|
【原创】破解图章制作系统0 i. N: z+ a9 B% H& G0 J- N
日期:2005年5月15日 破解人:yijun[PYG]% s" G2 t% |# X5 v
———————————————————————————————————————————
/ }) T! b4 \( l/ D4 M6 h' ~; P【软件名称】:图章制作系统 软件版本:1.0
/ J; u6 W+ F3 m【软件大小】: 252KB4 }8 k* Q1 V$ c9 e
【软件简介】:制作各种图章
( A& V# @: N' K# ~1 o# _【软件限制】:NAG0 [: ?& S- l$ G
【破解声明】:初学Crack,只是感兴趣,没有其它目的。失误之处敬请诸位大侠赐教!
3 m& N4 k$ O$ B【破解工具】:OD,PEID% F, d/ w' k3 z5 e# ] v0 p
———————————————————————————————————————————
) a- c- \& Z* k2 ]2 p8 a% W7 E O1 ]4 N7 S0 d% B/ T/ n! R
【破解过程】:- K# \4 w% u7 N* V& X e
PEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳,OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~( y- T+ P E1 l
OD载入,通过字符串查找很容易来到这里:
0 }5 @5 ~' S: }& G0046ADAC 55 push ebp //在此下断) N5 r. K" R, J% q
0046ADAD 68 A0AE4600 push Unpacked.0046AEA05 r- f, C6 I1 i/ `. F2 n. _
0046ADB2 64:FF30 push dword ptr fs:[eax] H/ P8 q3 V; `5 p3 E% L
0046ADB5 64:8920 mov dword ptr fs:[eax],esp. ]9 N D3 ]9 r9 |# T& m
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]& O* l! R9 A& A% y4 L
0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]0 y1 Z# @" C8 c
0046ADC1 8BC6 mov eax,esi
2 c% C9 |" I' D4 i$ O; ]- ~$ A3 p: i0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码,长度送EAX: ?' T, ?' ^7 v7 e4 Y( M
0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX# x0 e( d, j( `) F3 K$ ?
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]. ^' P3 F' j8 h$ C' f8 o
0046ADCE E8 45D9F9FF call Unpacked.00408718
) E# n4 x0 N- ^7 x6 `( Y0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX8 O7 [+ y2 y t) ]: N
0046ADD6 8BC6 mov eax,esi% U. j2 ~3 [4 Q0 H
0046ADD8 E8 3359FDFF call Unpacked.004407102 }5 ?$ s& q/ K! p/ F
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]
: |+ B. z+ e a0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
' l/ q! q( L& ~0046ADE6 E8 F558FDFF call Unpacked.004406E0
6 F8 ~8 t; q S0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
" G E5 S! M1 ]! L0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳6 y, R3 @1 b! ` W* }* ~; ^
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX6 n' X* `% Q0 C: C, j1 x9 ]" @5 ~
0046ADFA B2 01 mov dl,1 ; DL置1/ D" e7 u8 D( i1 }- T
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]2 Y, X) w( @) m: a( N: Z. ?- A# H( @
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
# @( r4 _+ w- D! J0046AE06 8BF0 mov esi,eax8 k0 I0 b4 U" u) r5 P; r9 Q* C
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]
" e& s, A$ `7 S( ]1 k; @3 ]. z9 {1 a8 A. ?0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
2 C7 c/ H: Z& `0046AE11 E8 CA58FDFF call Unpacked.004406E0
# d& y! M- v$ w% u8 A# u: t0 W; m0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX, w! a9 v! p3 z O- D$ j5 L
0046AE19 50 push eax
7 i3 @2 v" Y$ t) U3 {8 S0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX8 J5 v) `) u2 H8 z
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
6 b& J9 a, n5 ]7 A0046AE25 8BC6 mov eax,esi
