|
|
|
【原创】破解图章制作系统
7 b" Y; @' ~ y. j日期：2005年5月15日 破解人：yijun[PYG]/ ~' B. n+ j* J( A
———————————————————————————————————————————
6 \" n( k. I: q* R0 S4 F! o* b【软件名称】：图章制作系统 软件版本：1.0
0 h8 {1 k* ^& ^% Y6 s4 I4 Y【软件大小】： 252KB
! V4 S1 |) v. M& v【软件简介】：制作各种图章
* j$ ~3 H& B# F0 h( n4 t【软件限制】：NAG* \$ M8 | J5 N, V2 Y3 u
【破解声明】：初学Crack，只是感兴趣，没有其它目的。失误之处敬请诸位大侠赐教！* a. c& D9 G, T- c( H; a
【破解工具】：OD,PEID
! W; f1 f: \+ ?) X2 s% ~5 G———————————————————————————————————————————
8 ~5 b1 P0 U( P+ O3 {* S8 l6 N
$ n% x, e; i9 z" [【破解过程】：
( B4 t) ? M7 R6 P8 B0 U, MPEID查知道该软件加了ASPack 2.12 -> Alexey Solodovnikov壳，OD轻松搞定~~~再查知道该软件是Borland Delphi 6.0 - 7.0编写~~~~* m9 l7 Q$ S( W( x
OD载入，通过字符串查找很容易来到这里：
* o1 a; n# x1 H8 L$ ?0046ADAC 55 push ebp //在此下断. k+ O ~# r M, V" p
0046ADAD 68 A0AE4600 push Unpacked.0046AEA0$ B% G: F, [) h% v
0046ADB2 64:FF30 push dword ptr fs:[eax]4 g4 y t, Z5 x, v; z3 k
0046ADB5 64:8920 mov dword ptr fs:[eax],esp+ h" a! K* ?5 X5 J+ I/ B u
0046ADB8 8D55 F8 lea edx,dword ptr ss:[ebp-8]
& u) `$ r1 A0 G$ V7 Z$ J, L0046ADBB 8BB3 00030000 mov esi,dword ptr ds:[ebx+300]
! _4 h; `- C4 D: Q0046ADC1 8BC6 mov eax,esi
* O+ o( e. L4 S: X4 q; `& j. I0046ADC3 E8 1859FDFF call Unpacked.004406E0 ; 取注册码，长度送EAX
4 D1 p$ n$ I' o+ e' ?0046ADC8 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 注册码送EAX" m3 h; X/ f. H2 W% v/ m/ @
0046ADCB 8D55 FC lea edx,dword ptr ss:[ebp-4]
$ q+ i1 {+ C! D! X0046ADCE E8 45D9F9FF call Unpacked.00408718
$ u/ N3 s7 b6 L1 T) e, l0046ADD3 8B55 FC mov edx,dword ptr ss:[ebp-4] ; 注册码送EDX
4 {) k+ d- W) f" B0046ADD6 8BC6 mov eax,esi4 M6 T2 \1 E3 v3 S
0046ADD8 E8 3359FDFF call Unpacked.00440710
5 T2 J' Y" i7 U9 [0046ADDD 8D55 F4 lea edx,dword ptr ss:[ebp-C]* i" Y) E2 C& a' [
0046ADE0 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
) k. O/ H+ J/ a, E0046ADE6 E8 F558FDFF call Unpacked.004406E0
4 Z2 e: Z8 Z8 F: ~0046ADEB 837D F4 00 cmp dword ptr ss:[ebp-C],0 ; 注册码是否为空
9 k* u' o& y0 W ]2 \+ V" g! {0046ADEF 0F84 88000000 je Unpacked.0046AE7D ; 是就跳
/ Y! Y+ b# L* F4 K) y* e0046ADF5 B9 B8AE4600 mov ecx,Unpacked.0046AEB8 ; 否则"HsjSoft.ini"送ECX
* ]6 e N" K7 s0046ADFA B2 01 mov dl,1 ; DL置17 u* Q% p) X% V2 E! l
