|
|
【原创】破解图章制作系统+ G: l0 E' N! b5 q
日期：2005年5月15日 破解人：yijun[PYG]
. D9 D; Z5 _+ v4 F———————————————————————————————————————————0 i' W: U/ W: z
【软件名称】：图章制作系统 软件版本：1.0& R/ J+ P6 P9 P' Q7 V
【软件大小】： 252KB! }+ x; E- F3 X
【软件简介】：制作各种图章
( i* W# _6 Z* c( n+ @0 d【软件限制】：NAG
e( H0 x, ?& Z8 w+ k【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！( _* f F& d W0 o2 e7 h- R
【破解工具】：OD,PEID
( ^. F) ?; L; z2 p- j. c0 K/ r- d. N———————————————————————————————————————————0 @0 \ e' w8 @8 Z5 ^+ d$ q/ S
! ]: s# F( c( F3 a【破解过程】：
# M* m# X) V9 M6 |PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~) ?3 \' k3 R. t0 C' z3 B/ c
OD载入，通过字符串查找很容易来到这里：
8 t" z+ O3 J5 }7 j: I D- F0046ADAC 55 push ebp //在此下断
! A. X( J! Y. L% p& v0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
0 D J5 V9 }5 D4 K0046ADB2 64:FF30 push dword ptr fs:[eax]
+ `' T5 h3 C5 r+ B/ G6 P! e M0046ADB5 64:8920 mov dword ptr fs:[eax],esp: T; e3 a, |. }) Q' K
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
" l) |, e& R* \3 w0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]+ _5 K9 l" \8 p7 r0 U
0046ADC1 8BC6 mov eax,esi
+ F9 U: U/ D( A$ F% ?/ O0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX K6 @7 U1 k/ R) m5 I7 p0 S% o$ L4 L
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
* a) R# U8 R# ~' ?+ Q0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
' A8 e% w4 E0 {' Z/ K E4 y0046ADCE E8 45D9F9FF call Unpacked.00408718. J( E% \% y5 x! `' Z" p
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX! O. R, J% n4 e% K# h4 U
0046ADD6 8BC6 mov eax,esi
- _$ t! u# \% ]' E0046ADD8 E8 3359FDFF call Unpacked.00440710
5 |7 _7 W9 T* j( H) K* \# ^8 l0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
7 V: _" `- T6 j7 Z4 [/ O% o! d" T0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
4 x6 u+ J0 P9 p% _7 x, t0046ADE6 E8 F558FDFF call Unpacked.004406E0
. x B- [4 p- _% j- H% d+ f2 k0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
+ V3 Z# Q: f9 P V0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
$ j2 ]3 w* A& u5 w+ S8 B) E2 _3 N0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
. v7 G5 \2 h- W1 w u- l0046ADFA B2 01 mov dl,1 ; DL置1
6 D6 N6 h( f2 h/ d3 G7 A; U* B0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]" X/ i8 D% R' K+ O/ \$ h
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
3 i. `& g3 }0 l+ @- L/ P8 F, I. j0046AE06 8BF0 mov esi,eax+ a4 G# M- K* O/ T' G$ `
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]) [2 I0 e: q7 d* a& E
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
F5 t) B5 e8 Y( t1 N2 Q x8 c0046AE11 E8 CA58FDFF call Unpacked.004406E0
7 M% D' ~2 }+ W9 ]7 `0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
4 ^2 Q1 l" C6 L5 ~6 }8 W0046AE19 50 push eax
0 r& A8 S! T* b7 \0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
$ w. y0 J B" A) t. x/ p0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]. z4 W- I; v8 l+ M6 G$ m' d# z
0046AE25 8BC6 mov eax,esi
