|
|
【原创】破解图章制作系统( k$ _8 K5 d" b7 S X: c/ X1 w3 [( ^
日期：2005年5月15日 破解人：yijun[PYG]
+ U6 [! o$ m2 r& p& Y, {, i* n6 s$ J———————————————————————————————————————————9 _! X; K) z3 u5 C4 Q% h
【软件名称】：图章制作系统 软件版本：1.0
. M% v. E, [/ X8 R' {- @" L【软件大小】： 252KB* w: s4 K# F7 r) M! b% ^
【软件简介】：制作各种图章
* K3 i9 l. d- K Q4 b0 G【软件限制】：NAG
) O* P0 I& ]. K$ |4 E5 [# o# Y* P【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
7 v4 I% U6 ~. k, Q. ?【破解工具】：OD,PEID
4 `! I. A, g; [———————————————————————————————————————————
- X+ T' @" m% @ P ~/ f `9 ^' \
【破解过程】：
- |; Y/ N: q5 ?9 J; D) d6 }7 dPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
3 F) A4 x4 K+ U! M( iOD载入，通过字符串查找很容易来到这里：
* R+ Q' S) Y7 W) q; v0046ADAC 55 push ebp //在此下断
7 j5 }8 ]2 T: O& M2 U' K( f1 j0046ADAD 68 A0AE4600 push Unpacked.0046AEA06 A6 b- ]9 Y3 b2 B6 r; t
0046ADB2 64:FF30 push dword ptr fs:[eax]
) j. N( Z" g" K3 {+ ~0 m, r5 E0046ADB5 64:8920 mov dword ptr fs:[eax],esp
0 ~$ }. z4 m+ t/ i/ S! i6 o4 Q: z0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
& Z7 f g/ W X0 N- z2 t$ f' E0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]0 y+ K: v9 N' s) r1 q, V
0046ADC1 8BC6 mov eax,esi* f% _& |) b( X2 u4 G& v" p7 _
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX5 c& l5 b g# |; t
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
j8 d5 C/ [7 b# s) s0 M# {0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
; D& B0 B0 x: I0046ADCE E8 45D9F9FF call Unpacked.00408718
+ t3 v& z# J5 K1 P9 Z0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
) {: I* `5 D* S/ P* @% }' B ?0046ADD6 8BC6 mov eax,esi
# Q6 r; K+ h/ A6 r( j! f0046ADD8 E8 3359FDFF call Unpacked.00440710& p- ^+ q3 x, C" j: j) R
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]5 W% n" }" v3 p& c
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]* s `2 \: S7 s, L" Y. U8 H" N7 p
0046ADE6 E8 F558FDFF call Unpacked.004406E0
) }% y( ~" |$ i( \' T0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空0 q! X' o' B x
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
) C0 H- ]% D( c; L( f0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
8 M' ? O; R, B2 R5 F0046ADFA B2 01 mov dl,1 ; DL置17 R6 f( b) b+ n, n9 l
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
- [# u4 Z. z; B$ t( g: k8 |! {& v5 u0046AE01 E8 B2AFFFFF call Unpacked.00465DB8. b0 k+ q" U5 U
0046AE06 8BF0 mov esi,eax
0 _" G1 {2 J, ~; U0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]+ x5 ?+ W+ q7 Y+ y* I% O- d" D; S4 Q
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]: S( }* |( ]8 K5 P, T3 X; T9 F
0046AE11 E8 CA58FDFF call Unpacked.004406E0
0 |! w: t+ |* s. ]6 z2 Y# x0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
o# s; n _5 M' O T/ b6 ^0046AE19 50 push eax
