|
【原创】破解图章制作系统
. n- G2 M* `! {6 F日期:2005年5月15日 破解人:yijun[PYG], Z, F" q6 w3 L- i" p$ _' Q5 X& q
———————————————————————————————————————————
" j. q c% \. q k【软件名称】:图章制作系统 软件版本:1.0
2 M+ ~2 z0 |) T% ]【软件大小】: 252KB t$ i/ t8 j7 S* G/ \
【软件简介】:制作各种图章- l& g4 L1 A( f8 p& W# b) O$ D7 s
【软件限制】:NAG5 q- L, g, Y2 b, v+ l9 C1 l0 A9 L7 H
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
: V9 {* O: N7 k/ @, O【破解工具】:OD,PEID0 A$ b6 o. b) j9 C' c/ c
———————————————————————————————————————————8 I7 s h" @- {+ V5 U! Y3 \
/ p% f n% m; \) B4 n" z0 |9 I! n3 g【破解过程】:1 Q. _# j, l4 _% ]1 Z3 S
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
% z9 u$ A! u- s9 K1 @$ \OD载入,通过字符串查找很容易来到这里:
4 `: U5 S/ H/ h7 ?% q1 x, f5 w% ^: k0046ADAC 55 push ebp //在此下断- t- X+ |, o2 X: l% N9 P# ~+ E
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
+ ?4 l* w6 e: o- z7 Q0046ADB2 64:FF30 push dword ptr fs:[eax]
4 Q7 y; C% p: m/ Z& k- [0046ADB5 64:8920 mov dword ptr fs:[eax],esp7 F7 Z3 A3 ?, G# C/ N
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]4 [/ g. ^3 C6 }4 w
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]: N8 ?' w( Q4 W3 X4 N# P5 a
0046ADC1 8BC6 mov eax,esi0 X- r% P1 R- }8 \6 Q! g. C
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX
t8 n2 |$ i- ^' z. T0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX1 I0 Z) ~6 j: o% J# A. [8 P+ y
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
. x- J9 `2 S# I$ ^/ j0046ADCE E8 45D9F9FF call Unpacked.00408718
, n4 U: A6 C7 | D5 X' M0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX" C6 c8 b2 [. q- |& x
0046ADD6 8BC6 mov eax,esi
+ Y; X. j( r' U' l6 Y0046ADD8 E8 3359FDFF call Unpacked.00440710
* L! ^6 l! }, c4 t' g0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C] r$ {4 P. \3 m3 m7 c% B
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
& S8 X2 e; Z8 w1 J B0046ADE6 E8 F558FDFF call Unpacked.004406E0
6 Z8 ~- Y6 Q1 l' H/ X% [& b3 f8 m0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
' L" ]1 b' u( t+ j' l& }0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
2 [" {" ~. ?9 k# \0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX( g% t0 O/ ?1 l2 A" e
0046ADFA B2 01 mov dl,1 ; DL置11 j7 y" ]% K, Z' f, }
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
4 T) K2 z! L% O$ B0 V0046AE01 E8 B2AFFFFF call Unpacked.00465DB8/ B! i$ P% Z$ \
0046AE06 8BF0 mov esi,eax
! h. S% G5 C" N# Q0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
) g8 d: E) r2 y0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
* `9 W' K6 y' Q# X$ E( L, v0046AE11 E8 CA58FDFF call Unpacked.004406E0
9 M" I" G( T* @1 w+ ^' p0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
3 A3 M+ @/ Z4 E0 q, r$ N0046AE19 50 push eax: f* \5 d- H& K( r6 S% T n* N! n
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
( P7 w0 K$ E& O" ?" g0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]- q: k1 {' }7 J: [; }
0046AE25 8BC6 mov eax,esi
' X7 w2 M% ^* Y( P0046AE27 8B38 mov edi,dword ptr ds:[eax]
6 y% h5 M+ G, D5 J& g( W! G0046AE29 FF57 04 call dword ptr ds:[edi+4]+ W$ p' d' _, R& S6 j
0046AE2C 8BC6 mov eax,esi
, Y2 J m/ E0 n- D# Q0046AE2E E8 4587F9FF call Unpacked.00403578" l9 h+ Y: ~# f4 G# e& V
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]+ H2 \9 v ]5 K% J/ i
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~& B0 a- `/ N% [, M0 J
0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)1 d+ U% F* O5 i! e# \ O7 ]
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
/ P! j# O6 l7 K0046AE42 6A 00 push 0
