|
【原创】破解图章制作系统
5 a- G7 Y, {" V- W9 N ]: O- U9 L日期:2005年5月15日 破解人:yijun[PYG]8 @- h) c! p% |" _$ z' }9 a
———————————————————————————————————————————
; b6 L1 n2 E/ Q* g# t【软件名称】:图章制作系统 软件版本:1.0
- r% C1 P, r# Q【软件大小】: 252KB3 R) a: ?) ?' `) v
【软件简介】:制作各种图章- }$ c2 T* n1 G4 [( ]8 x1 G
【软件限制】:NAG
1 [! ~( o$ y0 X0 h. t. u【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!% | Z* K- _( \! a5 w6 ?2 j" P
【破解工具】:OD,PEID
I8 ?$ W* X S( o3 A———————————————————————————————————————————, j' @/ @+ T" G% x, `
! R2 U$ v. D/ c( p# C# |& j1 H【破解过程】:
% L! W# {+ G) v D3 v6 PPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~9 e! H Y/ t# E J8 K4 I* e
OD载入,通过字符串查找很容易来到这里:
, J9 _2 ^0 M; s+ C! l: x# P0046ADAC 55 push ebp //在此下断* B6 P8 B% ~2 F1 E) b
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0( s) L* o; |0 c
0046ADB2 64:FF30 push dword ptr fs:[eax]
! E5 g1 y2 E8 l8 E# C! \/ L0046ADB5 64:8920 mov dword ptr fs:[eax],esp
) C6 i4 r' s7 U4 m0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]( ^7 d }$ K; P' H+ j/ M9 J
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
% c$ Y+ @. K$ }* C* t& A w0046ADC1 8BC6 mov eax,esi
. N: o0 Q! E: B0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX X+ i' u+ t. L/ g& O0 _; t5 [
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX. L8 c. D3 P4 \" l+ y: w7 [
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
& e& G5 a4 z5 y* |' k, V5 C0 k/ I0046ADCE E8 45D9F9FF call Unpacked.00408718$ S6 {, ^$ r/ f. N
0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX/ H1 ]5 E1 \' W( Q0 a
0046ADD6 8BC6 mov eax,esi
5 _& W4 w( L, o$ o$ P0046ADD8 E8 3359FDFF call Unpacked.00440710( x/ U' Q% c$ _
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
" }& }2 a% r$ Z/ D; M. j3 r7 S0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
( t( c3 {0 z) G6 @; a- d5 W0046ADE6 E8 F558FDFF call Unpacked.004406E0
# M; z" L$ @3 \0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
" ~: M. v E* w$ T$ K: `3 y0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳$ ]6 o9 w6 ^" p" A/ e6 r7 p
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
5 m9 V9 d* c. F1 e$ S0046ADFA B2 01 mov dl,1 ; DL置13 f y; b8 b6 v) {+ O- s v
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
' f! ?" ]; X- @; U0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
, e, R- j; G1 a" W0046AE06 8BF0 mov esi,eax
8 i, ~: u7 T$ o8 s F0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
: A3 b) D& X1 M0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
" a) e' G- o W- X+ j% U0046AE11 E8 CA58FDFF call Unpacked.004406E0! g# a0 N' Q( f