) q: R y# N) i2 S) t0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
7 n. b: h% h& I9 r0 V0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
7 ?3 A' a: Q- {5 u/ H# Z& \) r0046AE25 8BC6 mov eax,esi
4 s& ~0 @! b/ s4 d( `/ X8 Y P0046AE27 8B38 mov edi,dword ptr ds:[eax]9 u; S& l) }/ I" d+ U( |6 E$ @
0046AE29 FF57 04 call dword ptr ds:[edi+4]
7 W H2 o2 J0 i0046AE2C 8BC6 mov eax,esi! }( I: ^5 J! |) l5 D' n2 @
0046AE2E E8 4587F9FF call Unpacked.00403578
; j6 Y" m% H! o9 N3 m, z0 x0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]; K4 S Q& Q' j: e) C
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~3 c* X6 w! {, `0 R
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）- ?; G$ o& t/ _. |5 X' l6 L; c
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~0 Z# x: S) }5 n9 S8 t& \
0046AE42 6A 00 push 0
: a+ q2 [7 o1 Y7 s. k0046AE44 68 D8AE4600 push Unpacked.0046AED8
6 Q: q/ R( T8 I& I. @$ l0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
7 {- K8 c5 n/ I7 Q# Z0046AE4E 8BC3 mov eax,ebx8 m: S/ } c2 R5 d
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8/ ~% }& V& \2 i; R3 n6 b+ U
0046AE55 50 push eax
* h1 r1 D8 Q( l! P' z4 g9 [' r; C$ a0046AE56 E8 DDC2F9FF call
! w9 b* V, K* \6 H0046AE5B EB 20 jmp short Unpacked.0046AE7D# y; o( ~: y; W7 H$ k3 x2 ^( w
0046AE5D 6A 00 push 0
, ~/ T1 y, K8 a# |7 C0046AE5F 68 F8AE4600 push Unpacked.0046AEF84 N% U# i# g1 E. u* ?
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功+ r& M: W0 K" M& U
0046AE69 8BC3 mov eax,ebx
- h1 y; q2 k: u4 ]# g( g' B0 E, L0046AE6B E8 88BFFDFF call Unpacked.00446DF8
9 Y# P I7 E( n5 X' u0046AE70 50 push eax
( n7 f4 L6 W6 F7 z6 N- H0046AE71 E8 C2C2F9FF call
6 _. c7 C, k4 U* x; D0046AE76 8BC3 mov eax,ebx
7 c( Z, {+ S% ], _: t5 s2 J* w0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
: M8 x7 J, G- M1 L4 B5 O( g0046AE7D 33C0 xor eax,eax- M5 E- M7 [- }& q
0046AE7F 5A pop edx; i A8 c- f% `/ a5 r- E
0046AE80 59 pop ecx
3 w2 x. s5 _- q1 y& y: e% e, _0046AE81 59 pop ecx
* W6 h: X- x+ Y x2 _7 \/ G0046AE82 64:8910 mov dword ptr fs:[eax],edx# u- S! `! w* X7 W- c; w
0046AE85 68 A7AE4600 push Unpacked.0046AEA7/ D# S8 m! H- _* o
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
4 m4 n+ p6 c* B# L+ i3 o4 V0046AE8D BA 03000000 mov edx,3# o R. a# y4 N V! w
0046AE92 E8 F594F9FF call Unpacked.0040438C
$ E7 j- t$ E3 n' I- I7 g0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
) X9 M5 |4 l: V& T5 A! I0046AE9A E8 C994F9FF call Unpacked.00404368
; v0 |$ i: x' d8 o7 A0046AE9F C3 retn
( o; \, m! t- L4 Z3 a6 |1 E: y0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C/ |) Q" i- s$ Q0 H3 Z! x
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
) z! j( b- _* C5 v3 Y3 U****************************************************************4 \( K2 D$ U8 R! G3 ?