& F% `( w# O0 z( D/ U: i) Q$ Y' @8 A0046AE27 8B38 mov edi,dword ptr ds:[eax]
; l+ O, t9 ~$ C- i% U+ F1 Z0046AE29 FF57 04 call dword ptr ds:[edi+4]1 M& J6 H; l# m1 L# r4 a
0046AE2C 8BC6 mov eax,esi' s) v. |- E: K# s. `1 { F! I
0046AE2E E8 4587F9FF call Unpacked.00403578
/ Z j+ X7 G# Z. V9 T+ X. R7 ~0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
( R6 H. b1 {- T( [0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL,跟进~~~~~~~~
% i; b5 l! `1 _7 F# p0046AE3E 84C0 test al,al ; AL是否为0,(如果刚才比较条件为真则AL为1~~~~~~~)
; i3 c2 u) C; T6 I0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳,不跳就挂~~~~~~
1 Y& [5 {5 \6 H$ m# W* G3 B0 E0046AE42 6A 00 push 0( \7 x0 u3 H! ^- C. v
0046AE44 68 D8AE4600 push Unpacked.0046AED80 L6 t, @/ h1 z" N
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
; j2 z2 t1 x0 w. K/ O# P0046AE4E 8BC3 mov eax,ebx
% F( }7 ]4 W- \4 H0046AE50 E8 A3BFFDFF call Unpacked.00446DF8% O9 W( R( z5 E1 c4 V& g( e
0046AE55 50 push eax
4 [) e( G1 A* G/ `1 A. H0046AE56 E8 DDC2F9FF call
% ~4 g2 s) P; G% p8 c; d0046AE5B EB 20 jmp short Unpacked.0046AE7D- ]7 a' s/ `1 b
0046AE5D 6A 00 push 0
) M6 W) v3 e8 h3 c: G' K0046AE5F 68 F8AE4600 push Unpacked.0046AEF80 t0 c* n% H* n! j' N( P) U0 d
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功* S: O/ ^" A* ]3 \/ |3 x9 |, m/ S
0046AE69 8BC3 mov eax,ebx# ?6 A9 c2 r. ?& R5 |) f+ R' X9 _+ ~
0046AE6B E8 88BFFDFF call Unpacked.00446DF8
% Y9 u, c( d$ r2 r6 l0046AE70 50 push eax1 k% x+ ?! Z; ^8 R6 r- h
0046AE71 E8 C2C2F9FF call : {7 |# F' t9 ~+ y' J' U- Q
0046AE76 8BC3 mov eax,ebx
/ U. Y' p; U1 N+ \- q- V# g0046AE78 E8 7F21FFFF call Unpacked.0045CFFC: A% m: R( i% K3 a
0046AE7D 33C0 xor eax,eax% ?: I4 q# D- d: }* s
0046AE7F 5A pop edx
0 i! F& i$ N: Q( ?6 d$ I: O' x$ l0046AE80 59 pop ecx ?3 {) `0 Y$ K8 P* ]5 M: L- M
0046AE81 59 pop ecx
k8 m( p8 {. W. ~8 y& I- z0046AE82 64:8910 mov dword ptr fs:[eax],edx
1 s$ }% G4 V9 `" t7 ?+ ^7 K; B0046AE85 68 A7AE4600 push Unpacked.0046AEA7
" b/ K2 {0 g; F* V# |( ~0 ] N0 L0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
* l2 \7 l: S& q/ i1 t$ x6 }$ A0046AE8D BA 03000000 mov edx,3, i3 J- h! W# H& h2 E
0046AE92 E8 F594F9FF call Unpacked.0040438C5 l! ^, G- U1 S/ D, _, C
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]! `9 t6 `% A7 }4 l
0046AE9A E8 C994F9FF call Unpacked.00404368
- E5 E9 h8 a4 r I0046AE9F C3 retn
- ?1 l3 A4 x8 F' n% \0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
3 Z" T% a0 o) P: H3 t. F0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
* e" K) {2 [( B8 ~6 |# e/ D7 L****************************************************************
L3 b: r! u1 a. d跟进0046AE39处CALL来到:
1 `5 n' u5 S8 w# i0046B9F4 55 push ebp
3 Y8 U- K1 D+ ^* y x6 _0 v0046B9F5 8BEC mov ebp,esp+ a3 s2 ~; @4 E, W( T
0046B9F7 33C9 xor ecx,ecx. k5 {# l6 I3 z9 I6 r$ P
0046B9F9 51 push ecx
0 W; Z: q n% @& Z; o0046B9FA 51 push ecx5 e: v( o4 f- ?& o
0046B9FB 51 push ecx
# } ?2 w! z' a0046B9FC 51 push ecx
6 p4 y. q' }& x# t1 N7 n9 f0046B9FD 51 push ecx
