|
【原创】破解图章制作系统, }4 g+ d$ h* o$ h
日期:2005年5月15日 破解人:yijun[PYG]
" ?# S" w, H# H& ^# ]———————————————————————————————————————————
% v: Z S( E" r* N7 L) x; a$ H【软件名称】:图章制作系统 软件版本:1.0
& Y: P: l! g& p2 v: O$ Y4 Q: _【软件大小】: 252KB
! j7 f4 i* i. E1 l/ c. Y【软件简介】:制作各种图章4 f# \+ f: M5 U$ K1 p
【软件限制】:NAG! Q, X7 T8 ?4 n Z: ~
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
9 C3 c) _7 t: N【破解工具】:OD,PEID
( z: u$ l) b$ ~: b0 a7 g. M% w———————————————————————————————————————————
# p% x$ }4 _# p; t4 o1 k2 B# m
1 u% n* Z9 l' B. j0 D【破解过程】:* w! Z" v( V1 Z
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~3 |. B0 G, a& @6 N6 A
OD载入,通过字符串查找很容易来到这里:" l: p9 Y: | e- @: |; d6 g4 d
0046ADAC 55 push ebp //在此下断& K! i" m6 q" G& d: E! ]$ m, R
0046ADAD 68 A0AE4600 push Unpacked.0046AEA05 I- W, ^; v' r* C1 Y
0046ADB2 64:FF30 push dword ptr fs:[eax]
+ [) E0 `+ H) I' Y; S, L# y0046ADB5 64:8920 mov dword ptr fs:[eax],esp- O4 \, G9 c* ^) T2 z- i# @
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
; X# Z1 y5 C" B6 o0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
5 P; `) i4 C2 V, _0046ADC1 8BC6 mov eax,esi8 |- `/ L' W4 U/ M; l5 h8 w( ?
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX) ~! u# c6 S7 j# h( H# K
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
/ q0 D) k! ~ M3 ^' f: M3 u0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
; f: ?- ^. G! k+ X0046ADCE E8 45D9F9FF call Unpacked.00408718$ `( N2 e3 k Q5 K
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX) [. q! O9 V, G! y) I; \
0046ADD6 8BC6 mov eax,esi' H1 j% z- v0 M
0046ADD8 E8 3359FDFF call Unpacked.00440710
! f% @6 O! t6 s( a% `0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
5 ], Y+ W1 E2 K' O0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]+ a& i( Y" `/ x4 ~. G) o) @
0046ADE6 E8 F558FDFF call Unpacked.004406E0
- B; S& c7 i6 M4 n4 k& `' v# l6 G0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空+ n W! a1 _9 t' M
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳- g) `3 \% \3 q5 x- N) A, |
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX( [/ A. Y7 q6 P+ w u0 k
0046ADFA B2 01 mov dl,1 ; DL置1
7 e) X7 P- P5 Q. H* u$ A2 `0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
0 }; L& S9 E6 O, K: ]3 \0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
, z L; ~/ H+ R( W0046AE06 8BF0 mov esi,eax
2 ` I! G/ ~0 D5 i. A7 o& }0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]. ~* Q; L1 _- j$ q) s' z& T
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]$ y! G+ [: F k& u5 g" d
0046AE11 E8 CA58FDFF call Unpacked.004406E07 P; [. r0 @. i! U7 }& E& z
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX1 d& A9 g J" [
0046AE19 50 push eax9 ?0 S" t+ d# V2 U2 p- L
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX2 U# i9 @( ?+ P& E6 S) Q, L6 N