跟进0046AE39处CALL来到：7 i0 N, V* e3 r/ g* k
0046B9F4 55 push ebp
1 p! ]& y" R0 D, d0046B9F5 8BEC mov ebp,esp
: z" H2 a+ L) c' L3 @# L9 Q0046B9F7 33C9 xor ecx,ecx
/ |3 @ V+ w+ c; ?/ `5 p0046B9F9 51 push ecx
$ G5 _7 F: V4 ?' u3 A# \0046B9FA 51 push ecx% E U! I( j, P* B+ L6 N" g7 r
0046B9FB 51 push ecx/ n" r& V7 g; ]: `6 ^) F5 t5 h
0046B9FC 51 push ecx. y$ U! v' V; j6 ^# V( @
0046B9FD 51 push ecx1 f( |+ _- k B
0046B9FE 53 push ebx
1 B6 v ^' L9 a% Q6 V4 _/ q4 {1 L0046B9FF 56 push esi. X8 U5 b# A7 d
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
# M( V2 Q' l, b; i% [0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
! {9 B1 A" ^5 v. O; K0 N M0046BA06 E8 FD8DF9FF call Unpacked.00404808
4 _8 C% |: X0 h( h0046BA0B 33C0 xor eax,eax
4 D0 w8 {4 [2 _7 J0046BA0D 55 push ebp A) d- W1 S, r; _, v& q) G5 O0 [
0046BA0E 68 91BA4600 push Unpacked.0046BA915 R C, a8 Y. ^ g. l* u
0046BA13 64:FF30 push dword ptr fs:[eax]& @! z6 {$ `7 z; |1 u9 X! z
0046BA16 64:8920 mov dword ptr fs:[eax],esp
z9 c6 f5 o- `; \6 I0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
) s9 {. }5 E- b8 }0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
% z2 s1 K6 z* n) p. ]0046BA1F E8 DCFDFFFF call Unpacked.0046B800
2 n* k1 L% K" I- x. k" V0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
9 |" W3 N2 W2 C; A8 k0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
0 a* w; {# f% ~5 n- r7 r0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进- b% b! f/ A" n8 s
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
9 k( x" a* `) W! ? _/ t0046BA34 B2 01 mov dl,1 ; DL置1$ J- B) k& M- e \
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]5 }- K$ g& H* C5 }- }$ q D
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
. B4 i, d5 E8 {% [9 U0046BA40 8BD8 mov ebx,eax
H2 ~5 k* e) y# \3 z0046BA42 6A 00 push 0
, S" M! @. X/ b7 `9 Z) d0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]. y' u8 s8 O3 @5 h( t" I9 v: Q+ N
0046BA47 50 push eax
* P4 ^ W$ T n0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
0 [. ^0 s5 x3 h/ E" y$ I0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]' O* i; @' ]" R, [4 R* q1 S
0046BA50 8BC3 mov eax,ebx0 l: R$ x# ^! I* ~( d
0046BA52 8B30 mov esi,dword ptr ds:[eax]
: p# T" U2 Q# k0046BA54 FF16 call dword ptr ds:[esi]
- ~, ^! C: o- v* ]! d0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX# C0 E$ v/ j( j+ I) W8 H
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]; C1 D9 O5 o/ j2 `" v9 |) G, w" V3 ]* Z
0046BA5C E8 B7CCF9FF call Unpacked.00408718
0 D: v1 W5 u* p( V/ a0046BA61 8BC3 mov eax,ebx
. c$ U# b$ q3 |0046BA63 E8 107BF9FF call Unpacked.00403578
& A7 D1 {9 W# s0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX- B% L" j3 g. P& c$ ?' I
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
" M1 [8 J( P; N7 |) \: o( X6 E) U0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
5 Q+ V; |8 O+ z O$ ^: c: z0046BA73 0F94C3 sete bl ; 置BL值
; U: m# Z; x. S/ M7 T1 H7 z4 B0046BA76 33C0 xor eax,eax
2 g% d7 b; S1 C" z& G3 X0046BA78 5A pop edx% V- A1 E0 p' t4 e: x3 X
0046BA79 59 pop ecx7 g3 w. G# h' h
0046BA7A 59 pop ecx) Q2 k& u6 A* y2 d& _
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
' X+ R- c- F( ~3 l+ F, E0046BA7E 68 98BA4600 push Unpacked.0046BA98 h- `; O! z: b2 x% P
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
% A4 Z% \- s) y0046BA86 BA 05000000 mov edx,5& e; u! L1 ^5 A+ A6 B
0046BA8B E8 FC88F9FF call Unpacked.0040438C# r) W4 E i& O
0046BA90 C3 retn
" j/ _: l( {% P7 U****************************************************************$ M, R- P2 W( Q7 \1 R
