|
|
【原创】破解图章制作系统
1 H: m$ j7 F) A1 Q; W日期：2005年5月15日 破解人：yijun[PYG]+ t" V" g- r! k3 {- e V0 G. s
———————————————————————————————————————————& I' _$ @* R) J9 B* q% ~
【软件名称】：图章制作系统 软件版本：1.0
& n/ L) P; w4 ~& {/ R b8 M【软件大小】： 252KB
( @5 b4 |2 B, e/ }' e$ y% E& k* d& M【软件简介】：制作各种图章) L8 I2 U* J2 ^5 m' e: g/ O
【软件限制】：NAG5 I! E8 Y4 j6 o* ^5 `; f. j
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！) ], A+ s: R$ E) Q7 ?! ?9 u
【破解工具】：OD,PEID
s- [9 D: R' ?% N) }7 y3 l———————————————————————————————————————————9 c- i. ] F1 ?9 y: C& M
6 r2 }; `0 ~ g, Q9 Y* \5 |
【破解过程】：
: I3 h+ i6 D5 dPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~7 o& a% b$ r" p1 w$ t
OD载入，通过字符串查找很容易来到这里：9 }& o+ \+ ~8 Q1 {& C8 v
0046ADAC 55 push ebp //在此下断
& v+ u0 T' h* @' }/ `0046ADAD 68 A0AE4600 push Unpacked.0046AEA0' e) g* a% ^! j1 y% Y# ^
0046ADB2 64:FF30 push dword ptr fs:[eax]
# F) I% ?, G( [9 P# {( f0046ADB5 64:8920 mov dword ptr fs:[eax],esp
) _( ~* `! }( M8 n- ?3 t3 C0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
( J, A) ]$ Y* m0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
- \* x- X: t0 s g9 I# M/ P0046ADC1 8BC6 mov eax,esi
$ x* q. u! j8 l6 a5 H, H0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
1 h1 O. K2 I6 ^( I" |& f8 J0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX
4 ^9 C$ P6 g& w) r% w/ q" }4 Z7 [0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]0 r8 J7 J1 |6 j
0046ADCE E8 45D9F9FF call Unpacked.00408718
* q; d, r7 t; w, ~2 F$ G, h0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
1 u% i( r$ k- q4 c0046ADD6 8BC6 mov eax,esi3 G/ Q1 \ D& B- W
0046ADD8 E8 3359FDFF call Unpacked.00440710; s: H' f2 p3 U" [2 R% W; D
0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]7 u0 k; ?# R. z9 \% M
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
& V9 x6 ~1 m# Z' L- V8 x0046ADE6 E8 F558FDFF call Unpacked.004406E09 r1 j ?6 L: Q/ q. |$ H% N
0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空' c8 E+ r, h2 f- W6 V
0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳, K6 K& F: n4 r; `
0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX7 ]6 v4 E1 O* B t" x5 {+ G7 M
0046ADFA B2 01 mov dl,1 ; DL置1# m% j" i7 K2 H2 g- \( m
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]
9 A9 I) G% h8 o0046AE01 E8 B2AFFFFF call Unpacked.00465DB8 Z8 F9 ~/ ~4 [. M) \$ Y+ ^, Z
0046AE06 8BF0 mov esi,eax- q/ F. q8 c" L+ Z% e
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]% q) s) |! Y/ @& u5 n3 h
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
4 Y' L9 }- P' N; ]% r4 O: A3 s. I1 l3 W0046AE11 E8 CA58FDFF call Unpacked.004406E09 B0 u- g3 D$ o4 C$ J) U6 H
0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX5 W9 w% h0 W5 _% w
0046AE19 50 push eax' a* G8 T5 ]0 G" F
0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX( I; G3 v( l- k! W' Q+ E
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]* h' F# R7 _; a! H l. q
0046AE25 8BC6 mov eax,esi: F( a8 \7 h$ c1 t. Q# q
0046AE27 8B38 mov edi,dword ptr ds:[eax]$ S6 Z7 z5 c/ m+ l+ f+ p; y
0046AE29 FF57 04 call dword ptr ds:[edi+4]
/ w% b2 M: O6 J2 y. N0046AE2C 8BC6 mov eax,esi
4 P' Y1 I8 _8 H7 m0046AE2E E8 4587F9FF call Unpacked.00403578; C4 o9 o/ B/ M9 ]: r