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX
. s5 S' q2 U; k1 k% k$ x% D3 ^0 R0046AE19 50 push eax, z: e% M; U, m4 v4 w
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
' s; I/ Q" w% M/ g4 O! {8 G* S0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]% Z3 x( f+ O8 A; k" M
0046AE25 8BC6 mov eax,esi& Z# V$ [6 K9 S# ]: t
0046AE27 8B38 mov edi,dword ptr ds:[eax]
0 q- q& y& I% U" L+ H0046AE29 FF57 04 call dword ptr ds:[edi+4]
: I( c3 ?6 z: e7 J+ ?; X0046AE2C 8BC6 mov eax,esi N- E" L+ ^ R+ O, D* ?, O
0046AE2E E8 4587F9FF call Unpacked.004035787 C) @: S- k4 T; }
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
# e; {* b! l9 u3 ~& ]8 ?0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
2 \9 p8 W: g6 J0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)3 F* B2 ?# b: O4 u* @
0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
( K1 K4 C& x \, G, v0046AE42 6A 00 push 0
+ @6 u& P5 u7 F- a$ i0046AE44 68 D8AE4600 push Unpacked.0046AED8
- n- s9 L7 F K* w& A0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
+ v5 p$ S; Z& l8 ^# ?0046AE4E 8BC3 mov eax,ebx' ?+ K% S6 T! ?2 w/ |3 D' e% h6 l
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
( t. @5 B8 ^7 b% X6 @0046AE55 50 push eax1 ^( M/ U+ `1 j2 w0 \: r+ ^
0046AE56 E8 DDC2F9FF call $ _' n& h& l6 w+ m/ R
0046AE5B EB 20 jmp short Unpacked.0046AE7D
3 ^8 Q/ f; B5 A& O! H0046AE5D 6A 00 push 0
( q" d s( x% n' P2 d5 V0046AE5F 68 F8AE4600 push Unpacked.0046AEF86 B0 o9 k' H" Z
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功, U8 h. {% D: E4 Z. y1 q) T9 i9 b
0046AE69 8BC3 mov eax,ebx$ ^5 U% Z, e1 g) r3 {9 B' A
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
! j" o5 g$ ^$ [! U1 C2 q0046AE70 50 push eax) }; U: L" T- G: j( I' G
0046AE71 E8 C2C2F9FF call
7 d: T$ H' U# H7 l$ H9 W0046AE76 8BC3 mov eax,ebx2 G& Q4 _. s8 L9 w7 |/ s
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC; g; \3 a3 V7 y' O! S) g$ m
0046AE7D 33C0 xor eax,eax0 A* C8 o. W; r3 T+ r# f+ F
0046AE7F 5A pop edx3 N6 q( l" R0 {4 K$ i9 W$ F8 u
0046AE80 59 pop ecx/ C4 B2 C* |! T) i
0046AE81 59 pop ecx5 h& ^) p+ Z; @) A
0046AE82 64:8910 mov dword ptr fs:[eax],edx
& g1 {4 G: A9 v9 \7 ^# B0046AE85 68 A7AE4600 push Unpacked.0046AEA7
! ~4 ?) `% l9 @$ X* l0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]! G. P4 U3 G! Y' b g- u1 Z; F
0046AE8D BA 03000000 mov edx,3! _6 I* q- K: }3 d
0046AE92 E8 F594F9FF call Unpacked.0040438C2 b/ f8 G: q! ?; Z# F% v2 R. X. j
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
; @" `7 |9 R2 S. M0046AE9A E8 C994F9FF call Unpacked.00404368! F+ u) ~) t% t9 Q. B
0046AE9F C3 retn3 n! c( W! `7 }4 ?