0046ADFC A1 085D4600 mov eax,dword ptr ds:[465D08]% Q; x$ b2 X U4 y( j$ w( O
0046AE01 E8 B2AFFFFF call Unpacked.00465DB8
+ d! a2 }" B% L' N) T3 n0046AE06 8BF0 mov esi,eax& p3 {7 Y+ s9 X% R0 M# e0 x
0046AE08 8D55 F0 lea edx,dword ptr ss:[ebp-10]1 C, _( j7 x) S% L5 U( k( W
0046AE0B 8B83 00030000 mov eax,dword ptr ds:[ebx+300]
" Y0 o4 r9 x+ {/ H/ K! W0046AE11 E8 CA58FDFF call Unpacked.004406E0
9 u h% K/ C3 r4 P+ z* X0046AE16 8B45 F0 mov eax,dword ptr ss:[ebp-10] ; 注册码送EAX, {4 f; p( R# Y4 ?$ {' O& o
0046AE19 50 push eax
8 T; ]1 K& N5 E3 V: b4 n0046AE1A B9 CCAE4600 mov ecx,Unpacked.0046AECC ; "reg_code"送ECX% }$ Q) }% ^/ Q* ?, D/ r2 f( B
0046AE1F 8B93 10030000 mov edx,dword ptr ds:[ebx+310]
6 Q( q* R( ]' Q9 B0046AE25 8BC6 mov eax,esi" M0 O5 J; `6 ?* f1 _
0046AE27 8B38 mov edi,dword ptr ds:[eax]: k0 F" B. c9 @6 \ S
0046AE29 FF57 04 call dword ptr ds:[edi+4]
8 |& u/ A1 _9 ^& |/ N1 K0046AE2C 8BC6 mov eax,esi+ s/ m+ }' m- W/ v
0046AE2E E8 4587F9FF call Unpacked.00403578/ n8 K. t& r6 j' w z$ _
0046AE33 8B83 10030000 mov eax,dword ptr ds:[ebx+310]
! y4 s3 A6 z& @* Z5 q/ h# H0046AE39 E8 B60B0000 call Unpacked.0046B9F4 ; 关键CALL，跟进~~~~~~~~& j) N& p/ Q* e* f0 K5 G1 c& w
0046AE3E 84C0 test al,al ; AL是否为0，（如果刚才比较条件为真则AL为1~~~~~~~）
6 V- d6 O& `0 F+ D; s" S; J% W0046AE40 75 1B jnz short Unpacked.0046AE5D ; 不就跳，不跳就挂~~~~~~8 z. p% N9 w* F; z: z8 p
0046AE42 6A 00 push 0
0 s/ l' F2 e( E3 T0046AE44 68 D8AE4600 push Unpacked.0046AED8
% S$ I- N' k# z" `! H& E* \0046AE49 68 E0AE4600 push Unpacked.0046AEE0 ; 错误1 b4 f* o' j s1 e3 T
0046AE4E 8BC3 mov eax,ebx
6 o6 [3 W* t8 _* o- S0046AE50 E8 A3BFFDFF call Unpacked.00446DF8
0 I; G3 i! l0 X* L0046AE55 50 push eax
R- n4 q4 E) m% T0046AE56 E8 DDC2F9FF call & b2 V4 n, C* F) V- g9 k& J/ v( l) Q
0046AE5B EB 20 jmp short Unpacked.0046AE7D' K# U; W! ]+ a' ~# }
0046AE5D 6A 00 push 04 G5 A, m d6 d6 P
0046AE5F 68 F8AE4600 push Unpacked.0046AEF8# w/ G. v% f I9 G4 i
0046AE64 68 00AF4600 push Unpacked.0046AF00 ; 成功$ \4 e7 d7 t6 l5 @3 m+ x3 L% k
0046AE69 8BC3 mov eax,ebx: d( a: F; ~2 z9 m9 N
0046AE6B E8 88BFFDFF call Unpacked.00446DF8% C1 |, |2 j1 \" i: E% ?( a/ r# l
0046AE70 50 push eax
1 e* y9 v8 F$ W! r9 t( y2 ]0046AE71 E8 C2C2F9FF call 0 K P3 {' u" k$ A' O) z; ?
