|
|
|
【原创】破解图章制作系统+ {9 e7 F( l8 b; ?: H0 E r0 |
日期：2005年5月15日 破解人：yijun[PYG]
' D& a8 j5 n7 I ?/ L7 m- ~/ D! ~! h———————————————————————————————————————————" B% j& a* Y8 w; r0 B
【软件名称】：图章制作系统 软件版本：1.0
/ s. O, S0 A2 @# b( r【软件大小】： 252KB
6 j7 d$ l/ `0 F* n. D【软件简介】：制作各种图章5 d F& ~" S Z* c* h
【软件限制】：NAG( a( f# c. N* g) y& _
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
2 s/ t% n: P8 m% b) O【破解工具】：OD,PEID- Q) z+ l8 j' A, t7 W8 W
———————————————————————————————————————————
+ v. e& F0 v& i8 {6 I; K, x
4 ]& @; ^& N1 U【破解过程】：
. D% E1 _. y6 {PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~2 [- a o! L3 n
OD载入，通过字符串查找很容易来到这里：
/ e( N5 ]8 X5 \ V8 m0046ADAC 55 push ebp //在此下断7 n" s- X s1 D M4 X1 a% V2 U7 Q
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0% A, O5 d/ X+ M4 I) ~, n+ @
0046ADB2 64:FF30 push dword ptr fs:[eax]9 N j: g5 k" b9 |- |( N
0046ADB5 64:8920 mov dword ptr fs:[eax],esp( D7 N; S* r' e& m& N7 ^" b
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
' x6 {' E* Z4 a0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
5 W7 |- y' X: d/ r+ N0046ADC1 8BC6 mov eax,esi
" Y+ { v, Y1 C7 l4 g+ u0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX5 @: ?3 e& K3 M2 O3 S2 e& N
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX/ x+ `) }1 f, D9 C% l
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
8 ]# z- U! \. b+ H6 u# `0046ADCE E8 45D9F9FF call Unpacked.00408718
9 R$ p: I1 x% g4 W0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
8 k$ e9 n- g5 @0046ADD6 8BC6 mov eax,esi
: s$ a* @; r% f- d2 @4 J' J0046ADD8 E8 3359FDFF call Unpacked.00440710. M2 a9 c0 X6 ] `. e! w
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
* y3 l, q1 \9 v ]$ r( K0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300] k* q( N5 J0 F7 v" v. r6 B
0046ADE6 E8 F558FDFF call Unpacked.004406E09 o$ k5 N. O; v; b
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
- N' u) A+ Y+ W% d4 y0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
7 v8 Q9 J' H0 b P0 a0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX0 l$ K2 H6 h5 Y* m$ D
0046ADFA B2 01 mov dl,1 ; DL置1
" X/ P4 d8 q& v k8 Q0 d; o: f0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]# \6 g" K6 d8 q8 o* F5 `
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
% D d8 Y$ v5 |$ H0046AE06 8BF0 mov esi,eax$ `7 s$ Y) W3 D8 g$ x0 Z% y
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]) c& a% ^( \: F# v7 E
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
# c* B( m6 K* |0046AE11 E8 CA58FDFF call Unpacked.004406E08 m3 c6 V3 J+ t* C. K& y
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
( v1 I' d7 x( U; U i$ P# p0046AE19 50 push eax; \! Z6 j" J1 y4 B2 R3 ~
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
7 Y" _4 l1 j! p0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
( u' [% @+ T) ?5 ~1 _5 j t _0046AE25 8BC6 mov eax,esi
- y1 \# B, p; P0 n0 O% w' l+ f) F0046AE27 8B38 mov edi,dword ptr ds:[eax]8 J0 h- F9 c! n7 ~; h5 }# @, G' l