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
' d& E. [1 _3 T+ F; x- Y0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~
8 P: D$ G, k! v3 M4 e0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
: o8 A3 \2 _5 Z) y0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~
4 V: Z, @: Z9 b$ w+ M8 X8 V0046AE42 6A 00 push 0 l; p2 o0 N' r' s G
0046AE44 68 D8AE4600 push Unpacked.0046AED8. [' i/ u# H$ U8 K! t* Z
0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误
: [- ?8 `& Z: p$ y4 c% i) ^4 r0046AE4E 8BC3 mov eax,ebx1 r \& s% z( I; H
0046AE50 E8 A3BFFDFF call Unpacked.00446DF8" y; ]9 g3 v& {6 S8 A
0046AE55 50 push eax
# w4 B' b' L/ C5 m' n0046AE56 E8 DDC2F9FF call
. L7 O! p! X3 U% D6 e! w- e0046AE5B EB 20 jmp short Unpacked.0046AE7D
% Y7 O: }4 }, J9 J* K0046AE5D 6A 00 push 0
; i4 H8 c. J; o3 p( q2 g9 I0046AE5F 68 F8AE4600 push Unpacked.0046AEF81 g# Z+ @/ w1 {4 w! O+ T0 r0 f
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功
* M/ c% e6 K5 O( T! n0046AE69 8BC3 mov eax,ebx! E3 s- g! v: y+ g
0046AE6B E8 88BFFDFF call Unpacked.00446DF8! R" }3 |: N- {$ E. `
0046AE70 50 push eax# ]1 \3 @4 n* O( D) `# E1 I$ k
0046AE71 E8 C2C2F9FF call , S+ }2 u7 m- W/ ^
0046AE76 8BC3 mov eax,ebx- P0 R, x! a) q3 d
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
- E Y, f" T, V* F0046AE7D 33C0 xor eax,eax
+ B/ C0 n9 b$ g5 L" ?, k( I" |0046AE7F 5A pop edx5 u; j8 i2 k$ W) x# v
0046AE80 59 pop ecx" q% [* z$ I! m* n# L% L- N- X9 V
0046AE81 59 pop ecx
% [( Z. k3 a/ D- z- a0046AE82 64:8910 mov dword ptr fs:[eax],edx4 s4 G6 ^8 M$ C# d
0046AE85 68 A7AE4600 push Unpacked.0046AEA7' H, U/ a5 l+ t& o" K
0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
3 @6 q' {/ {/ q, o. i, _0046AE8D BA 03000000 mov edx,3
* p. w9 a! x! T, N" b0046AE92 E8 F594F9FF call Unpacked.0040438C# |0 B8 `% l, e
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]1 k q" d9 ]/ {+ L
0046AE9A E8 C994F9FF call Unpacked.00404368
9 r3 g( D$ z% b9 L( c0046AE9F C3 retn1 {$ g; j0 W1 `
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C
9 K- [' F% d1 @9 x0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
, |- S3 Z! B' p H7 q$ w+ v x****************************************************************
0 z s X; A$ d4 f3 U" C, S跟进0046AE39处CALL来到：- ~. Y7 r( _: }& Q
0046B9F4 55 push ebp
- q+ c" s/ G3 q$ @# w- e, C0046B9F5 8BEC mov ebp,esp& A' Y& v) s( H7 g
0046B9F7 33C9 xor ecx,ecx; ?/ M4 D: w0 I$ _# o1 @
0046B9F9 51 push ecx8 t: V7 W% `# u. _5 v6 l: W
0046B9FA 51 push ecx
! V( L+ L/ {+ j6 ?9 g- a0046B9FB 51 push ecx
' B7 E$ X7 w5 [- L6 M, D, y2 H0046B9FC 51 push ecx
. B8 v& D. n& f1 H9 h8 L+ S5 q# x0046B9FD 51 push ecx
t. P: i1 [% F# [* V0046B9FE 53 push ebx
" L0 c+ o$ J9 a0 V O% j- p0046B9FF 56 push esi7 J7 `8 O& V% S3 G# ^6 r1 }* o
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax
0 O* c- s& F- w( o" A1 r0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]$ k+ v( a7 u( \5 {/ E, q5 E
0046BA06 E8 FD8DF9FF call Unpacked.004048084 ]" ~, W' M! P( ]# A
0046BA0B 33C0 xor eax,eax1 v) A# Q% n( d( c5 P! q
0046BA0D 55 push ebp
5 t; e2 j7 J" ?0046BA0E 68 91BA4600 push Unpacked.0046BA915 N9 a$ R) p" v. ?