8 g+ {4 h% r4 ?% T0046AE27 8B38 mov edi,dword ptr ds:[eax]
1 f# P, q6 k3 b) V( z& q, J! R0046AE29 FF57 04 call dword ptr ds:[edi+4]( b; l7 m( N0 L0 \$ B6 j; g
0046AE2C 8BC6 mov eax,esi8 t1 \& y+ L, A7 |1 Q
0046AE2E E8 4587F9FF call Unpacked.00403578
/ J0 x Z8 |' q0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
3 |& K6 ^% R8 T0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
) i4 ~: w; V8 Y( F0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
. h6 ?" v8 P5 l% i% H: k, e* s" v* H0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~4 L) `3 e+ b g% j( s- @0 T
0046AE42 6A 00 push 0
& ~+ V" M3 x0 _# M0 {0046AE44 68 D8AE4600 push Unpacked.0046AED8: L: h- j6 w; Y! m2 `* }% L; N
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误& X, a8 o% M A8 T
0046AE4E 8BC3 mov eax,ebx3 l3 A' Q% {1 M. k( g% d% s! H' o
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8' y5 G9 N6 F- ]! F; I: |" ^& t
0046AE55 50 push eax+ m2 H2 [7 h3 _* g9 y( }9 c( O+ h9 S
0046AE56 E8 DDC2F9FF call 2 v5 d8 u& u+ s9 w/ \
0046AE5B EB 20 jmp short Unpacked.0046AE7D
3 X1 O5 L/ O3 U+ i0046AE5D 6A 00 push 0
+ p5 F% d' L+ T& t0046AE5F 68 F8AE4600 push Unpacked.0046AEF8$ G2 O. z* G: M
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功! Q5 p8 {& j/ Z, y! r& i( R4 c; G
0046AE69 8BC3 mov eax,ebx
5 H4 ]( ]1 u! |0046AE6B E8 88BFFDFF call Unpacked.00446DF8
' s% }; |, }9 k E0046AE70 50 push eax* q$ S% H; L7 R; t) I& @1 H
0046AE71 E8 C2C2F9FF call 0 R2 w1 P, T) m6 B" w6 q# f9 E1 Z
0046AE76 8BC3 mov eax,ebx& h, {7 p( `2 o+ m6 a+ \" z
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC8 L* @; B, [* c, f2 G$ ^
0046AE7D 33C0 xor eax,eax; S0 c% o% q- U1 r( B2 H$ }
0046AE7F 5A pop edx# p1 O- {7 A+ j$ ^; r
0046AE80 59 pop ecx( n/ G8 _. @5 o; n
0046AE81 59 pop ecx
' Q* j0 j$ Y* \; t3 f% d& H& r$ n- L0046AE82 64:8910 mov dword ptr fs:[eax],edx8 U/ {/ W* S, I
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
4 Q$ c. h$ r$ G6 U0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]8 i) S2 V$ {% r7 l4 H
0046AE8D BA 03000000 mov edx,3
P! E( D% p) A5 e. ?3 @/ h0046AE92 E8 F594F9FF call Unpacked.0040438C
; V" | I3 `: w7 p9 f! v; h0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]+ Z& h. V$ V* Z6 k. v5 h
0046AE9A E8 C994F9FF call Unpacked.004043688 Q9 o5 j: l- `$ G
0046AE9F C3 retn% j4 ]" B: s, K
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
* d& ~0 S7 @7 D0 H& b7 C; j; K0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A, e4 u1 }4 {/ W3 |- v" J
****************************************************************, @ Z& i \# n5 y7 Q0 w9 y
跟进0046AE39处CALL来到：
! D7 {) u; W# W' H. p0046B9F4 55 push ebp6 C' D0 S7 n& P# X8 g2 ?1 `
0046B9F5 8BEC mov ebp,esp
: r, U& h6 d9 W: f" k9 x0046B9F7 33C9 xor ecx,ecx1 M L1 t3 H& D3 i0 ]
0046B9F9 51 push ecx/ {) m! ^; r- _& b! H
0046B9FA 51 push ecx
" a) [6 `' T; y4 V0046B9FB 51 push ecx
* {4 }- F8 |- o! c& N0046B9FC 51 push ecx
