|
|
【原创】破解图章制作系统
* i+ Y: b; X, ?8 W5 W$ |日期：2005年5月15日 破解人：yijun[PYG]' Y- z# ]8 N2 f; A$ }' f4 L. e
———————————————————————————————————————————# u& Z% s2 l7 Q" F8 `
【软件名称】：图章制作系统 软件版本：1.0
& i& U+ B7 w) |- I& t5 ^* ^【软件大小】： 252KB
: i& w' Q; [6 a3 V' n2 X. |【软件简介】：制作各种图章9 H3 L/ D- {5 M" v/ K) {6 Y6 ?" h
【软件限制】：NAG1 t3 g! K9 }& W3 V
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
8 c2 R \7 _8 ` c, @( ?& |4 L【破解工具】：OD,PEID
. p& b! |2 Q" ^$ H3 G) m———————————————————————————————————————————
' V1 h4 S; M! y4 z) O, q& i7 s 4 S7 t* x' o0 s* w
【破解过程】：
' y- ]6 y9 Q7 s2 ~+ ~$ SPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~4 J! Q+ F. _( e
OD载入，通过字符串查找很容易来到这里：6 J4 x& a0 P+ o- c( \0 r( K
0046ADAC 55 push ebp //在此下断( }1 G7 q: F5 y0 C( b4 c
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
0 H4 E' _! N% k! A+ ?) m% ^0046ADB2 64:FF30 push dword ptr fs:[eax]" p: x3 A9 Q4 F$ }! ?
0046ADB5 64:8920 mov dword ptr fs:[eax],esp
1 x: a* w' p' i# q0 L3 U! f0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
7 }, J3 Z6 R7 c1 H5 W' g1 ~9 J0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]8 b) X1 T1 Z# @. Q, h
0046ADC1 8BC6 mov eax,esi
5 M8 J T: q: j0 A: A$ w9 V0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX7 s2 u7 r; ?$ h3 C d& d. m2 c4 d8 K6 H
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX9 h/ e7 h' M1 {, v
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]$ m- `8 R; S$ ~) _: F" o
0046ADCE E8 45D9F9FF call Unpacked.00408718
1 T5 _* x2 [0 J; ~7 o# S0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
- p% |; S: t* Y0 P: h0046ADD6 8BC6 mov eax,esi# H& v+ X: @0 v9 b' X: f X: i
0046ADD8 E8 3359FDFF call Unpacked.00440710
; c- b7 A1 h% s* G% g ]+ Z P* M% |0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
6 X( l0 {$ Q4 w% x# O. X. Y7 n) P0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]! Z" y, ?' h3 A3 t
0046ADE6 E8 F558FDFF call Unpacked.004406E04 @" A, r; k% D" W8 x! `, s
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空# c- h! Y3 m) p8 n+ Z
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
+ @, b8 g3 l ~( \. t% P! f0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
8 w, E: O- `- n* H: k" M6 j0046ADFA B2 01 mov dl,1 ; DL置17 w7 E8 v2 E2 j( }( A! h3 `
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
# T( h' M i4 S2 t( [0046AE01 E8 B2AFFFFF call Unpacked.00465DB8/ d, [8 R3 f7 ?* p
0046AE06 8BF0 mov esi,eax
! _$ k5 d9 j# L7 d' V3 R( i* {. E0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]* g" @6 z/ ~- n$ O' {* e u
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]3 L! R3 e7 }/ e2 Z) l* x: h% a