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
7 t0 o1 \! \/ ^6 j/ t d6 j) ~8 R0046AE25 8BC6 mov eax,esi
: |2 H9 |, U- y7 B5 T2 X3 c0046AE27 8B38 mov edi,dword ptr ds:[eax]
; m. B# d( J+ o* P% S/ I0046AE29 FF57 04 call dword ptr ds:[edi+4]
& d% N$ P! W( F8 K5 q6 F! V0046AE2C 8BC6 mov eax,esi0 V w' C0 ^% _: o
0046AE2E E8 4587F9FF call Unpacked.00403578
$ r! M" T8 Q# B6 e! L0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
& A/ W; V; o) f5 S5 _0 @0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~% M" Z. k# R. ^1 e5 s
0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
+ N4 W! P7 ]) z$ e0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
' Q. @/ c5 F, t- h# P% |* m0046AE42 6A 00 push 0
, l8 x7 D5 J$ v+ }# c$ d0046AE44 68 D8AE4600 push Unpacked.0046AED8' C+ e X3 \ G7 k) x
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
+ ?2 s( a9 N# h; s, L r% m: F, q0046AE4E 8BC3 mov eax,ebx3 p( v4 I1 }" v, c% f( C) r
0046AE50 E8 A3BFFDFF call Unpacked.00446DF88 J" J3 {6 a5 }* H) o5 \" U/ x. S2 U
0046AE55 50 push eax
9 |. e7 h p! \6 O8 a8 u0046AE56 E8 DDC2F9FF call
; N1 x+ a b/ q- g" w0046AE5B EB 20 jmp short Unpacked.0046AE7D% u; p2 e4 r( G9 m! e$ b; Y
0046AE5D 6A 00 push 0
4 Q6 e$ S+ r8 {: Q+ U0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
1 u8 f( A, R) u) A0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
8 n7 v8 e' t2 Z0046AE69 8BC3 mov eax,ebx
; S% X. m+ k; K0046AE6B E8 88BFFDFF call Unpacked.00446DF8, {1 j1 o0 a5 h6 W3 _" n: }
0046AE70 50 push eax% q- \# p U. Z+ l' l0 ~
0046AE71 E8 C2C2F9FF call
- A, ~# D/ L0 N) T' S0046AE76 8BC3 mov eax,ebx
! C* C% P) m* R4 j! Y0 [0046AE78 E8 7F21FFFF call Unpacked.0045CFFC: Z- @3 X [9 v7 C( Q+ F7 H
0046AE7D 33C0 xor eax,eax, i. }: I. Y/ C
0046AE7F 5A pop edx8 ]' w/ e+ F7 y) [& c7 n3 C
0046AE80 59 pop ecx5 K4 B: s5 n- _6 Q1 q4 _0 c( I7 `
0046AE81 59 pop ecx
' f% Z0 i# O+ K* {: b; h. s0046AE82 64:8910 mov dword ptr fs:[eax],edx r9 j* T0 m1 J" e4 z( X7 L
0046AE85 68 A7AE4600 push Unpacked.0046AEA73 I% F4 _. c( _% V
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]) b# ]/ a% V. j; ^
0046AE8D BA 03000000 mov edx,3
/ [7 |1 L6 k3 V" q0046AE92 E8 F594F9FF call Unpacked.0040438C
, y2 v1 e! i8 X7 ?+ e& y) Z0 Y0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
3 ?8 h7 `$ m: I+ v0046AE9A E8 C994F9FF call Unpacked.00404368
?8 k% V" e* w8 e- S' y1 Y0046AE9F C3 retn6 O& }+ F3 D) ^' t6 c4 ^1 H1 I
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
. |/ R3 x! J- |- M9 Z. P0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A3 t! J3 Z3 n. q F+ \
****************************************************************5 h" |3 n- o# x. _
跟进0046AE39处CALL来到:( d0 ]% y2 I+ d$ M* t) g
0046B9F4 55 push ebp
6 I! q$ X2 Y6 A2 I; n0046B9F5 8BEC mov ebp,esp
! b' X& Y& h" @0046B9F7 33C9 xor ecx,ecx2 ~ m' q0 ?1 P1 F- o6 I9 b- f
