|
|
|
【原创】破解图章制作系统& W$ u: c% D6 {4 v7 h! |
日期：2005年5月15日 破解人：yijun[PYG]
K6 m$ V# v6 l) p a& ?———————————————————————————————————————————
! d2 l& g, n3 t8 F* a' K& ]【软件名称】：图章制作系统 软件版本：1.0; e7 b8 _/ P4 ], i
【软件大小】： 252KB* I0 j. B! z8 F; G" [- N0 H; y
【软件简介】：制作各种图章
% x4 s) j3 ?1 d4 [$ k【软件限制】：NAG
% g' k( T( R+ k7 q8 W( ^【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！
2 H( G' \( Z2 V' w【破解工具】：OD,PEID. c, s! z) }& q4 o
———————————————————————————————————————————
$ }4 h, \* A& Q4 J% k
! _/ O* }& G; L( L n+ O; D【破解过程】：/ `6 H# \: G3 _# J
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~3 T; D6 m z3 B" \6 y; |3 u
OD载入，通过字符串查找很容易来到这里：0 I1 b5 R+ S+ g7 @( O3 q0 t0 x6 j
0046ADAC 55 push ebp //在此下断3 f9 T2 z5 C& M3 p& \) W. F. d( ]
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0: \2 x( M8 P) u- n* u6 Z
0046ADB2 64:FF30 push dword ptr fs:[eax]
: ?+ L5 C: }! {; X! e' o! |' v: T- Y0046ADB5 64:8920 mov dword ptr fs:[eax],esp
- f9 k7 Z* k L0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
! ]- ~- N, c. A0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
7 Q* C/ O0 ]/ d; Q4 G0046ADC1 8BC6 mov eax,esi
( `+ U9 M0 p+ S0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
8 X3 I! n2 h8 C$ ]0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
2 c7 \! d/ C4 r- ^) X4 w. _$ D0 Z0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
3 g1 ?5 U* p8 e! q. f$ C0046ADCE E8 45D9F9FF call Unpacked.00408718
6 `9 P1 Z# Q% R! ~# @0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX0 N7 R$ ]: @' b+ J) q
0046ADD6 8BC6 mov eax,esi+ e* {) T1 H( R2 ?7 m7 D. e: v; |
0046ADD8 E8 3359FDFF call Unpacked.00440710
0 W! S$ d% h4 `' n" q T' J0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
- J0 ?/ J0 h5 O0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
) E- J4 `$ z1 [5 c ^0046ADE6 E8 F558FDFF call Unpacked.004406E03 d' f8 i& s. h5 ~. Z
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空" B# ]5 ]1 \& O5 _- ^
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
7 |" e% d* q& L1 k X0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
6 j7 v0 e9 P6 W0046ADFA B2 01 mov dl,1 ; DL置14 w& C% ?' ]9 ]. I, j+ Q) d
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]1 }* g' U* k. b) g0 ]5 f+ J
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8: Z3 g# Z; K7 |. }
0046AE06 8BF0 mov esi,eax
0 S Y4 G0 B5 e8 n9 r0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]' L2 P( v# w# S6 Q' A/ O, a4 m
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]7 H/ b( z# [/ ]9 U" {+ _, q2 V2 m
0046AE11 E8 CA58FDFF call Unpacked.004406E0; u6 i) N) X% F. ?4 u9 P3 Z" ~
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
2 _' a+ ^7 }) B8 u0046AE19 50 push eax
; q9 |- d6 g" G- _; E7 y. x0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
: O* X( b0 i1 A$ q W2 D0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
6 T: B5 j N# I6 ]- H. C0046AE25 8BC6 mov eax,esi" D0 C+ u8 w+ J& T. I