7 \8 r, Z0 j* ~; W. B3 }) {7 F0046AE44 68 D8AE4600 push Unpacked.0046AED8+ j0 A# c+ Q! `2 g1 K( r
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误* x/ E2 v3 {4 Y
0046AE4E 8BC3 mov eax,ebx
4 A! u0 [. ~: M8 Z0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
$ M3 L* `' l( }, _" d0046AE55 50 push eax' B) c- V- S! s+ X/ u
0046AE56 E8 DDC2F9FF call 0 l- X8 {9 d- I
0046AE5B EB 20 jmp short Unpacked.0046AE7D% A3 {' L. {, t* v4 B3 G
0046AE5D 6A 00 push 0
; U' x: i0 {) U1 n E7 Z9 K0046AE5F 68 F8AE4600 push Unpacked.0046AEF8+ |. J7 v( H! ?1 r
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
- m1 K, M$ H# H0046AE69 8BC3 mov eax,ebx( u1 \% h) B4 Z+ |* R, ?+ g
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
) H5 S; m6 W2 y& N3 S0046AE70 50 push eax4 `2 q: @1 T! T% v. u
0046AE71 E8 C2C2F9FF call ; L2 n; d6 }6 U9 i y& R
0046AE76 8BC3 mov eax,ebx
M7 z7 d9 E+ E* {0046AE78 E8 7F21FFFF call Unpacked.0045CFFC. M- Y' s! x7 Z: E+ u+ h, N! S
0046AE7D 33C0 xor eax,eax8 ?% `2 @1 }- }4 ^, d
0046AE7F 5A pop edx
! s) P6 v6 S9 ~- J' U0046AE80 59 pop ecx4 E' Z+ C$ J1 w: m& ^9 ?
0046AE81 59 pop ecx/ l G+ U" }6 z( F
0046AE82 64:8910 mov dword ptr fs:[eax],edx- l7 A* Z& g( C- F( u1 G
0046AE85 68 A7AE4600 push Unpacked.0046AEA7% Z" ] \; }% i- W
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
( p: l9 ?5 D& U1 t0046AE8D BA 03000000 mov edx,3
9 S. S3 V! v0 @0046AE92 E8 F594F9FF call Unpacked.0040438C
9 z6 o7 P. \# `0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]* x4 @9 A, r, W1 H$ q- b
0046AE9A E8 C994F9FF call Unpacked.00404368
' {$ ^" e& X5 P* p9 @+ W0046AE9F C3 retn& z' u! m1 C E. S
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
0 T8 U3 ^. V" X7 O/ \7 O0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
: i4 I0 j( Q- Q( L% l****************************************************************
7 a; k: V( _, `1 M! W跟进0046AE39处CALL来到:- n t! m# q! K
0046B9F4 55 push ebp
8 E( B: ~" I2 V. V0 _( A* g0046B9F5 8BEC mov ebp,esp
- ]$ r I8 C8 v% M+ G0046B9F7 33C9 xor ecx,ecx
* q/ m# G# j, [8 |2 @* \, ]& D0046B9F9 51 push ecx
7 M6 v9 w+ `. r2 n2 Y0046B9FA 51 push ecx
! w% y0 o, w9 w0046B9FB 51 push ecx
; s- i! y+ N g4 V/ ^0046B9FC 51 push ecx
6 Q6 I' M& q, E% _; z0046B9FD 51 push ecx
1 r8 \. E" o3 D, m0046B9FE 53 push ebx4 d2 I! R0 a8 ]- N$ V
0046B9FF 56 push esi
0 Y# b2 `! `' w6 j6 n0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax: P& _$ x8 H/ v8 u% p7 e$ b% S+ W; B
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]2 d4 k% X2 @* I# T
0046BA06 E8 FD8DF9FF call Unpacked.00404808
5 I. X( |9 h4 b$ W. T4 t8 g0046BA0B 33C0 xor eax,eax
1 X9 |0 H p/ E, X0046BA0D 55 push ebp
4 `# C8 g2 H1 L# j0046BA0E 68 91BA4600 push Unpacked.0046BA91
2 ?" Y, q# K4 A2 L( N6 M& c0046BA13 64:FF30 push dword ptr fs:[eax]
. S6 t; s" M2 H6 { D- j6 ]/ f0046BA16 64:8920 mov dword ptr fs:[eax],esp
+ C; P: L9 P3 g: H+ U( n8 W2 {0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
) x2 }2 x$ w7 M" Z+ R/ V0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]$ ^' ]9 B- v9 E& Q5 t
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
% f4 n5 o: W$ O" G! [) P k0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]& O( y. v/ H ?4 s7 x+ `
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
+ K' _+ f `$ O4 n \3 |0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进' ]" m+ }4 F+ j
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里8 v6 b* C& X0 Z U. A1 k
0046BA34 B2 01 mov dl,1 ; DL置1
5 Y, _& j" I4 Z* A0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]! q& R% L" Y0 A6 y# ^" o% h) T
