|
【原创】破解图章制作系统
9 x# E4 m8 P( M' ]1 [日期:2005年5月15日 破解人:yijun[PYG]
$ [& {8 H7 F5 K8 u! L/ `——————————————————————————————————————————— [+ D) ~/ B5 }5 b# Y
【软件名称】:图章制作系统 软件版本:1.0* K( `! k) n4 O: [" `4 P1 r7 n
【软件大小】: 252KB
& |7 x" ?$ \9 f2 O/ t" d【软件简介】:制作各种图章
) O# Z$ Z) L, u8 {$ @& u【软件限制】:NAG0 ~) Z" e+ q$ P# e( w3 {( w: G
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
: Q- b- d% p' S9 k: d& f' b! i" V【破解工具】:OD,PEID
, W+ s9 W2 | f1 h' t$ y+ } z———————————————————————————————————————————; r# Y+ A$ U9 |/ R" O/ {. ]
7 L* h6 b( z% P9 f
【破解过程】:/ S1 E6 p% _# Y5 [& E
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~
0 K2 s1 @& ?" A* |; L' nOD载入,通过字符串查找很容易来到这里:
& @' S% G) q2 s+ b0046ADAC 55 push ebp //在此下断
+ ]: @6 s& b& Q7 J8 H% ^0046ADAD 68 A0AE4600 push Unpacked.0046AEA0
; Q3 ^. Y9 n+ ]+ _/ w8 G, r0046ADB2 64:FF30 push dword ptr fs:[eax]0 w: j" T. \+ e( [5 c% n6 u
0046ADB5 64:8920 mov dword ptr fs:[eax],esp% L) f0 @+ J; [$ l
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
6 j8 g# s4 d! b5 t: _0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]8 J) @2 @1 k6 }7 E, d/ _
0046ADC1 8BC6 mov eax,esi! v1 r/ @/ P! Y) _4 ~
0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX0 c" I; ?/ }% O" B) [2 M
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX4 H9 h- c: S# Z' T, G
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]# S ]# x( y+ M4 C7 @5 c- `
0046ADCE E8 45D9F9FF call Unpacked.00408718
6 R* s- d' Z `4 R+ v I. n0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
! A1 d/ K \7 N0046ADD6 8BC6 mov eax,esi
+ k6 ]2 H; g1 R% W2 G2 I( n0046ADD8 E8 3359FDFF call Unpacked.00440710
$ y, k7 `+ z5 v8 z8 t6 u0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
1 X# X* m5 K8 V4 i9 t4 t: Y, v6 t0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
5 T% u5 S. e& n0046ADE6 E8 F558FDFF call Unpacked.004406E0
0 X2 ?; i! {/ {) j) Q0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
& a1 U9 G, _7 e1 v3 b0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳8 P+ W- M0 d1 M: r
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX/ h( ]6 }: s7 T# |- T0 B
0046ADFA B2 01 mov dl,1 ; DL置1; X+ B# N/ r" a3 c2 `
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
' b( T/ X# f, K' n4 M( [0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
6 G* w& [ s4 ?* ]2 O7 O x0046AE06 8BF0 mov esi,eax2 U7 a4 t6 H$ @) x+ Z0 S, i
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]7 B% i8 Q. `6 E/ O# u+ [6 [5 ^/ u
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
% S) Q; u+ K6 Z* i0046AE11 E8 CA58FDFF call Unpacked.004406E0
: M9 a4 F+ }8 @2 M' \0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX) I f0 ?8 H1 v3 D0 a
0046AE19 50 push eax
( Y2 _& S& {$ {0 F* v0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX
7 k+ Q2 r+ ~* O0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
0 R* Y- ^4 B2 _0 N+ X3 m0046AE25 8BC6 mov eax,esi" R, C5 Q3 Y9 P$ W+ h
0046AE27 8B38 mov edi,dword ptr ds:[eax]
; J1 R! V. o/ x$ R1 v0046AE29 FF57 04 call dword ptr ds:[edi+4]
$ H% m; w' [/ O! _5 `7 N0046AE2C 8BC6 mov eax,esi
7 z/ e9 i. |( K) ?% E) z& i6 G0046AE2E E8 4587F9FF call Unpacked.00403578
# [4 A2 n* K4 _: a8 U+ ~) e4 b0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]8 y- C$ V- v/ g+ c6 i. E9 I
0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
" A) a& a q1 d ?9 a; F0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
% w: O$ l' W& }/ v0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
/ {( J3 n: u, S' b. y" }5 {1 K3 V0046AE42 6A 00 push 0( M# ]" W7 w5 C/ w8 N) Y# z" n
0046AE44 68 D8AE4600 push Unpacked.0046AED83 J! Y1 J/ ^( q: R* L
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
. t# U _) |6 a4 @+ K0046AE4E 8BC3 mov eax,ebx" v, e* b: n! {# w. Y
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8: W; z; Z" N* ?