0046AE11 E8 CA58FDFF call Unpacked.004406E0
6 U% |1 w$ |# ?0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
- X# [7 D9 G' b( j& G6 J0046AE19 50 push eax% g% J3 Z7 L, {% i _
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX5 P. _# j3 O$ p* {
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
+ [" b) \& |" Z& | a! P& x0046AE25 8BC6 mov eax,esi; x5 q$ M7 y4 U8 ?7 U
0046AE27 8B38 mov edi,dword ptr ds:[eax]
0 Y# y6 S5 G' C* g5 } `; _- i' [$ E0046AE29 FF57 04 call dword ptr ds:[edi+4]9 u$ c$ C- v8 y. Z/ p9 d# [
0046AE2C 8BC6 mov eax,esi- Q8 d! r, R; c: y; v( F
0046AE2E E8 4587F9FF call Unpacked.00403578* D5 {' O/ e3 j7 F5 S
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
9 A! x0 Q9 {- c0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~8 ~1 i# O' d1 a1 Q
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
8 H* C9 B8 L% [# S5 `" U0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
2 {& o! L; w) C9 d, K0046AE42 6A 00 push 0$ M+ C2 i- S, q2 f V2 ]9 L
0046AE44 68 D8AE4600 push Unpacked.0046AED8$ N# l4 `2 r6 e( \2 B' E
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
# ^* O+ e1 M; a, [( C# t0046AE4E 8BC3 mov eax,ebx+ `* s, P: ~. W/ Q$ M
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
7 s& q8 q3 C. n, Y. h5 m) r5 c- g0046AE55 50 push eax
# i- {# m! T) o: g" v# ~8 ~0046AE56 E8 DDC2F9FF call : p, u% p' A" b
0046AE5B EB 20 jmp short Unpacked.0046AE7D
5 X% N6 E y% M: g- [0046AE5D 6A 00 push 0+ O6 w' k4 R$ q' E+ M9 ?/ L8 K3 j' ~
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
, [+ C9 [- J6 f& A+ u7 F/ z1 a0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
/ ]( {0 D, X( N! }0046AE69 8BC3 mov eax,ebx& ^ b+ _- y$ l9 O, |$ Y
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
9 P6 \$ Z5 f" ^* i! V# Z' {0046AE70 50 push eax
. D: z- C: U# c& f: @; q0046AE71 E8 C2C2F9FF call 0 w8 Q4 @4 i) \ ?7 J0 W
0046AE76 8BC3 mov eax,ebx
1 K# j0 r; \7 u1 a! `0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
* ^, n% I% k$ P, c/ `, f0046AE7D 33C0 xor eax,eax" z5 Z% h) d2 _) V R/ W0 Z. Y6 X, a
0046AE7F 5A pop edx, s, O; u0 B8 A0 ]$ ]+ B
0046AE80 59 pop ecx4 c. s- L! `+ @5 a. e+ f
0046AE81 59 pop ecx
/ P$ W: Q% B( g( u% a: I0046AE82 64:8910 mov dword ptr fs:[eax],edx
- P! C7 i9 i" A, Z* N0 i. }% l0046AE85 68 A7AE4600 push Unpacked.0046AEA7) B0 c, D) [: N3 j
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
1 h( g# p7 r6 h3 y# l0046AE8D BA 03000000 mov edx,3
, e7 V8 b: B0 I I& W, u0046AE92 E8 F594F9FF call Unpacked.0040438C8 U' w# _, z) Y/ ?/ W; ^# ? ?