0046BA3B E8 78A3FFFF call Unpacked.00465DB89 I3 B: v G `- i$ m
0046BA40 8BD8 mov ebx,eax
, R+ b& g) y' c) W3 F& g3 d8 K0046BA42 6A 00 push 0( T3 ?2 U, d) P1 s
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]1 g' R; U1 D8 S5 l9 l' Z, G. F3 L
0046BA47 50 push eax
: [; y) S$ K7 s5 L% d5 M0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
2 k; y5 r' f0 ]; E7 c- D0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
0 t! }; o% J8 ^% d- ~. W0046BA50 8BC3 mov eax,ebx/ S# g! ^; [! w6 d' D% { A- a
0046BA52 8B30 mov esi,dword ptr ds:[eax]3 j, j4 Q7 r8 L+ @6 Q
0046BA54 FF16 call dword ptr ds:[esi]7 {5 w$ a6 U& H
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
& \$ L. V$ g2 P# D7 w0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]+ q" i. ]8 t+ r7 S- {. |9 }
0046BA5C E8 B7CCF9FF call Unpacked.00408718
& i9 M! Q' |3 u- l5 L* N2 j0046BA61 8BC3 mov eax,ebx
: b- ]3 W( s# O: h. C" d& `1 E+ c0046BA63 E8 107BF9FF call Unpacked.00403578 1 i# y2 t3 [2 J! B `
0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX: v2 M W& E' N
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
) |2 c: n% D% z' n0 f0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~' f$ C2 f' |7 A9 N/ Y' A
0046BA73 0F94C3 sete bl ; 置BL值
; J h/ ?# F$ ?1 i9 G5 ^0046BA76 33C0 xor eax,eax
8 @, c; I- E5 b# c) | P. o0046BA78 5A pop edx
^; X9 L- w/ R. l. N! w) n5 q0046BA79 59 pop ecx+ s: i! u4 q) n0 E0 b
0046BA7A 59 pop ecx# N4 K3 N$ c% F) w+ j
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
0 d% k" I4 ]: K% u) _' T9 O+ J0046BA7E 68 98BA4600 push Unpacked.0046BA98' [2 a9 C& k1 p7 J
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]" Q, b% _8 J! \
0046BA86 BA 05000000 mov edx,5
5 r( D D0 k6 c# ?: ?; F0046BA8B E8 FC88F9FF call Unpacked.0040438C. S( i% b6 Y" h, y+ e1 p( u
0046BA90 C3 retn0 z5 u4 w$ t/ v$ P
****************************************************************: \4 I6 @* c1 k9 l: l" w E0 z
跟进0046BA2A处CALL来到:' Z$ d* h: I: z* ~
0046B908 55 push ebp' H; Y8 b" r, a2 Y; K0 t2 L0 O
0046B909 8BEC mov ebp,esp
6 O' D, _3 U, I% K* g0 J0046B90B 83C4 DC add esp,-24' a1 s2 j9 }; e& G! n
0046B90E 53 push ebx
4 y( ~- \( q+ y0046B90F 56 push esi# t2 ~) r& Q' C9 v( y3 z
0046B910 33C9 xor ecx,ecx
! L; b4 I5 U' G: V% A0046B912 894D DC mov dword ptr ss:[ebp-24],ecx6 r, g" T: Z5 M; t
0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
# l8 S/ y x0 Q) T, O0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx$ _8 u$ @; f' V7 f3 }& H: k; O3 B8 H1 n
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx- _, s+ [3 @" _' ]; L; ]% f
0046B91E 8BF2 mov esi,edx
/ F, t, c8 ^; U0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
/ y# n9 S3 L4 t# T( _1 d0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]$ H$ _! I2 H S3 I1 V! A
0046B926 E8 DD8EF9FF call Unpacked.004048088 s1 u+ u& v# X% m
0046B92B 33C0 xor eax,eax
. x2 E5 \; z) y1 x4 R! c0046B92D 55 push ebp
# c- e3 y2 f* C. B% p( c' O+ j( m- d0046B92E 68 CEB94600 push Unpacked.0046B9CE7 B) E9 T* t8 F7 w4 |
0046B933 64:FF30 push dword ptr fs:[eax]
4 A, F1 ^# Q! O* {1 K$ U' F+ K0046B936 64:8920 mov dword ptr fs:[eax],esp: `; a! P m* Y: Q* @
0046B939 8BC6 mov eax,esi$ l# R2 k2 M" M: E( a
0046B93B E8 288AF9FF call Unpacked.00404368
/ k. B. ]- s4 ]( Z7 Q% W" X" t% i0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
% U$ Q( O* L! h( B9 ?+ A$ o0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
( `; s0 p9 L: o% c- V/ ~0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
