|
|
|
【原创】破解图章制作系统/ p( @3 w h" I( {; i' ^ |
日期：2005年5月15日 破解人：yijun[PYG]) k* s( A; w2 d# O x1 `& }
———————————————————————————————————————————$ F K4 d' x1 d& _! `( k- f& S) v5 [
【软件名称】：图章制作系统 软件版本：1.04 _/ O. E( b) D5 ^0 M) q% C" G
【软件大小】： 252KB, J$ D* S0 M9 `
【软件简介】：制作各种图章
! _1 n" i8 t7 Q5 K【软件限制】：NAG9 j, ^1 f- D, [& B+ u* z! |
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
; X3 X4 f- R0 D3 f v- i" j" P【破解工具】：OD,PEID5 Q9 s$ Z1 X: O5 @1 ^' F
———————————————————————————————————————————
6 _) j$ M3 C5 _, ~& V2 K+ S
8 l; s0 I* I/ ]7 o* _3 S* L【破解过程】：
4 M, ^, j+ p2 DPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
) f9 R7 b& k3 M4 _& ^, _6 @OD载入，通过字符串查找很容易来到这里：
, x& a# V8 F0 v! I' _6 t0046ADAC 55 push ebp //在此下断/ A" D1 |9 b. Q8 F. o* T/ r0 W- @
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
6 V+ d9 y* o2 }& I2 }0046ADB2 64:FF30 push dword ptr fs:[eax]
+ w6 j7 |9 S0 N) L0046ADB5 64:8920 mov dword ptr fs:[eax],esp! O; e* N# D1 |
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
6 M% D% h9 Y h; D. x1 x, B0 l: R+ ~0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
6 J% A! \3 ]8 e0046ADC1 8BC6 mov eax,esi
6 ]! o" w3 E: R9 s# ]* Q s" ^0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
. T4 _ ^* Q3 s2 i& G9 n( W O. g; x0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX% ^# c p& i* {. g% t2 f- o
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
/ R% u) r. o# S* ]0046ADCE E8 45D9F9FF call Unpacked.00408718
, T8 b1 R r$ E6 A0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX3 S1 D. R9 u! B9 n( Q* F- ]
0046ADD6 8BC6 mov eax,esi
; P* z" M; }4 L- e- {0046ADD8 E8 3359FDFF call Unpacked.00440710
' w: z* R. O! x3 n6 V' |' m0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]5 [& ]; d% N5 h. D# G
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
& t& K' m1 y1 D1 }! a6 J& P; S* O0046ADE6 E8 F558FDFF call Unpacked.004406E0
" K! L% G% n, m! Y+ F; _1 p, b0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
5 x4 h) O! d4 ~& R" p. m0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
8 T1 b. N! `7 ^7 ?4 \4 w) S0 F% N0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX) c3 G1 B3 H, h0 {6 a) k/ V
0046ADFA B2 01 mov dl,1 ; DL置10 f; |1 L1 `( Y n1 @$ z
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]: f- o' K( K, Z" m, p7 r9 I8 s1 g
0046AE01 E8 B2AFFFFF call Unpacked.00465DB80 O; L- H l- |4 Z/ y2 V
0046AE06 8BF0 mov esi,eax
x+ K l; Y; O$ a! U- Z9 \0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
# O+ W3 D9 W) c% B/ c; c8 H0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]% f6 y$ k2 l- `; v& W; R' z
0046AE11 E8 CA58FDFF call Unpacked.004406E01 I X# Z: z" q9 R/ }
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX! I) F# J! e- u0 D4 L1 [+ N& |
0046AE19 50 push eax4 \# Q j. l1 A6 @' P4 s, f
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
, N' o6 c8 q) E7 }. D$ C2 ?4 Z0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