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]' ], i4 Z* T+ @# X
0046AE9A E8 C994F9FF call Unpacked.00404368
. _4 `% e* |, }4 w0046AE9F C3 retn
% l6 e' J G4 X* O0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
2 _; G7 E2 s5 S) G' Q0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A" g n3 S4 b# G& m0 ^( a
****************************************************************
9 }) L% J# O; F r) K跟进0046AE39处CALL来到：+ `: B6 E6 l9 e2 X* J8 H2 D
0046B9F4 55 push ebp
% [' Y" m- I$ i+ }0046B9F5 8BEC mov ebp,esp3 Z, d" h$ D$ k6 m7 M
0046B9F7 33C9 xor ecx,ecx
) y& Y# z6 W$ N% \4 @) f0046B9F9 51 push ecx
1 e( @! ^8 _6 d) M* n1 m& }5 d0046B9FA 51 push ecx
8 s. ]: v3 A9 r; x& z# K* [0046B9FB 51 push ecx
- \ S/ `5 i2 c0 y% J; m6 H0046B9FC 51 push ecx2 r+ h3 g* M- z' ^; E I1 I
0046B9FD 51 push ecx
3 z4 Q0 j0 J( J0046B9FE 53 push ebx
# u# J( X& ]3 J. b$ B0046B9FF 56 push esi1 x: b& G, S; Z9 }
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
; [ ?: C& L' p3 V0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
1 {' H$ c7 k4 w l9 r6 M0046BA06 E8 FD8DF9FF call Unpacked.00404808
4 C& @# {' ?- K5 g3 Y& ]* h) E( e0 d0046BA0B 33C0 xor eax,eax
/ b- Q) N0 w" U X+ I0046BA0D 55 push ebp2 f6 l5 ?" J1 r# K- K
0046BA0E 68 91BA4600 push Unpacked.0046BA91; G2 Q5 ]7 e2 {/ i* ? k9 [
0046BA13 64:FF30 push dword ptr fs:[eax]5 f/ W# W+ H( ]' B
0046BA16 64:8920 mov dword ptr fs:[eax],esp
8 Y- ?/ Z1 V5 q7 z# U& |, v$ t0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C], I1 v/ j3 _/ h2 v
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]" T& Z% r2 R* Z9 D( e3 x. {: V
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
3 G' O# d7 p* e, X# V$ O0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]% T2 E* x- D9 p4 o8 {5 e$ K
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
- s1 P) q* X; _* p, z5 O0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进" E. l4 I% z$ D& a0 t; D( \
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里3 m9 x9 Q# T1 `' S+ ?* ^
0046BA34 B2 01 mov dl,1 ; DL置1
( a, w1 E6 r2 e8 L( Z' C. i2 U0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]7 k5 f" F( [) L! @+ e& s* A: J
0046BA3B E8 78A3FFFF call Unpacked.00465DB85 d# ^) N4 ]2 u: v
0046BA40 8BD8 mov ebx,eax
0 T: J" Z8 @6 m( n& i4 {0046BA42 6A 00 push 0
# m* f8 ~ g, m3 n/ h- h `( f0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]0 t Y. H- F- L/ D+ [
0046BA47 50 push eax! c- p& k' `5 y% }- T5 I* K+ b
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
G) y( {9 P, j& A0 b0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]9 t. Q7 c3 ]% C+ j G
0046BA50 8BC3 mov eax,ebx! E$ \( h* Y& ?. N
0046BA52 8B30 mov esi,dword ptr ds:[eax]& s- d: y2 v9 ` @: K2 o
0046BA54 FF16 call dword ptr ds:[esi]7 [' j0 a; J& D* ?( ~
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX$ v! l% c0 g7 W$ Z3 R* {" e
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]) ^4 w. Z" c3 J, y7 Z) q
0046BA5C E8 B7CCF9FF call Unpacked.00408718
, q/ w3 w% e" V0046BA61 8BC3 mov eax,ebx. ^, q% b2 E/ d1 Z6 N
0046BA63 E8 107BF9FF call Unpacked.00403578