0046AE76 8BC3 mov eax,ebx% y* g' I; [ d0 C: x# d- G8 P
0046AE78 E8 7F21FFFF call Unpacked.0045CFFC
' U6 w* A' i) m: L0046AE7D 33C0 xor eax,eax- Z& X5 D# G- D: w9 M6 \
0046AE7F 5A pop edx
% ^, z6 m; r& Z0046AE80 59 pop ecx/ R2 p1 p* Z3 B" W
0046AE81 59 pop ecx
2 q& ?2 q+ e! r) h0046AE82 64:8910 mov dword ptr fs:[eax],edx
! j$ _3 p" V8 l# k1 t9 H# R) ~0046AE85 68 A7AE4600 push Unpacked.0046AEA7
2 z6 O/ U' ?- J( T( ?" p# F4 Q0046AE8A 8D45 F0 lea eax,dword ptr ss:[ebp-10]
8 a, ^& i# Y& c% R0046AE8D BA 03000000 mov edx,3
& `, s- w) V8 B3 D! M0046AE92 E8 F594F9FF call Unpacked.0040438C( U; ]3 _/ D i J- P/ a
0046AE97 8D45 FC lea eax,dword ptr ss:[ebp-4]) O& o; A/ m: f: ?. [) H! L
0046AE9A E8 C994F9FF call Unpacked.004043680 k$ a: `0 B) M
0046AE9F C3 retn2 a1 ?% h6 X( g1 D$ s3 J
0046AEA0 ^ E9 678EF9FF jmp Unpacked.00403D0C# F8 ^* E, V: C8 f5 z
0046AEA5 ^ EB E3 jmp short Unpacked.0046AE8A
; p; w# b3 }8 F( q8 p8 c4 T****************************************************************; T# g1 \8 l d% `8 [. A2 j' M
跟进0046AE39处CALL来到：3 U$ M/ `$ E0 M1 W7 E
0046B9F4 55 push ebp
9 u# F3 W1 Q1 f$ g7 j0 [( p0046B9F5 8BEC mov ebp,esp
. R# S$ a: c& A: N3 I0046B9F7 33C9 xor ecx,ecx L5 G6 \7 f& E* b( k
0046B9F9 51 push ecx2 W; l2 K: e% X2 x& v. k: [" p
0046B9FA 51 push ecx7 g6 a9 m1 J8 H0 ~* E% B- C
0046B9FB 51 push ecx$ Z* w2 [/ l, |
0046B9FC 51 push ecx! @! X1 e$ v; A, H7 P' K
0046B9FD 51 push ecx
6 d+ N) d* t- L/ R$ C0046B9FE 53 push ebx' P; `& c5 o( @+ ]
0046B9FF 56 push esi" N3 }; u* D) e
0046BA00 8945 FC mov dword ptr ss:[ebp-4],eax4 N) r# m0 N8 k( f; e
0046BA03 8B45 FC mov eax,dword ptr ss:[ebp-4]
! A. Z* S: t P- b0046BA06 E8 FD8DF9FF call Unpacked.00404808
+ H3 A k' e. U' f; D0046BA0B 33C0 xor eax,eax1 R" e# G2 ]3 M5 R7 E* t0 q
0046BA0D 55 push ebp
: s* i8 p7 I: P. {3 @0046BA0E 68 91BA4600 push Unpacked.0046BA91
3 F+ `- k- b7 P. G; ]0046BA13 64:FF30 push dword ptr fs:[eax]# \$ q" y( d. P* x/ c( _$ J3 d
0046BA16 64:8920 mov dword ptr fs:[eax],esp! o: O6 Y6 \ B4 d! q4 u
0046BA19 8D55 F4 lea edx,dword ptr ss:[ebp-C]
$ D% L; |0 w0 K. ?7 `0046BA1C 8B45 FC mov eax,dword ptr ss:[ebp-4]
; L: { n/ }1 a7 @0046BA1F E8 DCFDFFFF call Unpacked.0046B800