0046AE27 8B38 mov edi,dword ptr ds:[eax]
: s$ h( Q4 r' r0046AE29 FF57 04 call dword ptr ds:[edi+4]- D% U3 i' z2 b2 r; V! F- D, Y% F
0046AE2C 8BC6 mov eax,esi; q* J- \, e9 Q8 F$ E* _7 N+ B3 }
0046AE2E E8 4587F9FF call Unpacked.004035783 p) q( W+ t7 M% L& a: d
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
5 N& Q; D- P* _1 u/ ~. p2 |0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~& y- V+ o/ p% B9 I
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）4 L+ ^/ K3 D3 B1 W
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~6 E8 E% [2 k' C& c
0046AE42 6A 00 push 0$ n/ B8 ?2 U, e& L, ?/ X
0046AE44 68 D8AE4600 push Unpacked.0046AED8
( k0 p% I! H7 T9 C1 N0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误9 F @" g" c7 @/ g% [) q! A
0046AE4E 8BC3 mov eax,ebx
5 b) L5 T' `" l7 p0046AE50 E8 A3BFFDFF call Unpacked.00446DF8 c8 T9 e9 C) U* u
0046AE55 50 push eax$ `: Z6 T% V' k4 c
0046AE56 E8 DDC2F9FF call
. [1 {) l9 Y! V$ f8 o. G' r0046AE5B EB 20 jmp short Unpacked.0046AE7D* @) e$ n9 D4 j, h- {
0046AE5D 6A 00 push 0
6 x5 @4 m: C. T8 z' d; F5 t0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
1 H9 D* ?! g9 a0 F/ b' @/ N& b0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
9 e4 l1 [! R/ l* z0046AE69 8BC3 mov eax,ebx
) t. T2 k( v/ s2 [ p: v3 A0046AE6B E8 88BFFDFF call Unpacked.00446DF8! ?7 k @ z) z( c G
0046AE70 50 push eax
& x- } T- M+ u0046AE71 E8 C2C2F9FF call
' r# i, @9 f* v0 [2 Z: S0046AE76 8BC3 mov eax,ebx
& h) q; I0 Y; R0 N0 T( q, R# l- q0046AE78 E8 7F21FFFF call Unpacked.0045CFFC9 g! p4 x% u/ H* T J) @8 b
0046AE7D 33C0 xor eax,eax2 l' ~2 G+ R' m+ k% G
0046AE7F 5A pop edx
3 J+ x2 L1 N0 a9 q( T- }7 z0046AE80 59 pop ecx
1 N* M6 m. Q) Y- z- M) n! q0046AE81 59 pop ecx
+ E* [0 \) u7 p0046AE82 64:8910 mov dword ptr fs:[eax],edx! T/ }0 G' K3 B* ?0 f `" y
0046AE85 68 A7AE4600 push Unpacked.0046AEA7, j8 f& N% f" t. U$ ]
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]9 \2 v2 n8 ]; [ {6 i
0046AE8D BA 03000000 mov edx,3
# {% u/ z; |4 I! c3 K% W. G* \7 {0046AE92 E8 F594F9FF call Unpacked.0040438C' F; g; I3 M6 z; q, L
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
1 _+ i% q5 f4 N5 N) P K* d, k0046AE9A E8 C994F9FF call Unpacked.00404368
- b6 t3 O& v" U, l! `4 I* L% `3 t0046AE9F C3 retn
7 j! y, S; S k2 Z7 r# V( h0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C0 N6 _, z1 i/ B/ O6 A# z6 Z Y
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
$ B) \3 S/ p' j" w7 s****************************************************************
* B( F1 l L5 Q3 p5 D/ E跟进0046AE39处CALL来到：
8 c) @4 Z+ t0 o# o0046B9F4 55 push ebp
1 e+ j# S9 |% k) |6 ]0046B9F5 8BEC mov ebp,esp. T6 Q# {( H- U& B. h% }
0046B9F7 33C9 xor ecx,ecx( t3 R9 U1 J' r, `: Z+ J( D
0046B9F9 51 push ecx H5 H: V" x6 w& p# f1 X. W$ n& H
0046B9FA 51 push ecx
' r* n( B: {2 T l3 U7 z8 U7 y0046B9FB 51 push ecx. k% \( e/ R0 U
0046B9FC 51 push ecx