0046BA13 64:FF30 push dword ptr fs:[eax]6 X: i6 ~3 l( W# Z7 i" D' s
0046BA16 64:8920 mov dword ptr fs:[eax],esp* c1 X6 y, y/ L& @" N7 m* {
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]# d& L) ^3 z/ j" p5 A) z+ D( {, ~/ B
0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]9 M6 f7 O& L5 N5 F7 v0 H
0046BA1F E8 DCFDFFFF call Unpacked.0046B800
: i; x8 A6 }9 i$ h& f0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
( `# |* ]5 t. _% _: J$ G. o0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX
. y) _4 o) |. ~" N) e, P* b! ]0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进! g; X: |4 q8 {. }* @& h1 a& U
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
" e* ]5 V4 C4 W# t& H+ k0 E) C0046BA34 B2 01 mov dl,1 ; DL置1
5 X4 O, m* b' }& o0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]1 Q; q9 H9 {( r* x2 N3 l5 y% E- j
0046BA3B E8 78A3FFFF call Unpacked.00465DB85 U. y1 k* F( j0 x+ F X# ~' J
0046BA40 8BD8 mov ebx,eax
: _; f: W$ f+ i+ ]* p" \0046BA42 6A 00 push 0% D0 G' u( i3 q( r- Y: ~# W
0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]' Z6 ^# T3 c) I1 T1 ^. r6 { v! q/ @
0046BA47 50 push eax
$ w( Q" p9 I5 Y, D6 A4 ~0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"6 z3 T$ A1 y- h/ Y) u
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
2 f% S8 c" k+ G0046BA50 8BC3 mov eax,ebx
8 [, d/ D t% O. n) O0046BA52 8B30 mov esi,dword ptr ds:[eax]4 B& J: v; Z( y, B4 S7 ]
0046BA54 FF16 call dword ptr ds:[esi]
' {2 ^% w& |9 p7 o+ K3 a1 C2 Y0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
/ G' R9 @, ~& x( [3 K# g, b( d5 p3 H0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]7 P. G: J3 } q; z1 s2 M) O
0046BA5C E8 B7CCF9FF call Unpacked.00408718
; W; K5 s/ l% B+ d8 @. r% u% f0046BA61 8BC3 mov eax,ebx- n( B9 D" m7 J7 d* F
0046BA63 E8 107BF9FF call Unpacked.00403578
- M d1 c8 w* r2 t8 o' t0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
. s3 R5 q9 I2 z3 T& _9 w0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX
% Q s) U$ ~4 i% b U) b/ p0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~- V9 w5 g+ `, Q& Z
0046BA73 0F94C3 sete bl ; 置BL值
- Q6 J) n3 ]% m' n( _0046BA76 33C0 xor eax,eax
9 M/ t- d& g3 k9 j; v3 Q0046BA78 5A pop edx
+ ^7 v H/ v5 ]# O- l0046BA79 59 pop ecx5 @+ B. p' n+ ^3 i8 t) Q+ l# g* g
0046BA7A 59 pop ecx: o6 Y$ J7 b0 T! I2 y$ }/ j8 M: J
0046BA7B 64:8910 mov dword ptr fs:[eax],edx: A5 \ ~. ], r& G" ~8 Y% |* {% R
0046BA7E 68 98BA4600 push Unpacked.0046BA98
7 k) p; `( Y9 i& L7 x1 d' M: T6 w0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]; e, {# |/ u( g7 C, J" {3 _! i4 d
0046BA86 BA 05000000 mov edx,5. j- P7 |" ^8 p! Y4 j% v. G
0046BA8B E8 FC88F9FF call Unpacked.0040438C
' u C: b8 A1 V- A, L5 \- p; Y/ U: ~ n0046BA90 C3 retn