3 v+ J/ y7 E+ A- @4 e0046BA24 8D55 F8 lea edx,dword ptr ss:[ebp-8]
, O8 j8 Y6 o- t) t( {9 j0046BA27 8B45 F4 mov eax,dword ptr ss:[ebp-C] ; 机器码送EAX Y8 L1 f3 C( ^5 a d% S! B" e
0046BA2A E8 D9FEFFFF call Unpacked.0046B908 //跟进& b. T) |! L2 \" d8 ^
0046BA2F B9 A8BA4600 mov ecx,Unpacked.0046BAA8 ; ASCII "HsjSoft.ini"//返回到这里
0 I' @! b8 B- J% }. l- U- x0046BA34 B2 01 mov dl,1 ; DL置1$ @5 j7 n/ x# X, G: \( `2 ~0 F
0046BA36 A1 085D4600 mov eax,dword ptr ds:[465D08]- y' n3 V# W: V* J. N2 _, S
0046BA3B E8 78A3FFFF call Unpacked.00465DB8; p6 \! d! J q5 L# u
0046BA40 8BD8 mov ebx,eax
7 h4 f& E" Z+ O: r6 ]$ c. S/ Y+ n0046BA42 6A 00 push 0
% ~9 _8 Y) Q& {4 F U0046BA44 8D45 EC lea eax,dword ptr ss:[ebp-14]! ~. s- z$ l9 [' m% [ j
0046BA47 50 push eax: f8 k! ]" _& p
0046BA48 B9 BCBA4600 mov ecx,Unpacked.0046BABC ; ASCII "reg_code"! |7 }# M, N! W ~* v3 D
0046BA4D 8B55 FC mov edx,dword ptr ss:[ebp-4]
6 `, w3 Q/ ]5 d) J, j8 `2 R0046BA50 8BC3 mov eax,ebx# T! w- e5 |; s/ U; a$ p
0046BA52 8B30 mov esi,dword ptr ds:[eax]
2 U9 n7 x0 ?$ J0046BA54 FF16 call dword ptr ds:[esi]
; h# P1 l9 z- d$ o2 z0 L, N0046BA56 8B45 EC mov eax,dword ptr ss:[ebp-14] ; 假码送EAX
; O0 p( B* T$ [4 o9 `0046BA59 8D55 F0 lea edx,dword ptr ss:[ebp-10]
$ X+ A" \3 B1 }; v0046BA5C E8 B7CCF9FF call Unpacked.00408718
' R2 c; C, d. H1 \0046BA61 8BC3 mov eax,ebx* D$ E: N* K# R
0046BA63 E8 107BF9FF call Unpacked.00403578
& o1 y$ L3 b8 f+ F0046BA68 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 真码送EAX
0 b: N$ S1 V: z0046BA6B 8B55 F0 mov edx,dword ptr ss:[ebp-10] ; 假码送EDX' {1 K# S! ^" _8 w; C
0046BA6E E8 F18CF9FF call Unpacked.00404764 ; 将假码和真码比较~~9 L/ P- o3 K2 v9 _0 X& [
0046BA73 0F94C3 sete bl ; 置BL值/ y) Y/ b U2 U
0046BA76 33C0 xor eax,eax
! ?' d; l* F3 i" \2 _1 R1 [0046BA78 5A pop edx* w! l; p- F J( Q
0046BA79 59 pop ecx
# i4 E2 h- Y2 l* A7 z9 [6 q( \0046BA7A 59 pop ecx
" R. P1 ~# T. ^( g9 C0046BA7B 64:8910 mov dword ptr fs:[eax],edx {( S% p0 b0 O4 f8 {
0046BA7E 68 98BA4600 push Unpacked.0046BA98
9 M1 u" q* i& _) v+ |2 S0046BA83 8D45 EC lea eax,dword ptr ss:[ebp-14]5 F8 }. O$ b3 f4 m
0046BA86 BA 05000000 mov edx,5' l$ t d9 D) T% o
0046BA8B E8 FC88F9FF call Unpacked.0040438C
