|
|
|
【原创】破解图章制作系统1 {5 o4 H# k1 a) Q
日期：2005年5月15日 破解人：yijun[PYG]
0 h& U/ h5 d& e* ]* Q" h———————————————————————————————————————————
" |& z3 R% V, J& m& D5 |【软件名称】：图章制作系统 软件版本：1.06 V5 K2 e. C8 H! J; s
【软件大小】： 252KB2 P( t4 q" z5 T2 ?0 Z' u1 n+ p! c
【软件简介】：制作各种图章
9 A7 ^: S. p8 y【软件限制】：NAG
4 V$ Y2 n/ J9 s, `* q【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！, L0 l( Z! i7 z$ R. m4 |
【破解工具】：OD,PEID
7 N' j W5 q+ ^; {) [" A———————————————————————————————————————————
; t( K4 t3 z5 L1 U0 X) g b: U4 X
( t1 j. [. C: Z" |2 o- F【破解过程】：
8 E; P( `, W" f( u/ E8 e; _PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~' C; n4 _" A* H" f
OD载入，通过字符串查找很容易来到这里：
6 |/ @; X2 @+ D5 R8 ?. \0046ADAC 55 push ebp //在此下断; h) Z+ N" T( Z1 ]
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0" m% O: @& |8 |' ~
0046ADB2 64:FF30 push dword ptr fs:[eax] P8 k# n G' U. g: \
0046ADB5 64:8920 mov dword ptr fs:[eax],esp( N' S- j1 d/ x6 ~. o( P
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
* r$ `9 G+ y! R. p8 _0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]! ^7 A/ ^( I! G% f
0046ADC1 8BC6 mov eax,esi- `5 V) B$ O& ?' C2 I& Y% @! S" L
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
0 M W* U- E; U3 X# _( Q0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
, @( \2 z3 Y7 g6 l1 Y0 { j0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]; x/ M9 z4 k, E0 E. [
0046ADCE E8 45D9F9FF call Unpacked.00408718
( M" N% F6 I# q0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
% b5 \* V8 }# s( M0046ADD6 8BC6 mov eax,esi
# y- r- ~( j2 L U0046ADD8 E8 3359FDFF call Unpacked.00440710! a/ K8 r/ q6 |6 v
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
# Z" i9 z( g, Z4 T. j! H0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
6 p* P7 ]+ j/ I9 c' ^& S+ T4 ~+ k) ]0046ADE6 E8 F558FDFF call Unpacked.004406E0
& ?- ? r5 a: A' s6 ]% u0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
8 W2 e% y7 \! e. c8 `) V2 {( t0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳% v& A6 V& i' Q$ K
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
, F) E4 p% b7 y7 h0046ADFA B2 01 mov dl,1 ; DL置1+ W/ u- |1 B1 U5 c
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08], E7 W3 Q" y! D
0046AE01 E8 B2AFFFFF call Unpacked.00465DB87 H8 E! p& ?7 i# Z1 l6 e& v
0046AE06 8BF0 mov esi,eax
. V0 t: W, O+ o0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]% i/ Y8 }7 \# L4 ?! P
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
; {# N& d/ a$ }5 t. B8 P0046AE11 E8 CA58FDFF call Unpacked.004406E0* F! B: u2 i8 |3 k' E
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX2 S1 T' r- }5 D+ E+ b5 H
0046AE19 50 push eax
. l- f9 W; o& L0 k( M# m& P5 E0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
z8 l; q( m& B; M4 ~# {0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
! o; n. W A" l0046AE25 8BC6 mov eax,esi% h0 G' l& j/ K' `
0046AE27 8B38 mov edi,dword ptr ds:[eax] F+ @0 t4 s1 j6 M( T8 `: E+ m' C: Y
0046AE29 FF57 04 call dword ptr ds:[edi+4]
7 }" U% a, O6 M3 _3 X q, V0046AE2C 8BC6 mov eax,esi- L( d& f" h6 U7 g7 ~6 ]: ?