0046AE55 50 push eax& x- h# y- C7 D& X: I
0046AE56 E8 DDC2F9FF call
, h9 Y( ~# w( o" X. v4 Q0046AE5B EB 20 jmp short Unpacked.0046AE7D
. B1 ^, L# w. E% d0 v. W+ o0046AE5D 6A 00 push 0
# n4 b% c: p) W' A: }0 m3 w% M0046AE5F 68 F8AE4600 push Unpacked.0046AEF8
" I0 O7 g8 P, k! |/ J0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功, \2 F" P4 q# n: |1 f
0046AE69 8BC3 mov eax,ebx8 z$ v& e* @' V3 \
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
& U4 p' @& ^6 |0046AE70 50 push eax
+ u( k7 v% A7 G) c9 r2 w/ _0046AE71 E8 C2C2F9FF call / q) }0 u2 a/ I" h+ _) q2 P" |. t Z
0046AE76 8BC3 mov eax,ebx. a! O$ c' g$ c- k
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
+ T2 E1 }7 `6 M( o9 c0046AE7D 33C0 xor eax,eax
+ L. D2 c5 h: N: n, h0046AE7F 5A pop edx
5 H+ V" g2 i5 m# s1 E3 P0046AE80 59 pop ecx
! _( i$ L* O* _" b0046AE81 59 pop ecx
7 C4 `. X9 x! ~$ s7 r# A0046AE82 64:8910 mov dword ptr fs:[eax],edx& k! q. u. s( s& Z' ~
0046AE85 68 A7AE4600 push Unpacked.0046AEA7
- A4 M P: M# }0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
. l* a5 G. f( z0046AE8D BA 03000000 mov edx,3
& |; h; P+ U. q' S$ A7 i0046AE92 E8 F594F9FF call Unpacked.0040438C
, V# j- a" H/ ^) @' g0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]
2 }# V6 S- u2 l0046AE9A E8 C994F9FF call Unpacked.00404368 j" g/ Z1 x4 v' U. i' x
0046AE9F C3 retn
2 R+ Z0 x) @! P7 L0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
% j* g$ R( X" f+ s0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
' k- B* H+ Z0 B+ J5 D: T8 r****************************************************************
0 \% g8 u0 L6 P8 p) [* M跟进0046AE39处CALL来到:
! L% C" d2 a6 p2 p9 G/ ?0046B9F4 55 push ebp
' x, M! ]' N8 Q. ~1 h; J2 K0046B9F5 8BEC mov ebp,esp
7 W( Q0 N5 a( r" ~- P% v7 n0046B9F7 33C9 xor ecx,ecx
; n3 j0 L7 g2 F/ W5 \0046B9F9 51 push ecx
6 I7 ]: c( }( G9 g0046B9FA 51 push ecx) c2 i, E) J9 W s' F
0046B9FB 51 push ecx
5 [' D( A+ C3 Q! _2 r$ I0046B9FC 51 push ecx
. {& Q+ H( E, }2 {) s) C9 v0046B9FD 51 push ecx
( r) @4 V b3 y- ?- u0046B9FE 53 push ebx! n& M; P0 t8 x D* g8 U% n7 |* G
0046B9FF 56 push esi- C5 u1 e6 C( c
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax. p" f! V$ e# ?" Z6 d
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4], p( w* }+ s9 O( c6 x* X
0046BA06 E8 FD8DF9FF call Unpacked.00404808
* X$ t* u0 {) a6 }4 t0 D8 L0046BA0B 33C0 xor eax,eax
1 Z! k2 L8 H) m* N8 A0046BA0D 55 push ebp d& r X: E5 {! \. r' Y% e; `! @9 O# Q6 p
0046BA0E 68 91BA4600 push Unpacked.0046BA91# A" o/ ~" d& H/ s* o+ m1 S
0046BA13 64:FF30 push dword ptr fs:[eax]$ p7 L! a0 w0 M: s
0046BA16 64:8920 mov dword ptr fs:[eax],esp- f: |% q! b) J+ W- d {( z
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