/ ]" u" a& q# J2 Y8 b5 c' a0046B9FE 53 push ebx
- s/ F: S, }5 b, b T' R/ ^/ @0046B9FF 56 push esi1 [ \/ P' A6 z: q% ~
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax, x. e6 @: u9 W
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
# ` t0 ]) N3 u& K0046BA06 E8 FD8DF9FF call Unpacked.00404808
- L7 _4 [) O9 K4 u3 O1 u% O4 g0046BA0B 33C0 xor eax,eax$ U% ~/ y$ V! J* L) C' h
0046BA0D 55 push ebp [: X: Z, I& C, i( }. i
0046BA0E 68 91BA4600 push Unpacked.0046BA91
$ ?# L( v4 S* \1 q# m0046BA13 64:FF30 push dword ptr fs:[eax]1 V; Y$ D' N; l. Q& }* t. C
0046BA16 64:8920 mov dword ptr fs:[eax],esp) V0 c) N5 ]8 P g
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]% F0 Z, ]4 K1 g5 n, @$ c# Y9 u& `
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4], x8 m4 I; O7 ~( ^
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
; ~, X; f) m$ `! ^" Z7 g0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]9 ?; q4 n* }. _( h
0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
0 U! b8 }7 P" f P( D% E0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进" O. O4 i8 ^8 S
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
; p5 G1 _5 ]3 {6 U+ T0046BA34 B2 01 mov dl,1 ; DL置1
% r( b3 B. V5 _9 P5 Z" R0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]. u* e/ Z6 k( Z0 n
0046BA3B E8 78A3FFFF call Unpacked.00465DB88 \7 P# Q2 Q1 j1 x
0046BA40 8BD8 mov ebx,eax1 |' H! A, Y. B* C h* L
0046BA42 6A 00 push 0% U8 C0 y* h/ t1 c+ V/ p( C
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]
# ~& x2 T3 e- n: [; [( H0046BA47 50 push eax- x& {# W! P7 B- u% Q9 S: g- Y3 Q
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"
6 k% R" |- s) U" s* q0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]& u9 N8 ] F) H5 I' w
0046BA50 8BC3 mov eax,ebx7 s: V9 c% P- V) z, ]7 s
0046BA52 8B30 mov esi,dword ptr ds:[eax]
0 I$ G. Q5 N& i& B+ s0046BA54 FF16 call dword ptr ds:[esi]
1 c2 I- R3 V1 Z: r, h0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
1 J: W# {) @8 p7 K9 x. }: w' }! h- b0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]' C6 |# P# b& }* T5 `" ?( K8 u
0046BA5C E8 B7CCF9FF call Unpacked.00408718% e0 ]4 n$ O% R* e5 k
0046BA61 8BC3 mov eax,ebx
8 o8 D6 {" c! r" c0046BA63 E8 107BF9FF call Unpacked.00403578
1 [5 a, V. Z& d8 ?! `$ O8 x0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX9 j; C" j/ C6 r6 A8 v+ N5 Z7 l) O
0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX) M1 x* @- c1 I% q( R
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~& V# J0 D" Q/ c/ }3 Y
0046BA73 0F94C3 sete bl ; 置BL值7 F8 m- L$ N" j, s+ ~, V! z; _# U2 {
0046BA76 33C0 xor eax,eax5 [7 V/ c8 c3 H/ l
0046BA78 5A pop edx
2 h: F' ~. |9 i: i- {1 ]0046BA79 59 pop ecx% l i$ m# N& D4 H
0046BA7A 59 pop ecx. Q% s1 r8 j; t/ R' d7 @
0046BA7B 64:8910 mov dword ptr fs:[eax],edx
4 Q6 k/ ^4 `0 a5 X5 r0046BA7E 68 98BA4600 push Unpacked.0046BA98
4 }& K ^6 F' p7 v0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]