! D, l5 t/ H, z S! b0046B9FD 51 push ecx
, y' Q4 C) r$ f( S% Z0046B9FE 53 push ebx
& b- w; t; y" ?! ]# T0046B9FF 56 push esi
4 s4 M$ _3 r" Y% R3 ]0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
$ {$ Z2 d1 C& _0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]% [8 t9 c7 Z+ t9 B4 D, c
0046BA06 E8 FD8DF9FF call Unpacked.00404808
3 v/ q$ }) b1 S: R9 L' C0046BA0B 33C0 xor eax,eax
5 o( \. o% v, t8 z5 W" M+ p0046BA0D 55 push ebp
! x9 g& l8 U+ B. H- u0046BA0E 68 91BA4600 push Unpacked.0046BA91) }/ m0 E& ?) M7 Y5 ~; J
0046BA13 64:FF30 push dword ptr fs:[eax]1 W/ z6 X+ A0 N( G
0046BA16 64:8920 mov dword ptr fs:[eax],esp
* r& k0 b O" s, Z9 N0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
) C5 l* R# z* L2 L& Y. }0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]# j# }+ z' d/ g8 W
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 : p; d* W6 v/ _ r- j
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]# e. b5 u1 v, R) \
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
: a5 S+ W+ E( D" G; x; V Z$ p0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进, ?3 @7 h/ I8 h3 m- X( A3 e
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里! @) W8 p6 l& W% P5 q+ U6 r! [; u$ o
0046BA34 B2 01 mov dl,1 ; DL置1
7 J- q( _2 Q3 r; I- a' ^' c( p0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]& ?0 X# j! w6 z
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
' L8 l; F% o F( G% q, }1 {% }5 d0046BA40 8BD8 mov ebx,eax' C- s% K: G$ G
0046BA42 6A 00 push 0
* C: b# _, t& y7 \0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
# }! B! N5 [2 Y5 a/ @) b$ J0046BA47 50 push eax3 x! i1 _( f9 a6 v; F
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"( ^; n( {. M8 y& D3 L" D
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
2 j5 m( `+ J) A6 I0046BA50 8BC3 mov eax,ebx; _. ?* s+ E5 Z: {, s% L' z3 B7 d
0046BA52 8B30 mov esi,dword ptr ds:[eax]7 s1 e- M9 }: P
0046BA54 FF16 call dword ptr ds:[esi]
- w: S* _$ W2 h" l0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX9 {/ j0 w) Q1 }9 S: e8 s+ Z
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
7 V% N2 I" ^; W. M: a3 n/ Y0046BA5C E8 B7CCF9FF call Unpacked.00408718$ c+ C1 ]1 z; u" o) _
0046BA61 8BC3 mov eax,ebx7 B- l. L! O3 W+ u7 `4 Z
0046BA63 E8 107BF9FF call Unpacked.00403578 ) L0 s1 @0 M5 R1 F) W/ m' Y& _
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX' s% V/ C4 T% [+ S1 u
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX7 N! n* m) h7 o$ X0 I: C
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
- A( h z! z* v0046BA73 0F94C3 sete bl ; 置BL值9 ]8 ]4 i* b5 d3 W( w1 r
0046BA76 33C0 xor eax,eax' ~0 N/ X4 W+ M3 A" E9 o3 W
0046BA78 5A pop edx
1 `, l$ `( l5 U( `0046BA79 59 pop ecx
) V5 y1 ^8 N' F6 s# u4 @0046BA7A 59 pop ecx% b) K$ }* \/ H: d
0046BA7B 64:8910 mov dword ptr fs:[eax],edx7 i6 y4 G" [* J' [: a
0046BA7E 68 98BA4600 push Unpacked.0046BA982 ^' \- X, D7 E( S1 V. {