% }8 K' ^, Y# n' S6 t, v) ]0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]5 J5 A1 F7 J" u& c. S
0046BA1F E8 DCFDFFFF call Unpacked.0046B800 8 {" m3 C2 ?+ ~% k
0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]' V# ~. C, s, n# l+ ^& c
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX/ k$ z8 x5 P8 a/ L' g
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进
9 z/ b+ v0 Q1 D W! i! L0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
7 R: G7 `' y" D5 l* b0046BA34 B2 01 mov dl,1 ; DL置1
6 {/ Y# t }; P0 ]' w' P _0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]
9 I8 L, n! M+ |+ `3 k. B5 Q0046BA3B E8 78A3FFFF call Unpacked.00465DB8& ?) L% ~: o$ i
0046BA40 8BD8 mov ebx,eax
% S% S* X; ~ q% f0046BA42 6A 00 push 0
; d& B4 U1 m3 o9 m/ U4 Y' D4 r, d0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]' z% j- C% J3 Z% D5 X
0046BA47 50 push eax
7 z o. K# D) }6 Y0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
b( I3 S* p. [$ t' M8 A0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
; Q, O* b+ [" M+ h4 l, H2 @0046BA50 8BC3 mov eax,ebx1 Y2 g9 s/ t; W% a+ L i& @1 O
0046BA52 8B30 mov esi,dword ptr ds:[eax]
, M9 C) b9 L2 D( c0046BA54 FF16 call dword ptr ds:[esi]
5 e+ X2 ?+ ?8 B9 i. V+ A0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX# }" @- y* E, E1 U0 b" B
0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]1 n9 L: n" b, ]5 W- i. R# ^
0046BA5C E8 B7CCF9FF call Unpacked.004087183 @7 O% t4 o8 v3 ~- a+ s5 M) g
0046BA61 8BC3 mov eax,ebx, x( u8 P D7 z& R# |2 {' H0 L( Q
0046BA63 E8 107BF9FF call Unpacked.00403578
. u. p f9 ?/ i- g4 Q4 ~# A% a0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX/ L+ E! _0 L7 Z( U: x) U* ]
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
5 C, q1 r I$ X1 _ Q! X0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~& S' j# d+ M" B7 w- |
0046BA73 0F94C3 sete bl ; 置BL值% P$ a- Z! K7 y! ]+ T% I
0046BA76 33C0 xor eax,eax- ?3 A2 x0 ~2 \- }/ U
0046BA78 5A pop edx
& Z$ J" [1 c' [6 W7 s# q0046BA79 59 pop ecx
7 G7 E: `: M; E) g2 o( m0 }0046BA7A 59 pop ecx
1 t; A0 r' q1 _7 n0046BA7B 64:8910 mov dword ptr fs:[eax],edx" {9 j" d& x. _9 n$ g
0046BA7E 68 98BA4600 push Unpacked.0046BA98
' x) \/ Z7 e5 s6 O7 Q0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]& m6 S5 r7 _7 \: y. v
0046BA86 BA 05000000 mov edx,5
; c& ^+ i: U- m5 S1 v9 s9 \% Z0046BA8B E8 FC88F9FF call Unpacked.0040438C4 B Y3 n& i! j; o( p
0046BA90 C3 retn
8 U4 h* _# a6 q, ?- n****************************************************************
( G( V# i6 C' T1 f2 x3 N: L$ x跟进0046BA2A处CALL来到:3 \' l0 A0 o1 O. t/ ]
0046B908 55 push ebp# x2 W, d# O7 r; ^4 {; x
0046B909 8BEC mov ebp,esp
8 Z H ?$ u8 D' j" W, O0046B90B 83C4 DC add esp,-24