0046B9F9 51 push ecx5 L0 `' G/ I/ R6 C
0046B9FA 51 push ecx1 g' f3 N& q( X0 w6 Z* I
0046B9FB 51 push ecx# X* D% H$ Z' X8 x2 Y8 B$ u/ p
0046B9FC 51 push ecx
( U. V- V3 H( D0046B9FD 51 push ecx! ~" b+ k5 A& B+ `
0046B9FE 53 push ebx2 X8 h+ R0 t+ y- P$ W9 D6 d) B
0046B9FF 56 push esi
4 A+ l- p/ K8 I( u5 y0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
1 e$ C- D0 C# n3 t0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
0 ^ Y1 |1 u' [6 U0 `( v$ V' Y$ W0046BA06 E8 FD8DF9FF call Unpacked.00404808# q7 t1 T2 ?0 `0 V1 ?- l
0046BA0B 33C0 xor eax,eax
7 p' U3 k d! c1 O$ `0046BA0D 55 push ebp
7 c) Z8 e; c0 n3 {: o0046BA0E 68 91BA4600 push Unpacked.0046BA91
7 @' M& r/ z% E0046BA13 64:FF30 push dword ptr fs:[eax]9 j* r5 J9 M' v$ X7 D' q& G9 a
0046BA16 64:8920 mov dword ptr fs:[eax],esp
( _+ n! z5 D1 L8 |; U0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
0 R! N* g1 y' [1 d3 y1 E& x( y0 s0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]* { h- D; ^' C; c* z
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
. c9 t: p1 \; Z" j8 @+ C, e0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
( s7 l) i5 z% b! h- u# |# y; C0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
3 o% B1 x% V' q) S- i. I0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进, z3 D! G% b8 }5 ]
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
! b( I Q" G# D6 ?0046BA34 B2 01 mov dl,1 ; DL置1! m4 w- }3 ~9 k
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]* h3 l2 ?3 Y6 U0 X$ _; J( \. S
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
1 A0 w* ] }7 _: p: _, `0046BA40 8BD8 mov ebx,eax( s8 I& |. e M3 a9 O( y' |/ M
0046BA42 6A 00 push 0
; g+ w$ ?" v1 L. S/ P0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]- r& U5 d0 K' B: U. w
0046BA47 50 push eax
$ v: ?* s" Q) A0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
v' s" Q1 ^9 q! f6 o0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]& ^$ `0 w$ ~2 J8 n
0046BA50 8BC3 mov eax,ebx
! V$ f0 s2 E" |9 q3 e0046BA52 8B30 mov esi,dword ptr ds:[eax]
, B$ a, [" J( _0046BA54 FF16 call dword ptr ds:[esi]# W/ w: r9 A, a! u, h' K, Z
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
/ Y9 i" Y, h* U0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]% G" O: o8 A( _( E
0046BA5C E8 B7CCF9FF call Unpacked.00408718, z' r: A9 @4 C' C5 a4 f
0046BA61 8BC3 mov eax,ebx
( W' F1 P! p% X2 V( Z$ s0046BA63 E8 107BF9FF call Unpacked.00403578
! F( v& z4 r8 q4 |$ G4 h0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
. U) V" g5 Y, v* f0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
' s, J+ J9 Y2 R9 Y2 I0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
: {& Y) G; T0 I/ Q- H" B0046BA73 0F94C3 sete bl ; 置BL值8 _+ C; D4 w2 d5 @; S3 z
0046BA76 33C0 xor eax,eax6 a! a; o5 A/ Z/ a
0046BA78 5A pop edx
