|
|
【原创】破解图章制作系统. S$ S! W1 z- r" U/ e6 R
日期：2005年5月15日 破解人：yijun[PYG]% f0 G; R4 e& `3 w w
———————————————————————————————————————————) T: g" E* Q/ L) ~
【软件名称】：图章制作系统 软件版本：1.0
+ l7 |( d) B0 p0 M【软件大小】： 252KB
4 }$ M/ [( E8 _+ C【软件简介】：制作各种图章
1 f+ z9 ~' k9 @" F0 {【软件限制】：NAG1 X8 Q) K5 Q2 r+ P6 m8 w) ?
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！: t3 k( ^5 F6 A3 @2 A3 o
【破解工具】：OD,PEID; I$ |% H4 Z1 B& h& B0 l8 `+ L
———————————————————————————————————————————
4 X7 P1 _" h( Y ) L, x+ _) Y3 C
【破解过程】：
^4 m1 L+ e3 X3 O4 j0 VPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~# c3 z( I7 j u, j, r
OD载入，通过字符串查找很容易来到这里：( E, c& K S1 W
0046ADAC 55 push ebp //在此下断; n( l* ^+ X' y \4 w8 A7 [$ z
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
% L, v% x3 Q8 _* k7 `+ `0046ADB2 64:FF30 push dword ptr fs:[eax]
' x/ G6 f6 m1 y0046ADB5 64:8920 mov dword ptr fs:[eax],esp
8 X ]/ y. U- l: z T, B( p* T0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]7 m- z q$ B* ` W" r E3 y% \" p- R# d
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
7 T2 X! Y k4 x7 q/ F. c0 ]* v& P0046ADC1 8BC6 mov eax,esi
4 k3 i) [. W) ]# K, G1 P0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
, L" q5 w6 E5 q* l# y, J0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
( S" j7 {2 t# A- A+ U6 G" D0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]( l p% h% O6 t1 W o
0046ADCE E8 45D9F9FF call Unpacked.00408718 m; I( ^. A% n/ M* S
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX* Z4 N% ^, t4 d5 V( `# a
0046ADD6 8BC6 mov eax,esi
0 g' l/ s8 W. ^1 v; W" S/ o$ [7 o; g0046ADD8 E8 3359FDFF call Unpacked.00440710' ?' P7 Y( `# P
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]2 q( J! L' b7 Y2 O1 h7 I
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]4 b( P9 k$ |$ o$ O0 n% }9 C1 z/ a- u* @
0046ADE6 E8 F558FDFF call Unpacked.004406E0
# D7 h) t: W0 ]* K% T0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空( `: K6 \: W6 m) |
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳7 a) m/ S, F+ q9 R
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
. R1 |- u. \! b' C' i( L* A, q0046ADFA B2 01 mov dl,1 ; DL置18 g1 T2 L8 U7 d b" G0 z" t$ X* S t
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]. h* g- n/ R- v7 ~/ U
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
0 U7 o9 n! }, w5 X0046AE06 8BF0 mov esi,eax
' [* C; M6 H. p0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
7 w" i( G7 |# r2 Y/ l* l$ n: u0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
" f( n! q) @5 l0046AE11 E8 CA58FDFF call Unpacked.004406E0
, P/ u8 P4 E# J; C% Z$ o" [0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
$ k |3 {! D; l' l7 X" L+ ~0046AE19 50 push eax
7 q( Q% g) q/ `9 ]0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
1 l* N$ {% i) y v6 T0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
) p8 D$ t4 ]/ @) t" U0046AE25 8BC6 mov eax,esi* e! E& E: K0 Y' ]/ U
0046AE27 8B38 mov edi,dword ptr ds:[eax]
0 C5 V4 D) w c! s0046AE29 FF57 04 call dword ptr ds:[edi+4]
2 N" e; Y4 c9 R9 o- t. g0046AE2C 8BC6 mov eax,esi4 E% T2 L6 i+ W+ T
0046AE2E E8 4587F9FF call Unpacked.00403578
9 \( j2 C# A% _2 F' i0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310], i9 F% b! `% s- N$ S* ~
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
- n& y9 e% p& N) J9 ~( w/ _$ Y0 }0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）- m/ H3 Y- M+ t& }0 A( q9 e
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
; ?0 \1 F, Y! o' S# o, V) `0046AE42 6A 00 push 09 a/ {, A" i9 U