& T4 F6 `; _: g0 l1 D0046B90E 53 push ebx
3 c3 A9 D$ ~" D0046B90F 56 push esi
* q6 r/ j Q i3 B; c0046B910 33C9 xor ecx,ecx9 m9 K/ N$ E( W8 c# X1 k2 [
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
9 m8 ]! Z* J# z. w0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx
" W1 K+ G& N5 ^+ H5 Z5 y0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
3 k. W$ W6 o4 h' m$ T3 Y' U0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
6 Y5 @1 @7 n* I! `2 }0046B91E 8BF2 mov esi,edx
m" R8 b+ w: f7 y& @: }0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
* ]0 F, {. e+ w* @. ]0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]% O# W2 K2 M6 h1 b
0046B926 E8 DD8EF9FF call Unpacked.004048084 O6 Z6 t) ~! }+ V
0046B92B 33C0 xor eax,eax
. y0 x0 r5 {% h' ]1 {0046B92D 55 push ebp
3 F7 }1 j# |" d3 x- U! {) j8 @0046B92E 68 CEB94600 push Unpacked.0046B9CE
3 [4 x4 r! M2 |: }0046B933 64:FF30 push dword ptr fs:[eax]
8 B$ d3 V! R/ M2 C8 p9 K# g0046B936 64:8920 mov dword ptr fs:[eax],esp+ Z4 o( S& V7 j
0046B939 8BC6 mov eax,esi3 _6 Q! l3 ~6 o
0046B93B E8 288AF9FF call Unpacked.00404368
. w% Y) A7 x# O0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
% M$ W% H8 i* E( A& I; a0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX; c$ u8 }7 j e8 T
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
' Z' D) Y# ~, G1 g* f0046B94B E8 1C8DF9FF call Unpacked.0040466C6 H* m3 h: ?0 W* S# |1 Q. r5 | [
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
* P! W2 |' z( Q$ k0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
1 z8 R. a x( p2 j+ ^, k7 a2 U( s4 M0046B956 E8 EDBCFFFF call Unpacked.00467648& x6 W q4 o6 {7 I
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
3 H# R! k" N6 w/ _$ ~0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]8 ^7 s& t9 ? f, F$ j/ ^! W4 R
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e; m3 M+ H1 F8 h0 ~
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~
& S, N N* ]& {( U5 o. e. C0046B969 E8 FA89F9FF call Unpacked.00404368
% R! ^) h- U3 D# P' m$ R0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
4 \) p5 b' k# l5 A0 C( R! F9 c0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX" r/ g6 P$ Z2 _; F( R8 A, p) ]
0046B976 8BD8 mov ebx,eax ; EAX送EBX# ^5 ^, W/ [6 g' z# O8 |) D
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较3 k" D) m, g, k. ]! {* G
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳! n+ Z! ~* d' U0 \
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算 d' U. ~/ K# K3 l/ h `
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX: R0 L# ?9 q6 x0 v0 D
0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL7 X# q: b2 }% p$ \2 T
0046B987 E8 BC8BF9FF call Unpacked.00404548 O* C1 G5 L8 q0 Z2 \
