|
|
【原创】破解图章制作系统
9 i2 f/ ^. M8 E9 I* F g) ?* E( n日期：2005年5月15日 破解人：yijun[PYG]
) I! P% S. x6 V4 ^8 G0 L5 W———————————————————————————————————————————# U3 c+ Q$ {. ~/ a8 c" J: P
【软件名称】：图章制作系统 软件版本：1.0
% i, e7 O! l0 @0 E, H【软件大小】： 252KB
& {) |- Q6 I G' [4 u. O【软件简介】：制作各种图章! h' g6 b5 @3 |' W( `* m2 k
【软件限制】：NAG
% M" f1 s8 o. M' n' B" r【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！- `: ]& P5 g( D- d' c" @/ _
【破解工具】：OD,PEID, R) \+ B# ~+ M4 T
———————————————————————————————————————————# O- @) Q% \5 y2 R: E1 h
6 L/ l8 s, `1 A6 _【破解过程】：3 ^6 X, I! d3 u6 j6 r( G
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
! z5 S; d" F0 @+ r. hOD载入，通过字符串查找很容易来到这里：2 O9 C* f+ H) c
0046ADAC 55 push ebp //在此下断
* N2 W+ }% p0 M2 k+ }5 z1 W0046ADAD 68 A0AE4600 push Unpacked.0046AEA0. c+ @9 I r: H3 g3 V% `% I9 G* U
0046ADB2 64:FF30 push dword ptr fs:[eax]
4 `7 q# x9 U( K! X" F0 j0046ADB5 64:8920 mov dword ptr fs:[eax],esp
% G% o2 {" d( u; O! V7 Y0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]* g& _' p5 u# Z3 H) C
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
9 ?0 o( Y4 p6 K4 z; Q0046ADC1 8BC6 mov eax,esi
) A" u6 q1 ]$ o3 H0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX2 c* A* Y. n M+ C( x5 f
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
" j& o1 J F7 U) o( C, \0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
- h0 e+ @% x) Q- a0 C0046ADCE E8 45D9F9FF call Unpacked.00408718
* ?$ f6 o* B7 ]1 J0 O0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
. Q, j( ? D! Y, ~- e0046ADD6 8BC6 mov eax,esi
) u9 \2 }. @3 U0 t0046ADD8 E8 3359FDFF call Unpacked.00440710' K% L1 F, M" L7 t2 U4 X+ B1 {) h
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
2 p6 f) D+ ]/ d7 x% _! W. P; a0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]$ w7 [; u# R5 u7 A
0046ADE6 E8 F558FDFF call Unpacked.004406E04 e" ~& b% J% g- r* {# V1 v
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
5 i4 e4 x" P! }+ F% V" P0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳$ B. g2 L0 I! K; Y
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
9 B9 o+ f+ F5 _0046ADFA B2 01 mov dl,1 ; DL置1
: G6 ?' @8 e; V2 `3 I1 l, X0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]. E( Z- B: A/ ~0 c. Z" Y% D2 w: r
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
3 Q# M1 x5 x( }2 g9 g! D0046AE06 8BF0 mov esi,eax
8 C( u( R l3 I& m0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
* s i, X/ B6 F2 Y7 e4 C0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
, n; K1 u2 l0 ?6 Y( w3 i0046AE11 E8 CA58FDFF call Unpacked.004406E0
' w- R' k" X& }7 V0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX* x9 n( H2 L/ N$ J2 N
0046AE19 50 push eax. o4 R0 S) W6 e- M& Y
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX, z' \' Z9 T1 S+ f
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
- R' N. @4 w) K) Y3 v0046AE25 8BC6 mov eax,esi7 H% W ^/ V- Z8 f
0046AE27 8B38 mov edi,dword ptr ds:[eax], Z ]6 Z$ |& `( D
0046AE29 FF57 04 call dword ptr ds:[edi+4]3 L; s9 ^) G" j3 t" c( j5 E/ z$ ^
0046AE2C 8BC6 mov eax,esi
- a" u2 ~4 f3 y0046AE2E E8 4587F9FF call Unpacked.00403578
+ [ r6 L# u; c0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310], Y! N; z# s, |( Q: G4 i& O8 ~
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
H2 g2 y S9 t0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
' Y6 V6 r2 s2 h; E( X! ^0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
; W& a0 W, b% r2 e) {; Q7 J {; {0046AE42 6A 00 push 0
% l' y" S. m5 S c0046AE44 68 D8AE4600 push Unpacked.0046AED8
4 M- ?' }9 f% E0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误& H7 N9 q3 I4 m7 I8 ?
0046AE4E 8BC3 mov eax,ebx5 l: I" E; n- y! I# M1 `' ]
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
) ]& s6 X8 e4 D( r5 y9 t9 h8 k0046AE55 50 push eax3 N: _1 E2 U1 x ^; |/ ?