0046AE44 68 D8AE4600 push Unpacked.0046AED8
0 J* T$ d5 C: O& X3 V0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误5 v5 D& Q" K+ s# s" f9 M- n! A
0046AE4E 8BC3 mov eax,ebx6 w( F& ]$ G2 G0 M/ }& n( V4 [
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
' ~( {7 x) {; U& {' l$ R0 V0046AE55 50 push eax# z) b8 I% q1 j- a) ~( b8 K0 U
0046AE56 E8 DDC2F9FF call
) m C2 x4 g; H! `' O( S0046AE5B EB 20 jmp short Unpacked.0046AE7D9 U" M/ |7 F: x5 n9 E1 g/ \
0046AE5D 6A 00 push 0
/ u/ L: l6 n# W, F- G! A4 b0046AE5F 68 F8AE4600 push Unpacked.0046AEF8$ S7 G* n( | V) r
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功" c5 \& a. e, u, v
0046AE69 8BC3 mov eax,ebx. z! l8 q. Y2 L6 w& V- V
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
1 ?& C' r" I6 t0046AE70 50 push eax
8 S: z H8 l! a' ?- o1 k9 [, r0046AE71 E8 C2C2F9FF call 5 |/ [3 w0 [$ ^, ` N
0046AE76 8BC3 mov eax,ebx
9 N6 k' X% U4 t4 w6 f3 S" V& g0046AE78 E8 7F21FFFF call Unpacked.0045CFFC' x _: O- s. X. t( q' F' L8 \
0046AE7D 33C0 xor eax,eax
1 s1 m* V5 @$ T- V0046AE7F 5A pop edx
' Q- x7 S7 ^9 g7 y0 h4 @/ D. z0046AE80 59 pop ecx, {+ j) z, g1 E
0046AE81 59 pop ecx
: ^+ D6 E4 e8 M; M- l% | C0046AE82 64:8910 mov dword ptr fs:[eax],edx
8 L+ F1 S' l% s/ f0046AE85 68 A7AE4600 push Unpacked.0046AEA7
( [7 U5 s$ b0 u! S. O2 }! y0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
6 f5 S' m V8 N; l; N0046AE8D BA 03000000 mov edx,3
0 }+ O- W* Q3 K8 z' u0046AE92 E8 F594F9FF call Unpacked.0040438C' C6 A ] F+ ]: v: A: x2 {) y
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
) S+ p3 g$ m( W8 y8 A0046AE9A E8 C994F9FF call Unpacked.00404368
: [2 m0 b' o8 L; h! h0 L+ Q0046AE9F C3 retn+ H' M3 G5 L& x8 A
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C5 X7 U8 h$ y5 V* ?* `
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
, G/ L6 I6 K' G4 M! B2 C0 D****************************************************************
7 I9 D9 k1 I# f) K% I; @- n1 M跟进0046AE39处CALL来到：4 B3 s% _( n8 X0 D% o3 S
0046B9F4 55 push ebp! f" G4 a: k# Q* H8 a: f
0046B9F5 8BEC mov ebp,esp1 x7 G# |! m9 r U
0046B9F7 33C9 xor ecx,ecx, l7 D- b$ v+ r( i" ^6 T
0046B9F9 51 push ecx
+ ^5 `- N2 ]6 p J, D F) D0 u: l0046B9FA 51 push ecx2 Y& s2 v, _. H, e8 l( r: ~! f
0046B9FB 51 push ecx. r7 H, y. \+ }8 O
0046B9FC 51 push ecx
/ V+ h8 Z0 @; l0046B9FD 51 push ecx
, c8 e8 m, Y, x/ e0046B9FE 53 push ebx
/ R3 s2 m# T0 T0 z# ^+ ?( ]1 k0046B9FF 56 push esi5 U( H6 q( g% t0 D: x' e4 T8 z6 t
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
4 u1 h. }% h2 `! M6 E) W, T0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]7 d% ^ F" p5 i" t
0046BA06 E8 FD8DF9FF call Unpacked.00404808; J* u/ G9 g9 I4 e# v
0046BA0B 33C0 xor eax,eax4 Z1 J1 {( @! M/ ~
0046BA0D 55 push ebp
, N1 H5 g9 b/ ~. U; n; y1 K7 q0046BA0E 68 91BA4600 push Unpacked.0046BA914 @8 l. y: h) X+ q, n* t
0046BA13 64:FF30 push dword ptr fs:[eax]5 V; w) m+ J. F, }8 M
0046BA16 64:8920 mov dword ptr fs:[eax],esp
5 q/ c0 ^# C* p; x# b0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
2 j, i9 {! T# g0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
: V! n9 _* c, |! @- M0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ]: }& c- G# r: W. y) P0 n, ?2 @
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
! `$ x! k' c( y9 Z2 E0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
; `/ ]8 ?* o& {. L9 _* W0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
7 F( X: g1 P! L) `$ S/ i; S- A0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