( ^: y) ^4 @5 y* d' K$ U0046BA79 59 pop ecx3 U- T3 O; `3 \
0046BA7A 59 pop ecx
% p/ E9 [4 ?6 |' Q$ S/ H0046BA7B 64:8910 mov dword ptr fs:[eax],edx' |+ R" C. }6 S' S4 q
0046BA7E 68 98BA4600 push Unpacked.0046BA98. f7 i7 f. i) `! I+ g
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
c' r! H$ h% o9 S# S$ R0046BA86 BA 05000000 mov edx,5
- V+ z3 g' O* Q& b7 _/ A0046BA8B E8 FC88F9FF call Unpacked.0040438C
0 O6 L" `# S* T# D* M3 {+ f0046BA90 C3 retn' f* ]. K, W; S# b2 S# i6 N
****************************************************************3 B6 k& [* h2 I+ {* U
跟进0046BA2A处CALL来到:1 s9 ^: B `9 ]" i5 I
0046B908 55 push ebp8 I* k/ m0 ], g
0046B909 8BEC mov ebp,esp s1 [6 y) W9 T& O: o7 l
0046B90B 83C4 DC add esp,-24. C/ j5 o3 U3 R9 {
0046B90E 53 push ebx; E6 g+ v1 l# z/ T V E6 d7 M4 c I1 b4 j
0046B90F 56 push esi0 K- ^1 R) H8 i) G: R: L3 B1 P6 D
0046B910 33C9 xor ecx,ecx0 a P. o0 b' h; X& `
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
1 W& p3 Z* j6 q5 U0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
$ S5 g, x) y) T8 E* @- d! k0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx# S: ~6 W3 j. m9 t
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx/ _, D) o6 D2 n
0046B91E 8BF2 mov esi,edx
' K" n, W+ i; k' r& G% ~0046B920 8945 FC mov dword ptr ss:[ebp-4],eax, {' `3 {6 r: [3 u) c% l0 v! _
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]: O; L( W$ G' ^* ]
0046B926 E8 DD8EF9FF call Unpacked.00404808$ d/ ?& G9 s2 A5 _" @" X! J6 n
0046B92B 33C0 xor eax,eax
+ V6 }; n# W/ h$ f1 o0046B92D 55 push ebp
, q( j$ f/ u( j0046B92E 68 CEB94600 push Unpacked.0046B9CE
: F- U/ q+ {, W0046B933 64:FF30 push dword ptr fs:[eax]2 R* m { f) Q2 [1 O5 a
0046B936 64:8920 mov dword ptr fs:[eax],esp
. C$ z9 H3 n5 ]( Q0 V4 h" \0046B939 8BC6 mov eax,esi
$ k+ V& d* U$ ~. B0046B93B E8 288AF9FF call Unpacked.00404368
# X; v* ^1 ~9 c1 _0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]7 r6 [7 U- n2 q; j
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX L0 {& a' ?4 H) t
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
8 \2 i8 y- @* ~8 B) i! U4 I$ _0046B94B E8 1C8DF9FF call Unpacked.0040466C+ f' a; c2 Q) X$ z! X/ |, j$ H
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]1 X1 s% C% |* w+ G9 h6 d& h2 V
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
1 |1 V6 M4 S/ v$ T% Z! L0046B956 E8 EDBCFFFF call Unpacked.00467648
! g/ @2 g' D8 M: j+ U5 F+ ?. c9 x0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]: r0 C0 k* ~% ~% ~3 f1 N) b
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]5 S c/ p1 a1 q& P: E' q# d* h
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e+ ?, c6 v; k, l' u; F
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
1 w% O/ y) s% i. e! h( S0 h0046B969 E8 FA89F9FF call Unpacked.004043683 D1 G$ \1 v' Y, [* I