0046AE56 E8 DDC2F9FF call V: g9 j0 e- w; ^+ {# D
0046AE5B EB 20 jmp short Unpacked.0046AE7D
0 o, m, F% G% I" C P0046AE5D 6A 00 push 0
4 U7 R: X1 q8 @0046AE5F 68 F8AE4600 push Unpacked.0046AEF8+ M; @7 I, l+ D( e* v3 p. I6 M
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
) M& o# i7 f1 B0 j- s% W0046AE69 8BC3 mov eax,ebx
0 v$ [& W z8 B# p0046AE6B E8 88BFFDFF call Unpacked.00446DF84 z% }* v) k X% r/ r
0046AE70 50 push eax5 ^. H8 r+ J5 O% n+ {5 i
0046AE71 E8 C2C2F9FF call 6 L% Q, V; M o0 u" J6 ~( ]+ S
0046AE76 8BC3 mov eax,ebx3 V6 f: r" X! V% L- y9 b' [/ h, I
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
( [& t+ N8 y' e* t4 g$ n' G4 w0046AE7D 33C0 xor eax,eax6 S; L" X8 T) e6 n% d7 @8 r
0046AE7F 5A pop edx
9 y8 \! a! `( Z1 X0046AE80 59 pop ecx
# t$ N" e+ C! {7 }$ a( Z( _0046AE81 59 pop ecx
2 Q- n2 [5 O; w- E0046AE82 64:8910 mov dword ptr fs:[eax],edx' L! n7 G: }* l3 t2 I
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
6 N1 B+ V: Q+ [8 [- h. C& y# r0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
$ H6 a5 Q" G% T8 S3 q3 d- r7 x0046AE8D BA 03000000 mov edx,3" A2 y& |+ X- }& @8 J
0046AE92 E8 F594F9FF call Unpacked.0040438C* G! d% J5 Q3 O. ^9 D7 h0 x
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
+ T. k0 _2 @: l, p0046AE9A E8 C994F9FF call Unpacked.00404368
& Q9 S* J7 A3 G9 @0046AE9F C3 retn
$ |1 C& O; D0 a2 |. Q0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
: X* B/ O$ d, j# P3 J0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
% `! u, b5 m2 E****************************************************************
1 u% S+ c( O& h7 q跟进0046AE39处CALL来到：) u5 X9 m, a9 z) f% h0 z9 B
0046B9F4 55 push ebp! @' _( U4 x" K! p6 u3 k
0046B9F5 8BEC mov ebp,esp
- N$ W1 l A9 G" J1 C2 L1 Q0046B9F7 33C9 xor ecx,ecx6 J$ {' H C% E5 o
0046B9F9 51 push ecx
0 M0 ]1 _* G6 z' `6 p9 ]$ |0046B9FA 51 push ecx
6 O( H5 J s( N9 v" w* q( e0046B9FB 51 push ecx
5 U6 \5 e0 L0 P$ Y5 j0046B9FC 51 push ecx* N) t8 p0 B" O
0046B9FD 51 push ecx; _8 K9 S( }5 C1 C4 R
0046B9FE 53 push ebx% K. y9 N8 h" }+ a( }# |
0046B9FF 56 push esi
^9 v! ~6 h2 c, m) E# D0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
0 s( ~; o" x4 r* j2 n0 ]1 Y& z0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]$ ~- L: V. N1 M2 g) o3 u
0046BA06 E8 FD8DF9FF call Unpacked.00404808
- l* E. X& Y8 _$ B0046BA0B 33C0 xor eax,eax
1 A* b8 m" p' ^1 A3 h: I3 V% ?0046BA0D 55 push ebp0 v8 K2 K+ F$ \& Q
0046BA0E 68 91BA4600 push Unpacked.0046BA916 e6 J# _2 r' ]) G
0046BA13 64:FF30 push dword ptr fs:[eax]
" s/ b6 C9 G. ^4 X$ w0046BA16 64:8920 mov dword ptr fs:[eax],esp
* c. M9 @3 J+ L2 j0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
* M! o5 c9 |# R* {: C' a* ]0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]5 x+ r3 Y+ ]8 N" O% k$ `
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ! W5 p4 o0 s3 z% h/ \2 ?7 K
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]5 ?0 r3 X6 n ^0 o
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
) l+ `% V7 l! b: L& m6 q# [0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
9 V3 |$ C3 `2 N4 t R1 m% F0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里* A5 o" b. V1 e1 p; {' t
0046BA34 B2 01 mov dl,1 ; DL置1; A9 J) G! N* B7 O. [ ?4 S3 g
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
; r0 t+ F' E& e# k9 L0046BA3B E8 78A3FFFF call Unpacked.00465DB87 W: H/ H# F. M6 T/ X6 E
0046BA40 8BD8 mov ebx,eax