0046AE2E E8 4587F9FF call Unpacked.00403578
7 S, L) p0 x* g$ @3 o, n7 a0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
# q2 Y" C/ p: a1 `1 ~0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~+ {5 K2 p& q. P3 J
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
' n- k' B$ k3 }" ^: F! x( N0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
! n* T' ~; i# m- s0046AE42 6A 00 push 0
8 J' _3 W7 W1 L& b7 k0046AE44 68 D8AE4600 push Unpacked.0046AED82 l A- W) J8 ~1 u- T8 {
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
+ X+ s& M" k O0 p a- K0046AE4E 8BC3 mov eax,ebx2 \3 i7 F6 c- v$ l& q
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
8 \# c% G+ w8 `+ Z0046AE55 50 push eax
g5 ^% S+ Z y: ~, [& Q; f0046AE56 E8 DDC2F9FF call & G6 G4 B- g# k" [% L! H' Z* z' e
0046AE5B EB 20 jmp short Unpacked.0046AE7D
7 Q- }2 q n2 l0 X5 G: @* ~' w* v+ Y0046AE5D 6A 00 push 08 U( z2 K, C5 l+ N1 h' b
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8( Z) E8 }* \- f
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功- `. @+ Q* ~# v+ O X% `
0046AE69 8BC3 mov eax,ebx
2 f5 {& \. k* M- t& \: p0 `0046AE6B E8 88BFFDFF call Unpacked.00446DF8$ ]/ `2 B1 {, g4 p
0046AE70 50 push eax
0 u# U. V8 m% @* ~! U) ?6 f0046AE71 E8 C2C2F9FF call " ^3 R! h& {& O" o
0046AE76 8BC3 mov eax,ebx
4 G( R/ F+ s; n/ V0046AE78 E8 7F21FFFF call Unpacked.0045CFFC4 n0 B5 w6 |8 U! w# U
0046AE7D 33C0 xor eax,eax: P% @0 P4 B1 r( a
0046AE7F 5A pop edx
. X6 t3 Z8 e! G. c& P: \0046AE80 59 pop ecx2 D/ h1 g& a& m7 e% }; r
0046AE81 59 pop ecx
+ D+ T) `: T: A0046AE82 64:8910 mov dword ptr fs:[eax],edx8 w, P6 e8 g9 d! O! K# y- t
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
1 L* S5 p9 @( b4 {* _2 I9 Q: T0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]4 y# j! o. @7 i7 v
0046AE8D BA 03000000 mov edx,3
; P" S6 t6 d8 T+ O* {; g8 T9 k7 x0046AE92 E8 F594F9FF call Unpacked.0040438C: E3 \3 P3 j3 p. n& @$ O5 t
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
' v: c. [3 p1 A. e! C: A. L0046AE9A E8 C994F9FF call Unpacked.00404368
3 u$ b, V9 l+ t1 n0046AE9F C3 retn
. a. E( ~- y0 o* N) i; q0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C% r1 z, K k5 \* J' n
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
# K* ^, B. M2 I, E6 P+ A****************************************************************. c! J/ Y" M7 v
跟进0046AE39处CALL来到：7 f0 O8 ]& }7 y; i! _0 e9 r* W4 \" u
0046B9F4 55 push ebp2 u3 b8 X/ B% u4 h
0046B9F5 8BEC mov ebp,esp: f& l0 x P3 R$ r3 d* n, b# y5 c
0046B9F7 33C9 xor ecx,ecx8 U; e( y$ ]& z+ P
0046B9F9 51 push ecx/ R A: k% |( O( i* e; q
0046B9FA 51 push ecx9 V6 n: d' _1 f+ ?3 v
0046B9FB 51 push ecx6 r8 |( |* }: r) p, V4 h, X
0046B9FC 51 push ecx# h3 i5 [" c2 V# {
0046B9FD 51 push ecx3 V0 _0 t9 ]4 i& V5 v. n. t
0046B9FE 53 push ebx
* s) P( @- a# J$ \2 E7 ]5 x0046B9FF 56 push esi
/ \* K# ]- Z" J- O0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
) g# r& A6 @: M0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]3 D+ t' A8 P+ S \6 [
0046BA06 E8 FD8DF9FF call Unpacked.00404808
7 H+ a4 Y/ D2 A% y- C7 G5 D0046BA0B 33C0 xor eax,eax
, Z. e: h) m- c( w2 a0046BA0D 55 push ebp
% x1 @0 ~1 L3 r* p: h0046BA0E 68 91BA4600 push Unpacked.0046BA91
. q+ u4 |( \* H# [5 n0046BA13 64:FF30 push dword ptr fs:[eax]5 k/ w5 q( A9 u- V
0046BA16 64:8920 mov dword ptr fs:[eax],esp. }, ]* @, \7 h& |
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
. _/ f* s8 c) v% E2 ~0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]# u; P( M/ z) }1 O: U7 k; f" e4 e
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 5 H$ Z% n+ F- ?& G+ O6 @5 [
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
) G+ h( l% b/ O! Y; f( t0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX- P0 I' T y& q( u% h: E
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进& _: i$ T8 i; d$ z, {+ v; e1 _
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里8 V7 L% r2 L/ e0 A) o
0046BA34 B2 01 mov dl,1 ; DL置18 L+ w; a5 ?* m3 j# a) r8 Q# d: g `: ?