' H( s: r0 t; ~1 n; l0046BA90 C3 retn2 ^; v8 o( f8 o( b
***************************************************************** ]. v/ [# x: q2 f: z; J
跟进0046BA2A处CALL来到：
' s, J% p, ]9 @# B6 Z0046B908 55 push ebp0 `/ s+ s ?% j. _6 v& v7 \
0046B909 8BEC mov ebp,esp
* O8 H: }& @' R0046B90B 83C4 DC add esp,-24% ?( O1 p, U# R3 E4 j& B
0046B90E 53 push ebx
/ ~8 S2 G0 G" P2 P: r0 E0046B90F 56 push esi
1 M. I$ K1 M3 N1 e- V3 f3 s0046B910 33C9 xor ecx,ecx3 Z8 {+ B) g6 ~; z# k
0046B912 894D DC mov dword ptr ss:[ebp-24],ecx
+ v% i+ O0 [' d K [0046B915 894D E0 mov dword ptr ss:[ebp-20],ecx- v Z: J% J0 P# s8 x
0046B918 894D F8 mov dword ptr ss:[ebp-8],ecx
, } Q" _" J% P* R; T0046B91B 894D F4 mov dword ptr ss:[ebp-C],ecx
) c2 ?5 z: Z- {2 H4 \0046B91E 8BF2 mov esi,edx
/ Y" _" l; k. c1 o$ K9 \* G0046B920 8945 FC mov dword ptr ss:[ebp-4],eax
6 v" m% U# e; B0046B923 8B45 FC mov eax,dword ptr ss:[ebp-4]: `. t0 O/ E ~' P) \, w
0046B926 E8 DD8EF9FF call Unpacked.00404808
) j: i, r2 m1 C9 R/ r8 m0046B92B 33C0 xor eax,eax5 h* T$ \- M% x. {( [
0046B92D 55 push ebp- t4 T' i$ p9 \3 x: \+ }
0046B92E 68 CEB94600 push Unpacked.0046B9CE) n0 F1 L0 P {1 Z+ {
0046B933 64:FF30 push dword ptr fs:[eax]
) O ~% Q- k3 C& n' L( j0046B936 64:8920 mov dword ptr fs:[eax],esp6 T0 o N) [- _
0046B939 8BC6 mov eax,esi+ X) K, i \: X. A& a6 a
0046B93B E8 288AF9FF call Unpacked.00404368& z+ j; t# x5 O6 J1 g7 Q5 x6 a
0046B940 8D45 E0 lea eax,dword ptr ss:[ebp-20]
/ J. Y' R) A& n* l% `# i: A0046B943 8B4D FC mov ecx,dword ptr ss:[ebp-4] ; 机器码送ECX; e) C" v, ^: _: i0 Q: ]
0046B946 BA E4B94600 mov edx,Unpacked.0046B9E4
! Y* a; N0 c& B& l6 B0046B94B E8 1C8DF9FF call Unpacked.0040466C
4 f0 ]4 K. ]- u% ]0046B950 8B45 E0 mov eax,dword ptr ss:[ebp-20]' \* b( A! p8 G) c
0046B953 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
. i5 U! c6 ^9 \" C/ l0046B956 E8 EDBCFFFF call Unpacked.00467648
2 x7 H9 j7 C, S+ S1 R- {' I0046B95B 8D45 E4 lea eax,dword ptr ss:[ebp-1C]0 [8 k; j5 E; n, L
0046B95E 8D55 F8 lea edx,dword ptr ss:[ebp-8]5 F. @4 u+ z, U! B' P2 n2 Q2 v; t$ p2 ]
0046B961 E8 56BDFFFF call Unpacked.004676BC ; 跟进~~~~~~~~，最终得一字符串191bbf78cd24da75f4da7d784915708e