跟进0046BA2A处CALL来到：* w0 l' J0 }: d) [' ?, g* c
0046B908 55 push ebp% E. G, `7 e1 u- z2 F& M
0046B909 8BEC mov ebp,esp; \6 P5 U* [" b) B5 G- s: R
0046B90B 83C4 DC add esp,-24, p J; b% u# ?) I/ S" k6 F
0046B90E 53 push ebx
~9 B- Q3 X6 c& q/ i0046B90F 56 push esi/ U& X7 O: H2 S1 J- X( | e
0046B910 33C9 xor ecx,ecx
6 \5 D4 n' y1 Y& e0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
7 T4 h( l; Q! |1 s) Z+ ]/ p) Y3 f$ P0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx0 `0 M1 b# [* T3 ]- a( ]' Z
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx4 L# |" P3 K1 `& e9 I7 B: v
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx% J" g7 g% {% g% a( p, _5 a
0046B91E 8BF2 mov esi,edx6 `, H5 T; W/ m+ s$ ?
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
! v9 {: _" _1 a/ e8 [0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
9 D* Y3 x5 i" Z! I2 M2 T- {0046B926 E8 DD8EF9FF call Unpacked.00404808, X! @2 G0 a7 P6 y. C( y* O
0046B92B 33C0 xor eax,eax
3 E0 i- S4 y/ b! K8 i! l7 c3 o$ f X0046B92D 55 push ebp: S4 `9 P' k# r" z
0046B92E 68 CEB94600 push Unpacked.0046B9CE
% p- d8 {1 U1 D+ R* z0046B933 64:FF30 push dword ptr fs:[eax]
. _# a. N; y7 ?& E; c5 H [% ^* Z3 |0046B936 64:8920 mov dword ptr fs:[eax],esp
# E. q" d2 a) D; v1 U0046B939 8BC6 mov eax,esi
3 U% c: b* N2 }! y0046B93B E8 288AF9FF call Unpacked.00404368
6 u8 q0 d9 {5 Z" [( a8 x0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]6 u* c) d& h) S
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
+ }: d6 z* |5 X- h2 i; Q0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
& p2 y. C# b( d' s& P3 ?0046B94B E8 1C8DF9FF call Unpacked.0040466C
) ^" J7 X! y" Z0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]) d" J9 R3 h' F& ^; o
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
* C0 O) M0 a( `- a0046B956 E8 EDBCFFFF call Unpacked.00467648. L6 K! n# k. k1 x: }7 U6 j
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
% a0 ]5 x! X% F0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
4 Q9 Q/ x2 w+ z/ u: l0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e6 M* \1 X- w! G' Z5 ?6 {% v' q! _
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
/ i* Z" ?) P- u" A# U4 D) d0046B969 E8 FA89F9FF call Unpacked.00404368" _% T5 U+ B0 u T/ }, L
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
' ?# R$ h& j2 B* k0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
- p! }. {, V; I1 D' l. P0046B976 8BD8 mov ebx,eax ; EAX送EBX
\1 r3 x8 q- q8 Z% a3 g: |' s3 m0046B978 83FB 01 cmp ebx,1 ; EBX和1比较+ F/ U' a" W$ ~& b
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
8 C3 Z- n0 e1 P, W: Y; j0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算, j& W+ h0 F- Z1 g% k
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX5 ^' [( U! X& Q5 u* ~
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL/ u" `" z S, R: u$ ?9 C! t( _9 }
0046B987 E8 BC8BF9FF call Unpacked.00404548
/ ]% _0 p+ x, t! \; Z( t8 Y" @0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24], N7 j8 g3 m: G/ G4 n; E# \% b
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
1 A7 q; Y9 \1 D8 s0046B992 E8 918CF9FF call Unpacked.00404628
8 ~/ N9 y: x1 _: M" z* B0046B997 4B dec ebx ; EBX减一8 m- b1 d- {% u% S2 V/ l- O
0046B998 85DB test ebx,ebx ; 是否为0. N! Z% e; @" a9 x: X$ H
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
4 p: D9 e5 Z! ^: p, v0046B99C 8BC6 mov eax,esi
v! m) r* b: H3 F0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX# S, H# b2 R) ?