. ?4 }; T6 I/ o8 B, Z% m0 M) J0046AE25 8BC6 mov eax,esi
% Y |- V( K- u- Z5 G0046AE27 8B38 mov edi,dword ptr ds:[eax]' z+ m6 Z4 c9 @+ }
0046AE29 FF57 04 call dword ptr ds:[edi+4]
7 {/ ]( g% E: V: e, s. z+ E h2 j0046AE2C 8BC6 mov eax,esi6 ?; t" h4 u' n0 P! N% t+ K
0046AE2E E8 4587F9FF call Unpacked.004035789 u5 `! }& o) s
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
5 `$ ]$ j7 E+ U0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~& i7 _" S" H$ G. @
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
8 T7 _* }$ a( l0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~: X: ^0 D2 F/ f1 s; j# ?) }3 I/ G
0046AE42 6A 00 push 0$ v/ R2 Q+ R9 l
0046AE44 68 D8AE4600 push Unpacked.0046AED8
4 A! o3 b5 q( x8 }* d0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误& Z$ a& j! w$ U$ g
0046AE4E 8BC3 mov eax,ebx
9 Q0 s" a9 {% C$ K ~0046AE50 E8 A3BFFDFF call Unpacked.00446DF8* @6 x; C; g% c7 _4 `+ x. q
0046AE55 50 push eax
$ u% \) |) b; y- u* [! A+ E0046AE56 E8 DDC2F9FF call " x4 p0 T* x3 Q4 s2 E' y: |( ?
0046AE5B EB 20 jmp short Unpacked.0046AE7D7 G! R) M, ?2 o6 K/ c8 W
0046AE5D 6A 00 push 0
- w/ p) Y- n: s. e/ z, s1 o0046AE5F 68 F8AE4600 push Unpacked.0046AEF8' ?7 I. y1 ^' {* v8 {
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
% y" w0 G* S$ L: b4 N0046AE69 8BC3 mov eax,ebx
. f/ T5 R3 F+ u4 ~1 @/ @! \* X! z0046AE6B E8 88BFFDFF call Unpacked.00446DF8
% ~$ H( x* m% L4 E0046AE70 50 push eax
* M" e8 n. r6 z- ?# y$ I8 N0046AE71 E8 C2C2F9FF call 5 B6 |# J+ \6 \. g e
0046AE76 8BC3 mov eax,ebx5 n9 c' x: t' U( e0 S5 ^) h
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC! `# f1 J/ n3 s8 R4 q r' @1 R
0046AE7D 33C0 xor eax,eax: D. B0 A5 G7 q4 \* _
0046AE7F 5A pop edx
% k0 X; x# w: |$ L- p0046AE80 59 pop ecx) S; r' E8 P( C
0046AE81 59 pop ecx
: f, q, ]. I, T; T# X0 M- R4 T. M0046AE82 64:8910 mov dword ptr fs:[eax],edx
9 `; r7 R6 D+ N. \0046AE85 68 A7AE4600 push Unpacked.0046AEA7( I' G! D. Q1 c& J% h
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]1 j# C. r: l! U7 B$ H7 R8 B/ k0 V
0046AE8D BA 03000000 mov edx,3! d! i- C7 Y# u% t; b( B' v0 v R% {& _
0046AE92 E8 F594F9FF call Unpacked.0040438C
6 I! @2 q5 T6 e+ f) P9 k9 {0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
; `. z. [2 I0 w5 f' ^; u0046AE9A E8 C994F9FF call Unpacked.004043686 g! h% C8 P* _: {
0046AE9F C3 retn
3 q' n( ?. a! v7 B; J+ H E0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C. h: s7 }6 h7 E" `; [+ N
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
6 l& E7 U8 v! H0 Q) [2 j$ ~1 k****************************************************************4 F/ L3 X, S. M, r) o+ S
跟进0046AE39处CALL来到：
2 Q, d7 u( R% B i8 \0 E4 j0046B9F4 55 push ebp
9 J$ t" V# ?: `0046B9F5 8BEC mov ebp,esp
0 z( P1 Z. \! `& L$ h0 V3 G0046B9F7 33C9 xor ecx,ecx
1 M" ] ]2 N& f, p4 n0046B9F9 51 push ecx4 l* m( V8 r" k& O; Y A, Q+ Q
0046B9FA 51 push ecx