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
: v& s6 S- U. ~/ r3 a% P3 y3 A0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
_6 y; R8 z' A) _) e7 v4 a2 ?****************************************************************9 i7 F2 _4 A+ k+ ?! j
跟进0046AE39处CALL来到:2 f* K) Z) ?' ]! k- Q
0046B9F4 55 push ebp$ [ z) K2 [5 J" c
0046B9F5 8BEC mov ebp,esp" `0 b7 X" A' \6 ^' b/ R W
0046B9F7 33C9 xor ecx,ecx
$ I+ R( b+ ^0 z0046B9F9 51 push ecx
- k' z7 j3 |7 |3 l* ]0046B9FA 51 push ecx
$ `0 k2 c$ k+ h2 z$ P! u. H; @0046B9FB 51 push ecx
) Y8 j( U; X5 W3 n; O0046B9FC 51 push ecx6 d0 J5 m6 w/ k
0046B9FD 51 push ecx6 l& _0 A0 X( e) M) v0 H' B
0046B9FE 53 push ebx7 P0 [0 x& a% @' m# T
0046B9FF 56 push esi
; t7 U& I1 D* F& o" u# d" v- V0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax* Z- }: D+ `' R5 u2 A. x$ |9 l2 e" R
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]9 ~2 C, q" ~' [9 }, H" V4 r% i: o
0046BA06 E8 FD8DF9FF call Unpacked.00404808
: v$ t+ X: n7 S3 [8 c3 F0046BA0B 33C0 xor eax,eax
' z* h; t& {0 x7 u7 z0046BA0D 55 push ebp% O. i9 y @& {% Y0 y
0046BA0E 68 91BA4600 push Unpacked.0046BA91
0 W( a7 T6 ^* K8 h7 S7 R0046BA13 64:FF30 push dword ptr fs:[eax]* X" o$ ~7 S& i5 N9 _$ Y
0046BA16 64:8920 mov dword ptr fs:[eax],esp
1 _7 d9 j$ {& Y0 p/ S0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]1 h- b+ l4 ^( v! \& _% J
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]( S) c; M8 d7 Q! k2 h
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 ' ?2 K+ u/ n, F, ?! a9 Z
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]$ |; f; ]/ ]: L; p3 B7 Z' ~
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX. N! r1 r: k: v( ^8 T( v$ p; k
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
6 Z2 [8 E) o+ e0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
( H/ u5 b7 i- @& D* V" g& e5 x0046BA34 B2 01 mov dl,1 ; DL置1
: ~: u3 b! q8 }: p0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]4 z7 g- N p' E8 p+ K2 p m2 j
0046BA3B E8 78A3FFFF call Unpacked.00465DB8
m5 G4 G( j4 a% c8 b0046BA40 8BD8 mov ebx,eax" c" S1 m2 \6 G) K
0046BA42 6A 00 push 00 m7 r$ @; ~$ f& W9 t
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]1 ]: q" |2 m" v
0046BA47 50 push eax1 N v6 V- u% W* I- ?# b
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
8 E! U3 X* s9 W5 m0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]; z) G, [) k! c M1 M4 U
0046BA50 8BC3 mov eax,ebx2 `) C! }/ h# N1 l
0046BA52 8B30 mov esi,dword ptr ds:[eax]
2 |# h: } f: G# A+ R7 u4 F0046BA54 FF16 call dword ptr ds:[esi]( |6 w/ K T0 R& b, a
0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
! N; i. T, _" C+ B% C0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
3 U# @# w' ~6 l+ x0046BA5C E8 B7CCF9FF call Unpacked.004087185 a# p9 a; i4 E) F
0046BA61 8BC3 mov eax,ebx
( k1 v- V2 ? Q4 ]( J0046BA63 E8 107BF9FF call Unpacked.00403578
) |9 |% V- D8 f6 w0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX# a5 a0 \; j8 P- i' N: H. r$ ~% P
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX! O, x. P, F, j' V" ~% M( e