8 k3 h/ a6 K- t/ {& N2 S3 P( B0046B966 8D45 F4 lea eax,dword ptr ss:[ebp-C] //返回到这里~~~~~! w, G0 k+ Q6 @* o3 R$ B$ y6 r" Y
0046B969 E8 FA89F9FF call Unpacked.00404368
5 F' d/ d: [5 e% i0046B96E 8B45 F8 mov eax,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EAX% l9 F; h" x: B6 x
0046B971 E8 AA8CF9FF call Unpacked.00404620 ; 测试191bbf78cd24da75f4da7d784915708e是否为空，如果不是则长度送EAX
6 y) a& ~6 g6 u' |0 y. v0046B976 8BD8 mov ebx,eax ; EAX送EBX% X8 _# p& U1 v2 {. `( u
0046B978 83FB 01 cmp ebx,1 ; EBX和1比较; k+ k* ~/ R; Y$ M
0046B97B 7C 1F jl short Unpacked.0046B99C ; 小于就跳! ^+ b3 X( `2 j; y' |6 B" d1 t
0046B97D 8D45 DC lea eax,dword ptr ss:[ebp-24] ; 否则，依次计算+ q4 e7 x j3 ]! i0 o. g
0046B980 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; 191bbf78cd24da75f4da7d784915708e送EDX
1 K. [- P; w3 d0046B983 8A541A FF mov dl,byte ptr ds:[edx+ebx-1] ; [edx+ebx-1]送DL
& ]- A4 e' b. y- ~- N6 M/ G7 C0 T9 N0046B987 E8 BC8BF9FF call Unpacked.00404548
" m# g; M+ g# X# Q' B4 o: l$ J0046B98C 8B55 DC mov edx,dword ptr ss:[ebp-24]
+ N) o% Z S( d0 X4 V0046B98F 8D45 F4 lea eax,dword ptr ss:[ebp-C] ; [ebp-C]送EAX
6 b. R4 s; W$ B" Q2 V8 V0046B992 E8 918CF9FF call Unpacked.00404628, \6 Z9 d" ?% ~- |! k
0046B997 4B dec ebx ; EBX减一
8 {' ]: Q; @/ v! M6 [/ ]% Y0046B998 85DB test ebx,ebx ; 是否为0' \0 v- s9 X0 B
0046B99A ^ 75 E1 jnz short Unpacked.0046B97D ; 不为0就继续，以上这段循环就是将刚才得到的字符串倒序，得：e807519487d7ad4f57ad42dc87fbb191（真码）。
1 [2 o t( Y2 y! \/ Z0046B99C 8BC6 mov eax,esi
4 w6 I8 q/ I, O, _0046B99E 8B55 F4 mov edx,dword ptr ss:[ebp-C] ; e807519487d7ad4f57ad42dc87fbb191（真码）送EDX% q7 v& E- r( [! s1 @3 u
0046B9A1 E8 168AF9FF call Unpacked.004043BC" c& J6 G. O6 X% B+ \* O
0046B9A6 33C0 xor eax,eax! E+ x+ s. c |' W
0046B9A8 5A pop edx
) M6 M# P" |- ]+ l( b; T& l7 n0046B9A9 59 pop ecx7 c' q# @" q4 A3 s4 k
0046B9AA 59 pop ecx; G% n0 M2 M$ o$ F+ E! b
0046B9AB 64:8910 mov dword ptr fs:[eax],edx* }+ l" l" q3 P/ k2 I# [& e" n4 q; S
0046B9AE 68 D5B94600 push Unpacked.0046B9D5
$ I: B$ V i& H1 l( S I3 ?0046B9B3 8D45 DC lea eax,dword ptr ss:[ebp-24]
) }+ {* Q2 b" Q6 G3 y8 o# P5 x! b0046B9B6 BA 02000000 mov edx,2. g- W6 l7 j! Q6 y( I( r1 ]7 t
0046B9BB E8 CC89F9FF call Unpacked.0040438C