1 k7 |1 N- o1 H: ^0046B9FB 51 push ecx. X6 }' Y8 b M7 y/ H' X2 G) U
0046B9FC 51 push ecx
^3 R. { i% _" S4 P5 }1 Y0 c+ C0046B9FD 51 push ecx4 L5 ^ h% a x5 ?% G- ]
0046B9FE 53 push ebx9 H- o1 o4 O- \* F; J
0046B9FF 56 push esi, C! N/ E6 {& M2 L) b" w# n# e+ [9 Z, q {
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
# n* \, q# a/ J: q% k4 Q$ G0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
. e2 A! V+ ], W; [" u2 j0046BA06 E8 FD8DF9FF call Unpacked.00404808! W- r7 t( S2 n6 j6 U! K
0046BA0B 33C0 xor eax,eax
# s b! |& S) c, {) c' _! a7 o0046BA0D 55 push ebp/ \4 y% Y0 q6 x3 f ~6 }* }
0046BA0E 68 91BA4600 push Unpacked.0046BA91% g3 i7 S# w* t: a( E! ?& ?8 ^
0046BA13 64:FF30 push dword ptr fs:[eax]
8 p9 D l) z' d3 _! ~2 l! u0 j0046BA16 64:8920 mov dword ptr fs:[eax],esp8 x7 v2 h7 C& Y m, t* h6 x, s. V# T
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]. U/ g& ~) x" l7 M6 i
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
" t& y0 L+ A! q0046BA1F E8 DCFDFFFF call Unpacked.0046B800 * r3 {+ A& _6 [- s) R1 f) [ d
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
% U2 g; r: @/ f' R5 q0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
% R( E0 L: y. ~$ C" |! _0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
( z9 {/ h( {" ?" _, A2 B- b. ~6 |0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里' V. x+ m6 U1 o& O
0046BA34 B2 01 mov dl,1 ; DL置1
" S6 h& h9 x' i/ E0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]# d2 l5 }/ q w
0046BA3B E8 78A3FFFF call Unpacked.00465DB8# g0 U7 H1 m. @: A+ T7 I# m! @9 v
0046BA40 8BD8 mov ebx,eax
l. y5 ?% \ G* I: @0 s0046BA42 6A 00 push 0 u! C5 H3 C( _! D
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]9 M: Z5 n- q. {* c( J( g* t
0046BA47 50 push eax
: o: P# l: z( {7 v' g3 G0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"" T: ~, K/ {1 G( ?$ t- `9 T6 S* t
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]9 S) Z6 n, F: ^( O8 K& G& k3 k
0046BA50 8BC3 mov eax,ebx4 ^! w/ f5 O3 `/ e/ c
0046BA52 8B30 mov esi,dword ptr ds:[eax]& @* K$ p, m$ Q! L/ a) c
0046BA54 FF16 call dword ptr ds:[esi]
. S& g, S% ~4 b) z7 `1 t( H0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX7 e7 L& w6 M/ R* F& p9 b& K# m1 t
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
' s2 `' I9 D" Y' f, y* }0046BA5C E8 B7CCF9FF call Unpacked.00408718
! T2 Z( I3 I# `6 ]& U5 B: Z$ ]0046BA61 8BC3 mov eax,ebx. }" z" u7 y, C o: R% G2 B
0046BA63 E8 107BF9FF call Unpacked.00403578
- F. `4 j2 W! p4 s, Q( E" H2 l0 }0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
% a2 N0 N% K( H1 D2 b6 P0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
; S; k" C" M8 a! }) a0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~- j3 _) [1 {6 J: a9 | Z Z% a
0046BA73 0F94C3 sete bl ; 置BL值- r( B. e- Z9 t
0046BA76 33C0 xor eax,eax: M6 W" A: g4 I/ o9 p" x/ b
0046BA78 5A pop edx/ \: Y' s. P0 y# c2 t! `; [
0046BA79 59 pop ecx$ F u6 v; ]' T* K! X, c