0046AE29 FF57 04 call dword ptr ds:[edi+4]+ U, a. Y _3 _) v0 o
0046AE2C 8BC6 mov eax,esi B; V& `$ [# k$ P1 e- W3 K
0046AE2E E8 4587F9FF call Unpacked.004035783 ^- m' n$ P, ?& }3 S
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]2 G5 p6 f& S- l: l
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
, D# i: A8 \, W* F. E* j0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）7 @5 z/ a9 K6 q6 K2 h
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~1 l$ b" S0 p2 B$ y! A
0046AE42 6A 00 push 0: o W0 v0 Y# e H/ ?3 \2 O# M
0046AE44 68 D8AE4600 push Unpacked.0046AED8) `2 n" x2 \* x$ F/ ~+ I; S+ H
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误$ d- r2 t& T5 i/ Y& l
0046AE4E 8BC3 mov eax,ebx9 F& ? d: g. w7 Q+ L
0046AE50 E8 A3BFFDFF call Unpacked.00446DF84 B* y$ u( J+ M4 a0 w1 A
0046AE55 50 push eax
' |# R# o9 ]0 s9 S$ b3 A0046AE56 E8 DDC2F9FF call
1 \1 q8 v0 ]2 ~$ V% g d! W/ J* _0046AE5B EB 20 jmp short Unpacked.0046AE7D
$ E6 }6 R, I3 e6 Y0046AE5D 6A 00 push 0
: c7 J0 C! c( Q$ i) @7 c8 Q; [0046AE5F 68 F8AE4600 push Unpacked.0046AEF8 D2 Y/ ~2 A n
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
% g$ p: ]3 [9 S2 @( h5 y0046AE69 8BC3 mov eax,ebx
7 k: C$ b' f$ `$ v ~$ @/ n! h0046AE6B E8 88BFFDFF call Unpacked.00446DF8( b5 s" A. B% C' Y) V8 w
0046AE70 50 push eax& d; z6 ?, f2 _0 F
0046AE71 E8 C2C2F9FF call 6 l, }$ x* B8 \- T8 y
0046AE76 8BC3 mov eax,ebx
( s8 f `/ u4 @& e) A0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
, ?% ]& r. [/ p0046AE7D 33C0 xor eax,eax" q- X) d1 ?+ N/ d$ Y/ b8 ]) f+ s6 F
0046AE7F 5A pop edx
A( M5 A, k2 j9 ?3 S0046AE80 59 pop ecx
. g! I) D- }+ I& @0046AE81 59 pop ecx
# P0 i$ O, h/ i9 W1 e8 q+ G0046AE82 64:8910 mov dword ptr fs:[eax],edx
, c9 y, a; S' \. M# ?! U" P9 i. i- f0046AE85 68 A7AE4600 push Unpacked.0046AEA74 j# \9 U. _# \1 V3 N. M3 ]. V4 p7 g ^
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
# v7 W# r n7 G- x' p0046AE8D BA 03000000 mov edx,3
3 m7 A; n3 r: G0 q/ q& o4 D* o G0046AE92 E8 F594F9FF call Unpacked.0040438C
6 _) T7 y t- v# m) u& i0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]8 o- W. C; M$ H7 p' n/ @4 t; P
0046AE9A E8 C994F9FF call Unpacked.00404368
, N6 K+ K, y. @( e9 E# Y0046AE9F C3 retn
( P7 X7 L0 [, k1 C' \' `0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C5 L5 M" \9 V0 Q% Q% J& H+ h
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
2 X8 Z& R( s& \: t* D9 }****************************************************************" C& Z7 m( W1 t- I1 Q1 I! l
跟进0046AE39处CALL来到：, A9 a9 L% r% e! ^+ h
0046B9F4 55 push ebp" ^* h3 q0 j9 s
0046B9F5 8BEC mov ebp,esp* r2 f9 P, m1 g# K! Y1 F2 S
0046B9F7 33C9 xor ecx,ecx
; {3 _/ \$ n7 Z6 C2 `5 h* C0046B9F9 51 push ecx
0 f7 o3 S1 B2 v0046B9FA 51 push ecx
. H3 R+ F1 w, D0046B9FB 51 push ecx1 N7 [0 e3 ?( D8 X, _- c
0046B9FC 51 push ecx
. D# b: j# U- G! V4 M K& _0046B9FD 51 push ecx u" |4 \8 E' T' d8 B5 Y