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX) @2 \( ^ n9 o7 I' g4 H
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
# d. M2 Q, y& X2 L" @* Q' p8 S0046B976 8BD8 mov ebx,eax ; EAX送EBX" S- c4 | o6 k: ?
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
* O- n) z: J1 ?! Y0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳: M% j" }6 m' j4 j6 |/ n
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算( n* s/ H: d: d: f2 J' R
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
/ }0 R/ w) T$ T- @0 ?; M0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL; W% W1 _4 X/ G; w' n4 w
0046B987 E8 BC8BF9FF call Unpacked.00404548
4 ~5 R" F' i) f0 A% u2 p& O0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24], G; T, X3 P2 ~- t% {- Y. j2 n
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX) T# L; t$ a' W* b# k$ B4 } Z
0046B992 E8 918CF9FF call Unpacked.00404628
$ `& J. Q" U9 {' q' b0046B997 4B dec ebx ; EBX减一
! ` j; h; [2 g. N0 S6 L9 Z0046B998 85DB test ebx,ebx ; 是否为00 { V# \4 X" ?7 m Q
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。9 f, k/ ^9 D% f
0046B99C 8BC6 mov eax,esi
+ d& x8 `5 s$ |. o% \0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
, ] n. @" u% a) ~; c$ m+ s; Z0046B9A1 E8 168AF9FF call Unpacked.004043BC
$ a' C! g# c( R7 |2 N7 B; k' p" A, x0046B9A6 33C0 xor eax,eax
1 e) }7 a/ N2 Q; e2 R) D. m% ^0046B9A8 5A pop edx
3 ?& e! T; W- D+ r" [+ X0046B9A9 59 pop ecx. T* L% o! a! T% t9 c) ^) M& t
0046B9AA 59 pop ecx
$ x' e4 P* u4 o. n; o0046B9AB 64:8910 mov dword ptr fs:[eax],edx
# B6 U f5 I6 X. Z8 p* |) b. k6 H0046B9AE 68 D5B94600 push Unpacked.0046B9D5* r( p+ s% p6 {7 u" k
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]5 u: S8 a1 u* E/ b6 |/ E/ ~
0046B9B6 BA 02000000 mov edx,2
) C9 w- ^% ]) y2 ^- N* Z$ C C0046B9BB E8 CC89F9FF call Unpacked.0040438C4 F0 ?* T2 Z J: e
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
' ~5 H+ I& G% ?% ~8 J0046B9C3 BA 03000000 mov edx,3. o& {5 o% R# c+ }
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
/ d U/ a# K) E, R) z& W# E0046B9CD C3 retn; x& Q% e& |: q* K3 @
****************************************************************4 ^ k: K6 B+ Q s: L
跟进0046B961处CALL来到:
$ ~' Q) ^; T/ s( V& V004676BC 55 push ebp
/ l+ m! Q! _$ j2 ~004676BD 8BEC mov ebp,esp5 |( f3 \$ U% w+ z/ K
004676BF 83C4 E8 add esp,-18
1 C& v9 d; K0 p6 Q! y004676C2 53 push ebx
& s2 h( w" U- W! O004676C3 56 push esi* S8 Q( B5 t [. r C2 L6 ?