+ R" D% I. `4 E) \( G0046B9C0 8D45 F4 lea eax,dword ptr ss:[ebp-C]
) U: v/ W) Y0 K, G( k0046B9C3 BA 03000000 mov edx,34 ]- [7 w* W- H1 d. R
0046B9C8 E8 BF89F9FF call Unpacked.0040438C
4 E, j) `* |2 r' _2 t$ L0046B9CD C3 retn( k/ R# i4 t5 e/ m: O
****************************************************************
3 U: d4 r; Y6 h3 j5 {0 V跟进0046B961处CALL来到：4 x& Y% T9 g( b/ z: k) K4 K
004676BC 55 push ebp
# c5 `9 G% a% S/ p0 ?) O004676BD 8BEC mov ebp,esp E& L' }, E; _
004676BF 83C4 E8 add esp,-18' I/ T0 d6 `8 ]5 a/ t) k, P% x
004676C2 53 push ebx; T, h& e1 H @1 H4 L
004676C3 56 push esi( ^1 v& j; m- B8 Z4 N4 p
004676C4 57 push edi' O, ^5 a( n3 V
004676C5 33C9 xor ecx,ecx b8 L9 E1 G5 B) D* X2 l
004676C7 894D EC mov dword ptr ss:[ebp-14],ecx0 E/ w. _; ~! [4 ?: P3 d1 d
004676CA 894D E8 mov dword ptr ss:[ebp-18],ecx/ b7 k% P: |9 r& W% f/ c
004676CD 8BF0 mov esi,eax
8 E9 G. I N W. _; z3 n004676CF 8D7D F0 lea edi,dword ptr ss:[ebp-10]! t" x" b: m* B% _( Q
004676D2 A5 movs dword ptr es:[edi],dword ptr ds:[esi>% v- r8 U7 t) H5 e( l
004676D3 A5 movs dword ptr es:[edi],dword ptr ds:[esi>1 F& h7 f4 P0 U
004676D4 A5 movs dword ptr es:[edi],dword ptr ds:[esi>7 {% ^0 y- o7 h* @" f: ?
004676D5 A5 movs dword ptr es:[edi],dword ptr ds:[esi>
; l( W: D2 U! W; g! Q% m: _3 I004676D6 8BFA mov edi,edx
9 T3 J) b/ y! B2 R004676D8 33C0 xor eax,eax% D" O+ u( ?6 G: c8 C" l6 N
004676DA 55 push ebp0 b- ?# m6 b: R* n
004676DB 68 57774600 push Unpacked.004677570 u7 f) [7 G+ h( H6 u
004676E0 64:FF30 push dword ptr fs:[eax]3 f) Q1 c, t% ~7 U; ]
004676E3 64:8920 mov dword ptr fs:[eax],esp3 D0 s3 _* r* Q3 E
004676E6 8BC7 mov eax,edi1 f; b; U; D2 s8 d. E
004676E8 E8 7BCCF9FF call Unpacked.004043681 \+ z7 O4 A6 N7 b! x
004676ED B3 10 mov bl,10
2 [4 k1 V! B" \0 y004676EF 8D75 F0 lea esi,dword ptr ss:[ebp-10]: \* a! q0 f5 [* ^7 i
004676F2 FF37 push dword ptr ds:[edi] ; *****循环*****
, E7 j# J- [3 h& N' S7 _" G5 N8 X! X* ?004676F4 8D45 EC lea eax,dword ptr ss:[ebp-14]
b9 o p' F& c4 P" U. R004676F7 33D2 xor edx,edx5 G( E8 c; r4 v" \, G# k- Y
004676F9 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL
5 R! t( D, G4 F9 [1 l004676FB C1EA 04 shr edx,4 ; EDX右移4位& S) c# i; D% u U