0046B9FE 53 push ebx
# O8 @# g/ g2 h! e+ M1 a, X0046B9FF 56 push esi7 q% W s" G0 ?/ r: x4 E7 j
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
1 }" p5 e+ Z/ F# L0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
, s9 ]: _" b4 J8 X! j0 J) L* D0046BA06 E8 FD8DF9FF call Unpacked.004048089 a3 k) m, n/ E. G4 c
0046BA0B 33C0 xor eax,eax
2 U! Z( N( T u! d0046BA0D 55 push ebp% }* o- \, d+ m1 R! e+ K2 B
0046BA0E 68 91BA4600 push Unpacked.0046BA91
$ B5 B8 n$ ^0 K" v- H' b- r" s0046BA13 64:FF30 push dword ptr fs:[eax]; H6 [, g! G; u( m
0046BA16 64:8920 mov dword ptr fs:[eax],esp* a+ w% H1 J% G u- t" s, c1 g
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]$ b Q- q" ^- D, S6 x1 ]& w
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]7 [; S0 b% w* T9 j
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 # ~) U& z$ e/ |) Z- R' C
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
q4 ?" ^; [* e8 I$ u2 P0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX$ b4 [3 R3 @" W. q+ x& d
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进+ O) A: z! c! r3 y6 L
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
4 E0 N8 p& ~- @6 {& l |- I0046BA34 B2 01 mov dl,1 ; DL置1
6 N, ~( V8 M2 W# G* o3 [0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
Z1 ]! c) x$ [- V; d0046BA3B E8 78A3FFFF call Unpacked.00465DB8! K2 ~* i7 Y' w
0046BA40 8BD8 mov ebx,eax- M* H$ s7 T' w( ~
0046BA42 6A 00 push 0" ]! |8 O. ` S# p" p7 U
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
9 }. ^! M1 t) |4 u# {7 P4 R4 \# q+ T0046BA47 50 push eax: d* H9 |3 { a; l+ J
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
/ \" n! u/ Y. r2 v0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
1 z J) [" k. |8 y3 X0046BA50 8BC3 mov eax,ebx. p# G9 K/ K7 e$ ]: y; ~
0046BA52 8B30 mov esi,dword ptr ds:[eax]
, q0 f& g! T$ k0046BA54 FF16 call dword ptr ds:[esi]
2 ?1 R* M9 K- \) g a0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX$ k3 v, L" [7 |; d0 l! O
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
% }7 S8 @* N; k0046BA5C E8 B7CCF9FF call Unpacked.004087185 w; c% ^7 P! o# f
0046BA61 8BC3 mov eax,ebx) P3 f& i* y ~% l3 c
0046BA63 E8 107BF9FF call Unpacked.00403578
8 q% h# v7 ~3 H- u' x. E0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
" z$ w8 C+ y1 p" g* o: D, I5 h0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX* E( o% f" z. i9 z( c& F0 [6 x. e
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~
( j0 ]: i3 E& \6 Q7 I+ I, @- E0046BA73 0F94C3 sete bl ; 置BL值' b0 m* a- T6 j& U
0046BA76 33C0 xor eax,eax
% J, \$ Z. u* i' S% p/ E0046BA78 5A pop edx
0 ^! W+ x* I, E" {$ H9 i; d0046BA79 59 pop ecx
5 T! U2 v v# s0046BA7A 59 pop ecx
" |. |9 c8 a1 z' y6 D0046BA7B 64:8910 mov dword ptr fs:[eax],edx
$ A6 q2 \9 a- H* B" W( N$ ^$ d0046BA7E 68 98BA4600 push Unpacked.0046BA987 i, E3 x7 F) M+ i& S4 o4 J
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]& A; x# m4 z! W+ n, D# z