z( c* j7 b2 Z0046B9FD 51 push ecx
& z& V c1 z* R5 y. u. N! m0046B9FE 53 push ebx0 U0 }2 ~9 i: b: k4 ^
0046B9FF 56 push esi) K4 c8 |4 d$ W7 D Z) O' E
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
9 E* S( a' ~, Q K/ E0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]0 W# }& t! i7 }0 D9 h! V! H
0046BA06 E8 FD8DF9FF call Unpacked.00404808 @" W9 p4 p( e7 t, S4 n9 x
0046BA0B 33C0 xor eax,eax
6 O6 \ O: J* b6 J% T0046BA0D 55 push ebp
" v; O% A! d! `+ d M' O/ ^" K0046BA0E 68 91BA4600 push Unpacked.0046BA91
7 Z. k# r& |2 I; p" z% \' K6 O; Y0046BA13 64:FF30 push dword ptr fs:[eax]7 _9 X( X: t2 M
0046BA16 64:8920 mov dword ptr fs:[eax],esp. `) ^6 I) A h1 a5 b
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]4 K( P. x/ I+ u. _
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
+ G$ x( ^5 M$ ~$ [& s! w5 W0046BA1F E8 DCFDFFFF call Unpacked.0046B800
+ l, \' G* y4 L% t: J8 }$ ^0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
( C. k+ k3 z6 W# \& z8 o0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
! ~3 F3 x* U2 }* ~) @% A0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
/ \+ i: `' v5 f |. q T0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里, ~0 d+ T: G$ Z' `, M; j
0046BA34 B2 01 mov dl,1 ; DL置1. d2 D1 u, j1 e* {7 l: D- Q3 \
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
2 B' z* H. I$ Y5 j5 m( n0046BA3B E8 78A3FFFF call Unpacked.00465DB8
$ {# V2 j- ~0 y/ o# s; T0 Z0046BA40 8BD8 mov ebx,eax
7 D1 \" j' S. u8 V6 W8 }* L2 }0046BA42 6A 00 push 0
- j& r* @6 z8 A" {0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
5 l# k* P# F9 |+ {2 X0046BA47 50 push eax
* j% D5 b; |* _" J, ]" Y% h# a: z0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
3 q+ c X5 f0 {) N, k- K0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
" [ X! `8 Y) s% {/ G0046BA50 8BC3 mov eax,ebx# k [ W/ ~. m2 ~: j: Z
0046BA52 8B30 mov esi,dword ptr ds:[eax]
4 R+ C3 r2 R0 O: H0046BA54 FF16 call dword ptr ds:[esi]7 }% A9 {% e0 o
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
4 o2 B3 E7 A |5 q- j* ^; L ^0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
( ~! {' G% ^- A$ n( S0046BA5C E8 B7CCF9FF call Unpacked.00408718
6 t; h6 ]2 b: }2 W2 k; L! m/ X0046BA61 8BC3 mov eax,ebx
O" y$ z; p" T- i9 K5 e% x& V0046BA63 E8 107BF9FF call Unpacked.00403578
4 |; J2 z7 b2 _, U, M! R0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX. C) N* V$ G0 B$ e
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
& H% k; E2 J- \ t0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~: j( F! p% N( M9 o v0 b
0046BA73 0F94C3 sete bl ; 置BL值
+ c+ O, _) k( r2 x2 i0046BA76 33C0 xor eax,eax8 n8 X, z& {4 Y
0046BA78 5A pop edx: Y' I5 @5 e* k4 o# ?: b. k2 W% ]) w
0046BA79 59 pop ecx
- n( m. A- J" w! |0046BA7A 59 pop ecx
$ w3 g! b1 ^! G3 _( N0046BA7B 64:8910 mov dword ptr fs:[eax],edx$ i6 E$ |0 L7 K* ?5 }! C
0046BA7E 68 98BA4600 push Unpacked.0046BA98) x. ~: ^% q' Q