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
% X2 x9 A5 F3 @, f0046BA3B E8 78A3FFFF call Unpacked.00465DB86 q% C" H8 z- d( X# r$ h% F
0046BA40 8BD8 mov ebx,eax: ]# v8 ~$ c$ u$ y; `4 R% Y9 r
0046BA42 6A 00 push 0
8 n5 D5 X0 [5 b7 O# @- T0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]6 R! U8 X: y' u1 i" C
0046BA47 50 push eax1 Q `2 h+ B+ Q% r. R
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
# M" `2 h: S# I( N( c$ P3 Y0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
( N# z$ b7 d2 a, \0046BA50 8BC3 mov eax,ebx
9 O( f, O; `1 i9 q, n9 y8 ?5 [0046BA52 8B30 mov esi,dword ptr ds:[eax]
7 X. Y2 R# @+ K1 n: V w0046BA54 FF16 call dword ptr ds:[esi]
) F$ A7 I( G0 b% d5 [$ Y9 w0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
) E. m3 V# ~1 x# r0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]8 V3 U0 i2 `; q7 \$ w) L
0046BA5C E8 B7CCF9FF call Unpacked.00408718
- K2 X* l0 v! e$ `7 r! s% E0046BA61 8BC3 mov eax,ebx" y- C/ H8 b; W1 j! ^" v% Y
0046BA63 E8 107BF9FF call Unpacked.00403578
. c& { i) W' t/ N+ `0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
& T( c9 H4 W. Z0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
) f! |6 C0 D3 d0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~/ a3 t4 V, f& z" n; o7 F
0046BA73 0F94C3 sete bl ; 置BL值8 b5 h, k. G8 B! K/ O) e/ B) ^
0046BA76 33C0 xor eax,eax
' B5 Q. x+ c b# i0046BA78 5A pop edx
: L" G" D y6 G: ~% M4 [0046BA79 59 pop ecx
5 M9 |8 `7 ~9 V0046BA7A 59 pop ecx
B4 U0 v% b0 B/ l; P/ g% c0046BA7B 64:8910 mov dword ptr fs:[eax],edx, s+ I' n% [, \
0046BA7E 68 98BA4600 push Unpacked.0046BA98$ O% t a9 A" w* R& g2 `9 X) E$ m) V
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
/ G8 g) E, S* e+ l0046BA86 BA 05000000 mov edx,5& w. X, W8 A$ V9 x9 b, s
0046BA8B E8 FC88F9FF call Unpacked.0040438C
5 ^3 p( Z/ K( x0046BA90 C3 retn9 F4 i- q# x/ q2 o7 ]" y$ J4 y: a! B
****************************************************************8 T4 w, S: j& w; c5 a1 Q6 q; _7 i
跟进0046BA2A处CALL来到：8 J6 [4 [: {$ l; b
0046B908 55 push ebp
/ W1 d* _. ^; a9 w; `% Y) Z0046B909 8BEC mov ebp,esp
; S2 F7 j/ Y4 A2 o! O2 w0046B90B 83C4 DC add esp,-24% p; Z3 f4 L% ?6 A. B
0046B90E 53 push ebx
; ^8 A Y! G7 k5 [" }! c0 u4 Q0046B90F 56 push esi
, G. X' x% j: b/ D. ]1 C; a5 k0046B910 33C9 xor ecx,ecx4 A9 Q/ p/ h5 n& x6 k% P4 y
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx$ D& B9 z5 F2 I0 f
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
2 R; m+ X' `2 N9 p6 Y0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx0 }( D. `, M2 {5 ^7 \" }' T
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
7 T; |0 @8 Z) \( Y0046B91E 8BF2 mov esi,edx1 d2 b- i$ _! Y- P+ g
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax4 O6 ^' o1 Q& R! ^
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4], T) O: M, y. ]" u8 t( C- Q! G
0046B926 E8 DD8EF9FF call Unpacked.00404808
2 J2 K8 a* ^; q7 D, K% o0046B92B 33C0 xor eax,eax z& T, k, Q0 l8 e" l0 _
0046B92D 55 push ebp