0046BA86 BA 05000000 mov edx,5
( R" `. w& J& B4 |2 `+ [ W0046BA8B E8 FC88F9FF call Unpacked.0040438C" R, R/ N8 T( L- H. s& M0 L, I
0046BA90 C3 retn3 {# _0 m* U! ]; ~( D" u! ~) y
****************************************************************
/ Y6 E+ @& ~1 g1 d9 X跟进0046BA2A处CALL来到：
% F6 _+ T3 I6 u$ S- }0046B908 55 push ebp
9 |8 Y3 S h+ d3 Z0046B909 8BEC mov ebp,esp1 y6 ~( N; k( |" `) ^8 }5 s
0046B90B 83C4 DC add esp,-24
. z$ p# e p) o! a0046B90E 53 push ebx
! }6 N& u! V% K6 Z5 {' s4 ]; k1 ?0046B90F 56 push esi3 ~; v1 \% U; b7 S( s- e6 h2 ]0 r
0046B910 33C9 xor ecx,ecx" `$ M& D( [1 z- W" [3 [- i& i
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx5 ?' x+ b9 r( h o4 F$ G C% D4 r3 e
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
4 A5 Q6 P9 [# p" H0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx- p% l/ L2 m( M: l
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
8 }% Y& n8 O& w- L/ C( }0046B91E 8BF2 mov esi,edx
! p* N- ]" h% W. b7 V8 V& w( f0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
' f, y8 _0 D4 A0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]. P* n" a7 b$ x! q, p
0046B926 E8 DD8EF9FF call Unpacked.00404808. `& p; h5 [) ~. }3 @
0046B92B 33C0 xor eax,eax
3 D6 U+ X+ w: j/ u- o0046B92D 55 push ebp
9 I9 [4 S$ g, q7 e0046B92E 68 CEB94600 push Unpacked.0046B9CE
6 {8 N% q5 D: E4 O- y- A. X0046B933 64:FF30 push dword ptr fs:[eax]
/ \' T+ Y2 u, [9 g8 V2 u0046B936 64:8920 mov dword ptr fs:[eax],esp
7 H* |" S5 ` J- m d% q0046B939 8BC6 mov eax,esi9 M, E1 |' G2 e5 r e6 o- |; _( L8 v
0046B93B E8 288AF9FF call Unpacked.00404368 s# k. g- d( Q! Y- M4 Z
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
6 @0 r! o7 x0 i. \8 M0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
, v: k" I4 ]8 r3 l0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
; M! P$ D6 c" V. s: E, B+ |0046B94B E8 1C8DF9FF call Unpacked.0040466C; e" v2 `) ~- F/ k$ P" Z" U" \
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]% o3 W+ p- a0 Y* O: G5 r# y" h
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
4 }+ K2 E8 o) r1 Z, p. k' d0 j0046B956 E8 EDBCFFFF call Unpacked.00467648
2 _- Y, G6 `4 j* D0 n0 X/ g& ?0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]% ~0 A! Z C9 {3 N* N+ p5 x- s" }
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]& @% a) l8 V* B# `
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e& q2 O3 r& t+ P/ g3 r/ Z
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
! ?1 e5 R1 C6 A! C9 w0046B969 E8 FA89F9FF call Unpacked.00404368
' P+ B" W# i# F0 h( _8 Q: c0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX: T! p) o3 E" Y* s8 q/ }5 K
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX8 i' s z6 y4 W, Q! J& ~
0046B976 8BD8 mov ebx,eax ; EAX送EBX6 w, o3 F! G$ [; ~( g
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
5 A* @2 _( _# u4 E! ^0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳0 Q: h9 M$ `: V. @2 r+ h