004676FE 83E2 0F and edx,0F ; 和0F与9 O' v7 e2 ?4 s. S0 C8 g
00467701 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL: }! Y: _& T& N8 ?* |; N* q
00467707 E8 3CCEF9FF call Unpacked.00404548% \, _/ q/ L7 {5 ?( f
0046770C FF75 EC push dword ptr ss:[ebp-14] ?5 `2 d0 Z8 b% p; i
0046770F 8D45 E8 lea eax,dword ptr ss:[ebp-18]/ V, [5 A7 [3 \$ s
00467712 8A16 mov dl,byte ptr ds:[esi] ; [esi]送DL+ t& b$ R' ~5 p" t
00467714 80E2 0F and dl,0F ; DL和0F与
3 S9 p4 E) g( K8 N$ i00467717 81E2 FF000000 and edx,0FF ; EDX和0FF与
5 e" { e% ?! S$ Y' y- G0046771D 8A92 E4FF4700 mov dl,byte ptr ds:[edx+47FFE4] ; [edx+47FFE4]送DL
e0 E/ u9 d5 K: x- V0 x00467723 E8 20CEF9FF call Unpacked.00404548! T. H _# O, u/ m5 c2 s/ {
00467728 FF75 E8 push dword ptr ss:[ebp-18]
k% @( ?- c% j% @8 o0046772B 8BC7 mov eax,edi ; EDI送EAX
7 v- G7 G1 M t% @& e- D& g0046772D BA 03000000 mov edx,34 K& u" M! v9 k" {
00467732 E8 A9CFF9FF call Unpacked.004046E0
* O4 T4 |" k+ H5 j+ X/ t7 y+ b00467737 46 inc esi
6 ~7 ]: H a d00467738 FECB dec bl
' P- y/ X% Y- [/ Z* j) }. e; |) Z0046773A ^ 75 B6 jnz short Unpacked.004676F2 ; BL不为0就继续，循环完后得字符串191bbf78cd24da75f4da7d784915708e, |9 V; B$ b/ n% F' o' W. l
0046773C 33C0 xor eax,eax! a6 I& z2 L- G. X% ^1 m$ b. X3 m
0046773E 5A pop edx
H7 m9 m; u4 @( {& M9 a0046773F 59 pop ecx
: \9 d. Q. O# t1 }! U" |! U00467740 59 pop ecx6 {9 ]) `9 L" K: d/ U- X# z @
00467741 64:8910 mov dword ptr fs:[eax],edx
5 ~" G w% A: l4 @( i00467744 68 5E774600 push Unpacked.0046775E
1 c4 W- V3 C% k" p: f00467749 8D45 E8 lea eax,dword ptr ss:[ebp-18]
, P) Z' V; s2 S: }0046774C BA 02000000 mov edx,20 y# l3 V# B: v" }- J: d2 p
00467751 E8 36CCF9FF call Unpacked.0040438C* Q9 S6 o* W. `1 A) ?- d2 j/ j
00467756 C3 retn //返回( s& R( m% W% g$ {# }
———————————————————————————————————————————
{# c3 h& m; x( K【Crack＿总结】：
+ W4 \1 O6 J) b将机器码通过一系列运算得一字符串，再将此字符串倒序即为注册码^-^( M% p. q6 ]1 C. Z
机器码：bbba33de56c4cf31d9063cc074248d4b
$ B* n& B3 h+ p4 s注册码：e807519487d7ad4f57ad42dc87fbb191
* W# l5 V+ ~7 P, R, J$ l( F- [! k附件：  MakeSign.rar (249 K) 下载次数:298 |
|
狗仔卡
发表于 2006-8-28 11:02:05
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