% g* w0 `, k3 n: w' ^1 B6 S0046BA42 6A 00 push 05 h/ [3 {0 |& k# ]' o9 ?0 a
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
* k! P( L5 Q" V3 q6 \3 e0046BA47 50 push eax
, C c5 o- {) Y- m0 E: K c2 [0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
6 a, E# n4 r; L) D* k# Z; m5 t0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
: S. n! l- X3 z( r* h; x( [; d0046BA50 8BC3 mov eax,ebx
# w: O# K( M! k0046BA52 8B30 mov esi,dword ptr ds:[eax]3 ]2 h; w# E D/ I
0046BA54 FF16 call dword ptr ds:[esi]0 k) q5 t. ^# [( e& v
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
/ l. I. J+ K1 `" h0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
! w' K9 e" [8 K ?6 i) L) h0046BA5C E8 B7CCF9FF call Unpacked.00408718' L' u" p5 e9 X- o' V) l1 a R' B
0046BA61 8BC3 mov eax,ebx
2 B8 w, M3 j% K4 S& R0046BA63 E8 107BF9FF call Unpacked.00403578 $ |) ~: s% m/ x& u, n9 J
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX2 V9 g& m. \6 l+ C
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
3 v* v- j- Z3 q! q# o7 E( s' W0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
) S1 c3 v6 V" O' \- I' z0046BA73 0F94C3 sete bl ; 置BL值% q& W7 | D6 }# _$ y# \
0046BA76 33C0 xor eax,eax
4 c! e, `' i! D2 m6 ]0046BA78 5A pop edx# @: u1 u) V8 l2 d1 v2 g6 D6 o2 { Q
0046BA79 59 pop ecx
7 `4 i. i* h! p0046BA7A 59 pop ecx9 u/ f0 h9 H% I. r9 w
0046BA7B 64:8910 mov dword ptr fs:[eax],edx) S% M3 Q5 d& y1 X0 g
0046BA7E 68 98BA4600 push Unpacked.0046BA98$ f5 d) `8 Q, R
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]) u! b! e0 s3 ~& Y. B2 n: ^
0046BA86 BA 05000000 mov edx,50 y+ a* i- c3 `% m6 C$ {
0046BA8B E8 FC88F9FF call Unpacked.0040438C
7 q; ?5 K" h4 i, F; g8 C0046BA90 C3 retn; R9 q; C& [% \$ t0 B
****************************************************************
V' s$ }6 D- b0 j3 P跟进0046BA2A处CALL来到：) _* z% D6 c) y
0046B908 55 push ebp; T1 j" w7 {7 a% K( X6 h+ C' R
0046B909 8BEC mov ebp,esp
8 `8 B5 Q/ s: F/ k) N4 [0046B90B 83C4 DC add esp,-24
- `! y+ E0 v+ u7 C ]0046B90E 53 push ebx2 d; J$ T n0 y! n' L2 v9 L2 ~! V
0046B90F 56 push esi
% p. |0 M7 W4 l6 f0046B910 33C9 xor ecx,ecx
/ X$ p/ z" K* J! Q0046B912 894D DC mov dword ptr ss:[ebp-24],ecx+ ^! a; e$ a: U! t: P2 ]
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
% l8 P+ E; S# n9 n0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx6 c, W: s7 f' ~
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
8 ]; g$ J% t. [+ n. w* `- @9 a0046B91E 8BF2 mov esi,edx
" n6 ^0 L' M4 R$ j" S' T* P5 d' |7 I0046B920 8945 FC mov dword ptr ss:[ebp-4],eax" l4 [7 A" n+ j) C' ]5 c( G
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
% l' N8 Z6 ?* K& p5 z9 ]0046B926 E8 DD8EF9FF call Unpacked.00404808
$ E9 x1 o+ M3 [# J0 Q4 i$ h# Y0046B92B 33C0 xor eax,eax! I; @6 m6 e4 G, s' e1 Y
0046B92D 55 push ebp
( y" M7 }; z8 l% ~& r6 W" @0046B92E 68 CEB94600 push Unpacked.0046B9CE" G3 B, @) @7 a
0046B933 64:FF30 push dword ptr fs:[eax]
% ~6 t* p* ]$ L! H" c. F0046B936 64:8920 mov dword ptr fs:[eax],esp
/ k1 F) t _0 _9 t- B* }& w# D0046B939 8BC6 mov eax,esi; B2 A( w G2 B+ v+ D# b! y, @* J
0046B93B E8 288AF9FF call Unpacked.00404368
/ y/ j$ Q( t \7 d V0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]7 D T4 i+ \2 b8 H+ m
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX2 s6 w- }9 I( B' l" K( P
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