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
# r7 y* J7 I/ |! R w' s0 F5 j0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX1 W7 |# s8 c$ y! X
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
# o' a8 i9 c" \3 E6 P% H; U0046B987 E8 BC8BF9FF call Unpacked.00404548" ?+ ^; t6 {& b- R w* b
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]. m/ g' J/ d4 I5 f1 @' ?! c' ]
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX. k9 D d( C$ @0 s
0046B992 E8 918CF9FF call Unpacked.004046283 \: V+ X$ y+ F# d* O/ O8 F
0046B997 4B dec ebx ; EBX减一
2 U D" y8 k& b! ^. L, N: x0046B998 85DB test ebx,ebx ; 是否为0
6 r6 h$ N& F! G0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
% Y/ G. x' K9 |' c, y# `0 p) A s0046B99C 8BC6 mov eax,esi
4 C" q" r/ x5 f7 \6 m$ ]8 \0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
2 |$ h! B/ n6 s0046B9A1 E8 168AF9FF call Unpacked.004043BC
* v6 U3 k8 Q: t! E7 Q7 y" @( T- [0046B9A6 33C0 xor eax,eax3 m0 ^" A0 m$ r/ [' }" E
0046B9A8 5A pop edx
0 U) b, \- N& Q& T0046B9A9 59 pop ecx
, e/ R, W9 ~3 a. p0046B9AA 59 pop ecx. D+ l3 E; w7 p, ~1 o0 d% X7 c Y
0046B9AB 64:8910 mov dword ptr fs:[eax],edx- M+ _% i" X) W3 `: o
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
9 A" H# D4 T( Q1 |0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
+ ]( L4 M& y0 n& D$ W$ v0046B9B6 BA 02000000 mov edx,2
. k5 g' G; p. ?2 L4 n% K0046B9BB E8 CC89F9FF call Unpacked.0040438C
' _( T7 w, m2 Q8 e U+ ]0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]6 R0 m; j6 Z6 O+ h
0046B9C3 BA 03000000 mov edx,3
) t+ Y5 G0 ^4 u' p" w+ x" y4 H# h% ?0046B9C8 E8 BF89F9FF call Unpacked.0040438C8 L0 u' r) \: h d4 |
0046B9CD C3 retn
" n, i: a; i1 ^$ D3 e; @****************************************************************
! b; q: B1 a7 g- x9 Q8 ]5 d跟进0046B961处CALL来到：& [4 v+ H- q* ?
004676BC 55 push ebp" q9 K8 k1 v9 K# q1 n" h1 l, {" ~
004676BD 8BEC mov ebp,esp+ R6 E1 o0 ~+ b& X! i+ A# I9 v
004676BF 83C4 E8 add esp,-189 R" w. b& S" z. p0 c
004676C2 53 push ebx
8 `' w9 T2 S& o# `6 g004676C3 56 push esi
7 G0 Z. a. o- r' I3 ^% i9 B- Y0 j. N004676C4 57 push edi
2 T( m8 C1 j+ Y, W/ O; p004676C5 33C9 xor ecx,ecx
5 p: k, R& f( [3 {0 B3 ]- {' I004676C7 894D EC mov dword ptr ss:[ebp-14],ecx/ w# }- v. X. H6 ~7 r; A* B0 l
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx" h' V; F8 O% R7 L2 Y% B. g- X
004676CD 8BF0 mov esi,eax
' H$ V) S, E3 S2 n: e004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]( u. C9 `) \) I* n
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>, k# R$ [0 s4 p8 `1 O2 Q
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
, a# q0 `" H4 g5 k* d004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>2 F7 w) |2 @, H5 O& C" ~4 ^
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>- c* G& f) f$ c' ^# y1 l
004676D6 8BFA mov edi,edx: {, d! H$ M, r
004676D8 33C0 xor eax,eax
, U; W. G9 P7 Y, R, {2 l( k) _004676DA 55 push ebp! }+ p; K6 J; |
