Crack 算法分析 适合新手破解教学

binke

【文章标题】: Crack Me算法分析
【文章作者】: 圣人
【作者MSN 】: hyqwzk@tom.com
【软件名称】: Crack Me
【下载地址】: 论坛附件
【加壳方式】: 无
【保护方式】:
【编写语言】: BD 6.0 - 7.0
【使用工具】: OD
【操作平台】: Wixp
【作者声明】: 交所有破解爱好者共同学习

004502B7 |. 55 push ebp
004502B8 |. 68 08044500 push DE_Delph.00450408
004502BD |. 64:FF30 push dword ptr fs:[eax]
004502C0 |. 64:8920 mov dword ptr fs:[eax],esp
004502C3 |. 8D55 F4 lea edx,[local.3]
004502C6 |. 8B86 F8020000 mov eax,dword ptr ds:[esi+2F8]
004502CC |. E8 27F2FDFF call DE_Delph.0042F4F8
004502D1 |. 837D F4 00 cmp [local.3],0 ; 必须输入用户名
004502D5 |. 75 1E jnz short DE_Delph.004502F5 ; 不是0就Go
004502D7 |. 6A 30 push 30
004502D9 |. 68 18044500 push DE_Delph.00450418 ;
004502DE |. 68 20044500 push DE_Delph.00450420 ;
004502E3 |. 8BC6 mov eax,esi
004502E5 |. E8 8258FEFF call DE_Delph.00435B6C
004502EA |. 50 push eax ; |hOwner
004502EB |. E8 4C6AFBFF call <jmp.&user32.MessageBoxA> ; \MessageBoxA
004502F0 |. E9 DB000000 jmp DE_Delph.004503D0
004502F5 |> 8D55 F0 lea edx,[local.4]
004502F8 |. 8B86 F8020000 mov eax,dword ptr ds:[esi+2F8]
004502FE |. E8 F5F1FDFF call DE_Delph.0042F4F8
00450303 |. 8B45 F0 mov eax,[local.4] ; 用户名给eax
00450306 |. E8 B941FBFF call DE_Delph.004044C4
0045030B |. 83F8 04 cmp eax,4 ; 用户名位数是否大于4
0045030E |. 7D 1E jge short DE_Delph.0045032E ; 大于4就Go
00450310 |. 6A 30 push 30
00450312 |. 68 18044500 push DE_Delph.00450418 ;
00450317 |. 68 38044500 push DE_Delph.00450438 ;
0045031C |. 8BC6 mov eax,esi
0045031E |. E8 4958FEFF call DE_Delph.00435B6C
00450323 |. 50 push eax ; |hOwner
00450324 |. E8 136AFBFF call <jmp.&user32.MessageBoxA> ; \MessageBoxA
00450329 |. E9 A2000000 jmp DE_Delph.004503D0
0045032E |> 8D55 F8 lea edx,[local.2]
00450331 |. 8B86 F8020000 mov eax,dword ptr ds:[esi+2F8]
00450337 |. E8 BCF1FDFF call DE_Delph.0042F4F8
0045033C |. 8D55 EC lea edx,[local.5]
0045033F |. 8B86 F8020000 mov eax,dword ptr ds:[esi+2F8]
00450345 |. E8 AEF1FDFF call DE_Delph.0042F4F8
0045034A |. 8B45 EC mov eax,[local.5] ; 用户名位数给eax
0045034D |. E8 7241FBFF call DE_Delph.004044C4
00450352 |. 8BD8 mov ebx,eax ; eax＝ebx
00450354 |. 85DB test ebx,ebx
00450356 |. 7E 29 jle short DE_Delph.00450381
00450358 |. BF 01000000 mov edi,1
0045035D |> 8B45 F8 /mov eax,[local.2]
00450360 |. 0FB64438 FF |movzx eax,byte ptr ds:[eax+edi-1>
00450365 |. 8D4D E8 |lea ecx,[local.6]
00450368 |. BA 02000000 |mov edx,2
0045036D |. E8 9E7FFBFF |call DE_Delph.00408310
00450372 |. 8B55 E8 |mov edx,[local.6]
00450375 |. 8D45 FC |lea eax,[local.1]
00450378 |. E8 4F41FBFF |call DE_Delph.004044CC
0045037D |. 47 |inc edi
0045037E |. 4B |dec ebx
0045037F |.^ 75 DC \jnz short DE_Delph.0045035D ;每一位用户的ascii
00450381 |> 8D55 E4 lea edx,[local.7]
00450384 |. 8B86 00030000 mov eax,dword ptr ds:[esi+300]
0045038A |. E8 69F1FDFF call DE_Delph.0042F4F8
0045038F |. 8B45 E4 mov eax,[local.7] ; 假码送给EAX
00450392 |. 8B55 FC mov edx,[local.1] ; 真码送给edx
00450395 |. E8 6E42FBFF call DE_Delph.00404608 ;比较真假码
0045039A |. 75 1B jnz short DE_Delph.004503B7 ; 不是就跳向错误
0045039C |. 6A 40 push 40
0045039E |. 68 50044500 push DE_Delph.00450450 ; ok:
004503A3 |. 68 54044500 push DE_Delph.00450454 ; 恭喜你，注册成功！
004503A8 |. 8BC6 mov eax,esi
004503AA |. E8 BD57FEFF call DE_Delph.00435B6C
004503AF |. 50 push eax ; |hOwner
004503B0 |. E8 8769FBFF call <jmp.&user32.MessageBoxA> ; \MessageBoxA
004503B5 |. EB 19 jmp short DE_Delph.004503D0
004503B7 |> 6A 30 push 30
004503B9 |. 68 18044500 push DE_Delph.00450418 ; error:
004503BE |. 68 68044500 push DE_Delph.00450468 ; 序列号不对呀，请再试试！
004503C3 |. 8BC6 mov eax,esi
004503C5 |. E8 A257FEFF call DE_Delph.00435B6C
004503CA |. 50 push eax ; |hOwner
004503CB |. E8 6C69FBFF call <jmp.&user32.MessageBoxA> ; \MessageBoxA
004503D0 |> 33C0 xor eax,eax
004503D2 |. 5A pop edx
004503D3 |. 59 pop ecx
004503D4 |. 59 pop ecx
004503D5 |. 64:8910 mov dword ptr fs:[eax],edx
004503D8 |. 68 0F044500 push DE_Delph.0045040F
004503DD |> 8D45 E4 lea eax,[local.7]
004503E0 |. E8 273EFBFF call DE_Delph.0040420C
004503E5 |. 8D45 E8 lea eax,[local.6]
004503E8 |. E8 1F3EFBFF call DE_Delph.0040420C
004503ED |> 8D45 EC lea eax,[local.5]
004503F0 |. BA 03000000 mov edx,3

Squn

＊．/:010 偶沙发
＊．下载了 抽时间看下 HOHO

一品天下

下来看看 学习学习~

liuyun213

下来对照学习一下了

napoleon

下载下来练练！！！

扣子

支持一下，看看 、

blitz

哇,终于发现了个能自己找出注册码的勒..

wanap571

我好想学但不知道给要出新的了

wanap571

好是好但不懂,呵呵