
8 c+ |! o0 p D0 K: J0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX" M- C( K" X! m# F+ D4 h
0046B9A1 E8 168AF9FF call Unpacked.004043BC; a2 n! T% E$ |/ r% u, ~
0046B9A6 33C0 xor eax,eax& V8 L$ v: P' }# d) C% Y u7 \
0046B9A8 5A pop edx L/ |4 ~, ]8 D B' Z1 g( k' f
0046B9A9 59 pop ecx
; y" ?2 w& Q! X8 y0046B9AA 59 pop ecx
7 @+ U2 e( e- Q) m7 } G4 G6 z/ a0046B9AB 64:8910 mov dword ptr fs:[eax],edx
, w4 ]4 ^& p; T* N/ s. N. z0046B9AE 68 D5B94600 push Unpacked.0046B9D5' B$ V8 K H; {
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
% N" d( s. e$ ?+ r( b0046B9B6 BA 02000000 mov edx,26 D& A) S" B! A, a& f* D9 I, d/ ?
0046B9BB E8 CC89F9FF call Unpacked.0040438C
) |0 g" J& s7 @( [1 }5 i0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]8 [( ?) G1 `4 b" o8 e
0046B9C3 BA 03000000 mov edx,3' c3 X/ F- G; A# u- Z
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
* ]2 T& }0 C/ E$ u, G) H0046B9CD C3 retn& x( T1 O" C9 k. l0 |2 C8 u
****************************************************************
0 k; V4 i# i/ M5 F跟进0046B961处CALL来到：% M2 Z* b G" l5 r
004676BC 55 push ebp
& d+ ?% E2 p4 O' P004676BD 8BEC mov ebp,esp
2 m$ O6 o: i3 @- E! W! `004676BF 83C4 E8 add esp,-18
6 F f; o' K- \2 b# G2 [' [004676C2 53 push ebx
' k0 f# ]' y/ z004676C3 56 push esi
, [2 _9 L: _$ x004676C4 57 push edi
! a' a* \% C5 f1 V Q8 Q: F# Q004676C5 33C9 xor ecx,ecx
% L& J j3 L) ^. D004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
, D ^& o) J" J8 P% B! ~/ v Q004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
8 L2 i$ ~$ N8 Y( E; s' C. N004676CD 8BF0 mov esi,eax
, K$ L8 h2 b: L6 ~9 ]7 E4 z004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]: Z. R, z# ?1 l( X0 u7 H
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
: x( ^9 |( O: a4 y- N004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
" T9 C8 v2 F. y004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
5 Z" o7 I$ |6 F n/ k004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>1 v5 O8 b, @% }/ o/ r
004676D6 8BFA mov edi,edx
$ s( ~5 T! l! J- P004676D8 33C0 xor eax,eax
$ U. H) P2 n1 s3 ]+ Y5 {5 E004676DA 55 push ebp
: P# M: W" T8 a. I! @004676DB 68 57774600 push Unpacked.00467757. v) C# o3 N0 R
004676E0 64:FF30 push dword ptr fs:[eax]
# m' E, z8 [) O' E$ n004676E3 64:8920 mov dword ptr fs:[eax],esp3 u9 i7 G( A$ k' b
004676E6 8BC7 mov eax,edi9 m0 a) h; c' {( e; M( D
004676E8 E8 7BCCF9FF call Unpacked.00404368
* q; k- r$ b, n$ P004676ED B3 10 mov bl,10) G# J7 J* }3 `: Y a+ R
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
. h+ i# R9 R, {' ?/ Y004676F2 FF37 push dword ptr ds:[edi] ; *****循环***** p, C9 ~* ?6 M/ G7 b1 h* R
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]9 L N* o$ F2 |, B, Z5 O
004676F7 33D2 xor edx,edx
# g8 N$ V7 H* @0 U3 ]2 v004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL+ h# }! O! \, h6 I$ x2 R- U' I R( f
004676FB C1EA 04 shr edx,4 ; EDX右移4位8 A) o) {- Q# L( i/ ]3 a: i5 n2 m
004676FE 83E2 0F and edx,0F ; 和0F与
, K8 c7 ?4 Q7 w; J00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL! ]* o2 M+ L6 h) O. v+ H
00467707 E8 3CCEF9FF call Unpacked.00404548+ ~4 Z0 A, x$ f% W2 O% Y& R; u
0046770C FF75 EC push dword ptr ss:[ebp-14]
1 A4 K4 |( R$ _0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]2 q, {+ s9 G7 D
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL, X s6 }& e$ {
00467714 80E2 0F and dl,0F ; DL和0F与
9 h/ D* N" k$ b2 c+ p% n0 u00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与3 V6 U# U. X9 E# u$ P
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
8 L/ h5 Z k' i! G' r00467723 E8 20CEF9FF call Unpacked.00404548
# S* Y$ W' N6 K' S1 b00467728 FF75 E8 push dword ptr ss:[ebp-18]- @2 z! q" O7 o% U. Z5 \& Q
0046772B 8BC7 mov eax,edi ; EDI送EAX
! |0 G0 m4 E8 F- ]! k0046772D BA 03000000 mov edx,3
! j( v0 R$ {( U00467732 E8 A9CFF9FF call Unpacked.004046E0( F C( y% Y. x! l
00467737 46 inc esi
6 M% I: \3 T- y, J+ F00467738 FECB dec bl: U1 E6 U4 j6 n" l/ D
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e& V- j9 v+ r! D7 w, r% k: I- d& q
0046773C 33C0 xor eax,eax. l9 H- W8 D; m
0046773E 5A pop edx; R+ }( }. p, p. k/ C! z
0046773F 59 pop ecx
$ L) B8 R$ W, N- S6 v00467740 59 pop ecx
y+ {7 a0 s& _$ D# t9 D5 h" @0 [00467741 64:8910 mov dword ptr fs:[eax],edx: ~3 K7 ~6 K0 u5 N$ l
00467744 68 5E774600 push Unpacked.0046775E
" x2 C0 u' r0 u+ A00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
0 }! d) J4 V" h3 u5 K0046774C BA 02000000 mov edx,26 r$ ^% W; T0 U A6 g ?8 l2 h
00467751 E8 36CCF9FF call Unpacked.0040438C
! L& ]! U( Q$ j& S3 p, Z6 t& u00467756 C3 retn //返回' e* K. `$ \- ]7 c! V) G: h
———————————————————————————————————————————
2 b A2 { e8 E4 i【Crack＿总结】：- \' O' @0 p6 E5 {
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^) p! W8 |/ \( K+ G' Q! u) C# G
机器码：bbba33de56c4cf31d9063cc074248d4b
4 h0 g O5 q3 t" t' S& q注册码：e807519487d7ad4f57ad42dc87fbb191; ~( e/ K$ ?' T' m6 C$ p- v1 |
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