004676C4 57 push edi
/ c% v3 S7 I8 [9 I3 v0 S/ G7 \004676C5 33C9 xor ecx,ecx
1 ]5 h( S! E8 \9 F004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
4 ]) F j9 u: P! D# A004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
: Z+ m2 l7 C1 e: w r d# A+ N( v004676CD 8BF0 mov esi,eax
1 s" n- n( J3 Q2 F1 h3 @4 n004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]7 ~, w2 V p: q& b* T/ t
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
o, z3 Y/ m M, b1 j& \" R004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
( K& w J3 ]( d% i# {004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
# O. O, g6 x3 n. h- j; B8 }' p. t004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>( y7 C! V. v" _- j( g s1 ?2 Z
004676D6 8BFA mov edi,edx
; m" K4 a* N! H1 f# W4 P004676D8 33C0 xor eax,eax/ B" G9 ~% q5 }: z* n' y2 X* y
004676DA 55 push ebp9 r: ?0 {9 a& e9 s% J( g2 @/ K% a
004676DB 68 57774600 push Unpacked.00467757
3 v5 b7 n) U) C7 s- l6 `6 x3 ]004676E0 64:FF30 push dword ptr fs:[eax]& d+ V* F$ _( }- r6 e6 h' L
004676E3 64:8920 mov dword ptr fs:[eax],esp
( Z3 |8 s% c' G7 J3 N8 U7 ]* X004676E6 8BC7 mov eax,edi
0 w- Y; l' ?& d2 V004676E8 E8 7BCCF9FF call Unpacked.00404368
7 u; c2 ~2 R/ A* Z# |- `004676ED B3 10 mov bl,10 ?2 N4 z% W4 v! J
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]9 p. K* L+ t0 G' G" V6 M
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****4 z; u4 u* a$ r$ Z
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]/ Z, p0 k/ \5 D9 ]
004676F7 33D2 xor edx,edx
" i1 u& b0 f2 I: X+ a4 a5 B! G3 X004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
& o# M) Q1 c* X$ G* a" u9 g# W- T004676FB C1EA 04 shr edx,4 ; EDX右移4位
# {3 d- F# e3 {& `0 m$ j004676FE 83E2 0F and edx,0F ; 和0F与1 ~; t4 t& H1 Q; \
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL: k7 c$ |+ z$ w
00467707 E8 3CCEF9FF call Unpacked.00404548$ J( W" R. k6 e( I2 g
0046770C FF75 EC push dword ptr ss:[ebp-14]
6 e) P% |$ q B0 H0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18], l. P6 }3 U) o
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL" y6 a5 l ?9 k3 ~/ _
00467714 80E2 0F and dl,0F ; DL和0F与
5 T( `5 o. z/ r; m! [0 s00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与, e% e1 J! T5 E
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
' n+ v3 h/ ^& ]9 d$ H5 ~, i00467723 E8 20CEF9FF call Unpacked.00404548( i$ J' q) G* E
00467728 FF75 E8 push dword ptr ss:[ebp-18]- ~& c7 v t3 M6 O* g, L( p' S9 C, g
0046772B 8BC7 mov eax,edi ; EDI送EAX
; l; [, A- m6 ?- `$ _1 J0046772D BA 03000000 mov edx,3
1 ?* P7 t' m0 z& c7 h7 [, r" n00467732 E8 A9CFF9FF call Unpacked.004046E0+ q% s. }; H, ^/ q" D5 a0 \
00467737 46 inc esi
4 M1 U" z3 d6 V: p00467738 FECB dec bl: [% ^! _9 b! e
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
: I. G8 h8 ]0 s0046773C 33C0 xor eax,eax
8 |. m5 G& Q. T9 B! ?! q0 H0046773E 5A pop edx
' P: @: Q7 T. o# C5 j. B0 ]0046773F 59 pop ecx
) Z. D7 u# u* `1 |00467740 59 pop ecx
. c' L! J4 [2 _- ?+ `4 n* p00467741 64:8910 mov dword ptr fs:[eax],edx
9 s. k+ f+ i9 K3 L00467744 68 5E774600 push Unpacked.0046775E" r8 R. C: G2 a5 v
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]5 x& I) `, d P2 W4 C1 v
0046774C BA 02000000 mov edx,2# z1 q. A. f; P6 y) k) [; F' Q" u
00467751 E8 36CCF9FF call Unpacked.0040438C5 }: l, N* d& D B$ ^0 P
00467756 C3 retn //返回
* \; H! a! D7 v4 ?3 R2 s8 ^———————————————————————————————————————————
% D3 y7 M+ P+ g3 Q4 |【Crack_总结】:
: W. K9 h( E9 O* s& j& R将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
, b9 C& a8 D! E6 ~' m, B9 ?机器码:bbba33de56c4cf31d9063cc074248d4b( O: S d" O* Z; B, c
注册码:e807519487d7ad4f57ad42dc87fbb191; g: z$ j/ F; m7 V1 H
附件: MakeSign.rar (249 K) 下载次数:298 |
|