- p+ o7 [, K2 g" A1 f. \0046B94B E8 1C8DF9FF call Unpacked.0040466C' J1 g9 R) c$ k3 P+ [0 Q6 w
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]) |7 o' a& `) u9 v1 ^! U
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]1 G$ ]! \; m! n' s$ Z
0046B956 E8 EDBCFFFF call Unpacked.00467648+ G6 B& N, `$ V3 b* g( Q/ T
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]" Q% u+ L" L: B7 x) [
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
( m: Z: P( p. X, I' L0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e2 D- G# S. m, @
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~* V9 C4 \+ x. P- q& x# f5 ^
0046B969 E8 FA89F9FF call Unpacked.00404368# Y I& l) q n' D6 H; W
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX: P }# w3 ?' q- G
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX" P8 ?$ x, ]5 I2 ]$ Y1 ^
0046B976 8BD8 mov ebx,eax ; EAX送EBX1 M x) M9 `$ Y- U) R" A0 z' v, j
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
/ t' A+ g( e# f% N0 V0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
, @/ `# U7 g, Y5 p& |& G0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算6 |- h$ j) k' ~% w
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
2 m% j* X9 A: q- _0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
( y1 k9 J6 z# p( |4 `4 Z( Q, h0046B987 E8 BC8BF9FF call Unpacked.00404548
; p1 c. _2 x' V0 t% v0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]7 A" F! X, Z! f/ H2 }
0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
4 _* [+ r6 s. h( [* E0046B992 E8 918CF9FF call Unpacked.00404628! \7 t2 K; J( ], {
0046B997 4B dec ebx ; EBX减一' E! f& h: O! W* ^) z6 l1 b) l
0046B998 85DB test ebx,ebx ; 是否为07 L; M: G) T. ^% C, p* P! H
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。+ Y% n. H: U0 e( F6 [
0046B99C 8BC6 mov eax,esi
) A. }' s9 Z/ y; V! }$ K8 `7 C0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX
`+ m9 R' ^9 Z0046B9A1 E8 168AF9FF call Unpacked.004043BC2 e( u" J- d' T' _) ?. G. m* _5 [- e
0046B9A6 33C0 xor eax,eax' v* p5 ]' \7 M$ q4 ^$ b A5 r
0046B9A8 5A pop edx
2 Y' F" |5 g9 Z$ N! r0046B9A9 59 pop ecx
( {% @$ L% o0 v+ S+ b. x0046B9AA 59 pop ecx
# e* g) x/ m3 A; C; n; e0046B9AB 64:8910 mov dword ptr fs:[eax],edx; t- A5 |; w7 D3 p5 L9 {' B
0046B9AE 68 D5B94600 push Unpacked.0046B9D5( D8 |7 I! C! E0 S- i
0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]6 w* [1 H/ ^* J' F! l) O
0046B9B6 BA 02000000 mov edx,26 g; t$ B5 x. W
0046B9BB E8 CC89F9FF call Unpacked.0040438C' O* b w: p9 Q; I$ r. P' b: q
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
2 m# r5 e3 V$ K" H- h% o; U3 T% D0046B9C3 BA 03000000 mov edx,3
3 q: ^* H/ d' W `1 O1 K0046B9C8 E8 BF89F9FF call Unpacked.0040438C5 r8 S. x ?: f/ e1 b/ H
0046B9CD C3 retn
6 E: A; H( o/ Q2 y****************************************************************8 J! ~" _ W$ m, u/ N
跟进0046B961处CALL来到:3 L1 e6 Q# ]4 h# u! v2 Y6 S
004676BC 55 push ebp
( k% E6 t9 c1 O3 N' y8 T004676BD 8BEC mov ebp,esp
$ r* I/ Y* ^# a004676BF 83C4 E8 add esp,-18
7 |/ j1 { x, \4 U004676C2 53 push ebx8 t2 q; w4 c2 C
004676C3 56 push esi, |3 ^9 s5 ~% K5 ]# z
004676C4 57 push edi
) q5 j8 H+ D9 v' b" e) h. k004676C5 33C9 xor ecx,ecx( w) ~; ]/ b# \ A- |! F* `, ~
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
# N# G+ F2 m1 g! X004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx l3 u3 A: M* H% C3 A0 h7 U4 _
004676CD 8BF0 mov esi,eax
( G3 V# x3 k8 D8 |/ ~8 C/ G004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]! v0 J) g8 N2 N, o4 b# Z9 e* ?