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]: H i. J/ Z( D; D0 U. N
0046BA86 BA 05000000 mov edx,56 J, V8 t# Z5 v
0046BA8B E8 FC88F9FF call Unpacked.0040438C
3 |! }2 N% x+ E; g3 V7 z0046BA90 C3 retn5 B1 u5 J0 t e0 J8 y$ l- z
****************************************************************
/ ~" z) b/ |: ^2 P1 o: |/ b7 w& A" b跟进0046BA2A处CALL来到：
% r, t& \6 o! _5 Q$ W6 B% a A0046B908 55 push ebp1 `* d- b/ y3 A- u# i
0046B909 8BEC mov ebp,esp
; a; V' x7 i! g0046B90B 83C4 DC add esp,-24! @5 p) J# o; F8 V, B7 E
0046B90E 53 push ebx
/ g; d3 a* W" k) r$ \5 U. O. x0046B90F 56 push esi: |- O+ ~& t7 O6 L6 U0 E+ g0 W7 E
0046B910 33C9 xor ecx,ecx
2 B2 g8 f/ F# ]- S4 ]0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
$ n$ U; S- ]3 [% V, h- ?" {0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx1 @( j9 d) d4 K" H
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx* f9 U5 n& W8 C7 F4 i3 h' _) I/ [; t
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx- q" {3 L2 T; @, G. C; B& I
0046B91E 8BF2 mov esi,edx+ ~; H) C K5 P2 V& F" s, v
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
, H1 R' \% ?& j0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
# d# r, d3 H" |( e0046B926 E8 DD8EF9FF call Unpacked.00404808
+ K* O8 E: F( d, ]. O2 U: c0046B92B 33C0 xor eax,eax
# T _, w8 I; x$ u9 t K2 P. Y& S0046B92D 55 push ebp
4 s5 S* y7 i/ B0046B92E 68 CEB94600 push Unpacked.0046B9CE# X1 y7 \0 u% [1 g/ b
0046B933 64:FF30 push dword ptr fs:[eax]
, R& M0 Z5 l# D: x1 J: [' [0046B936 64:8920 mov dword ptr fs:[eax],esp
" S, U; K8 W! }6 E0 [) O4 ]3 k, h5 f0046B939 8BC6 mov eax,esi
* x* V: ]0 h% {8 i! V, v0046B93B E8 288AF9FF call Unpacked.00404368
; H4 V1 s6 t4 n7 |0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]; g6 z8 ~/ r) u1 ]. `$ l# Z1 D! ?
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX9 i3 q% O& O( [% H: a
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E46 u& N3 s5 \, Y+ C0 p# ~" U
0046B94B E8 1C8DF9FF call Unpacked.0040466C
* ^; c6 O- y$ b2 D0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]. q0 w% @5 k" ~, p' q' E2 ^$ c
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
) t5 S% ~4 n1 }4 b$ F! i0046B956 E8 EDBCFFFF call Unpacked.00467648, Q! m2 Q2 \# P
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
, c" C( o! R' b+ k) i. b0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
) w5 ]" {6 z4 _3 P/ U- ]- }* ~( j5 P0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
. i4 ?7 p! {5 _0 v( j) T/ H- m7 q0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
1 ^ A2 L4 w2 e! ~- B0046B969 E8 FA89F9FF call Unpacked.00404368
( \1 ?% `; r9 M7 F1 |# k. L0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
' P" Z0 e+ o/ l9 U, d( y3 q0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX- q! v) z# E K# y1 [
0046B976 8BD8 mov ebx,eax ; EAX送EBX
6 y+ q {" t- S* ~7 q2 G0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