: g- G( w' V/ ^1 _4 f0046BA34 B2 01 mov dl,1 ; DL置1
" @, }/ }. K& K% D9 }9 M# z0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
$ Y- G7 ~# ~+ z* g2 y) O; X0046BA3B E8 78A3FFFF call Unpacked.00465DB8( G4 \, S1 l9 R* S) Y6 `0 g8 z
0046BA40 8BD8 mov ebx,eax
; _* t. I& q' `2 Y9 {+ S0046BA42 6A 00 push 0
% s% ^% X9 u3 j! O0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]5 Y) D8 ?0 g. H. d& `( J3 r8 L
0046BA47 50 push eax
' r9 O/ N* x W0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code") u1 T2 X( S; {* Y' v9 z' P, Z
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
) ^/ p7 O! w( |! _2 ~4 \ o! U- U8 D( o# [0046BA50 8BC3 mov eax,ebx
, }- U! Z* P* c8 w2 K* L0046BA52 8B30 mov esi,dword ptr ds:[eax], h; r9 o+ _" T! Y g
0046BA54 FF16 call dword ptr ds:[esi]
; f* K6 T# X) |# m0 Y* R, x* T! u0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
; O$ M( t, c( w2 h% i0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]1 h- ? [" N- @* V/ w
0046BA5C E8 B7CCF9FF call Unpacked.00408718
9 r7 [& z1 A# ?) [0 B8 X0046BA61 8BC3 mov eax,ebx5 Q) s3 j; Y* K! H1 g0 \' s' J" q- I, n
0046BA63 E8 107BF9FF call Unpacked.00403578 * @3 q0 A6 Y. S* N; Q# `% W
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
, I# p6 n5 s" [0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX! x5 L; [, g8 |- K& L# s
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
( C! B- m5 h" a0 D5 C$ v0046BA73 0F94C3 sete bl ; 置BL值* t8 u4 ^) K; y$ P y
0046BA76 33C0 xor eax,eax F% a$ Q+ Y$ }9 q: ~7 |
0046BA78 5A pop edx
" O2 h9 a6 j( ~/ T0046BA79 59 pop ecx
/ n7 j1 M6 d" E5 `+ x( |) l0046BA7A 59 pop ecx, E: N- [8 o/ _7 X
0046BA7B 64:8910 mov dword ptr fs:[eax],edx6 [* t( _+ n( F
0046BA7E 68 98BA4600 push Unpacked.0046BA98$ _, ~; ~* E" g6 B7 ~5 p' l
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
% w7 ]7 \) F+ C2 m0 P- G0046BA86 BA 05000000 mov edx,5
" ?5 S- X* t M F7 r0046BA8B E8 FC88F9FF call Unpacked.0040438C
9 p* |4 G$ v- `9 g# q9 D0046BA90 C3 retn1 e8 D. L, W) q% K. {
****************************************************************4 W! i0 C6 G' K9 _( k i
跟进0046BA2A处CALL来到：9 {+ ?2 o, |9 e- _* d
0046B908 55 push ebp
8 [4 e& I# Y) _9 D0046B909 8BEC mov ebp,esp
8 K% t5 W7 Q: R/ B8 _* H: c0046B90B 83C4 DC add esp,-24
) g. | V' f# {( W! w5 a5 ?8 t2 ?0046B90E 53 push ebx6 z; i t' w1 a: t
0046B90F 56 push esi' V8 C& s% W% M7 p# E
0046B910 33C9 xor ecx,ecx1 p% _* e- O9 M' p7 T
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx# i! Z2 i$ o; q, `6 ^) P$ V8 i# P- V
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
1 G1 Y8 {& r3 n8 c! r/ C$ ?0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
3 {; ~# u, z) P; h0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx1 B; B1 I# w L" Z1 d
0046B91E 8BF2 mov esi,edx5 d) \* o6 s/ V; c7 r$ o% o
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
4 g9 ^& ?) b h- U0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
, q1 _" ^* n @8 [# r* s; a0046B926 E8 DD8EF9FF call Unpacked.00404808
, d! l6 F5 e+ X0046B92B 33C0 xor eax,eax' j% C; U1 y9 _ y
0046B92D 55 push ebp7 G' X- Q. N2 y+ U* b# S
0046B92E 68 CEB94600 push Unpacked.0046B9CE7 T3 x H* j2 X& w% s: G4 Y( C; y1 {
0046B933 64:FF30 push dword ptr fs:[eax]% |7 C0 y6 |8 v& i9 e! c+ P
0046B936 64:8920 mov dword ptr fs:[eax],esp2 h* t$ M6 D1 F6 Z( W8 O- n4 S) ]
0046B939 8BC6 mov eax,esi3 c6 C4 {) s; K9 J; A8 }0 _
0046B93B E8 288AF9FF call Unpacked.00404368" @6 N+ W7 e/ _
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]0 F7 L! Z* I/ r* ?