004676DB 68 57774600 push Unpacked.00467757+ l; d9 O! G; V$ B7 M
004676E0 64:FF30 push dword ptr fs:[eax]
! e1 r Q/ j; D# Q% C004676E3 64:8920 mov dword ptr fs:[eax],esp
0 q4 S3 L0 f* M8 A0 _" ^5 i. d* ^004676E6 8BC7 mov eax,edi" ?' X/ l: Z0 N. @% V$ c% T, h
004676E8 E8 7BCCF9FF call Unpacked.00404368, l. j+ w4 X( g# L5 o& D4 x
004676ED B3 10 mov bl,10. E& d4 J% [3 K5 W/ e
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]$ Z3 S) X" |8 s1 [ C
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
# ` o$ E& e) a. F$ ^! q4 H. R004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
7 X2 v D. s5 a8 d004676F7 33D2 xor edx,edx, y ?# N, f* I7 F! D: m: u4 u' P
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL" f- X4 b1 o+ _* u! |: V
004676FB C1EA 04 shr edx,4 ; EDX右移4位4 s3 l9 Y6 [5 n- `. i0 b2 ` l# }3 [6 H
004676FE 83E2 0F and edx,0F ; 和0F与
! F5 W1 }; D( u0 |00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL9 n i7 p. h9 A3 U
00467707 E8 3CCEF9FF call Unpacked.00404548; j% R! C$ a* r; B1 E
0046770C FF75 EC push dword ptr ss:[ebp-14]5 Y& D$ x, q" M
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
/ ~7 U+ w) V; S$ N+ ?, A1 X00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL @8 H. n$ O; q- Y
00467714 80E2 0F and dl,0F ; DL和0F与
1 h, ]" x) m: k" p8 P _) Y; V' z00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
3 n9 J. A# g7 f" G% ?9 T, x( R- S" }0 A4 z0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL; e% r: v; _! |/ P$ K
00467723 E8 20CEF9FF call Unpacked.00404548
1 Q, S9 K$ s5 z00467728 FF75 E8 push dword ptr ss:[ebp-18]- [/ h5 c) I, |( ^0 X( @/ x
0046772B 8BC7 mov eax,edi ; EDI送EAX; f# q9 m8 p( D5 I$ E5 | B
0046772D BA 03000000 mov edx,3+ K1 v' }) t9 n1 W6 M! x0 B; p
00467732 E8 A9CFF9FF call Unpacked.004046E0
0 ^& Y0 z4 U1 S% k9 {4 \8 @) i00467737 46 inc esi
4 E6 w+ ? C" B00467738 FECB dec bl
( Y# ~$ \- U _* ]6 n! i- u: P0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
: g; A- }/ ^$ @0046773C 33C0 xor eax,eax o) f- n+ t Q6 w, U& c' e
0046773E 5A pop edx: T% ^3 w% t! g9 ^9 G4 t* f, q q, z8 b
0046773F 59 pop ecx* w9 R8 c# q4 t' H9 E+ M, ~# J8 j
00467740 59 pop ecx3 G' ], m& I' z1 D6 r# ~+ F- ?
00467741 64:8910 mov dword ptr fs:[eax],edx" x8 x+ x5 V8 E( K& |
00467744 68 5E774600 push Unpacked.0046775E9 b r/ q5 s8 p0 v# b" A( P1 P
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]/ J X9 I; ^/ V9 h) w- \5 o4 W
0046774C BA 02000000 mov edx,2
6 l. ~% K6 h2 `: L- D$ ^00467751 E8 36CCF9FF call Unpacked.0040438C
$ w6 j+ Y/ t$ B00467756 C3 retn //返回
7 |. s+ M p7 f( r3 j7 u7 i———————————————————————————————————————————
' u8 v6 T" d$ p0 K( `【Crack＿总结】：$ ?- i- X* o& e1 p' h
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^
' i7 X! C; }3 C+ [; ~# C* m机器码：bbba33de56c4cf31d9063cc074248d4b/ K6 ?1 M6 d: {% Q. g3 i
注册码：e807519487d7ad4f57ad42dc87fbb191
6 p- s' F4 }1 f1 i附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