1 I7 W/ j) [3 M0 S, r0 n+ v0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX& F. E1 t' P8 T. I" i, k% n
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX S( ~ P/ T8 T/ O+ J" Z- O
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~: b% J+ H d3 L, z) b
0046BA73 0F94C3 sete bl ; 置BL值& V9 \/ {+ |. {
0046BA76 33C0 xor eax,eax
8 P$ n& _& s5 [: P0046BA78 5A pop edx
( F. Q3 z5 L$ v9 ~6 D: d+ c0046BA79 59 pop ecx
/ A0 W# v" Q( g- k8 Q2 O- R0046BA7A 59 pop ecx
5 i! g) O( n9 K+ f0046BA7B 64:8910 mov dword ptr fs:[eax],edx
/ ?. G% p' K* b. y- c6 G0046BA7E 68 98BA4600 push Unpacked.0046BA98
2 _5 b. D, f9 p0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]' W1 N1 G; @9 o# R( H! l
0046BA86 BA 05000000 mov edx,5
3 l9 h5 g! Y& s2 q5 G: P5 T" x0046BA8B E8 FC88F9FF call Unpacked.0040438C1 [" G/ l! p5 y" Z3 b# ~
0046BA90 C3 retn
6 G4 x$ _9 {( q7 t* K- m****************************************************************
, h: M. f0 S0 [1 N- @4 L跟进0046BA2A处CALL来到：
' K" @. ^5 t$ e0 p9 H) c0046B908 55 push ebp% O. J, v3 G- C2 A) s, V6 _
0046B909 8BEC mov ebp,esp
6 _" f3 r2 @; {- f& p/ m* v0046B90B 83C4 DC add esp,-24 B( F0 y% o7 O9 I' n: s1 ], c1 {
0046B90E 53 push ebx
% ?- j$ M {: }/ F) Q: x( P, H: m0046B90F 56 push esi
0 e; Z& _- Y. W+ J1 k5 r0046B910 33C9 xor ecx,ecx. D8 `" I( u R# J) r; |# E) _
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
1 R$ `) ]: x/ w: e6 k0 h0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx2 B0 b( S& x6 g, [4 K0 \
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
9 C: j1 I. I8 x) h( |0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
& Z- K2 T N4 U- q) `, ]0046B91E 8BF2 mov esi,edx
" O3 B6 K" s/ X: d6 x0046B920 8945 FC mov dword ptr ss:[ebp-4],eax' w. R; j3 \: K
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
/ P+ S! F1 Q4 Y5 U5 F- r0046B926 E8 DD8EF9FF call Unpacked.00404808 h y8 J- ~; U) i3 Z
0046B92B 33C0 xor eax,eax, D: m0 ]# x1 j+ L
0046B92D 55 push ebp
4 [8 M3 }8 R( N0046B92E 68 CEB94600 push Unpacked.0046B9CE; |& |- F! B1 N" u, } m
0046B933 64:FF30 push dword ptr fs:[eax]
+ m. r$ O B% L: a0046B936 64:8920 mov dword ptr fs:[eax],esp
~/ f# a% N4 N+ _4 L- v6 w0046B939 8BC6 mov eax,esi& C% u2 ]/ ~' _- m8 E
0046B93B E8 288AF9FF call Unpacked.00404368: H5 _/ k6 C; e4 v$ K3 ]
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]3 q( L$ n+ j+ h
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX7 c7 p) J0 O4 y/ f" Z- u: f- _1 M
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
- n+ a, ] r3 K# T4 c% R3 {+ N3 w( [0046B94B E8 1C8DF9FF call Unpacked.0040466C( }1 v! F+ S' t1 s
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
5 z# P F) Q. ]( Q* R0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]8 ?3 {* G! J# Q/ V; @
0046B956 E8 EDBCFFFF call Unpacked.00467648
, g. D* @4 I! [5 W0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]" N" p0 d" L! g8 b3 j; Q5 y
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]1 w! o5 m# ?# I6 j0 l7 l( L1 r- P
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e3 b( {5 w& d5 T% Q5 U9 K
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