l' v$ q8 Q9 q! y( b7 \7 U0046B92E 68 CEB94600 push Unpacked.0046B9CE
' s/ |- V2 o8 _# S! N0046B933 64:FF30 push dword ptr fs:[eax]' q [$ \3 p+ Q) t/ c
0046B936 64:8920 mov dword ptr fs:[eax],esp# U; Y# s4 m3 {9 G* w
0046B939 8BC6 mov eax,esi* o h2 ? _3 _% z
0046B93B E8 288AF9FF call Unpacked.00404368. b6 f* x. _" p' E; ]8 h
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]# V8 \" F) U7 \1 i
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX4 }! E6 L) a: s. {0 R# ]
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E46 {$ A8 k6 u2 }9 T
0046B94B E8 1C8DF9FF call Unpacked.0040466C2 F0 @! U: x+ c+ e$ f
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
* r5 l% T. S+ C) E" a0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]5 } a4 M/ d$ z3 D5 d- _
0046B956 E8 EDBCFFFF call Unpacked.00467648
$ A, M7 n' ~1 ^ u6 i0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]2 t, n1 p8 r3 x; `
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]4 l" j5 m" `, ~* L( Y* \; G5 n, B
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
5 Q* w: ^/ }" H3 n" U K0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
- n! a4 k7 d1 Z0 t( C0046B969 E8 FA89F9FF call Unpacked.00404368
: O! g8 S" b3 z: V9 d0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX( s2 H2 L. ?# p) r8 h' o. t
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
9 p3 b+ o$ Y9 z! G4 P$ G0046B976 8BD8 mov ebx,eax ; EAX送EBX
5 b9 @$ q* F9 W1 ?7 o( [8 {8 o0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
8 `" o+ z; b; ^/ c0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
H& t7 l( q& v' E0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算: g3 ~, x6 w- e- [5 V
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX! H9 o4 H2 e( c8 u; e c% g
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL4 w4 K, q0 O1 I0 S4 K( t3 t
0046B987 E8 BC8BF9FF call Unpacked.00404548
8 I9 s$ K! K* _; c- N" u7 y0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]! S% w3 v1 x2 y: e
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
3 i ^& S5 C3 ?4 Z! h3 _0046B992 E8 918CF9FF call Unpacked.004046284 M5 R+ }8 l$ {' i. C
0046B997 4B dec ebx ; EBX减一) o' Z) o: E1 U, ?/ E2 R# ^
0046B998 85DB test ebx,ebx ; 是否为0- a% R" P9 | }9 u2 c/ C1 k
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。 _8 {1 u% c. Z& b
0046B99C 8BC6 mov eax,esi
1 G& V9 A: i! S G0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
; H( S; u: M0 O) r E2 [0046B9A1 E8 168AF9FF call Unpacked.004043BC
8 }& k* Q$ f- t: s6 J2 F. g0046B9A6 33C0 xor eax,eax& N' t6 ` F+ W* u, |6 S4 S
0046B9A8 5A pop edx0 {6 ?5 s; I- @7 u& M8 b: ?
0046B9A9 59 pop ecx
5 x$ k; n' Y ~2 h0046B9AA 59 pop ecx
. s1 j; e& J& X" ]/ Z0046B9AB 64:8910 mov dword ptr fs:[eax],edx
( |) F2 Y4 C- x0046B9AE 68 D5B94600 push Unpacked.0046B9D5. F: H9 E; }; \; Q" a7 q# K
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]9 C4 _! q7 {) K8 y) }9 o- Y' Q
0046B9B6 BA 02000000 mov edx,2( v- o: |! Z+ S
0046B9BB E8 CC89F9FF call Unpacked.0040438C" i9 v% L! h' V x" i" A0 ?