0046B9A1 E8 168AF9FF call Unpacked.004043BC
2 O9 T) Z3 G* u0046B9A6 33C0 xor eax,eax
# ?9 S: r9 o. V! A+ _% @: O5 }0 W0046B9A8 5A pop edx6 f7 ?2 n- v( O" T
0046B9A9 59 pop ecx6 x1 A/ G: N6 n& A6 a H/ T
0046B9AA 59 pop ecx. s( d% \! }$ E) l4 D: L% o9 S5 ?
0046B9AB 64:8910 mov dword ptr fs:[eax],edx* J2 O/ L W8 |2 l9 g% v0 Z
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
& j5 w3 l0 h6 {5 k* u0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
% `9 H& D9 |7 H5 _' p* ?0046B9B6 BA 02000000 mov edx,20 k3 v0 o3 r: R$ i
0046B9BB E8 CC89F9FF call Unpacked.0040438C
. w: Q# q: S5 W" {7 V1 R& H7 g0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]9 a S6 @, [- @, }6 x0 d
0046B9C3 BA 03000000 mov edx,3' p/ p8 M! Q' @+ R N
0046B9C8 E8 BF89F9FF call Unpacked.0040438C' Q+ y F7 Z/ f+ X" g
0046B9CD C3 retn
7 s: T3 }; U6 Q2 o9 L****************************************************************& K; D2 i0 r; ]7 I o) M% j/ f
跟进0046B961处CALL来到：8 e7 z1 o& V, C/ g( T
004676BC 55 push ebp
5 U1 A4 K8 L/ E8 }' \004676BD 8BEC mov ebp,esp, q1 O3 g3 d6 @2 p
004676BF 83C4 E8 add esp,-18
6 v, C3 s5 R% j& T1 U. Q( J004676C2 53 push ebx9 w- @8 A0 |# Z, O: g4 I
004676C3 56 push esi3 m0 ^! q( K2 W0 K& y9 C/ F6 L
004676C4 57 push edi
0 w: f( E/ ]& O0 ~9 U/ Y004676C5 33C9 xor ecx,ecx
0 {# b; _+ L7 A0 R004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
: ~: d& D6 M5 e9 p- e) J' W004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx+ _' r7 \1 C+ _: }( G; Y: c
004676CD 8BF0 mov esi,eax' h% K( r3 F: u$ X" q, v; ^
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]4 A9 Z. @' y4 u" A
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
$ X+ P& o A/ n2 ^004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>/ L( V3 r: j2 f# N8 M
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
" ^; R) H, j: q" q004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>. N) K/ f0 w/ u7 V) O8 s
004676D6 8BFA mov edi,edx, _0 o" m' S0 H l2 F9 V
004676D8 33C0 xor eax,eax8 ^- m1 ?4 @8 k. q; t/ {. W
004676DA 55 push ebp
; M% m4 O5 ?0 i) b004676DB 68 57774600 push Unpacked.00467757+ m1 R* \( A1 x
004676E0 64:FF30 push dword ptr fs:[eax]
" k$ F6 X# k7 G* n" Y* e+ b004676E3 64:8920 mov dword ptr fs:[eax],esp& [% T& s# ^# z; {8 Z: h& N% z
004676E6 8BC7 mov eax,edi5 C4 I+ A3 A8 y0 k. P. a3 Z0 v5 a6 i
004676E8 E8 7BCCF9FF call Unpacked.00404368
4 y0 O' } P7 |1 O! h004676ED B3 10 mov bl,10$ t e$ B2 Q! Y9 }+ q% R, r$ u1 W