E! ~ n6 q8 o" G0046BA86 BA 05000000 mov edx,5- x" q) q5 T5 h# J1 m# W1 S
0046BA8B E8 FC88F9FF call Unpacked.0040438C
3 L. K/ l4 k7 K0046BA90 C3 retn
8 c8 _) m2 A. B8 V2 Y****************************************************************
. c$ b& D, C5 v( B4 ^跟进0046BA2A处CALL来到:
& u; h; @( {+ a. \0046B908 55 push ebp. S# L4 B' u7 D9 Q8 G e
0046B909 8BEC mov ebp,esp( p" I5 i0 b# O$ P; C/ D, s
0046B90B 83C4 DC add esp,-24& f, ~ s6 J g3 a9 y' ^4 u. l
0046B90E 53 push ebx/ n d1 X1 h0 m/ A+ B
0046B90F 56 push esi
, Z, K4 m" J" y Z: C0046B910 33C9 xor ecx,ecx5 b3 q, P" `, f& b6 _. }- O
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
( G! r$ v" ?% i$ ?0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx& h3 i5 }" q6 P8 g
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
3 Z* q& _5 O1 ^! S# p& M0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
7 R3 \; G7 B& G, \1 B0 J h0046B91E 8BF2 mov esi,edx
R2 k( m$ Y) K% |. l2 [# R0 Z0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
7 e9 S; J% Z5 V" L* ]. d% |0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
9 f" k. P6 o$ I$ u$ E0046B926 E8 DD8EF9FF call Unpacked.00404808, h1 i5 z. Y# _2 ?# w; F
0046B92B 33C0 xor eax,eax( J" I/ q: w) a. v( |" m- Y
0046B92D 55 push ebp1 K2 t3 [0 a2 D" b/ c8 h
0046B92E 68 CEB94600 push Unpacked.0046B9CE
0 r2 v9 y0 n+ Y* b' c0046B933 64:FF30 push dword ptr fs:[eax]
2 ^! e8 w. j& L. f% s+ H0046B936 64:8920 mov dword ptr fs:[eax],esp7 q7 N8 G0 F, H4 N, M1 q
0046B939 8BC6 mov eax,esi
' m7 @. z5 {. P, p0046B93B E8 288AF9FF call Unpacked.00404368
5 E; s0 c: |9 _& {2 \7 d2 S. S8 n0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20] r) T+ @! i5 s
0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX
' j9 j" e8 V+ K9 I# {# K0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
8 |# r) x: k6 C, h# s& S# w/ A0046B94B E8 1C8DF9FF call Unpacked.0040466C# ]+ g G$ u" Y7 D
0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]
: J6 ]# v8 `6 }. H8 o0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]) _+ A- L7 _( w2 ~# u
0046B956 E8 EDBCFFFF call Unpacked.004676480 M/ g& X# @' O2 r
0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
) _: K- z( ~# ^0 N! i6 i7 a) P" s- v0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]
6 T- q( Q3 |* M# b& X) j0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~,最终得一字符串191bbf78cd24da75f4da7d784915708e
b- n; N8 w4 x' }0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~! o* ~, s5 N+ o( T8 U; Z0 s
0046B969 E8 FA89F9FF call Unpacked.00404368, T9 M" @% R4 R. V! w) K/ @
0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX
p1 V4 b- g) _! R6 g+ M& c0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空,如果不是则长度送EAX# F2 J& U& X) l! D
0046B976 8BD8 mov ebx,eax ; EAX送EBX9 i9 x' ~5 | B1 p" B! M) z9 |" a
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
. i6 Y6 F- x% c) C5 m9 w; Z) m0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳
