crackme0.1使用少量SMC技术
编写个crackme使用少量SMC技术,抗静态分析
delphi编写,无壳。
[ 本帖最后由 johnroot 于 2007-5-15 11:28 编辑 ] fenjianren
2010ljj
0045418D|> /8A0C16 /mov cl,byte ptr ds:
00454190|. |80F1 25 |xor cl,25
00454193|. |81E1 FF000000 |and ecx,0FF
00454199|. |03D9 |add ebx,ecx
0045419B|. |81C3 80000000 |add ebx,80
004541A1|. |42 |inc edx
004541A2|. |48 |dec eax
004541A3|.^\75 E8 \jnz short 破解我.0045418D
004541A5|>8D55 E8 lea edx,dword ptr ss:
004541A8|.8BC3 mov eax,ebx
004541AA|.E8 0540FBFF call 破解我.004081B4
004541AF|.8B55 E8 mov edx,dword ptr ss:
004541B2|.8D45 F8 lea eax,dword ptr ss:
004541B5|.B9 48424500 mov ecx,破解我.00454248 ;ASCII "ljj"
004541BA|.E8 6903FBFF call 破解我.00404528
004541BF|.8D55 E4 lea edx,dword ptr ss:
004541C2|.8B45 FC mov eax,dword ptr ss:
004541C5|.8B80 FC020000 mov eax,dword ptr ds:
004541CB|.E8 40EFFDFF call 破解我.00433110
004541D0|.8B55 E4 mov edx,dword ptr ss:
004541D3|.8B45 F8 mov eax,dword ptr ss: 0045414C|.8B45 F4 mov eax, dword ptr ;ebp-c == d546d4 == gueano
0045414F|.E8 8805FBFF call 004046DC
00454154|.8BF0 mov esi, eax
00454156|.8D45 F0 lea eax, dword ptr
00454159|.8BD6 mov edx, esi
0045415B|.E8 B402FBFF call 00404414
00454160|.8B45 F0 mov eax, dword ptr
00454163|.E8 7403FBFF call <返回字符串长度.返回值在eax> ;返回用户名长度
00454168|.83F8 03 cmp eax, 3
0045416B 0F8E 84000000 jle 004541F5 ;用户名小于3就不合格
00454171 33DB xor ebx, ebx
00454173|.8D45 EC lea eax, dword ptr
00454176|.8BD6 mov edx, esi
00454178|.E8 9702FBFF call 00404414
0045417D|.8B45 EC mov eax, dword ptr
00454180|.E8 5703FBFF call <返回字符串长度.返回值在eax>
00454185|.48 dec eax
00454186|.85C0 test eax, eax
00454188|.7C 1B jl short 004541A5
0045418A|.40 inc eax
0045418B|.33D2 xor edx, edx
0045418D|>8A0C16 /mov cl, byte ptr
00454190|.80F1 25 |xor cl, 25
00454193|.81E1 FF000000 |and ecx, 0FF
00454199|.03D9 |add ebx, ecx
0045419B|.81C3 80000000 |add ebx, 80
004541A1|.42 |inc edx
004541A2|.48 |dec eax
004541A3|.^ 75 E8 \jnz short 0045418D ;ebx = ebx + ((用户名每一位 xor 25) and ff);ebx += 80
004541A5|>8D55 E8 lea edx, dword ptr
004541A8|.8BC3 mov eax, ebx
004541AA|.E8 0540FBFF call 004081B4 ;结果转换为10进制
004541AF|.8B55 E8 mov edx, dword ptr
004541B2|.8D45 F8 lea eax, dword ptr
004541B5|.B9 48424500 mov ecx, 00454248 ;ljj
004541BA|.E8 6903FBFF call 00404528
004541BF|.8D55 E4 lea edx, dword ptr
004541C2|.8B45 FC mov eax, dword ptr
004541C5|.8B80 FC020000 mov eax, dword ptr
004541CB|.E8 40EFFDFF call 00433110
004541D0|.8B55 E4 mov edx, dword ptr ;真实注册码
004541D3|.8B45 F8 mov eax, dword ptr ;输入的假码
004541D6|.E8 4D04FBFF call 00404628
004541DB 75 0C jnz short 004541E9 ;比较注册码
gueano
1195ljj 楼主这软件不能作注册机吗
页:
[1]