# p' F6 H* L# C( F+ p5 C0046B94B E8 1C8DF9FF call Unpacked.0040466C
0 g: Y* E5 |# d$ f2 P" U0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]5 B+ O9 A2 {( |$ N' M5 [& X8 q
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]8 i8 s* M9 ?& b2 c1 y3 o
0046B956 E8 EDBCFFFF call Unpacked.00467648& K( m# v: Z+ H* l$ [
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
! t+ E2 w4 b) Z8 _8 a0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]% S0 C& Y. ?5 a2 t" ]9 a
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e* B( u' d6 g( \( J0 G# i) ^2 ]5 P
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
2 b1 j* p: }; A3 j! W9 \* y0046B969 E8 FA89F9FF call Unpacked.00404368( r% p1 m# P `2 \* D
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX. _+ S# n9 N) Y, ^; B
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
) M1 k; L7 i! O. {# o0 O8 a8 l0046B976 8BD8 mov ebx,eax ; EAX送EBX
( B6 H. H8 L# [. j, K$ S( S0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
) U5 k/ Z2 N `& X- w$ ^! u, ?0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳; D6 W6 {% J0 e: B7 j$ p: c
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
4 \ W# e5 c" Y' A7 o& g, I0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
, ]; I- O! L+ ^2 B0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
. p5 m: Y1 T, V& ^0046B987 E8 BC8BF9FF call Unpacked.00404548
' U! e: J0 e C6 Y" Q. w7 Z0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
2 R6 O1 t6 b5 j# z( x, I0 T0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
1 q9 T1 T0 y2 y" r" V. e+ n$ A0046B992 E8 918CF9FF call Unpacked.00404628
, \2 s @0 w! W0046B997 4B dec ebx ; EBX减一
! I9 q) T) P- H; h' u8 g0046B998 85DB test ebx,ebx ; 是否为0' i! F! J# Y- P, c- K
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。( J+ g6 S0 ^+ q! O) T. N
0046B99C 8BC6 mov eax,esi3 J8 b+ X( Q) h5 Q- R7 ?! o
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX: Z: y) O/ A, H; G
0046B9A1 E8 168AF9FF call Unpacked.004043BC
9 \$ N: Q" y' a9 _! {1 Q0046B9A6 33C0 xor eax,eax- ^" n, E" Q( l( b3 L
0046B9A8 5A pop edx8 v9 w. P' M9 k2 u- N* [% B
0046B9A9 59 pop ecx# O0 i1 ]# F5 `) M9 \
0046B9AA 59 pop ecx
, G2 H9 A& F( Q- P: M% D0046B9AB 64:8910 mov dword ptr fs:[eax],edx: F. N8 X: u- J/ ?7 N; G
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
# X7 {+ c% }3 C5 ?7 w2 `. o3 d0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]% G6 Z2 |* T- D+ z" `
0046B9B6 BA 02000000 mov edx,25 p/ Q7 Z* p o5 J
0046B9BB E8 CC89F9FF call Unpacked.0040438C
0 X# T: |0 v* P$ T; C5 j1 E0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]! e1 k. N) K& M5 c8 s, P
0046B9C3 BA 03000000 mov edx,36 T0 f( q; B4 v4 ? C
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
. K# I9 l: Z7 j0046B9CD C3 retn
6 d; l! U! x- a****************************************************************! h" F& l/ I0 D4 {
跟进0046B961处CALL来到：7 Q6 ~6 R, X; x) `; d9 K Y$ M
004676BC 55 push ebp, k% l+ g! F8 \
004676BD 8BEC mov ebp,esp. L/ ~: Z/ X5 B
004676BF 83C4 E8 add esp,-18! I8 g+ k3 B$ e; [
004676C2 53 push ebx5 q5 F+ Z" l4 k( H1 ?1 |( X
004676C3 56 push esi
1 y4 j$ t! |, d$ j3 A. c004676C4 57 push edi
( R- {! Y1 p8 E& [004676C5 33C9 xor ecx,ecx
0 A$ o @& T4 p5 A004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
+ L' z+ D! M8 T9 X004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx- j, j0 c0 c6 O* }: j
004676CD 8BF0 mov esi,eax