+ q! R; f& Q% u5 Z% _" `0046B969 E8 FA89F9FF call Unpacked.00404368
! }+ h" d" ~& a; A/ G* P* Y0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
. E( y; I1 Z7 }& a" _1 a0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
0 x0 B/ {8 q5 X+ E7 a( Y0046B976 8BD8 mov ebx,eax ; EAX送EBX# R# F* S7 v+ ]
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较( j: h u, W6 T v( P2 E
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
8 |- l% i1 ~* _% d0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算
8 S3 h) _! N3 I' q5 [# W0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
' `) @3 }) z7 @0 O0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
1 B$ i3 k1 S: [0046B987 E8 BC8BF9FF call Unpacked.00404548
. k7 U3 I5 X2 R5 X* {1 z/ n! j ]0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]! X4 ~- t' ^) H
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX0 I" N: ~* c4 b) v8 x4 |
0046B992 E8 918CF9FF call Unpacked.00404628) X. _, M. t. g' H" c$ `
0046B997 4B dec ebx ; EBX减一
3 l2 ^2 T" E I" S6 R6 Q) A Q& E0046B998 85DB test ebx,ebx ; 是否为0) F9 V; U) D2 w$ U8 y( S; f+ J, m
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
" F$ J" Y" b$ ?- Y8 ]) w0046B99C 8BC6 mov eax,esi9 O, h& D( m3 K" A! o L1 B
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX) L- @! _% G) V5 U
0046B9A1 E8 168AF9FF call Unpacked.004043BC3 o; D1 O( G5 v2 c7 r" F
0046B9A6 33C0 xor eax,eax
& F5 Y9 X. `$ a, Z/ l. W# R# Y1 N0046B9A8 5A pop edx- Q+ B3 R1 d! P8 V; L* {
0046B9A9 59 pop ecx5 w$ U" a' J/ a5 a3 ~- d! r3 | B
0046B9AA 59 pop ecx/ k2 k- Z: z1 h- Z: f5 v
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
3 y; h+ q- V3 ?5 W6 x0046B9AE 68 D5B94600 push Unpacked.0046B9D5
- e5 S2 [# U9 ]5 _: `0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
* l8 B% d+ [. ? P; G0046B9B6 BA 02000000 mov edx,2) h6 X* E; E% B
0046B9BB E8 CC89F9FF call Unpacked.0040438C
; K& o0 q: s' f0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
- u3 Q6 F0 [6 p I5 Q4 d( U0046B9C3 BA 03000000 mov edx,3) K1 @/ p- c4 X$ U w" D2 M2 Z
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
( z* ^- X' v R0046B9CD C3 retn# V0 ^2 s) F% a0 }3 q
****************************************************************
b/ B+ C" @# m2 h6 Q# U跟进0046B961处CALL来到：* z! [4 p% U4 M6 l' R; H
004676BC 55 push ebp5 i4 b* i4 t! q2 r
004676BD 8BEC mov ebp,esp
3 \ A( o Z+ ^8 o( ]004676BF 83C4 E8 add esp,-18
$ ~+ M, s7 ^: h004676C2 53 push ebx
0 ?; F8 A% u( v: ~) q004676C3 56 push esi; L; p* A) l" U5 Y+ d
004676C4 57 push edi
. k. X8 D; A) A0 d" S" S! k004676C5 33C9 xor ecx,ecx4 G/ ~' u0 Q( @" M4 o- I
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx0 Y! r4 }" F$ z% Y
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx/ S, ] p6 S8 X- O8 q4 z2 [9 P
004676CD 8BF0 mov esi,eax
) ^6 O: ] g n# c004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]1 W) R: e$ e+ v, A+ U
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>7 K5 \7 o/ u+ X* Q) R
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>4 L1 b. M" f* K, {& w
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>( E3 c/ P1 }7 I( B- v