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX( c3 b4 x3 ^( L7 W( W' J$ w0 x
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E46 R/ q/ D$ D; X3 V" Q) _5 b* Z
0046B94B E8 1C8DF9FF call Unpacked.0040466C
9 T' x7 x; e D- S5 E" h, V0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20], l0 w1 I# A( o1 t9 Z# n- M
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
) g B. [0 Y- U' w( j0046B956 E8 EDBCFFFF call Unpacked.00467648& m5 c' m V: S0 b8 y) e2 q
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
+ A" b1 s" J8 g4 C, [2 z' i2 N5 Y0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
0 b0 s7 M2 |1 S0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
+ _9 r! l8 ]0 {4 f" f: H, J0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
$ c7 Z" C3 x0 ]0046B969 E8 FA89F9FF call Unpacked.004043688 T% {5 ]) W1 Z6 C/ P
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
2 [3 u2 a; U' X5 F: B0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX/ J0 m+ w, |3 @* f
0046B976 8BD8 mov ebx,eax ; EAX送EBX/ S9 J# z8 g' b: O
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较- y4 Z' X- D$ e- d% U& I* Z6 N
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
s* B) S8 R" a6 m0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
& u! {+ Y, X$ d$ k0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX( R1 o q5 N$ x7 w3 z9 \
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL8 v- v+ o5 C0 s# a" i# G) O# `
0046B987 E8 BC8BF9FF call Unpacked.00404548
~# Z. a8 q. f& [* w/ c3 c0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
2 F* I& i! N) b8 A. Y2 a# T0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX6 S1 r! l3 p3 I: X0 v, `5 {
0046B992 E8 918CF9FF call Unpacked.00404628
: l! G2 I3 Q1 f% W0046B997 4B dec ebx ; EBX减一" e1 v- Z5 w4 C4 k
0046B998 85DB test ebx,ebx ; 是否为0; l/ O, n1 n3 r; o, o$ W, W
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。/ b' e1 `! p( x+ G* {
0046B99C 8BC6 mov eax,esi
* }4 a* W5 s% p+ a' X' m0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX1 m0 ~# v2 B8 u) X$ f3 V$ X
0046B9A1 E8 168AF9FF call Unpacked.004043BC, B; T: d, Z" x% o7 E+ B
0046B9A6 33C0 xor eax,eax$ r7 P1 `, H- p7 {( U! Y+ h
0046B9A8 5A pop edx3 b5 K" x) V/ n, g
0046B9A9 59 pop ecx3 T3 o4 T8 p! X: X# C
0046B9AA 59 pop ecx
; U, z& K% l w0046B9AB 64:8910 mov dword ptr fs:[eax],edx# }% d2 p9 X' |! A& C
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
* r( T2 b3 f4 b+ i' m- l0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
6 j% v* M% u5 W; z6 s& W0046B9B6 BA 02000000 mov edx,22 i( s" Q9 r( z+ u7 k
0046B9BB E8 CC89F9FF call Unpacked.0040438C" Q$ P _9 ?5 H
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]. f- ~, p2 e7 V( ]
0046B9C3 BA 03000000 mov edx,3
* Y# l3 `: a$ d2 H+ |. _0046B9C8 E8 BF89F9FF call Unpacked.0040438C
8 C* h( J: B0 V; y$ g0046B9CD C3 retn
: d4 [" u: E4 c* j, Q. l4 F# k****************************************************************, B+ L# g. E9 Y- y
跟进0046B961处CALL来到：
2 z- B: H r9 G: \& D004676BC 55 push ebp
, y* b8 V3 d, D( u004676BD 8BEC mov ebp,esp
. u: E- c4 d% T0 I5 G* ^1 N004676BF 83C4 E8 add esp,-18
+ f' f. |! ]3 b& w. v004676C2 53 push ebx( D+ ?4 v5 H9 k
004676C3 56 push esi
; K n! l, S7 z7 s) V. x004676C4 57 push edi& j) P$ H7 z5 h7 ]0 H6 p$ \
004676C5 33C9 xor ecx,ecx
, [9 U$ e3 ^, s7 |' j) T* Y004676C7 894D EC mov dword ptr ss:[ebp-14],ecx& T6 U7 m+ g5 c' f
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
! }7 b# M9 j& E4 V6 y; E( U0 M! k004676CD 8BF0 mov esi,eax