# L- k5 E. k) k# r* U* P! U5 |7 L. _****************************************************************
2 Y! |6 r, f. I跟进0046BA2A处CALL来到：
# j% p! {+ f |4 l. ]! |$ W: N' D! T0046B908 55 push ebp
# q6 g9 @/ ~9 q% S0046B909 8BEC mov ebp,esp
) ~* W6 z2 i% v3 v. D5 h! [' k0046B90B 83C4 DC add esp,-24/ q \& p3 v, B! T+ U2 p
0046B90E 53 push ebx$ G* i' ]+ x" V! p' S
0046B90F 56 push esi0 j% I) @. g4 W4 A& s" k
0046B910 33C9 xor ecx,ecx% c2 b# P1 a4 L3 ]& m% t& f. B# r
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
4 d2 {9 \5 S2 r" A! b& J9 t0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx! e) F; ?2 Z# O S2 u0 ~7 z$ V
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
0 S- G0 ` Z7 w/ u3 S0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx: d: g9 S4 d, v: _1 j( B+ [. E
0046B91E 8BF2 mov esi,edx
; k* Y5 U5 ~7 {# y0046B920 8945 FC mov dword ptr ss:[ebp-4],eax! g- `% X' e0 b5 b
0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]
4 N R2 G) H4 C a, M k" X0046B926 E8 DD8EF9FF call Unpacked.00404808
0 X" F# V1 e) x/ t7 h) @0046B92B 33C0 xor eax,eax, U2 D" A0 @. ]- Y5 ]( p1 P: o
0046B92D 55 push ebp O! B B+ X5 ^0 y% A
0046B92E 68 CEB94600 push Unpacked.0046B9CE( ^ y0 n: n1 N. {9 E
0046B933 64:FF30 push dword ptr fs:[eax]
$ B3 ]6 P. C4 o, e/ t8 H0046B936 64:8920 mov dword ptr fs:[eax],esp
; ?' ~7 ?% \* P: }) R2 p" {" t4 F0046B939 8BC6 mov eax,esi
' M) A5 E& N. C: D) y3 q0046B93B E8 288AF9FF call Unpacked.00404368
7 f3 ?6 l1 V$ Q0 v4 u& w0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
3 \8 ]; C2 w! ?0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX0 H. I' X. ^# m% B+ B; m2 E
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E42 n% o' U4 q; I
0046B94B E8 1C8DF9FF call Unpacked.0040466C
" O9 `/ \( B/ U% B, k) e' u0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]& K& H' j) b& v
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]6 Q4 F8 L C1 Z/ i2 u
0046B956 E8 EDBCFFFF call Unpacked.00467648
: p* l! s# u" W9 L0 Z! e# f0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]9 G3 P. y2 v* X4 z5 t
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]# @- K8 {8 X/ N; E0 ^
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e# v ?1 t, s/ U2 A/ k
0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~; u4 d# Y4 w/ Z8 F: I' A) d
0046B969 E8 FA89F9FF call Unpacked.00404368
' g& B+ @# I! f1 q$ S: O. T! X0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX) r# _9 q) r: Z
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
+ [, Y8 u, x- r1 D' ~( {0046B976 8BD8 mov ebx,eax ; EAX送EBX; q# n+ {7 B/ O$ Z
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较
! s, e) V! e, N2 R( L9 f' G0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳4 y# c, c3 [7 _3 O. u4 q6 y
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算4 M' a% l" m. |; |