0046BA7A 59 pop ecx2 Y5 V; w1 g' W3 y$ p
0046BA7B 64:8910 mov dword ptr fs:[eax],edx/ R5 |, j+ L, H+ i2 N; T+ V
0046BA7E 68 98BA4600 push Unpacked.0046BA98
- D( B U) w' r- f! w' o! x0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
( U' @# o M/ X1 B m& [9 k6 \0046BA86 BA 05000000 mov edx,5
( K% N1 x( L7 ?9 f0046BA8B E8 FC88F9FF call Unpacked.0040438C
7 e* @9 ` }* C4 F3 n) g0046BA90 C3 retn6 P7 l' n5 h4 ?4 V1 P( }' G
****************************************************************7 {/ m3 t/ R' H: k. f, {
跟进0046BA2A处CALL来到：
7 F* C0 x; _( i5 c/ X0046B908 55 push ebp
- ^! F& G! u; V5 ~1 a( f5 i ~0046B909 8BEC mov ebp,esp- |( E9 F& X0 Q {3 \
0046B90B 83C4 DC add esp,-24, b( h: m0 _( X! \
0046B90E 53 push ebx( u3 [# a& v) P; l+ t
0046B90F 56 push esi, M' h8 o4 `! w2 A, D% [3 y2 x( \
0046B910 33C9 xor ecx,ecx
6 z* y7 U/ U+ h l! b2 l0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
T7 s) X% O; o# U5 R! R0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
; x0 ] l# ]& @0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx' X9 @) v; Q7 j
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx8 E2 [( P& E, C
0046B91E 8BF2 mov esi,edx
: y2 f, n0 ?9 j0 B% e+ I N0046B920 8945 FC mov dword ptr ss:[ebp-4],eax1 Y6 |- X V+ j5 `1 |0 m) ]2 r
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]- H9 n5 u4 T, t* q) L# S2 A
0046B926 E8 DD8EF9FF call Unpacked.004048086 ?6 {- z* p5 R( O0 u7 L: L
0046B92B 33C0 xor eax,eax
& W! t8 L8 \. ~0046B92D 55 push ebp2 z% G( [0 G% G5 V/ ]' N
0046B92E 68 CEB94600 push Unpacked.0046B9CE# A: a- k4 H, ` |3 M6 [! f
0046B933 64:FF30 push dword ptr fs:[eax] M) k9 r% J. Q1 ^/ k
0046B936 64:8920 mov dword ptr fs:[eax],esp
; c0 T1 T. b# x7 F' W0046B939 8BC6 mov eax,esi j n- o* o$ q# V# m% |$ ] ~
0046B93B E8 288AF9FF call Unpacked.00404368
1 k9 A3 Z4 H+ u* S) T6 R/ E8 R0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20], x8 T$ K9 C$ K: G
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX! ?3 z- X( p: d3 O9 ^
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4; V" R9 V# [) T, m/ _/ C2 I: r, g+ v
0046B94B E8 1C8DF9FF call Unpacked.0040466C2 v# U6 f t5 ?" _' G% a
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]7 I$ Z1 g0 c2 A
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]( D* A, W4 z4 Q+ n# l& L
0046B956 E8 EDBCFFFF call Unpacked.00467648: w! W/ T8 ] B* B, P
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
( ~: o. d9 o# ?! L9 w% l( X0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]; z( u8 q5 x7 c/ F5 E4 A/ E
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e4 e* z( E6 U% @7 X( k
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
" p) _. g) d! X" a9 O/ L0046B969 E8 FA89F9FF call Unpacked.004043686 N- w# _8 u/ v6 ^
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
; a& R. n2 {2 C8 r+ j% M0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX @/ i& K: [2 \7 W
0046B976 8BD8 mov ebx,eax ; EAX送EBX% c: ^( R( c; T9 ~+ ]