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
X4 F7 V! L) V/ @( z1 V004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
2 a" e; g& U2 t$ a8 a004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
4 I- J8 n- R0 u+ ]% G5 C004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>1 B6 _2 E+ C* k% \4 q$ W# n
004676D6 8BFA mov edi,edx/ Q1 Y h# p; J
004676D8 33C0 xor eax,eax
' }! I$ w. N& }6 Q9 J004676DA 55 push ebp
0 P( @0 Z8 O) y, z004676DB 68 57774600 push Unpacked.00467757
3 |" k4 J* w- E' B$ e/ R* `004676E0 64:FF30 push dword ptr fs:[eax]
/ m4 [% D: F4 m+ p( x6 n004676E3 64:8920 mov dword ptr fs:[eax],esp
3 ?1 C. l8 V9 H& q. ^" D; S004676E6 8BC7 mov eax,edi
& l9 s8 ^5 t/ [7 d8 e2 u004676E8 E8 7BCCF9FF call Unpacked.00404368& V7 i0 W# b" l2 Q. z7 t
004676ED B3 10 mov bl,104 a3 a. |9 h% U, K5 `4 E$ v6 p
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
{/ R( N$ P9 v' u004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****/ g& U' ^( c" }- S8 u+ v
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
1 n# l# B6 X* I2 ?# M004676F7 33D2 xor edx,edx
1 S" ?3 w* ]9 H4 _' P004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL. d0 D6 P, J( `4 V2 J! W
004676FB C1EA 04 shr edx,4 ; EDX右移4位* E( ]7 B# o" f* a
004676FE 83E2 0F and edx,0F ; 和0F与4 F- W* G. K$ j! L+ u
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL( J$ h0 ?$ t# N
00467707 E8 3CCEF9FF call Unpacked.00404548+ h9 w( z: l" e/ y7 n
0046770C FF75 EC push dword ptr ss:[ebp-14]2 v" J3 R! M5 ~. W4 l5 N( ^
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]; X i8 {; B9 Z) O3 [$ I. {% ~
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
7 N1 h2 t' o6 s: n00467714 80E2 0F and dl,0F ; DL和0F与+ H2 W0 F( \5 E; c2 z
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
4 y( i* ~ r; O1 s8 @; f+ C0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
4 N$ `, y: x4 }( s a! E' z00467723 E8 20CEF9FF call Unpacked.00404548- i* t7 ]5 A: \) E) _8 c
00467728 FF75 E8 push dword ptr ss:[ebp-18]
' ]6 C Q* O5 p. p p/ u0046772B 8BC7 mov eax,edi ; EDI送EAX
$ F( _+ b/ \6 j! j5 o9 d! c0046772D BA 03000000 mov edx,3
9 j1 K. ^1 A9 j, Q+ y00467732 E8 A9CFF9FF call Unpacked.004046E0
m9 f% r \$ K00467737 46 inc esi
+ M& V" }9 x/ \$ c U5 d& w3 l00467738 FECB dec bl: K h. V8 E3 z$ ~# A; \" f
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
8 b# U- i, D: v2 I0046773C 33C0 xor eax,eax
; E* x. I2 F' L0046773E 5A pop edx& _6 G) |3 g1 r: t/ u8 z
0046773F 59 pop ecx, I# y: [7 ^+ F" K7 [# ^
00467740 59 pop ecx
% }9 Y6 S0 B5 t4 N) f- A6 q G00467741 64:8910 mov dword ptr fs:[eax],edx- b" }7 V- U% y: Z% z7 t B2 R
00467744 68 5E774600 push Unpacked.0046775E; @; I6 O) \# n% r5 r
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]: `; h5 K6 Q p
0046774C BA 02000000 mov edx,2
* T$ M: D4 [( Y5 E9 W4 u00467751 E8 36CCF9FF call Unpacked.0040438C
7 a3 Z, e: x/ N/ y00467756 C3 retn //返回 m, g9 G4 N! z, C4 { a7 Q
———————————————————————————————————————————
# \' r1 h$ @5 B" e3 O. a【Crack_总结】:
% |) o5 a, {. D* ~) u6 J将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
8 g+ r& m% ~4 ^6 B4 h3 F机器码:bbba33de56c4cf31d9063cc074248d4b! @# T# J6 j; b9 @3 b
注册码:e807519487d7ad4f57ad42dc87fbb191
2 ]7 {" V) I+ v$ x1 i" t8 w1 q附件: MakeSign.rar (249 K) 下载次数:298 |
|