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
6 m2 W4 i) C) ?, j0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
; y: h8 }! G( W0046B987 E8 BC8BF9FF call Unpacked.00404548
3 v- u# C" Q8 e, |4 s& b* C0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
/ O6 P% Z* l3 g j: a8 w0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
: {; ]7 R- l u2 q( |- r- Z0046B992 E8 918CF9FF call Unpacked.00404628& I' e4 e/ k) [. q* `$ }0 p5 N
0046B997 4B dec ebx ; EBX减一
- D9 X2 q! \8 v) B4 r- p* b0046B998 85DB test ebx,ebx ; 是否为02 w8 ~9 q4 ^$ |/ X* ]
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。2 V2 s& x2 z7 \9 c4 c! k9 Q
0046B99C 8BC6 mov eax,esi! d% s8 o4 M. N% Q1 s9 [
0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX! ^; h9 T8 j8 d5 c& O
0046B9A1 E8 168AF9FF call Unpacked.004043BC6 o7 w0 W5 w% i$ o9 t$ \
0046B9A6 33C0 xor eax,eax
$ e/ F+ U6 p$ N' f. R0 d0046B9A8 5A pop edx
5 r. j% z, f& z0046B9A9 59 pop ecx
* B+ {: X3 k9 h; M9 w% Z/ `0046B9AA 59 pop ecx
! z% y& \8 m" V# f3 G- v0046B9AB 64:8910 mov dword ptr fs:[eax],edx U) g9 x$ v3 S% N2 f/ h2 X, g
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
8 @. K9 z' V2 s( r7 c4 H0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]$ V! H+ n+ i. l% q: l8 m# {
0046B9B6 BA 02000000 mov edx,2* D( T0 P+ y$ \3 R7 B4 {
0046B9BB E8 CC89F9FF call Unpacked.0040438C
# v: k& {% g1 ?& w; |( q0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
# c; c6 M( T, _0046B9C3 BA 03000000 mov edx,3$ Q0 Y$ M: O* l3 r3 X' G" l+ M8 H
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
) d/ G. l; _9 A0 H, d* R. s0046B9CD C3 retn- z2 I3 q3 {9 u8 V& o
****************************************************************5 f5 Q3 k: G; m: x* ^
跟进0046B961处CALL来到：
9 O# n) Q# v9 x3 g& R0 _; _% b3 g004676BC 55 push ebp
3 [, N4 Y/ \& v+ F, H# o0 X: g" g, W004676BD 8BEC mov ebp,esp) L& K9 v$ J; x- P* l ~ F
004676BF 83C4 E8 add esp,-18
$ Q$ m j' S4 Q! n004676C2 53 push ebx
( c6 e( ]0 v# F2 t- y0 V004676C3 56 push esi
' ? @7 A2 q0 P' n7 ?6 ^004676C4 57 push edi& U1 s& Z% b, c' T X" p* B: M
004676C5 33C9 xor ecx,ecx
) ? t; y9 P9 [& h2 r* R004676C7 894D EC mov dword ptr ss:[ebp-14],ecx
* d6 F8 Q* y* s7 O2 B+ u004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx' J1 k& y( |5 }, `
004676CD 8BF0 mov esi,eax. b5 O% b% R+ v" Q; W
004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]$ Y( S4 c4 |0 `9 X0 A
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi># B, T9 b; W$ B
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
" O5 ]( B0 y$ P# m( R4 {% r& T! A U004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
, h2 w+ w) T7 S9 c' P" e004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
2 ^) c. w0 v* y* ?$ [' Q4 l004676D6 8BFA mov edi,edx1 @3 D, S5 _* D A" n( f$ ?