: {7 D& N3 d9 i* h0 E( P004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]8 i4 P0 x4 {6 N, d* R0 a
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>" s! v0 Y7 |! N; L6 ]8 X- z
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>% p: k' ^2 Q+ Z6 i$ J
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
6 o, c9 {; ]" v# @) `* g8 ]004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>+ ?, ]/ v0 ^; l) @# e
004676D6 8BFA mov edi,edx
0 W6 V8 C- X2 u1 _004676D8 33C0 xor eax,eax- F6 W. W7 ?: y& a
004676DA 55 push ebp
; q# x3 c- H# ]004676DB 68 57774600 push Unpacked.004677579 G" D- J. |- w, n9 N# C
004676E0 64:FF30 push dword ptr fs:[eax]
' |6 k' P% \5 ]2 c$ z3 t) P004676E3 64:8920 mov dword ptr fs:[eax],esp
- _* q/ _" b% ^7 D4 K& u7 y, s004676E6 8BC7 mov eax,edi7 l3 O# L+ N& g& ^; x
004676E8 E8 7BCCF9FF call Unpacked.00404368
: D4 s( L- ]( z- H004676ED B3 10 mov bl,10& N0 H. \* K5 S4 ~
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
]" K, E! ]+ Y" N9 u004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
2 N* E& f! M: i6 l" `( f6 K004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
( T* l/ @% d/ a* D: c+ c/ k004676F7 33D2 xor edx,edx0 X- o2 u; a2 s5 X9 v( q$ x
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
1 ~% B3 r+ C5 T$ ~! F9 d004676FB C1EA 04 shr edx,4 ; EDX右移4位. S: k. [% P2 K* Q8 @
004676FE 83E2 0F and edx,0F ; 和0F与
" y' s9 o! Q: H/ J; O9 g00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
1 K! H1 N& K' W$ }4 f00467707 E8 3CCEF9FF call Unpacked.00404548' @! P8 T+ c9 _
0046770C FF75 EC push dword ptr ss:[ebp-14]7 o6 b x3 Y6 t2 p1 I7 }6 ~5 X
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]$ ~9 ~/ g# p' _# B1 B
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
5 O! n. g4 Y) g% G- o" h- h- t00467714 80E2 0F and dl,0F ; DL和0F与. N2 w* K' K$ m, c
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与' O* h S, x: {- f6 G4 H$ Q
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL, H1 c5 z8 R! m( s. l9 z7 D+ w l8 R
00467723 E8 20CEF9FF call Unpacked.00404548+ x& J. k3 F, Q
00467728 FF75 E8 push dword ptr ss:[ebp-18]
9 g" f% \6 I; L0 h. c0046772B 8BC7 mov eax,edi ; EDI送EAX) a$ v2 y6 {# s/ F) g% E
0046772D BA 03000000 mov edx,3
5 Z' Z4 H1 B d6 x# W6 h00467732 E8 A9CFF9FF call Unpacked.004046E0
0 j3 x8 M8 e7 s: m: U5 W00467737 46 inc esi
- [% {$ L ?6 v0 w3 m b+ g00467738 FECB dec bl
4 ]& a# I1 a* j- ~1 G0 \6 ]0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e0 O: c( V6 m8 i$ S7 X
0046773C 33C0 xor eax,eax0 \& k, f. a/ ?7 ~
0046773E 5A pop edx
( s2 o: I* |+ L; a/ j# b( a& X# Q0046773F 59 pop ecx* J0 @* ?; Y$ T
00467740 59 pop ecx: B$ m+ B5 V! C) _- X4 z E
00467741 64:8910 mov dword ptr fs:[eax],edx
' E; Z. f. j( K- H. y0 C00467744 68 5E774600 push Unpacked.0046775E
6 Z, ^" S& a; ~: ~00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]( i' E& |+ \8 N! `* l7 O
0046774C BA 02000000 mov edx,28 C/ R/ r/ k; \/ k1 S
00467751 E8 36CCF9FF call Unpacked.0040438C
& w! V: P9 q! D, i. c00467756 C3 retn //返回
. v: B; i7 ^* w9 p6 c( w———————————————————————————————————————————
' B0 z! b2 }# G' q【Crack＿总结】：
- ^ s0 k5 s3 ?) S) Z9 {5 ~3 {将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^( M4 ]2 E: b1 z) C; v* I
机器码：bbba33de56c4cf31d9063cc074248d4b
' {$ A/ @2 O# k- Z( ^注册码：e807519487d7ad4f57ad42dc87fbb1913 k& ~. K7 x# }+ g
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