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
) L' l2 x- E% A, ^) l0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
! G$ k8 m% l* @4 _9 U' C0046B992 E8 918CF9FF call Unpacked.00404628
$ ^% m4 I- o" E' u' M1 O# E0046B997 4B dec ebx ; EBX减一* }8 }* d2 _6 X) b, a: g( l
0046B998 85DB test ebx,ebx ; 是否为0$ ~. a$ Z, ?5 M2 o
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。
; P/ t0 a3 @( u v& ^; o0046B99C 8BC6 mov eax,esi0 n7 n, Y4 k+ q8 Y) u0 W1 H, G) k6 {
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX T2 K. F5 `7 L# g
0046B9A1 E8 168AF9FF call Unpacked.004043BC
+ S! w% _1 i5 M0 Q9 o0046B9A6 33C0 xor eax,eax
* s. t$ l4 ]0 ]& r0046B9A8 5A pop edx
: X u8 H9 @! G0 u3 Y3 L0046B9A9 59 pop ecx
" \# j% R) F2 S1 V ]6 u2 \0046B9AA 59 pop ecx
, [' c+ s5 r, q0046B9AB 64:8910 mov dword ptr fs:[eax],edx
3 A5 C+ D% @. r! }0046B9AE 68 D5B94600 push Unpacked.0046B9D5
T: g8 Z- x2 [0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]1 a, s) A- z7 }4 P; d
0046B9B6 BA 02000000 mov edx,2
9 \0 p* J! M+ ]& s6 B0046B9BB E8 CC89F9FF call Unpacked.0040438C
# O/ t; r' A) G* I: r) m. H0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
W% }/ L; m h0 B5 S0046B9C3 BA 03000000 mov edx,3
, A3 [, w! ~+ ?# e( H' t' \/ B0046B9C8 E8 BF89F9FF call Unpacked.0040438C
' R9 @1 ]. C% z- H' j" y0046B9CD C3 retn; | a( X4 O' ^4 H2 o. Q# Y
****************************************************************# f2 x- U* S5 j/ S c
跟进0046B961处CALL来到:
+ b: y+ E# g1 i( J& U' j004676BC 55 push ebp2 f/ f# T, a& o. x, x% g3 c
004676BD 8BEC mov ebp,esp) h" ]+ d- B8 t; x) q3 F
004676BF 83C4 E8 add esp,-18
9 O b+ g! _+ v5 _% E. J004676C2 53 push ebx
; |, v% k8 A8 m: d/ b004676C3 56 push esi
4 `4 d9 c8 p+ A004676C4 57 push edi+ S+ i, z9 J7 Q6 H6 g
004676C5 33C9 xor ecx,ecx
, u( G* }$ D( D1 E9 g004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
8 A. B- z1 r: p, Q2 Z004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx7 O- F* ]6 e" c+ Y. [0 K- M' b
004676CD 8BF0 mov esi,eax
X; V: ^- j' |& X c004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]
, v! K. q8 W' z/ ~: W3 Z* t004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>, r- m% e7 |9 Y5 w- q
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
6 s% w4 C; c! D& ~7 \; h1 ^5 ^004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
# R/ w; o J* }, N6 e# Z004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
# k, T* j6 i/ {& B {2 ?% ?" A004676D6 8BFA mov edi,edx
' C9 N2 u" f) `2 v! Y( H! g, {004676D8 33C0 xor eax,eax
# L6 d1 W( o; M9 S& c- T004676DA 55 push ebp) A% l; J# A5 L# C& `( p
004676DB 68 57774600 push Unpacked.00467757/ d+ A, E3 a9 g% C( c
004676E0 64:FF30 push dword ptr fs:[eax]( g4 ~+ V7 i2 e- f