004676D8 33C0 xor eax,eax+ X) ?( |6 l! f2 V
004676DA 55 push ebp/ V3 d* }, @3 D% P# o9 E& W
004676DB 68 57774600 push Unpacked.00467757
" z5 P F& J* F004676E0 64:FF30 push dword ptr fs:[eax]* g a; d# o' C9 W2 g: g
004676E3 64:8920 mov dword ptr fs:[eax],esp
7 h! F2 U* B- \3 [) l; p004676E6 8BC7 mov eax,edi, Z* d' I# _5 G U
004676E8 E8 7BCCF9FF call Unpacked.00404368
8 m. Q+ C+ }& B# _2 [9 J2 u! E004676ED B3 10 mov bl,105 q- X2 e% h6 q- }
004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]
+ s# q A0 }% u% {' w( p" P3 t004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****1 x, w7 S6 b7 h8 H
004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
* G7 I: ]& ~3 @* x- Q7 H* k1 Y004676F7 33D2 xor edx,edx
2 ?4 O6 H D- E8 _! k, G004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
2 n' p; B+ C! \# W004676FB C1EA 04 shr edx,4 ; EDX右移4位
; _$ W8 W+ c- G004676FE 83E2 0F and edx,0F ; 和0F与. Z2 T# F0 L. E8 a0 I! n3 S8 `
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
2 a3 o4 @. r0 r7 _2 u00467707 E8 3CCEF9FF call Unpacked.004045480 g4 t3 x) u8 v/ @, q
0046770C FF75 EC push dword ptr ss:[ebp-14]
/ `" X. k+ E0 f( f, i( Y, ~& T; O0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]% P4 l; b+ k# f9 J+ k
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
; U; {, f' M! w4 U: q3 _9 e9 c( @00467714 80E2 0F and dl,0F ; DL和0F与
v2 ~$ O! C; T* F9 F5 ]- J00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与) D* w, Z5 w X" q* n- a2 P9 g; U' b3 o
0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL1 z" F z5 X8 j9 F8 x8 N, {
00467723 E8 20CEF9FF call Unpacked.004045486 k, p& p! n9 r# l3 ~ V
00467728 FF75 E8 push dword ptr ss:[ebp-18]
8 p" \; A* n9 W4 z6 N N6 B/ H0046772B 8BC7 mov eax,edi ; EDI送EAX# h* }5 I9 k5 Z _: |
0046772D BA 03000000 mov edx,3
, l* c6 u/ U) z. }9 P00467732 E8 A9CFF9FF call Unpacked.004046E0
2 ^. U7 Z" I: |2 k8 j00467737 46 inc esi2 Q3 d. j+ e( j
00467738 FECB dec bl
; y3 [) c3 \7 y0 L: j: A0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e
$ v# f. B6 G8 e& Z, r2 |( m9 Z0046773C 33C0 xor eax,eax5 l# D4 `2 F' M9 T- n8 ]; ~
0046773E 5A pop edx
- h, @; u# N$ ]+ V% U2 ?0046773F 59 pop ecx! i, g. C3 f- l# Y, D
00467740 59 pop ecx5 v d+ d7 x' Y& E. L
00467741 64:8910 mov dword ptr fs:[eax],edx
7 R- x1 F+ ^) z8 K4 H00467744 68 5E774600 push Unpacked.0046775E; D* o/ R! H4 ~
00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]5 o$ g) f& _ x" N7 p D. D: F
0046774C BA 02000000 mov edx,2
- n) V& f0 h5 N; K00467751 E8 36CCF9FF call Unpacked.0040438C
' Z. {1 D. z6 c( |! ^00467756 C3 retn //返回# s& k9 R3 N$ J: R W3 u
———————————————————————————————————————————
0 m' x6 d% X/ c1 W n, d- ^4 ~【Crack＿总结】：5 S ?) [9 E, a2 [& S/ ^8 g* ^
将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^$ d/ w% _* p+ N1 {& \+ l5 h1 O
机器码：bbba33de56c4cf31d9063cc074248d4b
9 z) m: R8 U4 {7 ~+ \* `6 c) V注册码：e807519487d7ad4f57ad42dc87fbb191( I# [3 t7 U9 W9 F; O
附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