0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]& q! _) D7 i( T. o
0046BA86 BA 05000000 mov edx,5+ \& L3 C1 M% |2 R7 l# Z
0046BA8B E8 FC88F9FF call Unpacked.0040438C
" Y3 \1 w R" b/ l1 ?& c0046BA90 C3 retn
' l4 N) b9 ^7 u: T; R9 u****************************************************************6 {5 N- S" H$ f& R& y
跟进0046BA2A处CALL来到：
+ p. L: {" U7 n0046B908 55 push ebp
( d' d! C, a6 {0 F" E0046B909 8BEC mov ebp,esp N+ h+ z- U+ n+ y9 F+ U6 q
0046B90B 83C4 DC add esp,-24; L m5 V$ Z6 k0 N' ?" y9 ~& |& X
0046B90E 53 push ebx) P# A& u( b% H- c6 D; M
0046B90F 56 push esi7 j: p; o- c0 h$ [
0046B910 33C9 xor ecx,ecx
+ ?. v8 S5 t0 A4 @( M0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
4 Z" u6 q. H4 n. O9 C0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx2 j) d$ D5 B1 U0 U0 ^
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx+ ~0 J4 ~7 P2 B1 l; h& k- a2 ^
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx+ n7 s. S3 ^' n
0046B91E 8BF2 mov esi,edx9 ]+ L4 R& J7 `$ U) o- B" K* t% R; N
0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
# x- t3 m: l6 \5 i: ~1 Y3 v0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]6 d- X/ g# X. h4 v3 S2 u% d
0046B926 E8 DD8EF9FF call Unpacked.00404808( A# a* x7 r" s; }% ]. W! R9 K
0046B92B 33C0 xor eax,eax8 n$ m( n5 N5 e. c( v C5 c
0046B92D 55 push ebp y; t% Z: w. Z
0046B92E 68 CEB94600 push Unpacked.0046B9CE8 P4 K( w- f8 N4 @, G% A
0046B933 64:FF30 push dword ptr fs:[eax]- C) U; y& `6 C# V
0046B936 64:8920 mov dword ptr fs:[eax],esp
/ C1 [3 Z' j7 P. c+ _3 L; D% a- \0046B939 8BC6 mov eax,esi2 X3 L/ ] ]/ ]) x A) ?
0046B93B E8 288AF9FF call Unpacked.004043686 W( E+ G& |7 l ^) D3 d: U
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
* `+ M, ~1 f4 }) e5 q9 O. q0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
1 v* D' `6 }. x0 C% K2 E0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4! J. k- n; q9 D
0046B94B E8 1C8DF9FF call Unpacked.0040466C& \* G5 s; q$ L% J
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]# T7 f1 {6 p* V( z" e8 W
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]4 P/ x. g2 M3 U
0046B956 E8 EDBCFFFF call Unpacked.00467648# O# L" p3 B8 \
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
! P& `0 Z; `. W/ g0 A7 h* o0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
: b' ]+ z% k6 G" d3 y0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
) V* @+ U, V! l9 Z, u! t0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~8 w ^4 e' ?, s" ~: l6 W0 i2 D
0046B969 E8 FA89F9FF call Unpacked.004043682 T+ B" w& C" F0 u
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX% w" A5 T' V! }& O
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
z% ]% h X$ {* K; ?' Q9 @0046B976 8BD8 mov ebx,eax ; EAX送EBX8 v6 ? o0 K; k# y p' d
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较3 {1 I7 Z& c( G9 v( I% \
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳; [% T9 s1 a( f, g2 z0 @/ O