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
5 y6 X8 z8 j3 o: u9 c1 ?. T7 e0046B9C3 BA 03000000 mov edx,3: A/ S; u# Y6 r1 G1 u, @; U3 W
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
5 K! j. H$ L+ W% p) \1 I0046B9CD C3 retn
' C3 n% N+ I- }4 N****************************************************************6 X, V8 r! ^% p+ X1 w: u
跟进0046B961处CALL来到：( V& G2 ]. F+ V2 z( g
004676BC 55 push ebp
" Y/ F4 Q) l1 f) ^004676BD 8BEC mov ebp,esp
- ]0 v8 e/ d2 O! @3 _7 H6 v- C004676BF 83C4 E8 add esp,-18% R# Q8 Z* e3 q6 w4 D
004676C2 53 push ebx
0 o3 g3 s0 K3 J. C8 B004676C3 56 push esi
$ T+ o( R8 d, O9 S) ~ W004676C4 57 push edi( k5 g4 N. I8 A7 I
004676C5 33C9 xor ecx,ecx
& ]5 \# j! w7 a2 l004676C7 894D EC mov dword ptr ss:[ebp-14],ecx p* x" N. k c! }5 T
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
: p) d6 M( w; B004676CD 8BF0 mov esi,eax
6 k1 X0 A* D5 M4 ^2 m( I- }+ g% o7 O004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]) _ @& y# x6 F5 M- e
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
n; |: m' M! w9 x) c& }# F004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
1 |' p! {# b( M- a* p F& o3 m004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>$ ~+ e9 G* @9 k, J. _
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi> q! Y- S* C8 Y
004676D6 8BFA mov edi,edx
5 z" h$ v' M8 {+ _004676D8 33C0 xor eax,eax
9 E/ \ k% L. f0 V004676DA 55 push ebp b6 U) P* G% _9 b( @7 i' c
004676DB 68 57774600 push Unpacked.00467757
6 e4 ?4 Z, A0 K4 z% f1 t004676E0 64:FF30 push dword ptr fs:[eax]( p7 F q K$ `9 O9 _
004676E3 64:8920 mov dword ptr fs:[eax],esp
& a* k' ^9 V0 }' `$ u" y004676E6 8BC7 mov eax,edi8 Y* o. a. ]3 C9 h1 f ]
004676E8 E8 7BCCF9FF call Unpacked.00404368
; A" W+ l$ }* ?8 X004676ED B3 10 mov bl,10
* D2 k0 r$ F6 @ S( a# s004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]) O/ G N) D* E2 r- N3 I3 z
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
9 v' O9 k+ W! S% q1 S004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14], G G% q" a% q' Z v
004676F7 33D2 xor edx,edx
# d* w4 v- V" t6 Y9 i1 B( c0 c004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
' V. {. X% f! x& S004676FB C1EA 04 shr edx,4 ; EDX右移4位; W H7 X: p! j; m6 \6 z- z: c2 Z6 P
004676FE 83E2 0F and edx,0F ; 和0F与
7 T' U9 C) @5 K00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
# g, U- q& l0 }00467707 E8 3CCEF9FF call Unpacked.00404548
4 H5 \$ B! l$ R) @5 i! m0046770C FF75 EC push dword ptr ss:[ebp-14]+ j$ b# r" m+ V: r+ r- p8 U# a6 [
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
7 A: M7 R2 c" V R' ^00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL% M( \7 f3 U0 l
00467714 80E2 0F and dl,0F ; DL和0F与2 G. {: V4 x; I# o3 d6 M9 e5 o
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
4 g$ c# B# e) N, T- F g2 d! U- k0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
! D& n* ~5 A4 s1 c6 U( j. X+ _00467723 E8 20CEF9FF call Unpacked.00404548 W4 I- g0 a7 o* o
00467728 FF75 E8 push dword ptr ss:[ebp-18]
8 c2 A+ M) y" F4 c4 ]0046772B 8BC7 mov eax,edi ; EDI送EAX
# q* {: W9 Y' j0046772D BA 03000000 mov edx,3
9 H( a' j( |2 K00467732 E8 A9CFF9FF call Unpacked.004046E0
8 N& J5 C9 h& a) l! b F00467737 46 inc esi- ^5 H0 o8 O0 F0 `- k& }
00467738 FECB dec bl! b+ t" P5 n6 p% B5 u; Q" X% l
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
( A4 r% k2 _7 z0046773C 33C0 xor eax,eax
5 p, e5 S3 d: b: j3 u, h3 u8 n* C0046773E 5A pop edx/ i. Y( _9 D* Q
0046773F 59 pop ecx, o) n% o$ _2 u8 Z
00467740 59 pop ecx, }/ C" o" r& ]% ]! [# V/ P- ~
00467741 64:8910 mov dword ptr fs:[eax],edx2 Q! e5 |1 C" i
00467744 68 5E774600 push Unpacked.0046775E- a: X' n# ]! M9 s, L* D }6 s
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
* F9 Y/ N F: m% b0046774C BA 02000000 mov edx,2% v/ c$ @* i, I" |' Z" w( D( @
00467751 E8 36CCF9FF call Unpacked.0040438C7 H# o- P( r7 l7 @( g% ]1 b
00467756 C3 retn //返回
2 i& }- i1 c/ N' @ X% @" b, y———————————————————————————————————————————+ M6 v$ q" r/ y
【Crack＿总结】：/ j6 O$ W& e( q0 C8 R" L. ?
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^
1 p M: t1 e1 p5 c; C机器码：bbba33de56c4cf31d9063cc074248d4b2 D2 q9 c4 m8 M
注册码：e807519487d7ad4f57ad42dc87fbb191
' B& A( h4 }: ]: N1 j4 _' r附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