1 m4 S1 X- z/ I1 f6 }0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则,依次计算( Q1 ?5 Z. N# d- m, k8 k' O' s. c
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
: ~$ m: d- \( r B# Z3 h0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL3 U! L7 i$ o) b$ ~
0046B987 E8 BC8BF9FF call Unpacked.004045489 I8 q! p: P- I/ }' y
0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
8 r# A8 V4 L; |" Q, L( H% i0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX) |; P8 e; o0 D8 O. T4 `8 M8 Q
0046B992 E8 918CF9FF call Unpacked.00404628
% \! b- D0 x' [1 V5 t0 x. u0046B997 4B dec ebx ; EBX减一
h2 `* C b! U- `) f0046B998 85DB test ebx,ebx ; 是否为0
. [1 X7 x$ W, |7 o0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续,以上这段循环就是将刚才得到的字符串倒序,得:e807519487d7ad4f57ad42dc87fbb191(真码)。9 G, B0 y4 G. M" q; R# x. c# \
0046B99C 8BC6 mov eax,esi+ k$ m/ `$ R8 N, l: k
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191(真码)送EDX5 E# I+ n1 s& M: [( r# I/ Y0 x
0046B9A1 E8 168AF9FF call Unpacked.004043BC7 b( {; q6 n( @, y% e7 I3 ]
0046B9A6 33C0 xor eax,eax
# X+ u; ~5 c! h% C0046B9A8 5A pop edx+ l0 ~1 d6 B1 T
0046B9A9 59 pop ecx
! _" J3 s9 d3 M Y) T$ \, Q9 U. \' }0046B9AA 59 pop ecx: m% G" E( L5 x
0046B9AB 64:8910 mov dword ptr fs:[eax],edx" n' {4 h9 v7 @1 z' ^2 [
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
R& K. v# _# ]+ _! h0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
6 h1 ]. |- |3 [" Y2 G V" Y# v: V0046B9B6 BA 02000000 mov edx,21 g% h, p0 y( g1 z3 c
0046B9BB E8 CC89F9FF call Unpacked.0040438C
, S T3 V/ ?. |, t$ `5 R9 [, e0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
2 I' V* ]. j, w1 Q; j! c" f0046B9C3 BA 03000000 mov edx,3" B! I7 N' G# }7 R* R1 J
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
, M9 L% G6 f& S" x: e1 D0046B9CD C3 retn
. @) _# V' ?* _. X% `****************************************************************# i+ _* x$ H4 `9 D: k
跟进0046B961处CALL来到:) C! N8 f- |5 h' N
004676BC 55 push ebp W, p/ d2 y l* f% q& E& `2 ~/ p
004676BD 8BEC mov ebp,esp
+ Q$ u! I# `% d) |# r0 a004676BF 83C4 E8 add esp,-186 J7 E' D, Z( e. \9 d% s/ N3 r4 }
004676C2 53 push ebx* h) {/ p& _" ~$ B4 g# |1 s
004676C3 56 push esi* S$ i* c T# J6 q: L0 U/ v
004676C4 57 push edi* |8 I* c }* H
004676C5 33C9 xor ecx,ecx( e6 W+ c1 d: y5 I1 n1 g8 j3 Y
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx1 j& F) M/ u" h- |
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx
6 N* Q7 t6 l3 Y; Z4 p! U$ K+ I004676CD 8BF0 mov esi,eax% x5 L* U# c0 `& J( U9 q
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]' t: a$ K# W0 b
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
6 O+ p! @" K& z' P8 [/ q004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
* }' f& j B, F- `" F004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
# w' B) ?5 d6 ~5 ~004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
: ^! D0 N. d' o" ~4 I004676D6 8BFA mov edi,edx/ ]% m, _( ^ s7 ]4 J, w- G
004676D8 33C0 xor eax,eax