9 X& }! ~+ d" B6 `$ Q004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
- D# y; h0 O7 o7 O1 J+ `3 L- W004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
9 E5 m; O2 c/ n- n) l/ l3 m2 H004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
; L! Q6 ]8 `. l004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi># P. g+ O/ ]7 E
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>5 D3 c$ O9 l2 c& T2 ~% ^/ f
004676D6 8BFA mov edi,edx
X' V; k. {0 w) d( ~004676D8 33C0 xor eax,eax
( N: R, P7 m& k# D; ~# H004676DA 55 push ebp$ |7 w+ f. i4 i1 {
004676DB 68 57774600 push Unpacked.00467757: U7 Z3 M+ u3 O: n
004676E0 64:FF30 push dword ptr fs:[eax]
7 @* M5 p' c) m. @+ |004676E3 64:8920 mov dword ptr fs:[eax],esp
7 T; Y- x: h- S004676E6 8BC7 mov eax,edi
; Q. n7 J. @# W0 W004676E8 E8 7BCCF9FF call Unpacked.00404368
& `; }& [6 T5 ^% Q! K2 c( j- z6 Z004676ED B3 10 mov bl,107 n% I; k0 G9 l7 i6 e! p! J
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
' Z1 ^2 ~" k" q0 f9 b! i# R' `004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
/ h! r; H& W* c* w$ H2 I004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]$ H. `" T! g1 B3 v3 V! Y
004676F7 33D2 xor edx,edx/ g' j5 L9 ?4 l, S, p1 U
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
: ]7 j" w* l' ]004676FB C1EA 04 shr edx,4 ; EDX右移4位 ^- O" [3 k" d9 G% B$ X* P. E @3 F4 m
004676FE 83E2 0F and edx,0F ; 和0F与: B7 Y9 R2 w2 w" h' R O
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
) W/ z: ^, U& q* _7 v1 @7 w. h00467707 E8 3CCEF9FF call Unpacked.00404548* F+ O# F' S2 Q# {/ G( c
0046770C FF75 EC push dword ptr ss:[ebp-14]' L. d8 `5 e3 `& X3 I
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]7 }) N$ G7 q. x
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
2 m# a. q2 `2 P0 H4 _2 i6 ]00467714 80E2 0F and dl,0F ; DL和0F与
. c& Q# }; y; Z7 Q- m+ }$ d00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
Z& {! O. p2 R4 l$ K0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
( n! c. }+ k: t: |00467723 E8 20CEF9FF call Unpacked.004045482 ^' a% O4 U6 Y, n! H! \
00467728 FF75 E8 push dword ptr ss:[ebp-18]
; a ~2 t6 o5 @2 f4 k% N0046772B 8BC7 mov eax,edi ; EDI送EAX
7 Z: l, M. S; T: D: n5 U( z0046772D BA 03000000 mov edx,3
0 A4 V$ u- u' x. T; B9 t0 g00467732 E8 A9CFF9FF call Unpacked.004046E0, n# I' s3 W7 f! ~( ~* n5 s
00467737 46 inc esi
% }0 X$ T0 f5 g7 V( D, e! U00467738 FECB dec bl
6 t7 e( s6 n# k- u( Z; l0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
0 Y0 |2 v' k0 c$ L) P6 `0046773C 33C0 xor eax,eax
; f. _6 J, ^* Q$ O7 q8 M0046773E 5A pop edx( w$ e& v3 s: E6 J) t4 I
0046773F 59 pop ecx
( |& K" }6 E9 o, M# {% ]) m00467740 59 pop ecx
6 y" q' C6 a# s; Q9 K t* f00467741 64:8910 mov dword ptr fs:[eax],edx
/ F( s% e2 }& o$ W. R& B00467744 68 5E774600 push Unpacked.0046775E
4 }5 N+ ]" H' v( H6 b" K4 X00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
! n/ z2 A4 t$ y4 X" v, U" b0046774C BA 02000000 mov edx,28 D( ?, U" \7 X& q# _- P, w
00467751 E8 36CCF9FF call Unpacked.0040438C0 d/ [, A, R( S1 q
00467756 C3 retn //返回
& ?) R4 i9 q& ^6 S. O' @* X4 m———————————————————————————————————————————& V6 K7 v+ o$ a& G N
【Crack＿总结】：2 V! y! w2 s5 X2 L
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^# ~0 j- ^! H# i# z$ p4 O) t
机器码：bbba33de56c4cf31d9063cc074248d4b- R/ o! C( G! O0 E, O$ X2 n' {
注册码：e807519487d7ad4f57ad42dc87fbb191
o( @" R; w/ `3 T* s附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