* C5 w6 u6 q6 |# X4 J$ `9 G" X0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
+ R* r- W7 C H# T0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
/ c4 v) ?) s7 |3 N/ m0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
5 A9 @: P4 K1 L0 i: O0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
6 z. J( ^! x2 n' K) Z3 P0046B987 E8 BC8BF9FF call Unpacked.00404548
( @" V9 R9 v; Q- z* L% }0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]+ m+ o3 M7 ]# y0 r9 m: E3 I$ I
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX. k" O' m) U8 d& J: m
0046B992 E8 918CF9FF call Unpacked.004046285 L4 P3 K$ c# Q4 r
0046B997 4B dec ebx ; EBX减一 p+ Q# S1 {. n
0046B998 85DB test ebx,ebx ; 是否为0
' ~3 p L2 b7 A* N8 D1 T5 z0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。: M1 w" y. _8 s, W
0046B99C 8BC6 mov eax,esi- z+ ?+ `. R$ Q% M- e) q- `/ I. @ N6 l
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX8 y% [& ?2 W. i5 G f% A
0046B9A1 E8 168AF9FF call Unpacked.004043BC
, ~. ]; F3 p8 w- c6 ^0046B9A6 33C0 xor eax,eax& A2 }% c1 ]" P" N
0046B9A8 5A pop edx% Z, i0 H& A: t( q$ y; b
0046B9A9 59 pop ecx
) A1 Q5 j) f t$ ^$ b- y0046B9AA 59 pop ecx# x. K# t8 p: ]; \+ G) ^
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
1 }% W- _! i. L" ~# q: i. H0046B9AE 68 D5B94600 push Unpacked.0046B9D5
/ ~' K8 x9 K& F- e7 K- ]0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
+ c1 S; v4 F n. w& j0046B9B6 BA 02000000 mov edx,26 b; ^) g. z# q$ k
0046B9BB E8 CC89F9FF call Unpacked.0040438C
- N& Q3 c% A/ e% a* t2 z0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
! }7 o5 v- I# i) ]0 b) d0 W0046B9C3 BA 03000000 mov edx,3
. Z4 U& N( o4 s1 _4 D( t+ `, ]% s0046B9C8 E8 BF89F9FF call Unpacked.0040438C
" z( Q( X; _* E, j' s" }0046B9CD C3 retn3 v0 ?2 M, z, ?9 J, \$ K4 i: Q v
****************************************************************
0 ^9 ^5 ~) E; r; A# E0 ~跟进0046B961处CALL来到：, Q! c, k* w) C# J. S
004676BC 55 push ebp
# v5 G" T! H5 L004676BD 8BEC mov ebp,esp" ^ Q# U+ N$ Z v, r6 e3 h
004676BF 83C4 E8 add esp,-18: h7 _0 a' X; Z6 L7 U: I
004676C2 53 push ebx5 Z/ ^5 D! @- W# M, @: |+ u, ~
004676C3 56 push esi
0 ^, j* y0 j$ r; p2 l004676C4 57 push edi
$ C. x3 s- w# E/ }% S/ h! F2 s& [004676C5 33C9 xor ecx,ecx
$ u# Y" F" {" v0 Z004676C7 894D EC mov dword ptr ss:[ebp-14],ecx6 q& b( M* D+ R" N' U( e
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx+ u# ?$ u- g& I9 n @
004676CD 8BF0 mov esi,eax( ?6 H" ^2 Z. y3 u! Q5 V
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
: F: I' w3 p m5 I- H+ l- E8 ^) B004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
% |6 C& t) T0 c004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
, I% ?( K6 W3 x5 L004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
! b* `9 k1 z# v7 f004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
- x9 L% \$ H- k: u- Z# ^8 p004676D6 8BFA mov edi,edx2 H# l& S; z! m3 i
004676D8 33C0 xor eax,eax7 K* e4 {/ b8 C, s; x# s) {, t