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~8 d: g$ N8 x' G. ]+ Z/ p( Q% B8 c
0046BA73 0F94C3 sete bl ; 置BL值/ I/ X3 v, ?) W
0046BA76 33C0 xor eax,eax8 n3 p3 Y0 s i) ?7 ?5 D
0046BA78 5A pop edx
0 W- K& s" @& i/ [0046BA79 59 pop ecx
c/ _& D5 H6 k1 E6 z% t6 |0046BA7A 59 pop ecx
* X9 `; T- R+ |# D: x8 x$ _0046BA7B 64:8910 mov dword ptr fs:[eax],edx
0 V9 W7 m( Y" }, j- f7 q6 K0046BA7E 68 98BA4600 push Unpacked.0046BA98
# F9 V5 b5 i9 E- C1 P4 [0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]3 i( f) ]1 r4 w5 Q
0046BA86 BA 05000000 mov edx,5( i& X! C6 ~# w' U
0046BA8B E8 FC88F9FF call Unpacked.0040438C+ G0 L3 ?' }" _& Z% t
0046BA90 C3 retn
8 c7 e* q y) S7 x****************************************************************
' U* O Q2 i/ q& f( O跟进0046BA2A处CALL来到:0 ]/ r3 C4 Q# E* I L. @% M: s' q- `
0046B908 55 push ebp7 f _+ R6 {1 O
0046B909 8BEC mov ebp,esp
( q5 Q3 [" e, \3 a0046B90B 83C4 DC add esp,-24+ ?/ g$ \ U' f; }% |' U
0046B90E 53 push ebx4 v- G, H7 w2 F; n* E
0046B90F 56 push esi; O P8 c( H$ P) R
0046B910 33C9 xor ecx,ecx5 k8 |" q% `; [* S, D: `1 a7 c
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
! U* M Q" l3 T6 ~& W* \( [0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
# O0 I" u8 x' Q/ T$ i5 f1 L0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx: o) G- w+ s7 Y/ H7 F8 P
0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx) j% s/ C* u; O( v3 l+ Y7 Y- |+ w' `
0046B91E 8BF2 mov esi,edx
' L7 X3 u6 m. V& c0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
6 D& ^& _7 t( M1 w9 I2 d0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
8 R( M, E5 l D( V0046B926 E8 DD8EF9FF call Unpacked.004048084 t$ ^) f9 A D
0046B92B 33C0 xor eax,eax
0 x9 e/ w1 B; x9 k0 k# r6 S0046B92D 55 push ebp
, R1 E' O# s/ O6 {6 \, M0046B92E 68 CEB94600 push Unpacked.0046B9CE
# d- s; s1 X5 S7 m) S9 g0046B933 64:FF30 push dword ptr fs:[eax]
1 j) K( e# I) G9 m# y0046B936 64:8920 mov dword ptr fs:[eax],esp
6 Q. a3 U1 r* Z5 W+ b8 r7 ^8 Q5 t0046B939 8BC6 mov eax,esi
# k% P6 C9 k" h/ S0046B93B E8 288AF9FF call Unpacked.00404368* K2 i( o* r3 [/ q" S8 @
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
0 N3 H3 k* w( T2 J' t6 \! u! s. z0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX! @ V0 Q2 w8 L1 o* A% \
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4. }2 p! ^7 H* Z3 v1 w9 ]. C6 W
0046B94B E8 1C8DF9FF call Unpacked.0040466C! H l+ V3 @) {7 N) Z
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
0 ?- H c* |. z+ r3 j2 ^3 k$ P0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
M8 w! Q7 \" a% A% A0046B956 E8 EDBCFFFF call Unpacked.00467648) c0 W2 z/ n; M5 _
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]- J# M! _! P/ |# c, y* g) [' {7 o
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]/ U- w3 r1 q2 p; P# j& ^, h
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e( w) _$ J5 K" w+ N, j
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
1 K& u I1 u6 D) |3 e0046B969 E8 FA89F9FF call Unpacked.00404368