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>) x& p! `& \6 \7 ^9 t% G8 s
004676D6 8BFA mov edi,edx# Y8 `4 v0 r; I* }. ~: l% t
004676D8 33C0 xor eax,eax0 @; g+ b) _7 x5 Y$ u2 g/ y1 b7 C" S
004676DA 55 push ebp
1 Q+ P& G! F' j% e004676DB 68 57774600 push Unpacked.004677576 y, T" w" C6 c# y& G$ w0 G. a- A, I
004676E0 64:FF30 push dword ptr fs:[eax]
* R; C1 N/ u9 N6 s2 { G; o; {004676E3 64:8920 mov dword ptr fs:[eax],esp% S F4 k- R/ h9 Z3 D; W5 G
004676E6 8BC7 mov eax,edi& a, [2 u+ @1 m) y z
004676E8 E8 7BCCF9FF call Unpacked.00404368
|3 F4 s1 [* y6 P# V5 Z0 x004676ED B3 10 mov bl,10
! `9 Z$ j d9 ?8 B2 h$ ]! l: P# P004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]3 ?' Q7 B$ S- x8 h+ O4 L
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
" g H. R, |1 M: r0 k5 x& I004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
4 v/ N; h9 K) M" S2 i. B! \' Q004676F7 33D2 xor edx,edx
5 V- }- D |0 h4 |( ~: ^004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL( o6 x8 I# }* A& C- Y% z
004676FB C1EA 04 shr edx,4 ; EDX右移4位
! `, D9 t4 Y7 z! @' ]004676FE 83E2 0F and edx,0F ; 和0F与
& b4 Q% Q* ^2 h$ R00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL R: {4 o" u3 _5 C1 v0 g- v
00467707 E8 3CCEF9FF call Unpacked.00404548
% _ Z6 u* S( Q0046770C FF75 EC push dword ptr ss:[ebp-14]; S+ Z" T6 g8 u) D3 a" I
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]; `! ^2 Q$ R% k! F# p3 h
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
' Q7 ?: u+ [% @& K4 X00467714 80E2 0F and dl,0F ; DL和0F与$ V7 [% y& H! v% H
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与3 T3 B. w4 [/ y3 y5 T2 e
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
" ~2 I. l/ [% Z5 ~, P4 ~4 M% \00467723 E8 20CEF9FF call Unpacked.00404548% t, H- @+ Z: ]+ g9 ^) y9 j A
00467728 FF75 E8 push dword ptr ss:[ebp-18]" A) D( f8 L7 E1 ]" r; @
0046772B 8BC7 mov eax,edi ; EDI送EAX
% B. P1 c7 F4 |1 e9 n0046772D BA 03000000 mov edx,3
4 e, [1 K& R5 h. |5 X00467732 E8 A9CFF9FF call Unpacked.004046E07 _0 ?3 T) ?! R3 U# ?% I. ~# U& k
00467737 46 inc esi
" E- w% s$ U* H5 ~; ]* E" s00467738 FECB dec bl
# w6 ^ i( e9 S: V6 j, f7 ^9 |. w0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
; t$ R3 N" e1 b5 R A0046773C 33C0 xor eax,eax
. \6 M; T6 ^/ P0046773E 5A pop edx
4 L0 v* c9 A' _0 o" D) ]0046773F 59 pop ecx& j! q# Y( D" y; [
00467740 59 pop ecx$ o! h+ Z$ \! {! N, w) L
00467741 64:8910 mov dword ptr fs:[eax],edx
- Y2 f2 V9 f* d00467744 68 5E774600 push Unpacked.0046775E* v0 g' V) W- P$ Z7 K
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
; w( v' s" ?- ?& e/ f0046774C BA 02000000 mov edx,2
( Y A' \/ p) \) o5 \) Z00467751 E8 36CCF9FF call Unpacked.0040438C
1 J$ x% @1 V& I2 o00467756 C3 retn //返回
. V" v c' ^+ t+ y' M2 T5 M———————————————————————————————————————————6 z# ~ I* K# W% L# { }
【Crack＿总结】：
* L! j% g+ H( j" o0 e* a! b将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^1 a! B; g/ \+ Q) _8 {+ q, x* N3 Y. x
机器码：bbba33de56c4cf31d9063cc074248d4b: U/ \% o# B6 o0 b W
注册码：e807519487d7ad4f57ad42dc87fbb191# a$ h. u2 X* b2 F
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