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]/ g7 Q: L k4 o5 O6 v4 K2 J
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
?5 c- K% M3 H1 X# T. D# O004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]- h/ [1 u/ _- E4 C
004676F7 33D2 xor edx,edx+ D) L; q# L7 o# V9 X
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
8 b; X8 e. R& n5 W6 r: Q% p4 s004676FB C1EA 04 shr edx,4 ; EDX右移4位1 P9 @9 R- S; w& S3 t9 @, y
004676FE 83E2 0F and edx,0F ; 和0F与
7 Q/ y/ W5 e. F8 J! b9 Q4 v: O! _' e- x00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL; B& Z. s" r4 [! Q) u# H
00467707 E8 3CCEF9FF call Unpacked.00404548
X+ i' F$ {( C5 E- W( {8 t) U1 n! s0046770C FF75 EC push dword ptr ss:[ebp-14]
+ O! o0 g- W, L8 [0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
3 Z4 J @3 e& P) c* E: p0 r00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL$ l* m8 Z w2 A
00467714 80E2 0F and dl,0F ; DL和0F与
# ~! V" d1 K* ^1 p* z- g00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与& _/ }" H8 _0 t8 [/ I
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL( C2 J4 h. m2 O3 M7 N+ g, D6 b2 N+ @
00467723 E8 20CEF9FF call Unpacked.00404548
1 k1 ^/ N5 \$ p! s00467728 FF75 E8 push dword ptr ss:[ebp-18]
2 ^% }* v; K: @; l' t$ W. O0046772B 8BC7 mov eax,edi ; EDI送EAX
2 y9 f- b( p& [9 v0046772D BA 03000000 mov edx,3
2 C( H4 {' @! O: p( b& h00467732 E8 A9CFF9FF call Unpacked.004046E0) h# N2 i5 j* J. I( b2 g
00467737 46 inc esi
' T$ Z' L+ f8 O4 H00467738 FECB dec bl
" [% |; t8 Y1 }2 \" g# I9 h0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e8 s# B/ x6 v; X4 D# r5 f" O& x4 L
0046773C 33C0 xor eax,eax
9 j0 I0 ^, |8 G0 D7 k$ A( j8 `) m0046773E 5A pop edx
# u A2 n+ p9 [- {0046773F 59 pop ecx
& d* S5 z |- e/ R& C* O00467740 59 pop ecx
. ~3 P: @; M. e% @00467741 64:8910 mov dword ptr fs:[eax],edx5 T8 Y( a% k, L3 M* `
00467744 68 5E774600 push Unpacked.0046775E
% h+ ~- V/ k9 v$ s00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]9 z/ ]$ R$ @6 }0 T `
0046774C BA 02000000 mov edx,27 K j$ L- `- ?# a
00467751 E8 36CCF9FF call Unpacked.0040438C
: V2 [. a$ W+ C8 L1 Z, M0 g0 L6 \00467756 C3 retn //返回
7 W) l" u6 r6 u3 W. N+ x———————————————————————————————————————————
7 U; D' t) `4 Q* U+ b$ w& ]【Crack＿总结】：3 ~% H1 S# G5 y& a
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^# V# G0 d6 ^! T) }2 L
机器码：bbba33de56c4cf31d9063cc074248d4b
& r4 q6 f: \' B) N注册码：e807519487d7ad4f57ad42dc87fbb191
2 Y/ x$ _& O% T0 G" ?* W附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