004676DA 55 push ebp
) g1 }% n& X) C, {' ^4 ~) u004676DB 68 57774600 push Unpacked.00467757" P1 L) Z& K- m2 M ` l5 c( w
004676E0 64:FF30 push dword ptr fs:[eax]
, b& h5 q% w( y. O( c' M3 R004676E3 64:8920 mov dword ptr fs:[eax],esp0 s: _" R! `1 Z% h8 i
004676E6 8BC7 mov eax,edi
% }- K. |/ v$ I% l9 F& [2 U004676E8 E8 7BCCF9FF call Unpacked.00404368
, e+ |1 G0 @/ j; J6 X9 G1 Z3 y. _004676ED B3 10 mov bl,10
0 U2 b' E' g7 s, z2 ~' i8 O* H004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10], G' B$ h- N; j
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****) c! P3 d% J" c3 z
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
, B1 ^# S) q) h' O, U0 v004676F7 33D2 xor edx,edx
1 O8 G/ m1 M# _% c, N5 j6 S004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL: _2 e1 J1 d- H8 T& K
004676FB C1EA 04 shr edx,4 ; EDX右移4位
) c- U: r5 B' F( H y/ U3 ^8 T `004676FE 83E2 0F and edx,0F ; 和0F与
0 X7 a3 O& O# f9 h5 r00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
% R. Y: W- |* E. Y- r, _5 o00467707 E8 3CCEF9FF call Unpacked.00404548
" L" j, S1 }4 x$ ^* a0046770C FF75 EC push dword ptr ss:[ebp-14]
z% u6 ]" a: D' _& G- h0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]( O$ L! A! M5 W" W, {
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL9 E6 x$ l* x# z
00467714 80E2 0F and dl,0F ; DL和0F与
4 Q* m2 t. ]- k00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
2 S9 H# N9 w! D4 X$ Z0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
0 K# {9 B S- {+ o5 R* T00467723 E8 20CEF9FF call Unpacked.004045484 j1 a- S1 H. C" J0 P4 z
00467728 FF75 E8 push dword ptr ss:[ebp-18]& e; C- ? Y7 s# @) l6 e
0046772B 8BC7 mov eax,edi ; EDI送EAX
. |. n1 |. b1 }- o! U" a8 T0046772D BA 03000000 mov edx,35 ~' B+ o, K& {7 h
00467732 E8 A9CFF9FF call Unpacked.004046E0
2 y9 X- Y0 m3 X. b& {' B00467737 46 inc esi
: U8 P9 j9 ]7 ?$ s, m4 b00467738 FECB dec bl, w3 }7 y+ N. D& r
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e0 V, N$ M% n/ W: B
0046773C 33C0 xor eax,eax: K) |; B6 W$ Y6 C
0046773E 5A pop edx
4 C ]1 ?; \* `" ?8 P0046773F 59 pop ecx; Z1 f" k$ |. N: l+ _6 f
00467740 59 pop ecx
4 c+ r) n6 D, Z, Z6 O j r6 y00467741 64:8910 mov dword ptr fs:[eax],edx
* n0 k" y8 n% h6 K2 p5 l$ F: U00467744 68 5E774600 push Unpacked.0046775E6 [7 T' L# b' |4 @1 {3 F( e
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]# q. T+ B+ {& M2 {0 K
0046774C BA 02000000 mov edx,2
% V4 D. ?/ c- `- ~" @00467751 E8 36CCF9FF call Unpacked.0040438C
/ w1 [) f6 \: b! L4 Z; u6 W9 J00467756 C3 retn //返回
) I0 p4 \2 K; Z% B+ L( x/ ?/ a) B9 `———————————————————————————————————————————
- s9 k: T' B0 d8 i' _" x% \, @1 z. _【Crack＿总结】：
; w+ W3 k, ?! F' E2 B2 k* Q! I3 }将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^, V5 z% @+ ~) T: ~( f
机器码：bbba33de56c4cf31d9063cc074248d4b
+ U3 L+ y. ~7 k4 v# h0 t注册码：e807519487d7ad4f57ad42dc87fbb1917 M/ C* m' _; j& T
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