- n+ i9 [+ n/ S+ r4 l; |* j1 J! p+ Z0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
, }& q5 c) G4 T9 U) Z* c) D0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX
5 v8 U6 i* K$ K+ \! F8 b0046B976 8BD8 mov ebx,eax ; EAX送EBX, F2 F+ E& c5 S8 h7 F" @
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
! p6 n- j! Z5 a" w9 J# S6 t# L2 T+ K& f0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
" g ~6 Y/ O* T0 ?1 ~: a0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算/ w7 N' j- d# a6 [ o! n
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX* c1 m4 U& X3 G9 y2 y
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
( r, Y6 j4 p: f# n9 c0046B987 E8 BC8BF9FF call Unpacked.00404548
3 G, x1 N( p8 p" k- E0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
. b* {: g- H R; C5 K8 F. f0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
$ L/ G8 M: E r' N3 o0046B992 E8 918CF9FF call Unpacked.00404628' }: A% X0 Y* y2 h X% ?- _; S. ^
0046B997 4B dec ebx ; EBX减一
4 F- s# u) F* N- n: p: f0046B998 85DB test ebx,ebx ; 是否为0
% G* u8 h) ]3 v9 I' v0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。
) c' d+ d! O U0046B99C 8BC6 mov eax,esi* [/ n) @1 v5 u4 r8 B
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX/ T+ z7 c6 ^9 U3 @
0046B9A1 E8 168AF9FF call Unpacked.004043BC) w# ?8 d0 ]& r7 s9 A/ J# d
0046B9A6 33C0 xor eax,eax; `# y6 d0 P. w- ?: {& }
0046B9A8 5A pop edx
$ `9 V* ^3 n0 m5 y2 t0046B9A9 59 pop ecx
5 ~* x% M& d2 ^5 H0046B9AA 59 pop ecx- e, K6 B+ w3 [1 _4 d+ A8 u
0046B9AB 64:8910 mov dword ptr fs:[eax],edx
$ l9 c5 b8 ~, {0046B9AE 68 D5B94600 push Unpacked.0046B9D5
" v/ ]& W$ B/ c) J+ Z2 S* I! W. }, A0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]; p7 d$ z# v' v
0046B9B6 BA 02000000 mov edx,2
/ c+ A! C. H* p$ {2 N9 U: A0046B9BB E8 CC89F9FF call Unpacked.0040438C
7 z- [9 Y+ V. n0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
2 |" v" c+ O- I! C$ y3 v" G" C0046B9C3 BA 03000000 mov edx,3' a' S7 M2 S2 V+ Y4 c2 [
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
1 [' ]; Q& k8 a" u- x" g0046B9CD C3 retn
- \4 f+ \$ t5 B6 x }" g2 s: y****************************************************************
+ z- C8 V6 ~! o" R4 V跟进0046B961处CALL来到:0 r0 V4 ]5 Y1 G' Q0 Y! |
004676BC 55 push ebp
! P/ @- ^% d% Q6 |004676BD 8BEC mov ebp,esp
0 U& N4 n$ d- U& p2 ` S; W( E7 }004676BF 83C4 E8 add esp,-18
& u) b9 a* Y+ b004676C2 53 push ebx
) M, z1 _2 \: c/ D004676C3 56 push esi2 o! l8 F; Q+ ?% `+ _9 y
004676C4 57 push edi
) W4 O3 G& ~( z8 s$ z9 g5 ~004676C5 33C9 xor ecx,ecx
R6 Q4 B+ U) {( h5 t004676C7 894D EC mov dword ptr ss:[ebp-14],ecx r% w2 T; |2 N( L6 v( c! M/ g
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
) G- F* L* }8 ]7 I: q004676CD 8BF0 mov esi,eax4 ^, W# U5 E5 q( g0 D& C) J
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
! K5 h5 b) {9 _* @ E1 O) u( _, [; G004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
* `4 K$ S3 o: V1 {004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>0 n! U5 A0 l- F4 d
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>- T2 d1 B' @8 y9 ^# o