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算6 }0 A* C( V8 ]" s5 f
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
' }7 A T# {0 h: A0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
" y, M! [+ E* m7 c4 M( H9 B0046B987 E8 BC8BF9FF call Unpacked.00404548
8 O5 T- {6 E: Z1 }2 Y/ j& Q0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
0 r8 s3 O9 ]+ ^" Q0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX$ C1 t/ e% t: M
0046B992 E8 918CF9FF call Unpacked.00404628* D1 y: _2 ~# a$ k5 Y$ a6 z
0046B997 4B dec ebx ; EBX减一7 m- Z6 l; ?/ r) a0 N' k
0046B998 85DB test ebx,ebx ; 是否为0; N- e" C7 t% h1 u: C
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。, T/ L1 G5 J; Z f! Z3 J" h4 E
0046B99C 8BC6 mov eax,esi
4 a' z5 K0 {8 Q- _* b) Y/ \$ X0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX
3 o6 f) v% l' k; I: l% ~, o9 L0046B9A1 E8 168AF9FF call Unpacked.004043BC! P- z7 Z x! c; |) U7 L4 m
0046B9A6 33C0 xor eax,eax6 r. a7 y6 Q' C2 ^, h! b+ V/ b. @ E
0046B9A8 5A pop edx4 ~0 w/ Q7 [! A, [7 V& V" o
0046B9A9 59 pop ecx5 j& j( n8 W; s" {' @
0046B9AA 59 pop ecx# W. p0 y" d6 ^1 K2 t$ a( H
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
9 D: ^* k! ?+ A' {. k0046B9AE 68 D5B94600 push Unpacked.0046B9D5
; w. r! w$ w; B4 e, J: \1 |% K0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]% K- Y! |$ z5 p9 p5 ~2 B0 H6 `$ f
0046B9B6 BA 02000000 mov edx,2
" U9 k5 _: M* n. K, E* e8 `4 H0046B9BB E8 CC89F9FF call Unpacked.0040438C' D8 _1 C+ L5 k: c, `/ d$ \# r
0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]# ?% i6 @# ?/ B6 l& W: s
0046B9C3 BA 03000000 mov edx,3
* J0 p. s; X, X! A* _5 d- q. w0046B9C8 E8 BF89F9FF call Unpacked.0040438C
, l& R* C7 I* u2 Q0 R: i. S/ x- C$ @7 H. _0046B9CD C3 retn
( m2 T. x* u, e/ @; X& j****************************************************************% H0 I3 ~/ E( x1 }
跟进0046B961处CALL来到：
1 z0 P7 Z/ R5 \ _004676BC 55 push ebp
6 T" Y7 v2 ]+ ]" S# D- U8 o6 E5 A3 {5 e004676BD 8BEC mov ebp,esp
2 q( B0 @7 o P8 A: Y( U( O2 p4 C004676BF 83C4 E8 add esp,-189 G' ~6 s4 h7 W3 M/ u5 K) Z" |* }
004676C2 53 push ebx1 z9 X' W) s/ |& Y& b( q6 [
004676C3 56 push esi
8 W: e1 e E( l( d% Z6 ?004676C4 57 push edi. y7 V& ~3 G1 E/ d- p3 R
004676C5 33C9 xor ecx,ecx
. P7 m) O( S' e004676C7 894D EC mov dword ptr ss:[ebp-14],ecx% |( L- s% G1 v) J# L
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx9 M' P2 E! l( l
004676CD 8BF0 mov esi,eax7 z- P0 V: @! c% r
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]- v' r/ c- w. K( x+ o# N; v# Q2 i" P
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
' ~* D1 R6 e5 e2 X p. o7 |( E004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
) G! q+ \' ]: Z+ w% x9 Z( h2 K( _004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>" X: B- ^! p' _9 ^" Y
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
9 o& [! x. R4 P y% z004676D6 8BFA mov edi,edx* Y3 W8 }/ t5 t0 R