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较* ~5 \$ ?. j+ I" @
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
' ^7 i! ^- J/ y/ I0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算2 N) A/ I; u- s# C D, S; z
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
9 S" N, U- p4 V0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
. @# S1 I1 {' W2 S5 A. w8 b6 b1 ?0046B987 E8 BC8BF9FF call Unpacked.004045489 O- X% O0 ?1 E) Z; V2 P
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]" t |6 b( d" G# h Y
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
* N' T# `* g7 ~5 \0046B992 E8 918CF9FF call Unpacked.00404628
! z- E F: C: X$ F$ |3 r0046B997 4B dec ebx ; EBX减一) K' B. H, X# x6 s4 r6 B
0046B998 85DB test ebx,ebx ; 是否为05 V* M) i- l* b2 L. n% F
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。4 h6 j& b0 s: F7 r9 g( w4 E$ b7 [
0046B99C 8BC6 mov eax,esi# Y( t5 D7 w" z! v" F5 ~
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
; T% [0 w0 r) n2 s3 I0046B9A1 E8 168AF9FF call Unpacked.004043BC
4 \4 q5 A3 D: ^" r7 I- {" ^ V0046B9A6 33C0 xor eax,eax" N6 U* t! V# T& c. Z
0046B9A8 5A pop edx7 @5 s% l* X! h6 N" a9 i% ^4 L7 I3 L
0046B9A9 59 pop ecx* T0 p# F0 Z) `8 i# w' S: t+ r v
0046B9AA 59 pop ecx
6 x& X5 s, e+ I' l: x( W0046B9AB 64:8910 mov dword ptr fs:[eax],edx
5 a. n6 g; q" z* n: Y0046B9AE 68 D5B94600 push Unpacked.0046B9D5
5 W/ c- L+ Q; u% e0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
9 \% j* a5 [& P* o6 O2 Q5 Q0046B9B6 BA 02000000 mov edx,2# P6 [! _7 A2 d$ P' @0 h
0046B9BB E8 CC89F9FF call Unpacked.0040438C9 o% A9 s) |5 E# w5 n! z
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
: H* f/ Z( R& H- X0046B9C3 BA 03000000 mov edx,3
0 O+ {) U% a( t; j3 ~5 j0046B9C8 E8 BF89F9FF call Unpacked.0040438C" ~: ~4 P5 ]5 q: \; K/ w% p. ^! T
0046B9CD C3 retn. k' m1 _* j0 Y7 x# Y9 t2 S* ~
****************************************************************9 U4 Y; l3 X" j2 H7 E0 @3 [# L
跟进0046B961处CALL来到：
: k: R6 x) ~; r, n- }004676BC 55 push ebp% e7 Y, Z- s3 T
004676BD 8BEC mov ebp,esp/ Z0 e7 ^" W8 F1 Y9 S
004676BF 83C4 E8 add esp,-18, V' [. Q( d. [
004676C2 53 push ebx1 V3 I7 `# J3 c0 o3 p( z
004676C3 56 push esi
0 ?: \* S4 i& Q004676C4 57 push edi" v6 D/ F5 a. m
004676C5 33C9 xor ecx,ecx
. R5 F" L3 p% ~' P004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
% y9 Y6 C( N% z( X004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
3 Z: g6 `: O1 G3 h004676CD 8BF0 mov esi,eax5 b5 [% y+ I, L" N& I
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
) x9 d+ \9 d6 [* G004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>' y) W/ @& ^( o$ o
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>7 A' _4 ^, c f, X' J
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
0 _7 K+ j! @; [# [) i004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>* j$ j" k' `1 t, O9 f- p
004676D6 8BFA mov edi,edx