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
" A! t8 q7 N: }7 E004676D6 8BFA mov edi,edx
0 P4 o6 _( m3 V& P# I004676D8 33C0 xor eax,eax
8 \7 m& [# r% a2 a5 K004676DA 55 push ebp
7 j! R0 q! Y3 M* M, G V7 G004676DB 68 57774600 push Unpacked.00467757
$ }, `$ u2 w! p- p004676E0 64:FF30 push dword ptr fs:[eax]
9 G. e/ f0 |$ Z% `- X, Y004676E3 64:8920 mov dword ptr fs:[eax],esp
% g' y0 D W" S' q( ?9 D004676E6 8BC7 mov eax,edi
7 S2 {0 I2 @! F5 x" h004676E8 E8 7BCCF9FF call Unpacked.00404368
% p5 l/ I9 ^8 z; z& ~004676ED B3 10 mov bl,10
/ i( K: e; H% B7 S+ S0 ?" Z004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]% B3 B5 v3 u$ W; I* E+ g
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****/ ]$ e% S8 p1 A0 m; g$ d# X ]2 V
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]0 Y2 ]2 ~1 T2 m: T9 w
004676F7 33D2 xor edx,edx% U& Z) {: G9 n. b$ i7 g+ f
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL. C+ d- Z- E7 M5 H! N- O
004676FB C1EA 04 shr edx,4 ; EDX右移4位, W* F5 z9 u& l, p2 k l
004676FE 83E2 0F and edx,0F ; 和0F与' \8 y3 `0 S2 H1 w- s
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL1 a/ d4 `4 E3 R
00467707 E8 3CCEF9FF call Unpacked.00404548$ [7 a) F9 w: w7 w+ f; h% L
0046770C FF75 EC push dword ptr ss:[ebp-14]
2 X/ b5 j, G3 I X0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]9 W+ [% c5 O% m- i! t; P6 O" |; W4 D
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL& L- _0 h; Z" ^% v) O) }4 _" P2 l
00467714 80E2 0F and dl,0F ; DL和0F与" I; v2 f" o, O7 k* {
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
; }) k5 k- x7 G0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL- r# v1 p+ T. i9 w& S
00467723 E8 20CEF9FF call Unpacked.00404548
* _2 o7 b5 v- ]9 J$ H/ H00467728 FF75 E8 push dword ptr ss:[ebp-18]: p" C d9 L+ Y7 Y6 R
0046772B 8BC7 mov eax,edi ; EDI送EAX; j* ^' t& }( r; C' ]
0046772D BA 03000000 mov edx,3* I' m$ P% `/ ^* E5 U$ `) j
00467732 E8 A9CFF9FF call Unpacked.004046E0. l% S! O6 A4 ~. D y/ H: Z
00467737 46 inc esi3 l! }3 R7 o" X, c1 Q. I- a# l9 E
00467738 FECB dec bl
( H8 U: @' H `3 i8 g8 f% I0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
# H# j% E* N2 d/ b2 l% P! E: v0046773C 33C0 xor eax,eax
, {5 i9 a7 g# l0 k+ c0046773E 5A pop edx
5 B5 T: @* s7 y; H0046773F 59 pop ecx
2 h. h, I( s$ J0 u, R* a00467740 59 pop ecx& T9 E$ ?2 `4 E$ O5 j
00467741 64:8910 mov dword ptr fs:[eax],edx, B6 E0 z* b% M
00467744 68 5E774600 push Unpacked.0046775E' k7 o8 i e7 n1 f0 }* M$ g1 N
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]: b P$ l1 ]* @8 ~ V) _
0046774C BA 02000000 mov edx,2/ f/ H5 ~3 S+ c+ B* e* @& [: f
00467751 E8 36CCF9FF call Unpacked.0040438C' @ V( ?. D) _ V& a
00467756 C3 retn //返回
/ y) ?& _5 q( V; o& |! ]———————————————————————————————————————————7 g" E! N( J m2 v* ~8 }( o
【Crack_总结】:
9 x2 F; E5 u% X将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
% q5 H: p1 n$ ^/ D机器码:bbba33de56c4cf31d9063cc074248d4b
5 S+ A' X2 j! Q. _) P6 G4 ~注册码:e807519487d7ad4f57ad42dc87fbb191
; R \* b# z5 p9 j: J e附件: MakeSign.rar (249 K) 下载次数:298 |
|