004676D8 33C0 xor eax,eax/ S1 N# W& t) l/ x ~
004676DA 55 push ebp
}& R& Q. \ u( O; Y8 P6 v. a8 _004676DB 68 57774600 push Unpacked.004677577 f6 N0 G6 T8 x
004676E0 64:FF30 push dword ptr fs:[eax]
6 F; M. y$ ]3 L ^/ H. Y004676E3 64:8920 mov dword ptr fs:[eax],esp$ T4 j3 V: h! W) _ c, ~
004676E6 8BC7 mov eax,edi
; U# t# A. d& i4 Q1 _/ \004676E8 E8 7BCCF9FF call Unpacked.00404368/ |* B. V5 g$ k2 {7 l' x
004676ED B3 10 mov bl,10
- _" f2 X& [$ u2 g8 q- o004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10] q* S1 v. C, z. i" u
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
/ E$ C5 ]4 O3 J+ L( B004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
5 u/ k8 m, Y& l8 G004676F7 33D2 xor edx,edx. S& p* e( C; [9 l; B
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL: B: B4 L3 X& f2 y" w. m' h
004676FB C1EA 04 shr edx,4 ; EDX右移4位6 [3 `6 J% T' `4 R% I
004676FE 83E2 0F and edx,0F ; 和0F与3 @' b6 p4 N8 ~" b5 |4 z0 _. n
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL" u, S5 j3 i" d1 d7 h, u6 L
00467707 E8 3CCEF9FF call Unpacked.00404548
4 b2 v* t1 d' H) c/ ~0046770C FF75 EC push dword ptr ss:[ebp-14]9 A7 a4 h6 D' _& R2 X+ q
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]1 r7 |' I ~( W7 y5 v2 o9 _( ]
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
* }( f5 w4 }/ [4 \00467714 80E2 0F and dl,0F ; DL和0F与
8 N& z( }7 }) ~6 ~00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
$ _ E: l8 K' b; X' G0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL @, h) E% ~1 G3 E& ~
00467723 E8 20CEF9FF call Unpacked.00404548* o% @. L9 ~5 E5 l! x
00467728 FF75 E8 push dword ptr ss:[ebp-18]
6 i- x' }- \+ s. Y0046772B 8BC7 mov eax,edi ; EDI送EAX
* ~* H, v! ] N. q. M0046772D BA 03000000 mov edx,3
8 T( Q2 g' B. |$ z& s) M3 B d00467732 E8 A9CFF9FF call Unpacked.004046E08 g+ N* z! F/ Q4 g# Z
00467737 46 inc esi
9 t' m! q! u# w5 G. z& S, ~00467738 FECB dec bl$ ?- @, t0 p3 h8 _6 `6 `
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e: b8 S; R8 o* K0 B
0046773C 33C0 xor eax,eax4 e9 J+ _' n2 ?5 X& P+ s6 Q
0046773E 5A pop edx
( B8 p# u, }; ^1 Y( ?- t* i0046773F 59 pop ecx
* A1 g; y2 c9 f00467740 59 pop ecx
* a7 M: g3 m, }' I+ i* K00467741 64:8910 mov dword ptr fs:[eax],edx2 d0 Z0 t U) n# a H) s2 ?9 N0 |; Y! f
00467744 68 5E774600 push Unpacked.0046775E
0 Q/ {6 {! \( p! i8 k T8 T00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
+ s& |* ]9 Z0 }4 r8 a0046774C BA 02000000 mov edx,25 w+ e' k# _+ r4 c" ~
00467751 E8 36CCF9FF call Unpacked.0040438C
$ l7 c' Z' c0 c00467756 C3 retn //返回
% S+ s5 O Z3 V9 I8 f) S———————————————————————————————————————————- M9 s r; p9 _5 i
【Crack＿总结】：
/ q1 J u* ~2 B1 s将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^# h8 T' p( A3 m B! n
机器码：bbba33de56c4cf31d9063cc074248d4b
1 c, \! `5 @0 }+ D注册码：e807519487d7ad4f57ad42dc87fbb191
1 e/ }( T& X. ~( T* @ @; J附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