9 e3 o7 ~# d% T' Y& p004676DA 55 push ebp
9 T8 ]6 P7 Z( f& w" m* m004676DB 68 57774600 push Unpacked.00467757
' f# k# t, `9 D9 [( S8 Y8 F8 _004676E0 64:FF30 push dword ptr fs:[eax]
5 ?; w e* C: i3 h3 j$ V004676E3 64:8920 mov dword ptr fs:[eax],esp# [! m5 ~0 _& }3 c, U
004676E6 8BC7 mov eax,edi
2 E. C' g$ O: u* E3 u% _$ J# u004676E8 E8 7BCCF9FF call Unpacked.00404368* v- U/ q0 e# J
004676ED B3 10 mov bl,10
. N6 r3 g* `; K5 [( |5 u6 q3 I004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]! C' b% _) Q$ a! w4 S
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
) r8 ]' ~ G4 X6 e' X z004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]" w; o- X3 H+ t, z$ b
004676F7 33D2 xor edx,edx" _. u- V6 e$ Z( e# l! O9 }
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL: h+ m3 y) Z3 C f! I1 S
004676FB C1EA 04 shr edx,4 ; EDX右移4位
2 E- u! y# }+ Z; y( ^. M$ G004676FE 83E2 0F and edx,0F ; 和0F与
: Q/ N1 v: l+ g' P3 x0 T) `4 O00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
9 u+ y Y3 ^* q+ `00467707 E8 3CCEF9FF call Unpacked.00404548& I) h- Y! S( c6 H9 i
0046770C FF75 EC push dword ptr ss:[ebp-14]
; X, ?. Y% G' ^4 f. p! q0 U& C0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
/ J0 i1 L' E2 ?" f2 \00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
- w7 j% f' K2 E0 w I/ X0 \00467714 80E2 0F and dl,0F ; DL和0F与1 H. x9 F5 h W$ i6 S; i" G
00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与) L( c9 R( \2 \% D8 O
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
6 s1 L) k! E O3 z) x# o0 `' m7 Z00467723 E8 20CEF9FF call Unpacked.00404548 U# P0 W* T% o5 I9 S; a
00467728 FF75 E8 push dword ptr ss:[ebp-18]
( w$ U# |3 P- |) f3 v8 N0046772B 8BC7 mov eax,edi ; EDI送EAX
! A8 L( f( ]7 a- @; W0046772D BA 03000000 mov edx,3
2 n; i U5 E7 i- b0 g( [% e2 s( J00467732 E8 A9CFF9FF call Unpacked.004046E0
2 l* A; ^1 F; k4 J6 _8 i00467737 46 inc esi. M5 j8 A6 K7 \6 S
00467738 FECB dec bl% I4 d% a. B- \5 g. V
0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续,循环完后得字符串191bbf78cd24da75f4da7d784915708e
0 ~4 {/ c; H2 I7 R, J) m$ [0046773C 33C0 xor eax,eax
- v9 H1 N8 F! ^- L0046773E 5A pop edx
. F' N' T, n- P! G' X7 J$ c+ x) c0046773F 59 pop ecx
/ ?+ a' T4 r$ J4 @00467740 59 pop ecx8 S, W" _, Y* o$ d# c
00467741 64:8910 mov dword ptr fs:[eax],edx
" x2 v$ ~* B" F2 o00467744 68 5E774600 push Unpacked.0046775E
& O: R* @& V% K# {7 R00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
$ V8 ?: L) X8 Z, F- k0046774C BA 02000000 mov edx,2
- t( V( U# C1 v7 T00467751 E8 36CCF9FF call Unpacked.0040438C
( s* e& m7 x9 m- _3 j+ \) ?00467756 C3 retn //返回
) t! d6 `6 h; ]' k———————————————————————————————————————————0 S7 m" p% `7 t: q1 B* x% M
【Crack_总结】:4 p( w, m# [; D6 X
将机器码通过一系列运算得一字符串,再将此字符串倒序即为注册码^-^; C/ |' z9 N1 B; k. F Q. F: c
机器码:bbba33de56c4cf31d9063cc074248d4b% J' g! Q1 r |& Q/ x4 ^, P" ^
注册码:e807519487d7ad4f57ad42dc87fbb191
! m/ H- [ f2 O: s$ Y4 S1 _' S; |) ?附件: MakeSign.rar (249 K) 下载次数:298 |
|