: F3 N* i/ H& c- c, Z004676D8 33C0 xor eax,eax' z+ D& S O$ w! F
004676DA 55 push ebp0 d3 K% Y5 }, T0 T) K
004676DB 68 57774600 push Unpacked.00467757
( Y: N, R7 B3 d5 w004676E0 64:FF30 push dword ptr fs:[eax]
0 f' _) d& R( C! T004676E3 64:8920 mov dword ptr fs:[eax],esp" }6 n9 d7 B" _- I1 k
004676E6 8BC7 mov eax,edi3 ]5 O8 N8 w+ B6 j: ~; E- b
004676E8 E8 7BCCF9FF call Unpacked.004043685 r7 Y# h8 a) A5 B& e. ^8 w
004676ED B3 10 mov bl,10
8 ^+ {+ w7 |$ h; f% ^* z* R( k004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
: C0 g# e' x6 Z% g+ d: r004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****# H% i+ b! J$ @" L1 c
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
* }* M: i$ O5 q/ B$ W% C6 t004676F7 33D2 xor edx,edx$ c/ S8 _3 K8 t
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
. L" l2 W, ?5 Q( [' t% [004676FB C1EA 04 shr edx,4 ; EDX右移4位7 c5 p) B( t! P, M( s" v
004676FE 83E2 0F and edx,0F ; 和0F与
, A/ L, L. D A/ z00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL% K1 ~+ v0 T, @7 \) x
00467707 E8 3CCEF9FF call Unpacked.004045486 I+ M2 @+ @6 q9 @9 l' V3 s# R
0046770C FF75 EC push dword ptr ss:[ebp-14]
2 C& a1 W! O v! j; m0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]6 i; u, ~4 i! k6 l. X, R% n# s
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL4 w6 Y" v5 W& ~' ?% K
00467714 80E2 0F and dl,0F ; DL和0F与9 H- Z6 f4 e3 e, x' D
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
6 ?% g1 L2 x1 F) F0 X2 m1 u+ G$ y) u0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL: i z9 e9 Z2 E3 c M B) Y* O
00467723 E8 20CEF9FF call Unpacked.00404548! b& a% z1 l8 e. F" V
00467728 FF75 E8 push dword ptr ss:[ebp-18]
& ?: H5 l" b( g+ z5 @0046772B 8BC7 mov eax,edi ; EDI送EAX/ T o3 t: e! q/ C
0046772D BA 03000000 mov edx,3( {7 C; m7 {2 F
00467732 E8 A9CFF9FF call Unpacked.004046E04 u) F+ J W* N
00467737 46 inc esi* t( W* s% S8 C, X
00467738 FECB dec bl
, G& I& [' [) {* F0 _5 S0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e; t1 D( h0 M9 {) S; `/ `
0046773C 33C0 xor eax,eax
- d6 r: F( b# y2 f9 Y" p/ q# K0046773E 5A pop edx1 ~. h; g) e5 q
0046773F 59 pop ecx
. D! Y2 M w0 L: }( N00467740 59 pop ecx3 F9 S$ a9 C( Q$ B2 d
00467741 64:8910 mov dword ptr fs:[eax],edx/ g) k' I# W& f/ L9 \
00467744 68 5E774600 push Unpacked.0046775E- [, L _ P- D5 m5 a
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]7 k; j9 t% q9 y3 w. U
0046774C BA 02000000 mov edx,2$ [* z8 W. P$ @) h" d, y( V8 e w3 c7 Y
00467751 E8 36CCF9FF call Unpacked.0040438C
H, C# P1 f+ {2 Q; ~) P00467756 C3 retn //返回
4 s- [+ ^, m8 ?———————————————————————————————————————————
+ m$ d& C9 N) Z【Crack＿总结】：
' i# {6 w# T- P' S将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^4 v( L# ~7 w$ G3 k$ W1 f
机器码：bbba33de56c4cf31d9063cc074248d4b' w0 g, N, M$ `
注册码：e807519487d7ad4f57ad42dc87fbb1919 ^6 Z* `3 H+ _/ A, C: u# s K( j y
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