004676E3 64:8920 mov dword ptr fs:[eax],esp4 h8 H1 J1 z. @& M% p
004676E6 8BC7 mov eax,edi
- V" H1 q1 U2 B" w. d004676E8 E8 7BCCF9FF call Unpacked.004043685 t3 g8 F1 s; u& B
004676ED B3 10 mov bl,10* X; u& Q2 l9 x ?, r5 ~
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]+ F5 O; y) L8 J
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****3 l. u" q1 p: i. A& y" I& Z
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
! W0 K( g# L0 C004676F7 33D2 xor edx,edx' E: J* ^" i5 |+ W
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
) ~. I' g8 b; c" {, E f4 v004676FB C1EA 04 shr edx,4 ; EDX右移4位0 ?" F; D/ c1 j2 g' |2 v$ |8 o3 |7 b9 Q
004676FE 83E2 0F and edx,0F ; 和0F与
+ r5 _& V5 P F" w6 Q( A, a00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL, ]( J0 L. m$ m1 @
00467707 E8 3CCEF9FF call Unpacked.00404548
" R" m1 L# s- Y5 h8 q8 m0046770C FF75 EC push dword ptr ss:[ebp-14]
$ ?9 m" |% n1 a- Z$ B0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]: x& P; m7 v4 x+ i! ~$ h2 D2 [0 |
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
& W! i8 g1 [7 g00467714 80E2 0F and dl,0F ; DL和0F与6 L3 F& x& l- r9 ]' D6 ?
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与1 \! m$ M4 p% u$ y% T: v% O
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
- h* L1 i0 `# M00467723 E8 20CEF9FF call Unpacked.00404548
" ~9 J" w# R0 X3 O1 z' B9 E( ]00467728 FF75 E8 push dword ptr ss:[ebp-18]. c7 _! b6 H" W* Z* \) q' l
0046772B 8BC7 mov eax,edi ; EDI送EAX
" Y7 n1 i: q, [/ I- e6 N3 J6 n0046772D BA 03000000 mov edx,3
7 g0 x" {% ^$ M7 Z, U- b6 E00467732 E8 A9CFF9FF call Unpacked.004046E0
7 N) |( d$ C/ V: _2 l00467737 46 inc esi
. G0 _$ }0 h2 ^00467738 FECB dec bl2 r$ |" R3 A. W
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
$ l; W$ a f5 N" f( c9 [0 I0046773C 33C0 xor eax,eax( h8 F7 b8 t1 \+ E! o L z: D5 p
0046773E 5A pop edx6 I+ }, x+ f; e& ]; G& e) A
0046773F 59 pop ecx
}! C5 t9 h$ W+ W00467740 59 pop ecx
. a) @ |, M& i; w0 {) s( n0 @& R00467741 64:8910 mov dword ptr fs:[eax],edx
3 O- ]% N/ \% }, t6 H00467744 68 5E774600 push Unpacked.0046775E
% x% ^5 x L1 h: R4 W: e00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
: L% Q4 v% o& ~6 ^0046774C BA 02000000 mov edx,2
! C) y- W5 @& X" R00467751 E8 36CCF9FF call Unpacked.0040438C4 s! w% R; R: U0 `" m4 b3 B# M- _
00467756 C3 retn //返回( m. m1 ]8 g. ?; o: X) C
———————————————————————————————————————————" z$ [7 {" {+ F9 ^# f' q$ L
【Crack_总结】:: H( q' ~6 q# D1 O* O' [
将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^
6 Z5 C5 j. F4 H- e机器码:bbba33de56c4cf31d9063cc074248d4b
+ L, J+ n$ _+ N* }注册码:e807519487d7ad4f57ad42dc87fbb191/ h9 E$ L+ ?2 `; t$ r
附件: MakeSign.rar (249 K) 下载次数:298 |
|